last executing test programs: 2m26.337499608s ago: executing program 2 (id=2235): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000019100)={{{@in=@empty, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.242354873s ago: executing program 2 (id=2237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000180) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', 0x0) io_uring_setup(0x5eb7, &(0x7f0000000140)={0x0, 0x9cc2, 0x10000, 0x1, 0x28}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@multicast2, @in=@private=0xa010102, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x40000000000004, 0x3, 0x9ac, 0xfe, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c004010) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000001c0)) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000040)={0x67, @empty, 0x4e20, 0x3, 'fo\x00', 0x2b, 0xe, 0x55}, 0x2c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 2m22.441446377s ago: executing program 2 (id=2241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaa0d0180c200000e86dd69a6103901f106ffff010000000000000000000000000001fc020000000000000000000000000000b81e000000000000040105010100083f82981ba082f3d1173e1a2cc6e79676b336409671475df23d593ef3c1a42649510096ad64c18a31f6cefabac89fb61f6d9c804e6293541f726288a6e7de0b52d3a78f6f14c8bbe8f5a7261b3c10e18bfd7ae5cb5190a890cebda62df6152ff4015e12b1d3a0e9ea77a7fd58b9157d0ef16da0ef8da3c7a01fdc33d703817c40494cb966e35da24315d2ee4e106337e1533aa3387910a9a2a2fb362a41efaa721d5e52d39324ade981c7bf678d12f75e8f768fcae2e57e4d2bf338c87c103bec4ba081ecca046be5cbc92184857e89b32ea6bf6ecca68da48c4058ad01c61911f9270661111a73c72f0001000000000000020c000000000000010600000000000001020000010400000000040140c910fe800000000000000000000000000035010700000000000000081b08600900a29ffbc975ec3df05be48c72df6b140d887d74adafc557c1e67d0001000710000000020220210d0100008000000000000000000000110010496700000016000739640000000808010100000000ff01000000000000000000000000000100000000000000000000ffffac1414bbff010000000000000000000000000001fe80000000000000000000000000002d0000000000000000000000000000000300004e2300004e200000000200000004000000000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(0x0) ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x20000) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000010080)='id_resolver\x00', &(0x7f00000100c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) keyctl$update(0x2, r5, 0x0, 0xff88) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\a\x00', "5171bb6725cd126474cd3660020000006e07000000a04000", '\x00', "12000700"}, 0x38) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000010040)) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m16.877896963s ago: executing program 2 (id=2253): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/6, 0x6}], 0x1, 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r4, &(0x7f00000052c0)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@netrom, @remote, @netrom, @default, @null, @remote, @netrom, @default]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}, 0xef35}, {{&(0x7f0000000780)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001d80)}, 0x79}], 0x2, 0x2000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x14) r6 = timerfd_create(0x0, 0x0) r7 = mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x7ffffffffffffffe, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r7, 0x0}]) mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r7, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 2m2.844345461s ago: executing program 2 (id=2282): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x40}}, 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', r4, 0x0, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) signalfd(r2, &(0x7f0000000240)={[0x2]}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0xa8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK, @TCA_FLOWER_KEY_ENC_KEY_ID={0xffffff7e, 0x1a, 0x8001}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xfffffffffffffe07}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) setxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "9cfe4377ae15c9502e83b058dd0885d4"}, 0x11, 0x1) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f62, 0x80400) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 1m47.591434215s ago: executing program 32 (id=2282): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x40}}, 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', r4, 0x0, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) signalfd(r2, &(0x7f0000000240)={[0x2]}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0xa8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK, @TCA_FLOWER_KEY_ENC_KEY_ID={0xffffff7e, 0x1a, 0x8001}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xfffffffffffffe07}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) setxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "9cfe4377ae15c9502e83b058dd0885d4"}, 0x11, 0x1) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f62, 0x80400) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 19.389821181s ago: executing program 5 (id=2478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x8cb9, 0x100000001, 0x9}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000240)={'veth1\x00'}) mkdir(0x0, 0x22) close_range(r2, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x83}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}], 0x18}, 0x40c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f0000a59000/0x4000)=nil, 0x4000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[], 0x68) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0xb, [@restrict={0xa}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @const={0xf, 0x0, 0x0, 0xa, 0x2}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x1}, @var={0xf, 0x0, 0x0, 0xe, 0x4}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x8}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x3}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x9, [{0x1, 0x1, 0x5}, {0xc, 0x4, 0x8}, {0x8, 0x0, 0x8}, {0xa, 0x3, 0x4}]}, @typedef={0xc}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e, 0x30, 0x5f, 0x61, 0x317dadf1d36fac67]}}, &(0x7f0000000640)=""/112, 0xd3, 0x70, 0x0, 0x1}, 0x28) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000700)={0x0, 0x2, @status={[0x800, 0x8, 0xae6, 0x83c5, 0xd, 0x8]}, [0xffffffffffff0001, 0x3, 0xffff, 0x7, 0xffffffff, 0x2, 0x100000001, 0x5, 0x2, 0x6, 0x1, 0x5, 0x100000001, 0x0, 0xfffffffffffffffa, 0x100000000, 0xe, 0x2, 0xd1, 0xf9, 0xfffffffffffffffd, 0x5, 0x0, 0xb7f, 0x8a1, 0x2, 0x8, 0x926, 0x6, 0x3, 0x3, 0x7, 0x8, 0x3, 0xffffffffffffffff, 0x10, 0x3, 0x3, 0x5, 0x7, 0x36cdd97b, 0x8, 0xe, 0x2ec, 0x5, 0x7, 0x9, 0x6, 0x0, 0x2, 0x3, 0x8, 0x5, 0xffff, 0x1000, 0x4, 0x6, 0x10, 0xd, 0x2, 0x3, 0xde7b, 0x8, 0x7]}) 16.328438095s ago: executing program 5 (id=2484): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x10001}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x8, 0x3b6, 0x0, r0}) r4 = socket(0x1d, 0x5, 0x9) ppoll(&(0x7f0000000040)=[{r3, 0x4014}, {r0, 0x118}, {r0, 0x2000}, {r0, 0x24}, {r2, 0x2400}, {r4, 0x200}], 0x6, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0xaa]}, 0x8) io_setup(0x3, &(0x7f0000000180)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r6, 0x0, 0x0, 0x3}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000100)=0x8008, 0x4) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRESDEC]) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0x4, 0x3, {}, {0xee00}, 0x0, 0x1}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@sr0, r10, &(0x7f00000002c0)={0x9, 0x2, 0xfffffffffffffa87, 0xa, 0x2, 0x8, 0xfffffffffffffff8, 0x9, 0x3}) 14.302297901s ago: executing program 1 (id=2489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$isdn(0x22, 0x3, 0x26) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r5, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000004d80)=[{{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc41", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 14.296361857s ago: executing program 3 (id=2490): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1fe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 13.572774377s ago: executing program 5 (id=2491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 12.94534298s ago: executing program 0 (id=2493): syz_open_dev$sndmidi(0x0, 0x9, 0x341101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001a00010027bd7000fedbdf250a803302fe01fd00000200000800", @ANYRES32=0x0, @ANYBLOB="08ff10000b008000944ba8503df5aca5efb829e955d9a49d80788690a0baff1d2ff55274006451054fe9d742905e9729e77e1633569042ca21ed90f3a7312575c3858e17a0542b4b36917ef060038c6c3210bde0a425ebca0ea62d00"/101], 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004081, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 11.023144609s ago: executing program 4 (id=2496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000019100)={{{@in=@empty, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) close_range(r0, 0xffffffffffffffff, 0x0) 9.773842048s ago: executing program 1 (id=2498): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000019100)={{{@in=@empty, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) close_range(r0, 0xffffffffffffffff, 0x0) 9.30226863s ago: executing program 3 (id=2499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x8000}, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000ed050000000800000800000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d828ffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210649fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1a14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328537a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0xb5, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x402) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x840) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0xfe}, {0x9, 0x5, 0x8f44bf2897946724, 0x2, 0x260, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x72}}}}}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) 8.468300145s ago: executing program 0 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x17fffffe, 0x0, 0xb47, 0x3, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000001d40)=@svm={0x104, 0x1, 0x1080, {0xb000}, {"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"}}) accept4(r3, 0x0, 0x0, 0x0) 8.300826345s ago: executing program 1 (id=2502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000c40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb44}, 0x94) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000810029bd7000fbdbdf25000069dc", @ANYRES32, @ANYBLOB="a42804000000000004"], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20048014) socket$rxrpc(0x21, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) clock_gettime(0x0, &(0x7f0000001780)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000cc0)=@pppol2tpv3in6, 0x80, &(0x7f0000000140)=[{&(0x7f0000000d40)=""/149, 0x95}, {&(0x7f0000000e00)=""/178, 0xb2}, {&(0x7f0000000ec0)=""/187, 0xbb}, {&(0x7f0000000f80)=""/86, 0x56}], 0x4, &(0x7f0000001000)=""/142, 0x8e}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/120, 0x78}], 0x1, &(0x7f0000001200)=""/69, 0x45}, 0x6}, {{&(0x7f0000001280)=@nl=@unspec, 0x80, &(0x7f0000001300)=[{&(0x7f0000001880)=""/160, 0xa0}], 0x1}, 0x2}], 0x3, 0x2060, &(0x7f0000001a00)={r5, r6+10000000}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e00000000", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102"], 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 6.761478164s ago: executing program 5 (id=2504): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 6.44620726s ago: executing program 0 (id=2505): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x81}}, 0x6, 0xe, 0x9, 0x8, 0x20, 0x6, 0x81}, 0x9c) connect$unix(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180), &(0x7f0000000200)=[0x0], &(0x7f0000000240), &(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={r8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x80503d0a, &(0x7f0000000200)={{0xa4}, {0x0, 0x80000001}, 0x1322, 0x1}) ioctl$TCXONC(r0, 0x540a, 0x2) 5.084450322s ago: executing program 1 (id=2506): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) 4.92011655s ago: executing program 1 (id=2507): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1fe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.906882575s ago: executing program 4 (id=2508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x13, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=0x0, @ANYBLOB="0035b889f059e605d9061280eb0439eb75577d0900010076657468000000000400028008"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r6, @ANYBLOB, @ANYRES16=r3, @ANYBLOB="12ea8fd9c9442ccf304f82be9377a267a8a1aa069c5e55ce05c36c6e741488268df2ed65562de3e420b8b84bfc540edb5eb756b7648b61810e9af1512664fb4a13b83a5f4dc95fd1c85d23f5acba7ac6d8b4421fd29addde02b377bca269f22783055698ca49700f8eda65965ba6d113b1f178e82ad176f1a399675fcd02765badb4a755617df5abec51d599329d0c88"], 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000024) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000009a0c00000100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000040010000000000000000000000645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be42c414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"], 0x80}}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 4.164596824s ago: executing program 0 (id=2509): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000019100)={{{@in=@empty, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.852664815s ago: executing program 4 (id=2510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaa0d0180c200000e86dd69a6103901f106ffff010000000000000000000000000001fc020000000000000000000000000000b81e000000000000040105010100083f82981ba082f3d1173e1a2cc6e79676b336409671475df23d593ef3c1a42649510096ad64c18a31f6cefabac89fb61f6d9c804e6293541f726288a6e7de0b52d3a78f6f14c8bbe8f5a7261b3c10e18bfd7ae5cb5190a890cebda62df6152ff4015e12b1d3a0e9ea77a7fd58b9157d0ef16da0ef8da3c7a01fdc33d703817c40494cb966e35da24315d2ee4e106337e1533aa3387910a9a2a2fb362a41efaa721d5e52d39324ade981c7bf678d12f75e8f768fcae2e57e4d2bf338c87c103bec4ba081ecca046be5cbc92184857e89b32ea6bf6ecca68da48c4058ad01c61911f9270661111a73c72f0001000000000000020c000000000000010600000000000001020000010400000000040140c910fe800000000000000000000000000035010700000000000000081b08600900a29ffbc975ec3df05be48c72df6b140d887d74adafc557c1e67d0001000710000000020220210d0100008000000000000000000000110010496700000016000739640000000808010100000000ff01000000000000000000000000000100000000000000000000ffffac1414bbff010000000000000000000000000001fe80000000000000000000000000002d0000000000000000000000000000000300004e2300004e200000000200000004000000000000"], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r6, &(0x7f0000000500)=[{0x0, 0xfed4}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x40850) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x28}}], 0x1, 0x854) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x2, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000300)=0x6e, 0x80800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="540000001d00080027bd7000a41813", @ANYRES32, @ANYBLOB="010000081c000e8004000200040002000500010009000000050001000400000008000f000000000014000300c8a20000050000000900000001000000"], 0x54}, 0x1, 0x1000000, 0x0, 0x5}, 0x0) 2.564642831s ago: executing program 5 (id=2512): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000019100)={{{@in=@empty, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.995347205s ago: executing program 0 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x10000, 0x0, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x13, 0x0, [{0x6, 0xd, "1d4f011551f3b511a9801d"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x1, 0xa, "791543c9579af35c"}]}, @rr={0x7, 0xb, 0x61, [@remote, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x1, [{@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x4, 0xd7, 0x3, 0x3}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0xb, 0xc5, [@loopback, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x5, "c57c34"}, {0x6, 0x3, "96"}, {0x5, 0xd, "847e15926fe8fca0085a1d"}, {0x5, 0x2}, {0x7, 0x12, "6aa0a400db75c9498c86b37ef5342caa"}]}]}}}}}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r7, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000540)=0x4) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x4000) ppoll(&(0x7f0000000040)=[{r7, 0x9280}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 1.772204821s ago: executing program 4 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x9, &(0x7f0000000100)=0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './cgroup'}, 0xc) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, 0x0, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.037309058s ago: executing program 1 (id=2515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa0e, 0x6}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x14, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000000001a0000f7"], 0x50) 607.149245ms ago: executing program 5 (id=2516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet(0x2, 0x80000, 0xfffffffb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x31000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x20, 0x3, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @multicast1=0xac141436}, {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4cd29724, 0xff, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x3672, 0x0, 0x0, 0x2, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$tipc(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) 581.122715ms ago: executing program 3 (id=2517): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1fe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) syz_usb_connect(0x1, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) kernel console output (not intermixed with test programs): it(1776123224.521:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24592 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1031.300318][ T9] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 1031.540181][ T9] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 1031.570889][ T9] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 1032.201131][T24627] ip6gretap0: left promiscuous mode [ 1032.566318][T24627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1033.882408][ T9] usb 1-1: USB disconnect, device number 74 [ 1033.994986][T24660] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2008'. [ 1034.050864][T24660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2008'. [ 1036.116537][T24686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1036.308286][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1036.308302][ T30] audit: type=1800 audit(1776123231.551:1429): pid=24698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2016" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1036.578055][ T5925] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1036.746048][T24707] binder: 24697:24707 ioctl c0306201 0 returned -14 [ 1036.858111][ T5925] usb 3-1: device descriptor read/64, error -71 [ 1036.888159][ T30] audit: type=1326 audit(1776123232.071:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.0.2016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aaed9c819 code=0x0 [ 1037.158400][ T5925] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1037.308136][ T5925] usb 3-1: device descriptor read/64, error -71 [ 1037.418564][ T5925] usb usb3-port1: attempt power cycle [ 1037.547025][T24698] bridge0: Device is already in use. [ 1038.018468][ T5925] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1038.092615][ T5925] usb 3-1: device descriptor read/8, error -71 [ 1038.378475][ T5925] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1038.570162][ T5925] usb 3-1: device descriptor read/8, error -71 [ 1038.679018][ T5925] usb usb3-port1: unable to enumerate USB device [ 1039.206801][T24733] fuse: Bad value for 'fd' [ 1039.284471][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1039.322316][T24739] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1039.508260][ T5925] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1039.609342][T24744] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2021'. [ 1039.660281][T24748] hub 1-0:1.0: USB hub found [ 1039.668292][T24748] hub 1-0:1.0: 1 port detected [ 1039.860270][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1039.871651][T24760] netlink: 'syz.1.2024': attribute type 7 has an invalid length. [ 1039.880134][T24760] netlink: 'syz.1.2024': attribute type 8 has an invalid length. [ 1040.318994][ T5925] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1040.478567][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1040.658293][ T5925] usb usb5-port1: attempt power cycle [ 1041.030399][T24767] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1041.056948][T24767] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2025'. [ 1041.098183][ T5925] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1041.128880][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1041.408127][ T5925] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1041.429068][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1041.539177][ T5925] usb usb5-port1: unable to enumerate USB device [ 1042.206678][T24778] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1044.268165][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1044.423944][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1044.432913][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1044.476094][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1044.518380][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1044.534118][ T24] usb 5-1: Manufacturer: syz [ 1044.571849][ T24] usb 5-1: config 0 descriptor?? [ 1044.616780][ T24] igorplugusb 5-1:0.0: incorrect number of endpoints [ 1045.164786][T24834] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2037'. [ 1045.205781][T24834] hub 1-0:1.0: USB hub found [ 1045.211453][T24834] hub 1-0:1.0: 1 port detected [ 1045.813261][T24845] fuse: Bad value for 'fd' [ 1046.976575][ T24] usb 5-1: USB disconnect, device number 68 [ 1047.197395][T24861] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1047.229797][T24863] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2042'. [ 1047.248377][T24863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2042'. [ 1047.738455][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1047.879044][T24876] fuse: Bad value for 'fd' [ 1047.900068][T24876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1047.923056][T24876] random: crng reseeded on system resumption [ 1048.051635][ T24] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1048.142436][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.177684][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 1048.203708][ T24] usb 3-1: config 0 has no interface number 0 [ 1048.255187][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1048.266349][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.309719][ T24] usb 3-1: Product: syz [ 1048.313994][ T24] usb 3-1: Manufacturer: syz [ 1048.319692][ T24] usb 3-1: SerialNumber: syz [ 1048.445723][ T24] usb 3-1: config 0 descriptor?? [ 1048.468380][ T24] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1050.420263][ T5925] usb 3-1: USB disconnect, device number 79 [ 1051.098249][ T24] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1051.470984][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.512149][ T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1051.664770][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.673200][ T24] usb 3-1: Product: syz [ 1051.678191][ T24] usb 3-1: Manufacturer: syz [ 1051.683108][ T24] usb 3-1: SerialNumber: syz [ 1051.714122][ T24] usb 3-1: config 0 descriptor?? [ 1051.726394][ T24] usb 3-1: bad CDC descriptors [ 1051.737579][ T24] usb 3-1: unsupported MDLM descriptors [ 1051.900309][ T796] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1052.098136][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 1052.205223][ T796] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.241682][ T796] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.273546][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1052.289117][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1052.314623][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.356749][ T796] usb 2-1: config 0 descriptor?? [ 1053.235103][T24950] syzkaller1: entered promiscuous mode [ 1053.241082][T24950] syzkaller1: entered allmulticast mode [ 1054.165386][ T5925] usb 3-1: USB disconnect, device number 80 [ 1054.423600][T24967] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2054'. [ 1054.448430][T24967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2054'. [ 1054.691252][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.697657][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.938908][ T796] usb 2-1: USB disconnect, device number 81 [ 1055.055383][ T30] audit: type=1326 audit(1776123250.221:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.122216][ T30] audit: type=1326 audit(1776123250.231:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.190960][ T30] audit: type=1326 audit(1776123250.231:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.257587][ T30] audit: type=1326 audit(1776123250.231:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.348329][ T30] audit: type=1326 audit(1776123250.231:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.435582][ T30] audit: type=1326 audit(1776123250.231:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.614160][ T30] audit: type=1326 audit(1776123250.231:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.772768][ T30] audit: type=1326 audit(1776123250.231:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1055.986793][ T30] audit: type=1326 audit(1776123250.231:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1056.108270][ T30] audit: type=1326 audit(1776123250.231:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.2.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1266f9c819 code=0x7ffc0000 [ 1057.555015][T25017] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.563184][T25017] binder: 25014:25017 ioctl 4018620d 2000000002c0 returned -16 [ 1058.415738][T25025] netlink: 'syz.0.2064': attribute type 4 has an invalid length. [ 1059.853532][T25055] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1059.863129][T25055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1060.921505][T25076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2069'. [ 1063.303515][T25104] ptrace attach of "./syz-executor exec"[25128] was attempted by "./syz-executor exec"[25104] [ 1064.759248][ T24] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1065.113778][ T24] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1065.122372][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1065.159896][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.172813][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1065.182445][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1065.205912][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1065.293475][ T24] usb 1-1: string descriptor 0 read error: -22 [ 1065.299930][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1065.312569][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.343905][ T24] usb 1-1: config 0 descriptor?? [ 1065.360055][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 1065.376314][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1065.741375][T25163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.750673][T25163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.825749][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 1065.936986][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 1066.075504][T25167] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2080'. [ 1066.092381][T25167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2080'. [ 1066.948155][ T980] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1067.298115][ T980] usb 2-1: device descriptor read/64, error -71 [ 1067.508242][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1067.618323][ T980] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1067.722600][ T24] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1067.756393][ T24] usb 4-1: config 1 has no interface number 0 [ 1067.786917][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1067.855133][ T24] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1067.895735][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 1067.953690][ T24] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.968615][ T980] usb 2-1: device descriptor read/64, error -71 [ 1068.018339][ T796] usb 1-1: USB disconnect, device number 75 [ 1068.035625][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1068.062213][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.078341][ T24] usb 4-1: Product: syz [ 1068.086738][ T24] usb 4-1: Manufacturer: syz [ 1068.086844][ T980] usb usb2-port1: attempt power cycle [ 1068.107793][ T24] usb 4-1: SerialNumber: syz [ 1068.288863][T25195] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1068.326610][T25195] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1068.376365][ T24] usb 4-1: Error in usbnet_get_endpoints (-22) [ 1068.466821][ T980] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1068.698841][ T980] usb 2-1: device descriptor read/8, error -71 [ 1068.998693][ T980] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1069.042921][ T980] usb 2-1: device descriptor read/8, error -71 [ 1069.182907][ T980] usb usb2-port1: unable to enumerate USB device [ 1070.154077][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1070.154097][ T30] audit: type=1326 audit(1776123265.401:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1070.350669][ T30] audit: type=1326 audit(1776123265.441:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1070.448446][ T30] audit: type=1326 audit(1776123265.441:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1070.557129][ T30] audit: type=1326 audit(1776123265.441:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1070.661169][ T30] audit: type=1326 audit(1776123265.441:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1070.788258][ T980] usb 4-1: USB disconnect, device number 90 [ 1070.906101][ T30] audit: type=1326 audit(1776123265.441:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1070.934550][T25252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2090'. [ 1070.992303][ T30] audit: type=1326 audit(1776123265.441:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1071.168034][ T30] audit: type=1326 audit(1776123265.451:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1071.298137][ T30] audit: type=1326 audit(1776123265.451:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0aaed9c819 code=0x7ffc0000 [ 1071.402776][ T30] audit: type=1326 audit(1776123265.461:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25236 comm="syz.0.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0aaed9c582 code=0x7ffc0000 [ 1071.657376][T25277] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1071.703840][T25277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1073.745056][T25304] netlink: 'syz.0.2095': attribute type 4 has an invalid length. [ 1075.447366][T25377] kAFS: unable to lookup cell '' [ 1076.068347][ T980] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1076.418727][ T980] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1076.437787][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.658120][ T980] usb 4-1: config 0 has no interfaces? [ 1076.722088][ T980] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1076.774498][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.945434][ T980] usb 4-1: config 0 descriptor?? [ 1077.484327][T25399] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2104'. [ 1077.496628][T25399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2104'. [ 1077.552505][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1077.552526][ T30] audit: type=1326 audit(1776123272.801:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25393 comm="syz.4.2104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x0 [ 1078.741952][ T24] usb 4-1: USB disconnect, device number 91 [ 1079.578420][T25466] tipc: Enabling of bearer rejected, failed to enable media [ 1082.664670][T25516] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2117'. [ 1082.700795][T25516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2117'. [ 1082.713997][ T30] audit: type=1326 audit(1776123277.961:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25514 comm="syz.0.2117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aaed9c819 code=0x0 [ 1083.653219][T25527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2119'. [ 1084.931874][T25554] lo: Caught tx_queue_len zero misconfig [ 1086.570181][T25576] program syz.0.2126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.907055][T25592] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2129'. [ 1086.916885][T25592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2129'. [ 1086.979521][ T30] audit: type=1326 audit(1776123282.231:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25579 comm="syz.4.2129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x0 [ 1087.021243][T25581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1087.321585][T25600] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1087.331795][T25600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 1087.594579][T25600] bond1: option lacp_active: invalid value (5) [ 1088.132244][T25600] bond1 (unregistering): Released all slaves [ 1090.198212][ T980] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1090.222198][T25711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2137'. [ 1090.388200][ T980] usb 1-1: device descriptor read/64, error -71 [ 1090.498121][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1090.637167][ T980] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1090.765419][ T24] usb 2-1: config 1 has an invalid interface number: 94 but max is 0 [ 1090.818202][ T980] usb 1-1: device descriptor read/64, error -71 [ 1090.885565][ T24] usb 2-1: config 1 has no interface number 0 [ 1090.911880][ T24] usb 2-1: config 1 interface 94 altsetting 233 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1090.928249][ T980] usb usb1-port1: attempt power cycle [ 1090.965548][ T24] usb 2-1: config 1 interface 94 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.085796][ T24] usb 2-1: config 1 interface 94 has no altsetting 0 [ 1091.114406][ T24] usb 2-1: New USB device found, idVendor=2100, idProduct=9e66, bcdDevice=c7.28 [ 1091.161084][T25719] netlink: 'syz.2.2138': attribute type 10 has an invalid length. [ 1091.171833][T25719] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1091.184384][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.194364][T25719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1091.278155][ T980] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1091.374411][ T980] usb 1-1: device descriptor read/8, error -71 [ 1091.732085][T25728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.768811][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 1091.808240][ T980] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1091.999965][ T980] usb 1-1: device descriptor read/8, error -71 [ 1092.110488][ T980] usb usb1-port1: unable to enumerate USB device [ 1092.168583][ T9] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1092.238690][T14068] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1092.425313][ T9] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1092.445937][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.492727][ T9] usb 4-1: config 0 has no interface number 0 [ 1092.504728][T14068] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1092.588132][T14068] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.601671][ T9] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1092.635995][T14068] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1092.655169][ T9] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1092.689046][T14068] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.701051][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.754600][ T9] usb 4-1: Product: syz [ 1092.771057][T14068] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1092.781679][ T9] usb 4-1: Manufacturer: syz [ 1092.802313][ T9] usb 4-1: SerialNumber: syz [ 1092.850539][T14068] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1092.901124][ T9] usb 4-1: config 0 descriptor?? [ 1092.946656][T14068] usb 3-1: Product: syz [ 1092.993877][T14068] usb 3-1: Manufacturer: syz [ 1093.000463][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1093.040160][T14068] cdc_wdm 3-1:1.0: skipping garbage [ 1093.055680][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1093.061954][T14068] cdc_wdm 3-1:1.0: skipping garbage [ 1093.095924][T14068] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1093.114547][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1093.170911][T25729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.180304][T25729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.205988][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1093.239399][ T9] usb 4-1: media controller created [ 1093.246792][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.516641][ T24] usb 2-1: string descriptor 0 read error: -71 [ 1093.518758][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1093.524909][ T24] ftdi_sio 2-1:1.94: FTDI USB Serial Device converter detected [ 1093.619896][ T24] ftdi_sio ttyUSB0: unknown device type: 0xc728 [ 1093.689084][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1093.737627][ T24] usb 2-1: USB disconnect, device number 86 [ 1093.794534][ T24] ftdi_sio 2-1:1.94: device disconnected [ 1093.826934][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 1094.209928][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1094.253369][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1094.283479][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1094.411576][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1094.419293][ T9] dvb-usb: error while querying for an remote control event. [ 1094.556538][ T796] usb 4-1: USB disconnect, device number 92 [ 1094.650256][ T796] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1094.738585][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1094.960993][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1094.977349][T25809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 1094.986424][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.115304][ T24] usb 1-1: config 0 descriptor?? [ 1095.132260][ T24] cp210x 1-1:0.0: cp210x converter detected [ 1095.356862][ T9] usb 3-1: USB disconnect, device number 81 [ 1095.759375][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1095.951463][T25829] pic_ioport_write: 79 callbacks suppressed [ 1095.951487][T25829] kvm: pic: level sensitive irq not supported [ 1095.958788][T25829] picdev_read: 79 callbacks suppressed [ 1095.958842][T25829] kvm: pic: non byte read [ 1095.983939][T25829] kvm: pic: level sensitive irq not supported [ 1095.984853][T25829] kvm: pic: non byte read [ 1096.015239][T25829] kvm: pic: level sensitive irq not supported [ 1096.015328][T25829] kvm: pic: non byte read [ 1096.032132][T25829] kvm: pic: level sensitive irq not supported [ 1096.032983][T25829] kvm: pic: non byte read [ 1096.045753][T25829] kvm: pic: level sensitive irq not supported [ 1096.046307][T25829] kvm: pic: non byte read [ 1096.069355][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1096.110206][T25829] kvm: pic: level sensitive irq not supported [ 1096.112219][T25829] kvm: pic: non byte read [ 1096.177738][T25829] kvm: pic: level sensitive irq not supported [ 1096.178135][T25829] kvm: pic: non byte read [ 1096.204124][T25829] kvm: pic: level sensitive irq not supported [ 1096.204679][T25829] kvm: pic: non byte read [ 1096.226885][T25829] kvm: pic: level sensitive irq not supported [ 1096.227674][T25829] kvm: pic: non byte read [ 1096.240791][T25829] kvm: pic: level sensitive irq not supported [ 1096.241843][T25829] kvm: pic: non byte read [ 1097.663521][ T24] usb 1-1: USB disconnect, device number 80 [ 1097.667563][T25846] netlink: 187468 bytes leftover after parsing attributes in process `syz.2.2150'. [ 1097.695277][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1097.730941][ T24] cp210x 1-1:0.0: device disconnected [ 1098.007773][T25874] kAFS: unable to lookup cell '' [ 1098.095627][T25876] kAFS: unable to lookup cell '(,c' [ 1099.713974][T25898] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1100.428440][T25912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.633500][T25953] pic_ioport_write: 79 callbacks suppressed [ 1103.633526][T25953] kvm: pic: level sensitive irq not supported [ 1103.641508][T25953] picdev_read: 79 callbacks suppressed [ 1103.641532][T25953] kvm: pic: non byte read [ 1103.667808][T25953] kvm: pic: level sensitive irq not supported [ 1103.667897][T25953] kvm: pic: non byte read [ 1103.731982][T25953] kvm: pic: level sensitive irq not supported [ 1103.732077][T25953] kvm: pic: non byte read [ 1103.746654][T25953] kvm: pic: level sensitive irq not supported [ 1103.747482][T25953] kvm: pic: non byte read [ 1103.771739][T25953] kvm: pic: level sensitive irq not supported [ 1103.772684][T25953] kvm: pic: non byte read [ 1103.811026][T25953] kvm: pic: level sensitive irq not supported [ 1103.812348][T25953] kvm: pic: non byte read [ 1103.826030][T25953] kvm: pic: level sensitive irq not supported [ 1103.826289][T25953] kvm: pic: non byte read [ 1103.840479][T25953] kvm: pic: level sensitive irq not supported [ 1103.841340][T25953] kvm: pic: non byte read [ 1103.857904][T25953] kvm: pic: level sensitive irq not supported [ 1103.858734][T25953] kvm: pic: non byte read [ 1103.959819][T25953] kvm: pic: level sensitive irq not supported [ 1103.959905][T25953] kvm: pic: non byte read [ 1105.774465][T25992] kAFS: unable to lookup cell '' [ 1105.785957][T25992] kAFS: unable to lookup cell '(,c' [ 1107.115232][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1107.124538][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1107.150017][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1107.256886][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1107.545034][T26014] netlink: 'syz.3.2173': attribute type 10 has an invalid length. [ 1109.010266][T14068] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1109.249406][T14068] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1109.315190][T14068] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1109.335107][T14068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.355712][T14068] usb 3-1: Product: syz [ 1109.375657][T14068] usb 3-1: Manufacturer: syz [ 1109.384109][T14068] usb 3-1: SerialNumber: syz [ 1110.031315][T14068] snd-usb-us122l 3-1:1.1: usb_set_interface error [ 1110.153076][T14068] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1110.204571][T14068] usb 3-1: USB disconnect, device number 82 [ 1110.302323][T22617] udevd[22617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.478931][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 1111.699586][T26096] netlink: 'syz.2.2185': attribute type 4 has an invalid length. [ 1112.253629][ T796] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1112.458058][ T796] usb 4-1: device descriptor read/64, error -71 [ 1112.858311][ T796] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1113.161847][ T796] usb 4-1: device descriptor read/64, error -71 [ 1113.289010][ T796] usb usb4-port1: attempt power cycle [ 1114.165363][ T796] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1115.263841][T26150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.275078][T26150] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1116.123489][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.142110][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.493301][ T796] usb 4-1: device descriptor read/8, error -71 [ 1120.725342][T26252] kAFS: unable to lookup cell '' [ 1120.947058][T26254] kAFS: unable to lookup cell '(,c' [ 1121.200889][T26261] netlink: 'syz.4.2203': attribute type 322 has an invalid length. [ 1122.688211][T26273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2204'. [ 1123.570953][T26279] netlink: 'syz.4.2205': attribute type 10 has an invalid length. [ 1123.593313][T26279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1125.824387][ T30] audit: type=1326 audit(1776123320.931:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1126.069944][T26305] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1126.428447][ T30] audit: type=1326 audit(1776123320.931:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1126.459234][ T30] audit: type=1326 audit(1776123320.931:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1126.518394][T26309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2211'. [ 1126.592016][ T30] audit: type=1326 audit(1776123320.931:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1126.798082][ T30] audit: type=1326 audit(1776123320.931:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1126.857851][ T30] audit: type=1326 audit(1776123320.941:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1126.924193][ T30] audit: type=1326 audit(1776123320.941:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1127.038135][ T30] audit: type=1326 audit(1776123320.941:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1127.081578][ T30] audit: type=1326 audit(1776123320.941:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1127.128741][ T30] audit: type=1326 audit(1776123320.941:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26295 comm="syz.3.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1127.529588][T26328] tipc: Enabling of bearer rejected, failed to enable media [ 1130.413197][T26350] netlink: 'syz.1.2216': attribute type 4 has an invalid length. [ 1131.185736][T26380] netlink: 'syz.2.2219': attribute type 4 has an invalid length. [ 1132.071088][T26420] program syz.4.2221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1134.985640][ T796] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1135.148120][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 1135.167208][ T796] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.236663][ T796] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.246918][ T24] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1135.388398][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1135.395136][ T796] usb 3-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1135.410018][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1135.443271][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1135.495404][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.534032][ T24] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1135.566977][ T796] usb 3-1: config 0 descriptor?? [ 1135.580213][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.606720][ T24] usb 5-1: Product: syz [ 1135.636004][ T24] usb 5-1: Manufacturer: syz [ 1135.649858][ T24] usb 5-1: SerialNumber: syz [ 1135.694732][ T24] usb 5-1: config 0 descriptor?? [ 1135.719483][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 1135.763047][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1135.783675][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 1137.923940][T26502] binder: 26499:26502 ioctl 4018620d 0 returned -22 [ 1137.959104][ T24] usb 5-1: USB disconnect, device number 69 [ 1138.196793][T26522] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1138.205890][T26522] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1138.415007][T19353] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1138.530369][ T24] usb 3-1: USB disconnect, device number 83 [ 1139.128108][ T796] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1139.314546][ T796] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1139.354568][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.401201][ T796] usb 4-1: config 0 has no interface number 0 [ 1139.537277][ T796] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1139.562123][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.586837][ T796] usb 4-1: Product: syz [ 1139.599068][ T796] usb 4-1: Manufacturer: syz [ 1139.610316][ T796] usb 4-1: SerialNumber: syz [ 1139.644906][ T796] usb 4-1: config 0 descriptor?? [ 1139.663629][ T796] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 1141.371809][ T796] usb 4-1: USB disconnect, device number 97 [ 1145.508150][T14068] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1145.758048][T14068] usb 4-1: device descriptor read/64, error -71 [ 1146.110076][T14068] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1146.288306][T14068] usb 4-1: device descriptor read/64, error -71 [ 1146.427888][T14068] usb usb4-port1: attempt power cycle [ 1146.784734][T26670] sctp: [Deprecated]: syz.4.2250 (pid 26670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1146.784734][T26670] Use struct sctp_sack_info instead [ 1146.801310][T19353] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1146.898081][T14068] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1146.929186][T14068] usb 4-1: device descriptor read/8, error -71 [ 1146.962498][T19353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.974256][T19353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.995312][T19353] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1147.009472][T19353] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1147.027842][T19353] usb 2-1: Manufacturer: syz [ 1147.171869][T19353] usb 2-1: config 0 descriptor?? [ 1147.183016][T14068] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1147.246824][T14068] usb 4-1: device descriptor read/8, error -71 [ 1147.358355][T14068] usb usb4-port1: unable to enumerate USB device [ 1147.786918][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1148.775117][T26691] netlink: 'syz.2.2253': attribute type 10 has an invalid length. [ 1148.791139][T26691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2253'. [ 1148.921202][T26696] binder: 26689:26696 ioctl 4018620d 0 returned -22 [ 1149.142647][T26698] binder: 26689:26698 ioctl c0306201 0 returned -14 [ 1150.140277][T26698] syz.0.2254 (26698): drop_caches: 2 [ 1151.033455][T19353] usbhid 2-1:0.0: can't add hid device: -71 [ 1151.044249][T19353] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1151.094348][T19353] usb 2-1: USB disconnect, device number 87 [ 1151.651111][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1151.839750][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1151.882886][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1151.919528][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1151.948170][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.039914][T26726] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1152.063572][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1152.287292][ T24] usb 5-1: USB disconnect, device number 70 [ 1153.236868][T26779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1154.875173][T26783] fuse: Bad value for 'fd' [ 1155.118949][T26792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1155.140127][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1155.320440][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1155.353439][ T9] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1155.372975][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.414744][ T9] usb 5-1: Product: syz [ 1155.428521][ T9] usb 5-1: Manufacturer: syz [ 1155.458246][ T9] usb 5-1: SerialNumber: syz [ 1155.573362][ T9] usb 5-1: config 0 descriptor?? [ 1155.683342][ T9] as10x_usb: device has been detected [ 1155.698345][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1155.790545][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1155.896195][T26783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 1155.953623][ T9] as10x_usb: error during firmware upload part1 [ 1155.966577][T26783] random: crng reseeded on system resumption [ 1156.015117][ T9] Registered device Sky IT Digital Key (green led) [ 1157.582585][T26835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1158.133077][T19353] usb 5-1: USB disconnect, device number 71 [ 1158.221326][T19353] Unregistered device Sky IT Digital Key (green led) [ 1158.235946][T19353] as10x_usb: device has been disconnected [ 1158.516275][T26876] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2272'. [ 1158.721006][T26881] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1159.328293][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1159.503561][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1159.632375][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1159.688354][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.736648][ T24] usb 5-1: Product: syz [ 1159.787981][ T24] usb 5-1: Manufacturer: syz [ 1159.792648][ T24] usb 5-1: SerialNumber: syz [ 1159.849297][ T24] usb 5-1: config 0 descriptor?? [ 1160.237176][ T24] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1160.304344][T26470] udevd[26470]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.480234][T26925] tipc: Enabling of bearer rejected, already enabled [ 1160.497884][T26900] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1160.532612][T26925] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2277'. [ 1160.555187][T26925] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2277'. [ 1162.048072][ T9] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1162.114587][ T24] usb 5-1: USB disconnect, device number 72 [ 1162.338111][T14068] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1162.540250][T14068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1162.563931][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1162.584807][T14068] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1162.598448][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1162.610226][T14068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.629276][T14068] usb 4-1: Product: syz [ 1162.662822][T14068] usb 4-1: Manufacturer: syz [ 1162.687676][T14068] usb 4-1: SerialNumber: syz [ 1162.729695][T14068] usb 4-1: config 0 descriptor?? [ 1162.798948][T14068] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 1162.918829][ T9] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1162.970482][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.011653][ T9] usb 1-1: Product: syz [ 1163.030363][ T9] usb 1-1: Manufacturer: syz [ 1163.059901][ T9] usb 1-1: SerialNumber: syz [ 1163.119033][ T9] usb 1-1: config 0 descriptor?? [ 1163.134807][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1163.174714][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1163.279278][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 1165.117151][T26984] fuse: Bad value for 'fd' [ 1165.304768][ T24] usb 4-1: USB disconnect, device number 102 [ 1165.678120][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1165.766217][T27010] dummy0: left allmulticast mode [ 1165.785215][T27010] xfrm0: left allmulticast mode [ 1165.810459][T27010] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1165.831093][T27010] sit1: left allmulticast mode [ 1165.879916][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1166.700586][ T9] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1166.725675][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.758355][ T9] usb 3-1: Product: syz [ 1166.779800][ T9] usb 3-1: Manufacturer: syz [ 1166.802460][ T9] usb 3-1: SerialNumber: syz [ 1166.840125][ T9] usb 3-1: config 0 descriptor?? [ 1167.128147][T27016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.281572][T27019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 1169.128091][T14068] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1169.228487][ T980] usb 1-1: USB disconnect, device number 82 [ 1169.298237][T14068] usb 2-1: Using ep0 maxpacket: 32 [ 1169.310738][T14068] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1169.327995][T14068] usb 2-1: config 0 has no interface number 0 [ 1169.350860][T14068] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1169.404097][T14068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.471428][T14068] usb 2-1: Product: syz [ 1169.507110][T14068] usb 2-1: Manufacturer: syz [ 1169.545542][T14068] usb 2-1: SerialNumber: syz [ 1169.593399][T14068] usb 2-1: config 0 descriptor?? [ 1169.642167][T14068] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1169.839580][T27065] fuse: Unknown parameter 'group_id00000000000000000000' [ 1170.036034][T14068] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1170.081028][T14068] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1170.328379][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 1170.401156][T27057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.529719][T27032] fuse: Bad value for 'fd' [ 1171.385976][T27083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2295'. [ 1171.865610][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1171.873718][T14068] usb 2-1: USB disconnect, device number 88 [ 1171.883831][T14068] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1171.895979][ T9] usb 3-1: can't set config #0, error -110 [ 1171.983236][T14068] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1172.032224][T14068] quatech2 2-1:0.51: device disconnected [ 1172.749530][T14068] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1172.951317][T14068] usb 2-1: Using ep0 maxpacket: 8 [ 1173.056449][T14068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1173.156144][T14068] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1173.177474][T14068] usb 2-1: config 0 has no interface number 0 [ 1173.197123][T14068] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1173.222540][T14068] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1173.238280][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1173.267635][T14068] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1173.420519][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1173.457056][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1173.478312][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.498537][ T9] usb 5-1: Product: syz [ 1173.527504][ T9] usb 5-1: Manufacturer: syz [ 1173.577992][ T9] usb 5-1: SerialNumber: syz [ 1173.618719][T14068] usb 2-1: string descriptor 0 read error: -22 [ 1173.625247][T14068] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1173.670538][T14068] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1173.766153][T14068] usb 2-1: config 0 descriptor?? [ 1173.768123][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1173.824191][T14068] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input37 [ 1173.955209][ T9] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 1173.998752][ T9] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1174.038551][ T24] usb 4-1: device descriptor read/64, error -71 [ 1174.058453][T26517] udevd[26517]: Error opening device "/dev/input/event4": Input/output error [ 1174.080856][ T9] usb 5-1: USB disconnect, device number 73 [ 1174.105072][T26517] udevd[26517]: Unable to EVIOCGABS device "/dev/input/event4" [ 1174.159488][T26517] udevd[26517]: Unable to EVIOCGABS device "/dev/input/event4" [ 1174.288363][ T24] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1174.438036][ T24] usb 4-1: device descriptor read/64, error -71 [ 1174.569631][ T24] usb usb4-port1: attempt power cycle [ 1174.646742][T27171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.661993][T27173] netlink: 'syz.0.2302': attribute type 61 has an invalid length. [ 1174.712529][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1174.729898][T27173] netlink: 'syz.0.2302': attribute type 62 has an invalid length. [ 1174.765607][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1174.928480][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1174.968929][ T24] usb 4-1: device descriptor read/8, error -71 [ 1174.993432][T19353] usb 2-1: USB disconnect, device number 89 [ 1175.228498][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1175.281049][ T24] usb 4-1: device descriptor read/8, error -71 [ 1175.398872][ T24] usb usb4-port1: unable to enumerate USB device [ 1176.568513][T27224] netlink: 'syz.1.2307': attribute type 8 has an invalid length. [ 1176.602771][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 1176.602813][ T30] audit: type=1326 audit(1776123371.851:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27214 comm="syz.1.2307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7c439c819 code=0x0 [ 1176.663261][T27226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2307'. [ 1176.708449][ T30] audit: type=1326 audit(1776123371.961:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1176.742876][ T30] audit: type=1326 audit(1776123371.991:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1176.799426][ T30] audit: type=1326 audit(1776123371.991:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1176.861881][ T30] audit: type=1326 audit(1776123371.991:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1176.974605][ T30] audit: type=1326 audit(1776123371.991:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1177.071048][ T30] audit: type=1326 audit(1776123371.991:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1177.171102][ T30] audit: type=1326 audit(1776123371.991:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1177.258238][ T30] audit: type=1326 audit(1776123371.991:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1177.382195][ T30] audit: type=1326 audit(1776123372.041:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308d39c819 code=0x7ffc0000 [ 1177.561205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.567562][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.009423][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1178.019892][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1178.028678][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1178.050198][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1178.068185][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1178.193573][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1178.210587][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1178.219562][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1178.230641][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1178.240282][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1178.689196][T27283] chnl_net:caif_netlink_parms(): no params data found [ 1178.965121][T27283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.979023][T27283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.995189][T27283] bridge_slave_0: entered allmulticast mode [ 1179.019280][T27283] bridge_slave_0: entered promiscuous mode [ 1179.038455][T27283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.055987][T27283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.075824][T27283] bridge_slave_1: entered allmulticast mode [ 1179.094063][T27283] bridge_slave_1: entered promiscuous mode [ 1179.202476][T27283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.228977][T27283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.311462][T27283] team0: Port device team_slave_0 added [ 1179.328480][T27283] team0: Port device team_slave_1 added [ 1179.421177][T27283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.438194][T27283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.552529][T27283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.577554][T27283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.601761][T27283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.688785][T27283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.188503][T27456] input: syz0 as /devices/virtual/input/input38 [ 1180.329594][ T5827] Bluetooth: hci5: command tx timeout [ 1180.574516][T27462] syzkaller1: entered promiscuous mode [ 1180.584443][T27462] syzkaller1: entered allmulticast mode [ 1180.789334][T27283] hsr_slave_0: entered promiscuous mode [ 1180.811540][T27283] hsr_slave_1: entered promiscuous mode [ 1181.068176][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1181.238982][ T9] usb 2-1: device descriptor read/64, error -71 [ 1181.518369][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1181.535934][T27582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2316'. [ 1181.671801][T27283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1181.755788][T27283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1181.769997][ T9] usb 2-1: device descriptor read/64, error -71 [ 1181.901379][T27283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1181.969961][ T9] usb usb2-port1: attempt power cycle [ 1181.980024][T27283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1182.311252][T27283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.343267][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1182.358362][ T5827] Bluetooth: hci5: command tx timeout [ 1182.378261][T27283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.408358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.415579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.451868][ T9] usb 2-1: device descriptor read/8, error -71 [ 1182.505537][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.512791][ T9265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.518401][ T980] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1182.566030][T27609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1182.658018][ T980] usb 5-1: device descriptor read/64, error -71 [ 1182.684341][T27283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1182.708201][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1182.730386][ T9] usb 2-1: device descriptor read/8, error -71 [ 1182.858557][ T9] usb usb2-port1: unable to enumerate USB device [ 1182.869860][T27283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.938481][ T980] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1183.127351][T27283] veth0_vlan: entered promiscuous mode [ 1183.190068][T27283] veth1_vlan: entered promiscuous mode [ 1183.198591][ T980] usb 5-1: device descriptor read/64, error -71 [ 1183.306408][T27283] veth0_macvtap: entered promiscuous mode [ 1183.347145][ T980] usb usb5-port1: attempt power cycle [ 1183.361557][T27283] veth1_macvtap: entered promiscuous mode [ 1183.471859][T27283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.560348][T27283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.594492][T25434] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.616525][T25434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.658514][T25434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.677991][T25434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.728195][ T980] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1183.826932][ T980] usb 5-1: device descriptor read/8, error -71 [ 1183.949386][T11830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.957320][T11830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.015043][T11830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.024497][T11830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.121092][ T980] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1184.249703][ T980] usb 5-1: device descriptor read/8, error -71 [ 1184.369509][T27641] pim6reg1: entered promiscuous mode [ 1184.389411][T27641] pim6reg1: entered allmulticast mode [ 1184.408728][ T980] usb usb5-port1: unable to enumerate USB device [ 1184.518449][ T5827] Bluetooth: hci5: command tx timeout [ 1185.990519][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1186.307378][T27686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 1186.586085][T27703] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.2325'. [ 1186.615965][ T5827] Bluetooth: hci5: command tx timeout [ 1186.722677][T27706] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1189.908160][T14068] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1190.048088][T14068] usb 4-1: device descriptor read/64, error -71 [ 1190.308111][T14068] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1190.471894][T14068] usb 4-1: device descriptor read/64, error -71 [ 1190.628352][T14068] usb usb4-port1: attempt power cycle [ 1191.004432][T14068] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1191.047508][T14068] usb 4-1: device descriptor read/8, error -71 [ 1191.298515][T14068] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1191.416233][T14068] usb 4-1: device descriptor read/8, error -71 [ 1191.548329][T14068] usb usb4-port1: unable to enumerate USB device [ 1194.270504][T27846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1195.678025][ T796] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1195.871690][ T796] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 1195.940978][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.024048][ T796] usb 6-1: config 0 has no interface number 0 [ 1196.059733][ T796] usb 6-1: config 0 interface 205 has no altsetting 0 [ 1196.109582][ T796] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1196.167476][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.215452][ T796] usb 6-1: Product: syz [ 1196.250384][ T796] usb 6-1: Manufacturer: syz [ 1196.263799][ T796] usb 6-1: SerialNumber: syz [ 1196.298470][ T796] usb 6-1: config 0 descriptor?? [ 1196.319143][ T796] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1196.343416][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 1196.412317][ T796] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1196.444733][ T796] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1196.500211][ T796] usb 6-1: media controller created [ 1196.537541][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.578828][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'. [ 1196.608247][ T796] dvb-usb: bulk message failed: -22 (6/0) [ 1196.636009][ T796] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1196.655621][T27857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.707723][T27857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.764833][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42 [ 1196.773031][T27880] input: syz0 as /devices/virtual/input/input41 [ 1196.940620][ T796] dvb-usb: schedule remote query interval to 150 msecs. [ 1197.032335][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 1197.068524][ T796] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1197.188683][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1197.203133][ T796] dvb-usb: error while querying for an remote control event. [ 1197.388200][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1197.422430][ T796] dvb-usb: error while querying for an remote control event. [ 1197.599287][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1197.612673][ T796] dvb-usb: error while querying for an remote control event. [ 1197.778051][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1197.783965][ T796] dvb-usb: error while querying for an remote control event. [ 1197.968363][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1197.983201][ T796] dvb-usb: error while querying for an remote control event. [ 1198.188276][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1198.224890][ T796] dvb-usb: error while querying for an remote control event. [ 1198.468014][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1198.558387][ T24] dvb-usb: error while querying for an remote control event. [ 1198.718036][T27611] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1198.748261][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1198.754164][ T24] dvb-usb: error while querying for an remote control event. [ 1198.858336][T27611] usb 4-1: device descriptor read/64, error -71 [ 1198.884405][ T24] usb 6-1: USB disconnect, device number 2 [ 1199.111506][T27611] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1199.308167][T27611] usb 4-1: device descriptor read/64, error -71 [ 1199.449708][T27611] usb usb4-port1: attempt power cycle [ 1199.475527][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1199.858038][T27611] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1199.888933][T27611] usb 4-1: device descriptor read/8, error -71 [ 1200.178038][T27611] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1200.219089][T27611] usb 4-1: device descriptor read/8, error -71 [ 1200.338392][T27611] usb usb4-port1: unable to enumerate USB device [ 1201.188816][T27975] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1201.846569][T27994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.294954][T27995] geneve2: entered promiscuous mode [ 1202.303675][T27995] geneve2: entered allmulticast mode [ 1204.359702][T28030] xt_bpf: check failed: parse error [ 1205.588512][T28037] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1205.607975][T28036] IPVS: stopping backup sync thread 28037 ... [ 1205.950738][T28041] netlink: 'syz.1.2365': attribute type 12 has an invalid length. [ 1206.238055][T27611] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1206.388084][T27611] usb 2-1: Using ep0 maxpacket: 16 [ 1206.407153][T27611] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1206.436981][T27611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.478796][T27611] usb 2-1: config 0 has no interface number 0 [ 1206.497419][T27611] usb 2-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024 [ 1206.528661][T27611] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1206.549328][T27611] usb 2-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1206.643920][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1206.643943][ T30] audit: type=1326 audit(1776123401.871:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1206.683654][ T30] audit: type=1326 audit(1776123401.881:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1206.709539][ T30] audit: type=1326 audit(1776123401.881:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1206.733010][ T30] audit: type=1326 audit(1776123401.881:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1206.733060][T27611] usb 2-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 1206.796359][T27611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.816687][T27611] usb 2-1: Product: syz [ 1206.816762][ T30] audit: type=1326 audit(1776123401.881:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1206.866732][T27611] usb 2-1: Manufacturer: syz [ 1206.881244][T27611] usb 2-1: SerialNumber: syz [ 1206.893975][ T30] audit: type=1326 audit(1776123401.881:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c96f5d04e code=0x7ffc0000 [ 1206.939788][ T30] audit: type=1326 audit(1776123401.881:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1206.993115][ T30] audit: type=1326 audit(1776123401.881:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1207.043838][ T30] audit: type=1326 audit(1776123401.881:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1207.045544][T27611] usb 2-1: config 0 descriptor?? [ 1207.129659][T28048] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1207.139867][ T30] audit: type=1326 audit(1776123401.881:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28057 comm="syz.4.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c96f9c819 code=0x7ffc0000 [ 1207.186966][T27611] usb-storage 2-1:0.216: USB Mass Storage device detected [ 1208.244067][T28086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.111843][ T24] usb 2-1: USB disconnect, device number 94 [ 1209.880388][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'. [ 1210.078984][T28121] binder_alloc: 28116: binder_alloc_buf, no vma [ 1210.111304][T28121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.416446][ T796] usb 3-1: USB disconnect, device number 84 [ 1210.921757][T28173] input: syz0 as /devices/virtual/input/input43 [ 1211.102894][ T9251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.219648][ T9251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.259222][T27611] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1211.508152][T27611] usb 5-1: Using ep0 maxpacket: 16 [ 1211.625116][ T9251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.683978][ T9251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.750681][T28189] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1211.821971][T27611] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.894961][ T9251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1211.928356][ T9251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.939229][T27611] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.958238][T27611] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1212.048511][T27611] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1212.088228][ T24] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1212.103091][T27611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.139108][ T9251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1212.171051][T27611] usb 5-1: config 0 descriptor?? [ 1212.262624][ T9251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.283119][ T24] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 1212.298791][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.338815][ T24] usb 2-1: config 0 has no interfaces? [ 1212.364944][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1212.387957][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.426174][ T24] usb 2-1: config 0 descriptor?? [ 1212.844016][T27611] nzxt-smart2 0003:1E71:2009.000B: collection stack underflow [ 1212.883189][T27611] nzxt-smart2 0003:1E71:2009.000B: item 0 4 0 12 parsing failed [ 1212.900286][T27611] nzxt-smart2 0003:1E71:2009.000B: probe with driver nzxt-smart2 failed with error -22 [ 1213.265005][ T9251] bridge_slave_1: left allmulticast mode [ 1213.307141][ T9251] bridge_slave_1: left promiscuous mode [ 1213.337627][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.361839][ T796] usb 5-1: USB disconnect, device number 78 [ 1213.434878][ T9251] bridge_slave_0: left allmulticast mode [ 1213.456836][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.124958][ T9251] bond1 (unregistering): Released all slaves [ 1214.173622][ T9251] bond0 (unregistering): Released all slaves [ 1214.301432][ T9251] !: left promiscuous mode [ 1214.316013][T28253] x_tables: duplicate underflow at hook 4 [ 1214.346188][ T24] usb 2-1: USB disconnect, device number 95 [ 1214.615506][ T24] IPVS: starting estimator thread 0... [ 1214.688313][ T796] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1214.748974][T28265] IPVS: using max 49 ests per chain, 117600 per kthread [ 1214.811014][ T9251] tipc: Disabling bearer [ 1214.828590][ T9251] tipc: Left network mode [ 1215.138303][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 1215.151258][ T9251] IPVS: stopping master sync thread 18064 ... [ 1215.164841][ T796] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.233896][ T796] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.293052][ T796] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1215.384110][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.907688][ T796] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1216.292262][ T796] usb 4-1: USB disconnect, device number 115 [ 1216.934997][ T9251] batman_adv: batadv0: Interface deactivated: macsec2 [ 1217.144206][ T9251] batman_adv: batadv0: Removing interface: macsec2 [ 1217.568555][T27611] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1217.699212][ T9251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.755037][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.768901][T27611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.823901][ T9251] veth1_macvtap: left promiscuous mode [ 1217.830109][T27611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.855998][ T9251] veth0_macvtap: left promiscuous mode [ 1217.874808][T27611] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1217.887062][ T9251] veth1_vlan: left promiscuous mode [ 1217.912427][T27611] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1217.971584][T27611] usb 4-1: Manufacturer: syz [ 1218.004991][T27611] usb 4-1: config 0 descriptor?? [ 1218.392877][ T9251] team0 (unregistering): Port device batadv1 removed [ 1219.066999][ T9251] team0 (unregistering): Port device team_slave_1 removed [ 1219.086595][T28373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2390'. [ 1219.111849][T28367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 1219.359974][ T9251] team0 (unregistering): Port device team_slave_0 removed [ 1219.398113][T28374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.389148][ T9251] IPVS: stop unused estimator thread 0... [ 1222.479008][ T796] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1222.680811][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1222.752850][ T796] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1222.798548][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.850482][ T796] usb 5-1: Product: syz [ 1222.889189][ T796] usb 5-1: Manufacturer: syz [ 1222.912859][ T796] usb 5-1: SerialNumber: syz [ 1223.041229][T27611] usbhid 4-1:0.0: can't add hid device: -71 [ 1223.088214][T27611] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1223.155623][T27611] usb 4-1: USB disconnect, device number 116 [ 1223.368425][ T796] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 1223.418310][ T796] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1223.570758][ T796] usb 5-1: USB disconnect, device number 79 [ 1224.463040][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2402'. [ 1225.121852][ T796] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1225.200338][T28504] ALSA: mixer_oss: invalid OSS volume 'w' [ 1225.228794][T28504] ALSA: mixer_oss: invalid OSS volume 'V$~w āĒ0?2' [ 1225.278819][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 1225.298861][T28504] ALSA: mixer_oss: invalid OSS volume ' rejected, failed to enable media [ 1270.615672][ T5910] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1270.953850][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1271.013489][ T5910] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1271.076931][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.105415][ T5910] usb 5-1: Product: syz [ 1271.128180][ T5910] usb 5-1: Manufacturer: syz [ 1271.132884][ T5910] usb 5-1: SerialNumber: syz [ 1271.253410][T29748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 1271.343374][T29751] input: syz0 as /devices/virtual/input/input48 [ 1271.628339][ T796] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1271.704236][ T5910] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 1271.735524][ T5910] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1271.780696][T29775] fuse: Bad value for 'fd' [ 1271.847080][ T5910] usb 5-1: USB disconnect, device number 85 [ 1271.869030][ T796] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1271.884527][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.935648][ T796] usb 4-1: config 0 has no interface number 0 [ 1271.966013][ T796] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1272.010635][ T796] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1272.026182][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.088629][ T796] usb 4-1: Product: syz [ 1272.092919][ T796] usb 4-1: Manufacturer: syz [ 1272.097610][ T796] usb 4-1: SerialNumber: syz [ 1272.261507][ T796] usb 4-1: config 0 descriptor?? [ 1272.525851][ T796] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1272.691042][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 1272.880195][ T796] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1273.057382][ T796] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1273.151133][ T796] usb 4-1: media controller created [ 1273.240222][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.363219][ T796] dvb-usb: bulk message failed: -22 (6/0) [ 1273.381075][T29780] ipip0: entered promiscuous mode [ 1273.395599][ T796] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1273.438526][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 1273.459766][ T796] dvb-usb: schedule remote query interval to 150 msecs. [ 1273.491300][T29780] ipip0: entered allmulticast mode [ 1273.508273][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 1273.528478][ T796] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1273.667958][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1273.678187][ T796] dvb-usb: error while querying for an remote control event. [ 1273.778510][T29804] tc_dump_action: action bad kind [ 1273.839499][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1273.861979][ T796] dvb-usb: error while querying for an remote control event. [ 1274.098008][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1274.103906][ T796] dvb-usb: error while querying for an remote control event. [ 1274.278159][T19353] dvb-usb: bulk message failed: -22 (1/0) [ 1274.294314][T19353] dvb-usb: error while querying for an remote control event. [ 1274.335939][T27611] usb 4-1: USB disconnect, device number 124 [ 1274.578993][T29849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2497'. [ 1275.404438][T27611] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1275.770827][T29846] wg1: entered promiscuous mode [ 1275.775758][T29846] wg1: entered allmulticast mode [ 1276.707992][T27611] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1276.898971][T27611] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1276.924805][T27611] usb 5-1: config 1 has no interface number 0 [ 1276.939980][T27611] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1276.955892][T27611] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1276.969214][T27611] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 1276.988018][T27611] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.066729][T27611] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1277.167557][T27611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.241349][T27611] usb 5-1: Product: syz [ 1277.316116][T27611] usb 5-1: Manufacturer: syz [ 1277.339834][T27611] usb 5-1: SerialNumber: syz [ 1277.725004][T29878] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1278.833200][T29878] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1278.843968][T27611] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1279.061975][T29909] IPVS: Unknown mcast interface: vlan1 [ 1279.417979][ T5925] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1279.590451][ T5925] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1279.659862][ T5925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1279.692663][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1279.720862][ T5925] usb 6-1: Product: syz [ 1279.743382][ T5925] usb 6-1: Manufacturer: syz [ 1279.758021][ T980] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1279.779348][ T5925] usb 6-1: SerialNumber: syz [ 1279.918071][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1279.943857][ T980] usb 4-1: no configurations [ 1279.977126][ T980] usb 4-1: can't read configurations, error -22 [ 1280.054242][ T5925] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1280.148530][ T980] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1280.324586][ T5925] usb 5-1: USB disconnect, device number 86 [ 1280.348086][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1280.392083][ T980] usb 4-1: no configurations [ 1280.441411][ T980] usb 4-1: can't read configurations, error -22 [ 1280.483280][T27611] usb 6-1: USB disconnect, device number 9 [ 1280.490142][ T980] usb usb4-port1: attempt power cycle [ 1280.507645][T27611] usblp0: removed [ 1280.512237][T29937] batadv_slave_1: entered promiscuous mode [ 1280.617491][T29945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2508'. [ 1280.666251][T29945] batadv_slave_1: left promiscuous mode [ 1280.858082][ T980] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1280.899345][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1280.927594][ T980] usb 4-1: no configurations [ 1280.944875][ T980] usb 4-1: can't read configurations, error -22 [ 1280.958081][T27611] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1281.107971][ T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1281.169254][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1281.180391][T27611] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 1281.206288][ T980] usb 4-1: no configurations [ 1281.222032][T27611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.236540][ T980] usb 4-1: can't read configurations, error -22 [ 1281.265791][ T980] usb usb4-port1: unable to enumerate USB device [ 1281.283993][T27611] usb 2-1: config 0 has no interface number 0 [ 1281.310951][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 1281.328633][T27611] usb 2-1: config 0 interface 205 has no altsetting 0 [ 1281.387210][T27611] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1281.429212][T27611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.437274][T27611] usb 2-1: Product: syz [ 1281.519649][T27611] usb 2-1: Manufacturer: syz [ 1281.539040][T27611] usb 2-1: SerialNumber: syz [ 1281.577513][T27611] usb 2-1: config 0 descriptor?? [ 1281.665042][T27611] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1281.774597][T27611] dvb-usb: bulk message failed: -22 (3/0) [ 1281.932235][T27611] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1282.053389][T27611] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1282.148369][T27611] usb 2-1: media controller created [ 1282.199244][T27611] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.353888][T27611] dvb-usb: bulk message failed: -22 (6/0) [ 1282.411023][T27611] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1282.572617][T29946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.589625][T27611] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 1282.650217][T27611] dvb-usb: schedule remote query interval to 150 msecs. [ 1282.688814][T27611] dvb-usb: bulk message failed: -22 (3/0) [ 1282.704581][T29946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.712665][T27611] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1282.848316][T27611] dvb-usb: bulk message failed: -22 (1/0) [ 1282.854312][T27611] dvb-usb: error while querying for an remote control event. [ 1282.937092][T29988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2512'. [ 1282.988078][ T980] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1283.018133][T27611] dvb-usb: bulk message failed: -22 (1/0) [ 1283.027380][T27611] dvb-usb: error while querying for an remote control event. [ 1283.162326][ T980] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1283.173275][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.208086][T27611] dvb-usb: bulk message failed: -22 (1/0) [ 1283.215042][T27611] dvb-usb: error while querying for an remote control event. [ 1283.232340][ T980] usb 4-1: Product: syz [ 1283.268285][ T980] usb 4-1: Manufacturer: syz [ 1283.300832][ T980] usb 4-1: SerialNumber: syz [ 1283.337198][ T980] usb 4-1: config 0 descriptor?? [ 1283.389706][ T980] hub 4-1:0.0: bad descriptor, ignoring hub [ 1283.408119][T27611] dvb-usb: bulk message failed: -22 (1/0) [ 1283.428298][T27611] dvb-usb: error while querying for an remote control event. [ 1283.436952][ T980] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1283.590953][ T980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1283.601730][T29996] libceph: resolve '0..' (ret=-3): failed [ 1283.620070][T27611] dvb-usb: bulk message failed: -22 (1/0) [ 1283.717531][T27611] dvb-usb: error while querying for an remote control event. [ 1283.740059][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1283.770830][ T980] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1283.792806][T29974] dvb-usb: bulk message failed: -22 (4/0) [ 1283.806644][ T980] usb 4-1: media controller created [ 1283.824131][T30004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.875947][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1283.888019][T27611] dvb-usb: bulk message failed: -22 (1/0) [ 1283.900590][T27611] dvb-usb: error while querying for an remote control event. [ 1284.114215][ T980] DVB: Unable to find symbol dib7000p_attach() [ 1284.128004][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 1284.135184][ T5925] dvb-usb: error while querying for an remote control event. [ 1284.164846][ T980] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1284.213340][ T796] usb 2-1: USB disconnect, device number 101 [ 1284.293185][ T796] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1284.448238][ T980] rc_core: IR keymap rc-dib0700-rc5 not found [ 1284.456717][ T980] Registered IR keymap rc-empty [ 1284.481208][ T980] dvb-usb: could not initialize remote control. [ 1284.549306][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1284.620613][ T980] usb 4-1: USB disconnect, device number 3 [ 1284.894275][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1285.669395][T30057] ------------[ cut here ]------------ [ 1285.675340][T30057] !rwb [ 1285.675359][T30057] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.3.2517/30057 [ 1285.688948][T30057] Modules linked in: [ 1285.693289][T30057] CPU: 1 UID: 0 PID: 30057 Comm: syz.3.2517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.704349][T30057] Tainted: [L]=SOFTLOCKUP [ 1285.708735][T30057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1285.718983][T30057] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1285.725885][T30057] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 7d 56 24 fd eb 18 e8 76 56 24 fd eb 0d e8 6f 56 24 fd 4c 89 ff e8 b7 8f 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1285.745905][T30057] RSP: 0018:ffffc9000eddfa70 EFLAGS: 00010282 [ 1285.752235][T30057] RAX: 64a6d24209f7ab00 RBX: 1ffff11006cf3084 RCX: 0000000000000046 [ 1285.760347][T30057] RDX: 0000000000000006 RSI: ffffffff8defcc34 RDI: ffffffff8c27d880 [ 1285.768579][T30057] RBP: dffffc0000000000 R08: ffffffff9011e0b7 R09: 1ffffffff2023c16 [ 1285.776560][T30057] R10: dffffc0000000000 R11: fffffbfff2023c17 R12: ffff888036798420 [ 1285.784828][T30057] R13: 0000000000000000 R14: ffff88807d376000 R15: ffff888036798400 [ 1285.792856][T30057] FS: 00007f308e1ce6c0(0000) GS:ffff888125551000(0000) knlGS:0000000000000000 [ 1285.801928][T30057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1285.808689][T30057] CR2: 00002000001cc030 CR3: 000000006147a000 CR4: 00000000003526f0 [ 1285.816707][T30057] Call Trace: [ 1285.820014][T30057] [ 1285.822954][T30057] blk_register_queue+0x382/0x430 [ 1285.828052][T30057] __add_disk+0x677/0xd50 [ 1285.832428][T30057] ? down_read+0x272/0x2e0 [ 1285.836850][T30057] add_disk_fwnode+0xfb/0x480 [ 1285.841690][T30057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1285.847534][T30057] loop_add+0x85e/0xb40 [ 1285.851715][T30057] ? __pfx_loop_add+0x10/0x10 [ 1285.856412][T30057] loop_control_ioctl+0x2f8/0x5a0 [ 1285.861487][T30057] ? __fget_files+0x2a/0x420 [ 1285.866097][T30057] ? __fget_files+0x2a/0x420 [ 1285.870866][T30057] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1285.876427][T30057] ? __fget_files+0x2a/0x420 [ 1285.881714][T30057] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1285.886694][T30057] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1285.892430][T30057] __se_sys_ioctl+0xfc/0x170 [ 1285.897065][T30057] do_syscall_64+0x14d/0xf80 [ 1285.901936][T30057] ? trace_irq_disable+0x3b/0x150 [ 1285.906989][T30057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.913159][T30057] ? clear_bhb_loop+0x40/0x90 [ 1285.918004][T30057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.923953][T30057] RIP: 0033:0x7f308d39c819 [ 1285.928626][T30057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.948311][T30057] RSP: 002b:00007f308e1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.956738][T30057] RAX: ffffffffffffffda RBX: 00007f308d616270 RCX: 00007f308d39c819 [ 1285.964930][T30057] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000008 [ 1285.972936][T30057] RBP: 00007f308d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1285.981078][T30057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.989236][T30057] R13: 00007f308d616308 R14: 00007f308d616270 R15: 00007f308d73fa48 [ 1285.997246][T30057] [ 1286.000290][T30057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1286.007588][T30057] CPU: 1 UID: 0 PID: 30057 Comm: syz.3.2517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.018521][T30057] Tainted: [L]=SOFTLOCKUP [ 1286.022845][T30057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1286.032917][T30057] Call Trace: [ 1286.036201][T30057] [ 1286.039140][T30057] vpanic+0x56c/0xa60 [ 1286.043135][T30057] ? __pfx__printk+0x10/0x10 [ 1286.047724][T30057] ? __pfx_vpanic+0x10/0x10 [ 1286.052244][T30057] ? is_bpf_text_address+0x292/0x2b0 [ 1286.057546][T30057] ? is_bpf_text_address+0x26/0x2b0 [ 1286.062759][T30057] panic+0xc5/0xd0 [ 1286.066491][T30057] ? __pfx_panic+0x10/0x10 [ 1286.070936][T30057] __warn+0x315/0x4f0 [ 1286.074924][T30057] ? wbt_init_enable_default+0x18a/0x220 [ 1286.080563][T30057] ? wbt_init_enable_default+0x18a/0x220 [ 1286.086204][T30057] __report_bug+0x29a/0x540 [ 1286.090726][T30057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.096801][T30057] ? wbt_init_enable_default+0x18a/0x220 [ 1286.102452][T30057] ? __pfx___report_bug+0x10/0x10 [ 1286.107494][T30057] ? wbt_init_enable_default+0x18a/0x220 [ 1286.113125][T30057] report_bug+0x16a/0x220 [ 1286.117473][T30057] ? wbt_init_enable_default+0x18a/0x220 [ 1286.123102][T30057] ? wbt_init_enable_default+0x18c/0x220 [ 1286.128738][T30057] handle_bug+0x9c/0x200 [ 1286.132985][T30057] exc_invalid_op+0x1a/0x50 [ 1286.137486][T30057] asm_exc_invalid_op+0x1a/0x20 [ 1286.142332][T30057] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1286.148582][T30057] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 7d 56 24 fd eb 18 e8 76 56 24 fd eb 0d e8 6f 56 24 fd 4c 89 ff e8 b7 8f 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1286.168187][T30057] RSP: 0018:ffffc9000eddfa70 EFLAGS: 00010282 [ 1286.174262][T30057] RAX: 64a6d24209f7ab00 RBX: 1ffff11006cf3084 RCX: 0000000000000046 [ 1286.182237][T30057] RDX: 0000000000000006 RSI: ffffffff8defcc34 RDI: ffffffff8c27d880 [ 1286.190207][T30057] RBP: dffffc0000000000 R08: ffffffff9011e0b7 R09: 1ffffffff2023c16 [ 1286.198204][T30057] R10: dffffc0000000000 R11: fffffbfff2023c17 R12: ffff888036798420 [ 1286.206194][T30057] R13: 0000000000000000 R14: ffff88807d376000 R15: ffff888036798400 [ 1286.214179][T30057] blk_register_queue+0x382/0x430 [ 1286.219217][T30057] __add_disk+0x677/0xd50 [ 1286.223547][T30057] ? down_read+0x272/0x2e0 [ 1286.227963][T30057] add_disk_fwnode+0xfb/0x480 [ 1286.232639][T30057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1286.238449][T30057] loop_add+0x85e/0xb40 [ 1286.242601][T30057] ? __pfx_loop_add+0x10/0x10 [ 1286.247288][T30057] loop_control_ioctl+0x2f8/0x5a0 [ 1286.252308][T30057] ? __fget_files+0x2a/0x420 [ 1286.256896][T30057] ? __fget_files+0x2a/0x420 [ 1286.261486][T30057] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1286.267027][T30057] ? __fget_files+0x2a/0x420 [ 1286.271617][T30057] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1286.276577][T30057] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1286.282159][T30057] __se_sys_ioctl+0xfc/0x170 [ 1286.286775][T30057] do_syscall_64+0x14d/0xf80 [ 1286.291395][T30057] ? trace_irq_disable+0x3b/0x150 [ 1286.296460][T30057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.302538][T30057] ? clear_bhb_loop+0x40/0x90 [ 1286.307220][T30057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.313141][T30057] RIP: 0033:0x7f308d39c819 [ 1286.317586][T30057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.337284][T30057] RSP: 002b:00007f308e1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.345706][T30057] RAX: ffffffffffffffda RBX: 00007f308d616270 RCX: 00007f308d39c819 [ 1286.353700][T30057] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000008 [ 1286.361694][T30057] RBP: 00007f308d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1286.369666][T30057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.377646][T30057] R13: 00007f308d616308 R14: 00007f308d616270 R15: 00007f308d73fa48 [ 1286.385657][T30057] [ 1286.389130][T30057] Kernel Offset: disabled [ 1286.393479][T30057] Rebooting in 86400 seconds..