last executing test programs: 23m33.956611219s ago: executing program 1 (id=1020): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000400) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x43, 0x5}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) fcntl$getflags(r2, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r4, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4009, 0x7, r5, r6, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0/file0\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x30, 0x7, 0x1, 0x0, "7be147cd8d6ac38cff9b696f104207cb8e277003f4cb423739ecd08694192864491318c4b2eeab4f8c8a7687"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4001}, 0x40) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 23m32.858572767s ago: executing program 1 (id=1022): creat(&(0x7f0000000040)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='ro'}]}}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = signalfd4(r1, &(0x7f0000000240)={[0x8, 0x8]}, 0x8, 0x80000) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000200)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000040)={0x7ff, 0x1, 0x1}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) unshare(0x24020000) unshare(0x22020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [@hopopts={0x3a}], "0000000000000003"}}}}}}}, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rt_sigprocmask(0x1, &(0x7f00000010c0)={[0x8]}, &(0x7f0000001100), 0x8) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20000045, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 23m32.171813224s ago: executing program 1 (id=1030): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}, 0x1, 0x2000}, 0x0) 23m31.762736741s ago: executing program 1 (id=1032): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010101}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "e133e568b7cb11b9d3c06cc287d51417"}}}}}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x34, 0x71, 0x11, 0xb4}, [@func, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) ptrace(0x10, r3) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000fe020000000a0000", 0x1c) getrlimit(0xa, &(0x7f0000000200)) r6 = syz_open_procfs(0x0, &(0x7f0000000c40)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/130, 0x82}], 0x1, 0x0, 0x8001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202f25d16876185782d8918b263b57fcb8a1c611be75b625ba63191"], 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 23m28.587663451s ago: executing program 1 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 23m28.250932731s ago: executing program 1 (id=1052): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x20007}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) capset(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000140)={0xda86, 0x5, 0xff, 0x0, 0x4, 0x8}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e0000001000810804", 0x9}], 0x1}, 0x40880) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 23m27.66978266s ago: executing program 32 (id=1052): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x20007}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) capset(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000140)={0xda86, 0x5, 0xff, 0x0, 0x4, 0x8}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e0000001000810804", 0x9}], 0x1}, 0x40880) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 33.536639885s ago: executing program 5 (id=6558): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xa00}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="0349ee47070c", 0x6}, {0x0}], 0x2}}], 0x2, 0x8010) 33.402772577s ago: executing program 5 (id=6560): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="ffc300000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 33.220195592s ago: executing program 5 (id=6562): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_complete(r1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000004c0)=0x1a) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 31.116383893s ago: executing program 5 (id=6570): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000010b20802040200070001000404459f0044006500000c1190780a010102ffffffff4e204e2100309078040000000600000001000000000000005002ba413428cfd0622da30a5211ec085a11aa7cc3300ff9"], 0x52) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r3 = socket(0x2, 0x3, 0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0xf, 0x8000, 0x1, 0x10, 0x9, 0x12}, 0x9c) sendto$inet6(r4, &(0x7f0000000080)='I', 0x1, 0xc0, &(0x7f0000000000)={0xa, 0x4e20, 0xd5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x2a8, 0x1b4, 0xac, 0x3a0, 0x1b4, 0x440, 0x440, 0x440, 0x440, 0x440, 0x8000000, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@uncond, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) syz_open_dev$dri(&(0x7f0000002a40), 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) close(r7) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 's\x05\x00\x00\x00l\\er\x00', 0x3a, 'Sy\x00[\xea\xe1lq\x00\x00\x00\x002#', 0x3a, './file0', 0x3a, [0x46]}, 0x40) 28.686907589s ago: executing program 0 (id=6576): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000080000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 28.614441905s ago: executing program 3 (id=6577): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000640)={@val={0x8, 0x806}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2d9, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246ed34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da80804088b6ddc5dec29b20ce1cea3d55741333ba4d60cbac74d79515ed013b4664253d3804bf1877f18380d7054aa3bf345bbb74377cd019eb8d5294b42bce5511ddbded4c12b4945c39510aafdc664833262f20a650a2101116f625f18e5dbc2412dc411b90f73e7eb0391ad372be5c5701acd97fa67aeefc8347ec24071f4a5af78ea30b0e3c4171eff58bcf976022b363d9d6d3be78d12b6afd47c8ca6e9e5032df8da904f85e2b6b130dbb484f45a8d3a0c61f431932caa843eb5cc79cd741e0119a9deb81bfa1e9217b1be19242e8fe489fe6a0d03ac85f11bb4c6d029f0091110917e1bd175c1382d341eb56d0645f4056400720c398d9c1b6acd8b55c4cc272ba50cacfb06473577ba82c3c518628c86c3df02a8479a00574e46a711fce33dbfe956d570cf669e81707f8ce3c9adeb1fa634a0c7e1bc3644bd21a05e3b1f9ba83731520bb643af677c9de43034a91e769b4460889a776ac98462c2efc0832f07d822b2d0f5019d7525b58ddb1bdb310b65f3f6123672f2fb2246ad410e5db6cee4d70f559a553fcb89c59d539547dc9f72f546f8a1a3d5069a3ffcb051ce8fb0ef40a37b8aff63b5cf91925eaa601496565eb5e6cc3854be56950a6e13e576143de83fd11bfd3d56eed4a5eb8723b5a2ef5fe783787f390560d6c9e85abd8757e517defc23089eab0fad643c97fed8fb856554bea1430f69e5a49715c1828800d54c94ec19a0fe062c3856734042b6d7629f29163d360dac7ffb347f99f22031b217b495f74a1b812198ffbd8f2f343a8e19b71775a8b509b9bc26feb03168893e7d4a4a28d63b156b5ad3fa5ea85140c7f41ba2cd823e64ab7e491bd49f9e711e0d9fa152d6173c5d0e04d17f457d8fe598f35bb50483aaf1698699c5e2a"}}}}, 0x2e7) 28.609834817s ago: executing program 0 (id=6578): r0 = open$dir(0x0, 0x0, 0x20) syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) r6 = geteuid() fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000026c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r12, 0x0, 0x0) r13 = syz_io_uring_setup(0x88c, 0x0, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002700)={{0x1, 0x1, 0x18, r0, {0x0, 0x24}}, './file0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002840)={0x0, 0x0}) sendmmsg$unix(r4, &(0x7f000000ab80)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000004c0)="99a9967735ff000b4085f3a8e484688cf7e2def4d5b50ef10e6b1cc9329146147a078e4fa3f0828aa68d971f5c0fad7a09d43981a660526634bc646d1945e32813f9644b92f19737bb68c78d52facf24e509cf867bdc326b8b964cc1f26ded8715cae6d91b1b9fe4b3668a9798ee6639c86001765a0feef7460521e710a013c5c95dc3ed57fc0194315cf7e4842247d8d3a3c3c83baad9ca6f090a8f90d88c", 0x9f}, {&(0x7f0000000580)="c95db6d3c8acbdfa1db8adfae43664f34f6cd587c2b44867612b0b2a76c6341e66e22c81b437127fe66aaef1b7a3f1f00879dd3847e59cfb3d53cc8380f1d7cb003f37dbd2eb6106cd432b39867c127770135995ad34b1b0d00519", 0x5b}], 0x2, &(0x7f0000004940)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18, 0x1, 0x2, {r10, r11, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r12, r0, r4, r3, r13, r14, r0, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r4, r1, r4, r1]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r15}}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r3, r1, r4, r1]}}], 0xfc, 0x20000000}}, {{&(0x7f0000005380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x4000}}, {{&(0x7f0000005ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d40)=[{0x0}], 0x1, &(0x7f0000006340)=[@rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x18, 0x1, 0x2, {r5, r11, r8}}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x84, 0x20000001}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000aa40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r7}}}, @cred={{0x18, 0x1, 0x2, {r10, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0, r3]}}, @rights={{0x10, 0x1, 0x1, [r12]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x94, 0x4000}}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f000000ab00)}], 0x1, 0x0, 0x0, 0x810}}], 0x5, 0x80cc) 28.442780114s ago: executing program 3 (id=6580): socket$netlink(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xf4ffffff) 28.389489082s ago: executing program 0 (id=6581): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_complete(r1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000004c0)=0x1a) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 28.380913116s ago: executing program 5 (id=6583): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a00ff1f080003"], 0x84}}, 0x0) 27.461485054s ago: executing program 3 (id=6584): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_create(0x101) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@can_newroute={0x13c, 0x18, 0x400, 0x70bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x1f, 0x35, 0x9, 0xee, "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", 0x0, "8e5ad631508e165f94b61a250837628c8e4d14f6"}}, @CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040810}, 0x7000) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000000c0)={0x9, @capture={0x0, 0x0, {0x0, 0x3}, 0x4, 0x9}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000240)) 27.423781724s ago: executing program 0 (id=6585): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000280)="fbf4c7c93c2f841d4320d161b545d7547666dd82a1c7479a8a265e60af95425f50024e", 0x23}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd0300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000100002600"/20, @ANYRES32=r3], 0x20}}, 0x0) 27.240508893s ago: executing program 5 (id=6586): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908001400000055090100000000009500000000000000000000008500000007000000b70000000000000095000000000000005ff2f3084b0a7de29a38f57c1e7aa3fe8c9fe7abc05b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/217, 0x2, 0x2}}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 26.760507808s ago: executing program 0 (id=6587): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="ffc300000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 25.500126404s ago: executing program 3 (id=6589): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100)=0x3ff, 0xffffffffffffffff, &(0x7f0000000140)=0x101, 0x9, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x200000005c831, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x5, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000080)={{r2, r3+60000000}, {r8, r9+60000000}}, &(0x7f00000000c0)) 25.477422125s ago: executing program 4 (id=6590): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)=@bridge_delneigh={0x1c, 0x1d, 0x300, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x10, 0x84, 0x5daf753b7bce95c6}}, 0x1c}, 0x1, 0x0, 0xffffffff, 0x20000000}, 0x4000) 25.324837827s ago: executing program 2 (id=6591): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000640)={@val={0x8, 0x806}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2d9, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}, 0x2e7) 25.261806146s ago: executing program 0 (id=6592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000019380)=""/84, &(0x7f0000019080)=0x54) (async) syz_emit_ethernet(0x72, &(0x7f0000019140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602d5a00003c3c0020010000000000000000000000000002fe8000000000000000645bff6071b7ea966a2cf1000000000000aa330400000000000007080000000000000000c910ff02000000000000000000000000000105e1000000004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) listen(0xffffffffffffffff, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f00000191c0)='net/nf_conntrack_expect\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x7, 0x0, 0xff, 0x0, 0x79, 0x1, 0x1]}}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r9 = getpid() move_pages(r9, 0x6, &(0x7f0000019480)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f00000190c0)=[0x3, 0x5, 0x7, 0x3, 0x0], &(0x7f0000019100)=[0x0, 0x0], 0x6) (async) syz_usb_control_io$printer(r8, 0x0, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000180)={r10}) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000280)={0x24, &(0x7f0000019400)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX=r9, @ANYRES64=r10, @ANYRESHEX=r6, @ANYRES8=r6, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESHEX=r6, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="20066900832003"], 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r12 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x102, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xd4, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x21, &(0x7f0000019200)=ANY=[@ANYBLOB="18000000c7ff000000000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa20000000000000702001e00567375308f038300f8ffffffb703000008000000b70400000200000085000000820000009500000000000000186b00000d00000000000000040000008520000003000000b7080000000000007b8af8ff00000000b70800004b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x11, 0x0, &(0x7f0000000140), 0x41000, 0x48, '\x00', r11, 0x1b, r12, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0x5, 0x100}, 0x10, r13, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x2, 0x3}, {0x5, 0x3, 0x0, 0x3}], 0x10, 0x3, @void, @value}, 0x94) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r14, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000001000000ff010000040000002ecd00f37fffffe300000000"]) 25.202577968s ago: executing program 4 (id=6593): r0 = open$dir(0x0, 0x0, 0x20) syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) r6 = geteuid() fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000026c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r13, 0x0, 0x0) r14 = syz_io_uring_setup(0x88c, 0x0, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002700)={{0x1, 0x1, 0x18, r0, {0x0, 0x24}}, './file0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002840)={0x0, 0x0}) sendmmsg$unix(r4, &(0x7f000000ab80)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000004c0)="99a9967735ff000b4085f3a8e484688cf7e2def4d5b50ef10e6b1cc9329146147a078e4fa3f0828aa68d971f5c0fad7a09d43981a660526634bc646d1945e32813f9644b92f19737bb68c78d52facf24e509cf867bdc326b8b964cc1f26ded8715cae6d91b1b9fe4b3668a9798ee6639c86001765a0feef7460521e710a013c5c95dc3ed57fc0194315cf7e4842247d8d3a3c3c83baad9ca6f090a8f90d88c", 0x9f}, {&(0x7f0000000580)="c95db6d3c8acbdfa1db8adfae43664f34f6cd587c2b44867612b0b2a76c6341e66e22c81b437127fe66aaef1b7a3f1f00879dd3847e59cfb3d53cc8380f1d7cb003f37dbd2eb6106cd432b39867c127770135995ad34b1b0d00519", 0x5b}], 0x2, &(0x7f0000004940)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r13, r0, r4, r3, r14, r15, r0, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r4, r1, r4, r1]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r16}}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r3, r1, r4, r1]}}], 0xfc, 0x20000000}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)="c164b1266594b4445f8f9c9ee6de6aae91016e6db0911626704b07fb6cb059cf6d50dfed7642437e1ec907710b6e8a894d076cf8987d1ea1e15f3b0531c84ce0243b0a939d17c57f84e3f98db6fd212cd3e6b975401cafc45012951ed7ba7ce13b95646309f6c6b024a556cb850b1bab01b046057be9a4a256bc04d5d0b46f1c134e5e31026d40d5446d384db34f95ef07d93295142d4f22ef10129845ae4d6fd94b41a245c9ed71cd7218f2fa3ff5e80e94adb9c220d93a5918a5fce548b534a286a648bed59832cc434aa861f314c35f00cdcc8f246580105195098d14e5969379b5d27a022193756de933507518", 0xef}, {&(0x7f0000004bc0)="ebbe63a79877eada344ae5ca5eb45a99bf5b7025f40d872d4435cab2fbfc8d8e7e1caec0732cc6653df6b5322d82d825d4e05ddc3fd8bf401425cfabcabd09c65920b48c6ff5b2bc53a8f70ec522ee001c06b5feb7ba516b999160b2e6253b1271efba55407c1201d1204cc055737f167af6256f85527966374eb4f2d2bbc65c341d0703f456473ef9fe06c82bb2a3e8779d8bd3b7b362712b48833522b27b26be53ab82f54e51042079a52a64ad0e10e14b739a93a2712f4c5402db6716114e1a1dbaf8edd2072b1e763210614b0ab582216da72d2ecddfcb59106e97", 0xdd}], 0x2, &(0x7f0000005200)=[@rights={{0x10, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r13]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x18, 0x1, 0x2, {r16, 0x0, r10}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x70, 0x80}}, {{&(0x7f0000005380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x4000}}, {{&(0x7f0000005ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d40)=[{0x0}], 0x1, &(0x7f0000006340)=[@rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x18, 0x1, 0x2, {r5, r12, r8}}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x84, 0x20000001}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000aa40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r7}}}, @cred={{0x18, 0x1, 0x2, {r11, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0, r3]}}, @rights={{0x10, 0x1, 0x1, [r13]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x94, 0x4000}}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f000000ab00)}], 0x1, 0x0, 0x0, 0x810}}], 0x6, 0x80cc) 25.059208802s ago: executing program 2 (id=6594): arch_prctl$ARCH_GET_CPUID(0x1011) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f00000055c0)=[{0x0}, {&(0x7f0000005340)=""/4, 0x4}], 0x2}, 0x200}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x418081, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x2, 0x2, 0x8, 0x7fffffff, 0x9, "4c857be7a892fc0b047e95a226dbc204b0bd21", 0x6, 0x6}) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4841}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00801200aaed040000001b0010000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) arch_prctl$ARCH_GET_CPUID(0x1011) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) (async) recvmmsg(r1, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f00000055c0)=[{0x0}, {&(0x7f0000005340)=""/4, 0x4}], 0x2}, 0x200}], 0x1, 0x40000002, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x418081, 0x0) (async) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x2, 0x2, 0x8, 0x7fffffff, 0x9, "4c857be7a892fc0b047e95a226dbc204b0bd21", 0x6, 0x6}) (async) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4841}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00801200aaed040000001b0010000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) (async) 24.965863824s ago: executing program 4 (id=6595): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x83}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 24.950931388s ago: executing program 3 (id=6596): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008aec1, &(0x7f0000000500)=""/219) recvfrom(r0, &(0x7f0000001480)=""/239, 0xef, 0x20000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001580)="5a8020ae74c5a004a24fd613a02d96bef678e46ca5c348e19ec9bcbee43c3cfb28789dee08c02723ccc378d3a8ff3a1bfd37039018f0b70ccdfd0cfcbe09bf3e2d4e06022afa83d3b9d43f703e9d2324d80160c9988ba61cc53379e694fea5003e0c0c584959bb385bbdb1c93817ac0643d493aacb63d696ae6e1b18a53479c2b26412324ee8ea687d513347c4a521d2d0466fa50a0f525dcdb7c57dec5c88f9b991c36965c528db93825551df32eafab84a81bb88453d1d9fadf07deeea1fcd1b7630ea", 0xc4, 0x4, &(0x7f0000001680)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x5a, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0xc0e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2b, 0x72, 0xd5, 0xe7, 0x1b3d, 0x931f, 0x9790, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbfc, 0x3, 0x6, 0x64, 0xc0, 0xc, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xd6, 0xc7, 0xa4, 0x7, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "3d9af668e105"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x4, 0x63}, [@obex={0x5, 0x24, 0x15, 0xd}, @mdlm_detail={0x71, 0x24, 0x13, 0x0, "8db0ff487e41278b736c0b941dcdf54f01772dcfd6de0e444ab7193ccfd9e02be1defa4e71c88162d02323cd47ec66a4eb81427e90b037691b6a4b835e7b47c102a664b9ad41844c944720f9fb4fcb24b678afb759fcd6285fb70a5791588f33cd1f429be9a990197f0944262d"}]}], [{{0x9, 0x5, 0x7, 0x8, 0x10, 0xcd, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x401}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xfe, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x4}, @generic={0x50, 0x11, "23e5705a285c47021ebec4019aeb3e12203917a990239ce53312b33c53d1bca520c4a6b1d807b8fee145ab04105fc5a580195dd83db825cb8a4c2ffcf6e49e665b8c3172bde6e54e913f2a9e93a5"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xa, 0x6, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x707}]}}]}}, {{0x9, 0x4, 0x2d, 0x5, 0xe, 0x12, 0xce, 0xef, 0x3, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0xa, 0x8f, 0x8, [@generic={0x6d, 0xe, "9991734c370553e902d423fe7c5ced4c2d88e96eaa192991ab09a19861249e5d7a4d079666a01297e7c81f19191843e5dac5e2736cc99f36655c7f6ba833326ec54cc57496c0fec2ea6440e7fa746c680468a6a25dd8e3e70cba135d137d92f0496440371d1468b40797d2"}, @generic={0xf7, 0x8, "151c9977cdfc77e113d8a947628389ba5386442418bc4bfdd6febd86e8cf54a50c3e67130ae74e45c6e23b7cc494fc87de728b7e78d593b5c5cd6c326989179b96172bcde7102ffbff17e796ef913fb64ec293ac41cc9d015061a2866c1c973a843a933d154525909b1b6d351845d9810d2a3c238882d87d90e2bde4f6fd7fcb5712c03c1170b1736e7bdb11f97177380e2a1e5d54644c0963ce40d3b19ffd4a208dbc51e73123cd1e4d4880a3c5dc3f436a80428949b56132f0f0586c7cbce8f03ff6b992a12bef4cc6cee55734ca630b7bff0e699e995f964c73fab4c6a1336424f1bc5a0994f7aceecbc9842a5b8057f51b6432"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe71}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0xf, 0x8, [@generic={0x35, 0x5, "bdbb5abedda6eec82ddc45c3eba74e56e53667206be9faf1688b9c909f7d51bbfd95106b06fafb2b7421da460bc9bd1d1973eb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xd}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x1, 0xe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xdf}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0xff, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x1, 0xfff3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x0, 0xc, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0xc5, 0x80, [@generic={0x33, 0x8, "8cda1dcfdb05868c256f3009aa6b7a8c382834f7c8664823796ed1f7c83bfd2475ee4840f2575d570aa0c545fc8bff694c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x0, 0x8, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x10, 0xd8, 0x6, 0x96}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0x4, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x5, 0x2}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x8, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x81}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x3, 0x81, [@generic={0x6c, 0x10, "3478e85dfc8b3bf751dfa4b31190f59cdb5e0e5572b5d7be2eb4ea4fdcd23d17114c17b8e922728698c76c8500743a9b500a4006059424d3be033a78204af525c1361f6b8284c2a1df0d36122188a451661e6e45dc07ace3a782b4b7c75c784a643f9ce2f04fc96846e8"}, @generic={0xb7, 0x7, "42bb53425045d2b6d4dafbbb7adef7b4710182daaeb03c06f3737f8966beef955c7b9c416d22bf9190e70063d9eb68218681dac7f88367ae77162a59314eb39264c60f2c7da3d2cecef54c6ff0a400154313a80af8282fe0bbe3ed827619b94191ed31f37795e5d30c55221c01152399927fe482dca5c4f5b5295f677563c75ea98af5189fd36c934425ece462907f8d5656aafe85909621eaac7f00a89454711f57e7c957a2916f88670eebe5c828b57cdd31783b"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x9, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x5a27f285e3cc67, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x1, 0xa, 0x6, [@generic={0x8c, 0x0, "ac4a62a82d98726f50a38e08b0d28139f1ee24daa86fcd35f2c67d7f8795607431723f0670a681edadc0746113f0e80722b0a21c4c811ba44cf7d9e0d6523622323f5a1c7d2b2ec33d6c226ea07ff5ee14198e252f5a8b13ac028800cf6c7df6d7a031a3f13640489961da61ffbdd378944d168aa572386899037d267d3699a9d3d00fb59007a73238da"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xa00}]}}]}}, {{0x9, 0x4, 0xf2, 0x0, 0x10, 0xe, 0x1, 0x0, 0xb0, [], [{{0x9, 0x5, 0xd, 0x2, 0x200, 0x9, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x6d55}]}}, {{0x9, 0x5, 0xa, 0x9, 0x400, 0x9, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xfb, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8c2b}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0xe, 0x4d, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x4, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x4, 0x7, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0xc, 0x18, 0x40, 0x2, 0x8, 0xe, [@generic={0xd7, 0x4, "6252176480b848b5fd7fddd941d7caa581a999eef9e77aa36eeb3e8770d8e677957e9105afbd8acee17317533ac2e7a19891304793a3a580a9fe573e37bbb2b20af8283c2157e45527037d1133b44f603bdb76848355e9808fe5153a633057bdec7967989108e4aa312866ca5fcd963968cdc8a400af9b2c9d52dc79baf54ce03cb1786bd58abeb7c5e20d107fa9febd9b0896b880be82e4c7c361ef33a93b3bc33c8554d4c0be8ad65a454756f00bd5f04931dea79bc4b77b062eabb7b279b1f6d374cf702463b9b16a1d364938a4552e7cfe99d6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xa4bc}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xa6, 0x26, 0xfe, [@generic={0xa1, 0x5, "198dbff83e6f50355a11d3bd1f717886efab5d4e7bf68c5799485f657fa00af8b4f3414692921a0fffb45df0e0f9aa52b2f6475903394991b7cbb889b3c7651f815bf5d099a47aaba3c455bc24232f18049f1131427bdf8658564427932129b379717cd9c1b7bcbf4f15138523f8b555e8766f7d25a5b12bb5a698d1aeed78afa804a05c1024421bb3e86701ea7dd1e84b19683cffe401e5de5eda9a6d10bf"}, @generic={0xec, 0x30, "bbc2dc7ca5bb20b758a8a734c7ebad0abd08e014216f9620beac6cd15d5b84f70f87794f6559a5d3ef196f676f05318c9ce0fe87f50745998071820b637865713990febf63ad05f2d3ebe4b77ed7f99612c10b16e335253991153a8053edd9fda0278b93a89dd030a6d7db4e2cdfb2c2355e728438dcb822119e2c51f061d273a5e2d980443a32910b021e6e114881812492b8e4b9bcd2ff6a950d0d7d2238307c3cf1c8dae8e88ac77299bf7589e259782a809e9693efc8b1c19e8d0a19bc1e4e7296deb5007a98be320a762c964c859e3267694d470a9a4ee719be0321ca255b290ce4d08d609f83a8"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x3f, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x3, 0x240, 0xff, 0x6, 0x4}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0xc8, 0x68, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7f}, @generic={0x89, 0x21, "15fe07e4904be40bd0b2d4d195d29901d86ee2931cdac24a7abe3fee7b2ac7a4553191fee5d917b48afe3dbd080c75b75c1fec0901a514b896d1fb5e550a724cb2745009beb05b855290574a47f25d4c442f73c23d6b5bdc26e2969797f28021df9da1da662ea01d2f74ed1ebee551e2acd5f3e067726ebce70f1b2c5ff479471d57ad93e41482"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xb99b}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x53, 0x1, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x48, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x1ff}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x7f, 0xb5, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xf, 0x3, 0x9, [@generic={0xef, 0x21, "0e869613813adf0d9c86c0e053c6c41ba7f7b2ab51948344df6ab2b5c42445f5d66e778f5c5598113bff83dc9b327843685b1213f1a1d235de459554209ff54cad2aec0471264c7e0e32c037e74b77a721990a80c368849d78513ed6dbcbebef53902c36f4d5855b37e6cc699f4bfb27e1dc13dca775ddd080b12b53aeb229b873e72329eef57273016c76278c256642067c8292a8530798a538d4152ca01de7fd6f590aa4792c967a8f387695cdb42db8cc00c837454a3a21ffc9862e97eb471ee40af275f5caf39b1be03124e2c3c370b4253926da912b96a1d2932629a69a502db82b73720415e56f4ba4a0"}, @generic={0x5a, 0xa, "3de5c870beb761560ddd38a947c70f244b9ef904d47531c9db8a138d833ef3336d43e0b2b13e57b24e241a261944641fa29d42f53af004451c6f8ce733bbbbbecf18d67c96dcaabf32ca1036e87df1b1937b39647f63c4c8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x8, 0x67, 0x55, [@generic={0x91, 0x23, "83ea751a115653b6b54cfc74ec285ea9fbb5a1d0ae45267697b496ac89db1b40a36e602961698031a1ab6b18eaee084b3197eaf824a8a153f30ff2e35b882838bbd34a2aa3a6f319e4254f9dff1eabc0a98218f2e1d8b26efc5023d87cba6f2016636518ddc9a5bde94665a1619b49d9b818f72d9bb96f3a113eb56ef9f051e23c4214628b361bfeaf4963848f230d"}, @generic={0xc6, 0xe, "e647b481bc4fa0124a9d4000f5003eaa9822a242bb1f55fea7d06dc885b5013c8eb084a53c2882c9282e3b8f308bd24426160e6a651343632faa997cb04b33f0db3790c5be38fa0b4b0092d38fcc3ac8128ed2b973a43ab05d426e0b1d1fce4e4632bd5bb5dcd463b0731e127f6d2d8f8a2f1965f5825f07c7114d8a99bc12c760ed16bf5e3dee9009c270a392d4a184b808d3d659297263a54875d811a1caab2c2e816f8b809c6f6ec6c41097f4e42045e7b8e0e35f1f873ce9769ecdd5f5f801f713dc"}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x9, 0xc1, 0x9, 0x40}, 0x190, &(0x7f0000000d00)={0x5, 0xf, 0x190, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0xd, 0x4}, @generic={0xc4, 0x10, 0x3, "befd346e52c02892cefa1362d6e2ba68022289ba2198cd6ec840446f17401a7a8753f433d5d1fbc586b877b55a93fa00ff832ebec20c6f3d15dc1de61d5078bc46fc1699265578080f919326433813b266d45a9daa17c468f68f8e9e67a1e94b48ff323b72193bb18643189acfa58fb9128191f8c2bc5155d1d02e57c4d3ae1c916eda8a4aa6610cec4aedaeac3caad4039f7ed93c7b4a693c505bcfafefb7e411cbff40674995a24e3fca558221f26cee207185eae114a6840dca8127daebcc03"}, @generic={0xb7, 0x10, 0x4, "5cbd74ad57a584c3fbfdb46586fc8552cb6f0c957c9c4da4e20f5e429fbd9f5c50235947f91b4d11ba759a07b26a9e54aed7c80258a5c8e916ac9f8bbbd099213825c1adac1b06455a460d266ab8552d876a4e7415972961f2736cf664ad2ffafe5b431f61a49f09aa614616c179883444a21499d37a41b481407e5fd5570d7e16d11e25c7e89b5f89b836ef24fd4975d816482880c7c3370b10831f743ff2a386c01971abc7ff59b364467ed548e64a02f464cd"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0xb5, &(0x7f0000000ec0)=@string={0xb5, 0x3, "0752e8a460fa918de63def4ae17ec4fb04a37bf7680c7dfb83dc915e545aada02cbe884ecfc9fd3e7ae7fd76c1819f6f10a6f0d9d986684a82e083ae7eae747bead616289f9f23ac92f49fda4713a23484362bc46d5f3f5983d30533877d50d4f5c349626364f0b5c2830685c56f7ec9dba616fa1df84f3ffb1261eea9a10ddd8831425f3efd1d22d2b896d9441d2c1846c3d76544d0fa188629fbae8d351fb298db23e629d7f8de5ef11087793fde6b1d575f"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xc04}}, {0x66, &(0x7f0000000fc0)=@string={0x66, 0x3, "98c23350ad8f4aaa968840d67d33f798e8e019c78c81da37d38aaca79893f70af617b6cb44893aec2ae2e8cae5c0c6321cece20832e8f5d75a8c264e534de63a177a9bce9ec2b74ef7c7c0804b789501d6620b1d2e058b7d4a09492c3a06e407d33d0314"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xc07}}, {0xe2, &(0x7f0000001080)=@string={0xe2, 0x3, "fe727108224e16ed376ae689c3e630b2339bdb2197ea0973a92bf704946115a6406bc6d0bca7447f6372d2c82462796491ba0441708118731a9ce92d8672840cc3f89b3d3113a5311254a799d34f06c52db9136c2ae6e050a01a41ace932d274938221830d3f0de166d809eed6a67f0915fc1acf321f95d9f227a09c4925f863f2bc1c37eaa793f2be53942c02d320e6bbde9b0b79a78394a9292a1d84fade7e1043036088ff84584d033c5029ec29d28354b87a3bffb24287e4ef90f101dea01d75ae6de453aed8ae01c20c49bc592dbc96c91cdd078e2b1438ff2b30f9b594"}}, {0x74, &(0x7f0000001180)=@string={0x74, 0x3, "1240d65122710975018bf7f4d62e6f89330023b14533a4a9b6f23cd42cd18779ec4a57462c0d53e5f5c2701b72b164aca80e2f5fe332e6e3764a763109e3c16c99de6d416aacbf4e6ca0df990f7319b861073e10f1590fb86f44f8298cbfa7bd68e925f0151fc6bfe5c6dfb964245ac680e3"}}, {0x18, &(0x7f0000001200)=@string={0x18, 0x3, "974a1188659dc9ba5d03c066b8eb9d212f97b181e90e"}}, {0xf4, &(0x7f0000001240)=@string={0xf4, 0x3, "ac04126afe8db0ed93ac4a8050faf78df4184baa73a27dac75b4c7b1df814d0bf8e2731518338799906485ba422174c57be4e8243d7e72a47f8beecc34a3e73d82756fd6f4e6033146fe9b9b7b51a044823d9f6a188ca08f14c0cf0d8a91ca7c86d08d5fb31cd035980b28b3207b1869be3ae4ac3f941302462cbf2fe2b05f5deb6cda624887a8f824dfd5f0f5fc0b0d38f63bf1db3d3cadfc32ece29ccc022737812814d738a6bbf48c0855ba97949ee68aeb09803a305d848eaba4b2602e512d64092b2c0bc701a1b6fc1b9048beec84891a3b864abf534ccc668fd3dccc86966a80c30977abe2c5512b6c47a8dc6d1ada"}}, {0x9a, &(0x7f0000001340)=@string={0x9a, 0x3, "fc442340be60a466776a92b0ef3183443ef2ecafdf299fddb4421fd6db8f6107147f4db08bf1d1136aa791027931e62689706e5005e2f2267f1d4c8a0de9673a4dc64978f1e42901c4659626950e7050e73702ad71da74b0c9a45a7f5eac9a660c4642196bcd9be67a37aadd3cb43d840482d0dc07f83225bd3ada65ba62863db6f176a7332dc7ffad12e76501313a7392128a2f1fb7e135"}}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000000)) 24.810127914s ago: executing program 2 (id=6597): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12014e01020000102505a1a4404d0102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff1b080006241a00001309058103000400fd000904010000020d00000904010102"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000380)) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000280)={{r5, 0x0, 0x1, [0xfffffe01, 0x4]}, {0x80000000, r6, 0x1, [0xd, 0x7]}, 0x4, [0xffffff15, 0x6]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0xc0, 0x3a, 0x4d, 0x20, 0x1604, 0x8005, 0xb21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x8c, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x98, 0x0, 0xa7, 0xa6, 0xae, 0x4}}, {{0x9, 0x4, 0x9f, 0x6, 0x0, 0xff, 0xff, 0xff, 0x5}}, {{0x9, 0x4, 0x9c, 0x3, 0x0, 0xff, 0xff, 0xff, 0xfb}}]}}]}}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1, 0x3, 0x0, 0x2, 0x0, 0x9, 0xffff, 0x2510, 0x100, 0x23, 0xfffa, 0xc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12014e01020000102505a1a4404d0102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff1b080006241a00001309058103000400fd000904010000020d00000904010102"], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) dup(r3) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000380)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000280)={{r5, 0x0, 0x1, [0xfffffe01, 0x4]}, {0x80000000, r6, 0x1, [0xd, 0x7]}, 0x4, [0xffffff15, 0x6]}) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0xc0, 0x3a, 0x4d, 0x20, 0x1604, 0x8005, 0xb21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x8c, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x98, 0x0, 0xa7, 0xa6, 0xae, 0x4}}, {{0x9, 0x4, 0x9f, 0x6, 0x0, 0xff, 0xff, 0xff, 0x5}}, {{0x9, 0x4, 0x9c, 0x3, 0x0, 0xff, 0xff, 0xff, 0xfb}}]}}]}}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1, 0x3, 0x0, 0x2, 0x0, 0x9, 0xffff, 0x2510, 0x100, 0x23, 0xfffa, 0xc}}, 0x0, 0x0, 0x0, 0x0}) (async) 24.809823965s ago: executing program 4 (id=6598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xc0000005}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001002d0808004149014006040800", 0x58}], 0x1) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000140081054e81f782db44b904021d080225000002000000a118000200fcffffff9add3f00000e120800915b35710401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd67175730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bf2ece0b4ff9ecbee5de6ccd40dd68adbef3d93452a0000000000000153", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x3, 0x0, 0x0, {}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x28}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}}, 0x800) 24.721401895s ago: executing program 4 (id=6599): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) read$FUSE(r1, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = open$dir(0x0, 0x800, 0x4a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000ab80)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000004c0)="99a9967735ff000b4085f3a8e484688cf7e2def4d5b50ef10e6b1cc9329146147a078e4fa3f0828aa68d971f5c0fad7a09d43981a660526634bc646d1945e32813f9644b92f19737bb68c78d52facf24e509cf867bdc326b8b964cc1f26ded8715cae6d91b1b9fe4b3668a9798ee6639c86001765a0feef7460521e710a013c5c95dc3ed57fc0194315cf7e4842247d8d3a3c3c83baad9ca6f090a8f90d88c", 0x9f}, {&(0x7f0000000580)="c95db6d3c8acbdfa1db8adfae43664f34f6cd587c2b44867612b0b2a76c6341e66e22c81b437127fe66aaef1b7a3f1f00879dd3847e59cfb3d53cc8380f1d7cb003f37dbd2eb6106cd432b39867c127770135995ad34b1b0d00519", 0x5b}], 0x2, &(0x7f0000004940)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r4, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0xfc, 0x20000000}}, {{&(0x7f0000004a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)="c164b1266594b4445f8f9c9ee6de6aae91016e6db0911626704b07fb6cb059cf6d50dfed7642437e1ec907710b6e8a894d076cf8987d1ea1e15f3b0531c84ce0243b0a939d17c57f84e3f98db6fd212cd3e6b975401cafc45012951ed7ba7ce13b95646309f6c6b024a556cb850b1bab01b046057be9a4a256bc04d5d0b46f1c134e5e31026d40d5446d384db34f95ef07d93295142d4f22ef10129845ae4d6fd94b41a245c9ed71cd7218f2fa3ff5e80e94adb9c220d93a5918a5fce548b534a286a648bed59832cc434aa861f314c35f00cdcc8f246580105195098d14e5969379b5d27a022193756de933507518", 0xef}, {&(0x7f0000004bc0)="ebbe63a79877eada344ae5ca5eb45a99bf5b7025f40d872d4435cab2fbfc8d8e7e1caec0732cc6653df6b5322d82d825d4e05ddc3fd8bf401425cfabcabd09c65920b48c6ff5b2bc53a8f70ec522ee001c06b5feb7ba516b999160b2e6253b1271efba55407c1201d1204cc055737f167af6256f85527966374eb4f2d2bbc65c341d0703f456473ef9fe06c82bb2a3e8779d8bd3b7b362712b48833522b27b26be53ab82f54e51042079a52a64ad0e10e14b739a93a2712f4c5402db6716114e1a1dbaf8edd2072b1e763210614b0ab582216da72d2ecddfcb59106e97", 0xdd}], 0x2, &(0x7f0000005200)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x70, 0x80}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004d80)="0ba54aaa5f4a82131f4eaf046d905278ba10e0101baa7598139d765d10cf1647ed86b95c6b71027a314b92d676c7563793c8852268225ee3b4064e230e7fbca3", 0x40}, {&(0x7f0000004dc0)="241381a911785ef7a4814dbc62fb51bafe0a124a84ebd2b49c0d808aaacdad0152d9564326a71c0b44fd5606c9fa0cbae315e067ad3a192a18ac76e67859384e350a3f0674fccb40a131864b340d7b8af0c2c368fc98bbc7c1765459059653e5a68c5aafbfcc52a213c37c777496f0c6b614d95f97c7a6aca663635744fbbbf5d1b83ea13191d62047b9a561142af1c853afda1a0efa35913871262dd316011f90165c567eb0a330e5f6bb1e2f360809e797", 0xb2}, {&(0x7f0000004e80)="0549a555ea2d3a460c49cfe207c6145636b2a53150c8cbcb0664c6fe36cf3f34d073f7a71332b34079d716950ed264c604ac2fd60ff7f5525a5e7574b2abed147c026cdf96cc3ad64e0ebeaa92ed75d84aec540215e03a8200e193b92808d8f04f", 0x61}, {&(0x7f0000004f00)="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", 0xfd}, {&(0x7f0000005000)="11d72045274a8cf303aa1bf83fff76ca8ebf26bb6f2b830af0475bd9496c732b06e8771f8c8be86c1ed84ad6e0be9d0c78c69897de5ffec050dc8c37e02baa7bacb0b73a6e78996a8ad708896c97bfc3c16ef6", 0x53}, {&(0x7f0000005080)="8ea70ae174dd0890002258bab8a055d739995357953baf89a2fdb9314f985e5549ec37627f3d8052b3504c037aca873e2007866ed3c51fbfdafa37f4142caa6f485576ea4ef2eba097d885b6d8cd2d56a4433bbcc8b2b21a763614107fe830f0130d5526b43452b1c5fc876edea9fc5f35b82b91f57bd86475b0d9c6e040c29e491be2bc69ea750d5b8be64c5ec5f72429dfda35840666f204e6ab16e1d688487accf1", 0xa3}, {&(0x7f0000005140)="426872a498d14bc0f995b5410bfb7e19c6fedee11bdda327aaee49c2c243dfec6b36a789fd4200a09286c192dd540e5f8578438323fc3ad17e01ff9b170becc6d84c9d33d8b29ce6a59c0a90aec6b4d6", 0x50}], 0x7, &(0x7f00000052c0)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32=r1, @ANYBLOB="340000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="18000000eea003ff700100c2", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x8c, 0xc6a7767250463d89}}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000004900)="e90aa023f3fc84d6f1a24aee72c1b94628b95722d1819ef9b584ed86a510470aff", 0x21}, {&(0x7f0000005440)="36d30a4ac16f97f47e705e950d308346d5e578c3450cb4012c0beaba0434909a4e14a5239f35e0abc7b5bb2ed8e358b0c47036eb532667f341f4b0734616df0f9fae70e788fa478e19689f937c6534d714f71df00d155ab2ae36fb72d527bd6d0a0a8e7171176732d8a7879df8696b11dc1374722f29633adfd51c397ec3845c1452159a05c1df81ed5f96b2471855365005844c5cf76e21eeed37aba00b6196a41c3ba5d7494b6ab7784b7ac63dff", 0xaf}, {&(0x7f0000005500)="ec370fc42f567e2fb525304f1aeb72caf69c294e14b1daaed379a6191cd42a6474defac19302269a58f81450b42dc6138bd32f6beb99ba33ee611cb39fcd94b5cbc616888caa59434f233a4b812a765b4127260c08fcef9dfd080d4508c30ef31a34be78f25e", 0x66}, {&(0x7f0000005580)="ba59fbb02baaafe1ba0223530301c3885d9b65671d28575fa3dfe69dc0f030d5e485d85c1f961dcfe49f407920a51044f683f99481ca51108b359041566e72f67d6272ed17d50cb4ec8407bbf7caa31b7027763ddcfe02ff540ac768339f1494c95ed0a8246ff9394336de2f9b22a06a18a1574e224d12a920ce8686216b4b89492123a5de7597173a70567a1326e4ebfaf25e3da543d5cab4c2ee3f36886afba7894c33c6103f9ef1716a", 0xab}, {&(0x7f0000005640)="b14786a4a6b8561f35477001dd49f6993cb3835b39d1510db6c7d697d9a485bbb774657bc8d9f3c54340e6d5d75f2006498ef5b98e47c3b92b320933da2a66511eed26faa29a50e540068d3c3bcfabe2a26bca87ad96ba9b064740bd30f0c602ab28c741c765dd83c6c44a73d96b242a09e472683b895b1aad2d51452ad50f81aa76fd9eddfb2da0351685688dc71e31ec1a44c535a9ca54d59bd1facc85bfc6cc0804ade6b9c2fd4ed0f9f93908e703b55d1fa5b7118bf1a3259f89ea7330e85a436dadb6816c95a6e58c699ed2708fd313b12f8167eed0befa321a1615a0890bdf05ae56fab9d59287254fca08", 0xee}, {&(0x7f0000005740)="56c121afcc48afd2473ccc2a2017de0f07f410f55e0fd984b2ce1bd4a5a8a40aeac6", 0x22}, {&(0x7f0000005780)="cda8", 0x2}, {&(0x7f00000057c0)="32e05e365630effb9cb16f2257910224ce06fb9272f3631471dc5f7d1000e8172f2141179951c45432b989d929a66341cd6231a99507431e76158d0c1bdbdd2fdb50edaa59b61b12e4a482c1", 0x4c}, {&(0x7f0000005840)="4202503316605aa33c18f6f42bf10e99f3b55f732657186b012508091d11e57344dad1d42e53d0ceb14820077189e15d3c917189b7bc2ef52789cef9b8bd6f0a5949ec2b0ff7728761ff5e116471de08d21d4c3d09ab8c13f9840cd53ae35046058627ab6360be3fc84509d51889658a84cde2bf7780d4c997aac402323fe0492fc25c6c83127f8842789c6ed0c68a7f0c2c0ac2d3cb65927d375f8cca4aaf265104345ebf2b73d965c5b819ce0912c8e8ad4a70c8490f238c1d984a50df52559ed3b801c982df79101e418fe5b96fcb737a491a21765eed5572af81a352dab5ab056e58", 0xe4}, {&(0x7f0000005940)="f94ea166809a19c898d4ac96311f5add8de8c42e6bad42624cde0c254786e70d39774cb6f68f77e7e67c1ca6d6eeced4c01e05f1eaba6f31f56fca1580796fe50d258f6dcbc24943eea71f0437264d41f7c854e370edb2906e9978611c6c5928f97cd5208994be05afc78a3ab22dbb1f39c828643c942a35287cac887067138ffe7b340e68efe711a18b305c372c0dd7bbdea6", 0x93}], 0xa, &(0x7f0000005a80)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10, 0x4000}}, {{&(0x7f0000005ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005b40)="84784634f2c6882984383549eb7d6e704fb03c776446196ee0861c4725af74ee9f32877fbaff9b5dc1530d85861a0ed98470b4e9588bd561e5286719fb657841941a3e83716343cd1f0f053ef730759a1781d6268637d889890a43ff75591ecb96b3a8523fd62a45a3d711c7fb13e212ae7ebf6a5c9db6d609d528bcd94d207a0bb583173848e131e932fb646efabb584925", 0x92}, {&(0x7f0000005c00)="40de1847f569ac85bb0950adcd2d915f6ddee2ef8bc990bf4aea650b7522753bde2157e1a8a3a347b118bd5113875f5b52bf1d902da3c329de", 0x39}, {&(0x7f0000005c40)="807e9123833e2b79d45a557b5d048b8afddb8804feadb2c156aadc7b649b4cbe1f59c2a25dc60c4cc61235fc30275813a5d77c83943996d0492768a1c5833e9d529b2209450a83ceceb476d5d7e7dac50459372690f15fae14ff736c1546f63bd465f46c1810b7c6fb570947cc216c6b0b5ea45ec4d5e9c2f0f74ec02501563cc8d64b566e920942e09beb1bb634e5b1abb2ef4ec25dcd7f6ce7b343fd191a89e64ed1c16f5b17db6638b18136c134df7d30e72717b8a192bcecee85fe9d38afa6cf875be17c07c1", 0xc8}], 0x3, &(0x7f0000006340)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r4}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x20000001}}, {{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006440)="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", 0xfff}, {&(0x7f0000007440)="dfd57354be9c6841d8afd30faeb93af2d9c363d9b898a66818810864cc7be593ed43dfb4c2e30555264d60165fba4e57f4a56efbac8132f88d945a5b919c81caabcd702b1869d8a21d80cbde855fcbb8ed85802ede66eb6ce0358ffa2a5cdd038e840a430ab8662534435fce4fbaa0ab8c62b973b9444371db068d7edafa7e5639ddbca2d1c44f53a0f8cffdd809304c71221bd95ed85b1c6b678066a1d67fb9bddb34960f", 0xa5}, {&(0x7f0000007500)="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", 0x2c1}, {0x0}], 0x4, &(0x7f000000aa40)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r4, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x58, 0x4000}}], 0x6, 0x80cc) 23.725457293s ago: executing program 4 (id=6600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0x0, '.\x00'}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000bde72d50183100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b70200001400", @ANYRES32=r2, @ANYRESHEX, @ANYRES16=r1, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008580453010011000000010902"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165", 0xc) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8916, &(0x7f0000000580)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4010, r7, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) write$binfmt_aout(r7, 0x0, 0xffffffdb) pread64(r5, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000b00)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r10, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) 21.832391948s ago: executing program 3 (id=6601): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908001400000055090100000000009500000000000000000000008500000007000000b70000000000000095000000000000005ff2f3084b0a7de29a38f57c1e7aa3fe8c9fe7abc05b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/217, 0x2, 0x2}}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) eventfd2(0x1, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x439, 0xfffffffe, 0xfffffffe, {0x0, 0x0, 0x0, r10, 0x433c1, 0x1190}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 21.478701295s ago: executing program 2 (id=6602): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x20001, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x400c004) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "5addedb9ce44587b", "9e6554273867154585abe540c4c39ab59aecb2bbcfd708b069a444081957b022", "118c225a", "2bde00"}, 0x38) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 18.319670714s ago: executing program 2 (id=6603): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000002200), &(0x7f0000002240)={'fscrypt:', @auto=[0x65, 0x34, 0x62, 0x66, 0x32, 0x38, 0x61, 0x31, 0x33, 0x37, 0x39, 0x63, 0x34, 0x38, 0x61]}, &(0x7f0000002280)={0x0, "b813681501ece055d6df88d3ee224b878d444d51c97891f7df84e3a4eb8bc1707933ef7897bffa8ede50da90285b2e10f51643a22081fa09e62f4fe1fac02504", 0x36}, 0x48, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f00000021c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', ':@%', 0x20, 0x0, 0x20, [0x37]}, 0x2e, r2) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c80)=""/157, 0x9d}], 0x1}, 0x6}], 0x2, 0x28101, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="2bb51e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r4, &(0x7f000001a240)=""/102388, 0x18ff4, 0x100008) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000000)={0x2, @pix_mp={0x80000001, 0x80000000, 0x55595659, 0x1, 0x4, [{0x1, 0x5}, {0x200, 0x6}, {0xa531, 0xf}, {0x80000001, 0x7}, {0x5, 0x8001}, {0x0, 0x3b5600f8}, {0x10001, 0x800}, {0xe, 0x8}], 0xb, 0xff, 0x0, 0x1, 0x4}}) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000340)={{0x0, 0x1}, {0x4}, 0xbf000000, 0x5}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x1411, 0x801, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000100)={0x48, @tick=0xf, 0xe3, {0x1, 0x3}, 0x6}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="000e460000002ece"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00003de000/0x1000)=nil, 0x1000, 0x200000d, 0x20010, 0xffffffffffffffff, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15.156852298s ago: executing program 2 (id=6604): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000640)={@val={0x8, 0x806}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2d9, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}, 0x2e7) 12.011066381s ago: executing program 33 (id=6586): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908001400000055090100000000009500000000000000000000008500000007000000b70000000000000095000000000000005ff2f3084b0a7de29a38f57c1e7aa3fe8c9fe7abc05b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/217, 0x2, 0x2}}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 9.845360216s ago: executing program 34 (id=6592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000019380)=""/84, &(0x7f0000019080)=0x54) (async) syz_emit_ethernet(0x72, &(0x7f0000019140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602d5a00003c3c0020010000000000000000000000000002fe8000000000000000645bff6071b7ea966a2cf1000000000000aa330400000000000007080000000000000000c910ff02000000000000000000000000000105e1000000004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) listen(0xffffffffffffffff, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f00000191c0)='net/nf_conntrack_expect\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x7, 0x0, 0xff, 0x0, 0x79, 0x1, 0x1]}}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r9 = getpid() move_pages(r9, 0x6, &(0x7f0000019480)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f00000190c0)=[0x3, 0x5, 0x7, 0x3, 0x0], &(0x7f0000019100)=[0x0, 0x0], 0x6) (async) syz_usb_control_io$printer(r8, 0x0, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000180)={r10}) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000280)={0x24, &(0x7f0000019400)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX=r9, @ANYRES64=r10, @ANYRESHEX=r6, @ANYRES8=r6, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESHEX=r6, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="20066900832003"], 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r12 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x102, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xd4, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x21, &(0x7f0000019200)=ANY=[@ANYBLOB="18000000c7ff000000000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa20000000000000702001e00567375308f038300f8ffffffb703000008000000b70400000200000085000000820000009500000000000000186b00000d00000000000000040000008520000003000000b7080000000000007b8af8ff00000000b70800004b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x11, 0x0, &(0x7f0000000140), 0x41000, 0x48, '\x00', r11, 0x1b, r12, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0x5, 0x100}, 0x10, r13, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x2, 0x3}, {0x5, 0x3, 0x0, 0x3}], 0x10, 0x3, @void, @value}, 0x94) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r14, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000001000000ff010000040000002ecd00f37fffffe300000000"]) 8.514847009s ago: executing program 35 (id=6600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0x0, '.\x00'}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000bde72d50183100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b70200001400", @ANYRES32=r2, @ANYRESHEX, @ANYRES16=r1, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008580453010011000000010902"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165", 0xc) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8916, &(0x7f0000000580)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4010, r7, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) write$binfmt_aout(r7, 0x0, 0xffffffdb) pread64(r5, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000b00)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r10, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) 6.523479996s ago: executing program 36 (id=6601): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908001400000055090100000000009500000000000000000000008500000007000000b70000000000000095000000000000005ff2f3084b0a7de29a38f57c1e7aa3fe8c9fe7abc05b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000708000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/217, 0x2, 0x2}}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) eventfd2(0x1, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x439, 0xfffffffe, 0xfffffffe, {0x0, 0x0, 0x0, r10, 0x433c1, 0x1190}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 37 (id=6604): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000640)={@val={0x8, 0x806}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2d9, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}, 0x2e7) kernel console output (not intermixed with test programs): directory [ 1770.477109][ T5844] Bluetooth: hci0: command tx timeout [ 1770.667651][T26803] tipc: Enabling of bearer rejected, failed to enable media [ 1771.714088][T24997] batadv0: left promiscuous mode [ 1771.872227][T24997] hsr_slave_0: left promiscuous mode [ 1771.911100][T24997] hsr_slave_1: left promiscuous mode [ 1771.948429][T24997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.999024][T24997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.452611][T26820] Cannot find add_set index 0 as target [ 1773.342415][T26829] --map-set only usable from mangle table [ 1775.969357][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1775.982768][T26700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1776.058137][T26700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1776.123957][T26700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1776.175266][T26700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1776.304846][T24997] IPVS: stop unused estimator thread 0... [ 1776.984648][T26700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.045312][T26700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.089337][T20336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.096601][T20336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.120877][T20336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.128218][T20336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.527817][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1777.547285][T26872] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1777.568867][T26877] program syz.2.6102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1777.579787][T26877] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1777.589738][T26877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1777.657767][T26872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1777.738283][T26700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1778.053031][T26700] veth0_vlan: entered promiscuous mode [ 1778.138333][T26867] delete_channel: no stack [ 1778.164382][T26700] veth1_vlan: entered promiscuous mode [ 1778.350376][T26700] veth0_macvtap: entered promiscuous mode [ 1778.394015][T26700] veth1_macvtap: entered promiscuous mode [ 1778.441250][T26892] random: crng reseeded on system resumption [ 1778.468842][T26700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.511755][T26700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.515539][T26892] xt_hashlimit: size too large, truncated to 1048576 [ 1778.528040][T26700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.546804][T26700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.556969][T26892] xt_hashlimit: overflow, try lower: 9223336852482686975/36028797018968064 [ 1778.567987][T26700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.584715][T26700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.799684][T25001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.835308][T25001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.911071][T20336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.936695][T20336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.226688][T25458] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1780.362513][T26919] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1780.396331][T25458] usb 6-1: device descriptor read/64, error -71 [ 1780.429379][T26919] tipc: Started in network mode [ 1780.444789][T26919] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1780.469868][T26919] tipc: Enabled bearer , priority 0 [ 1780.476332][T26921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6118'. [ 1780.636811][T25458] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1780.671566][T25280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1780.683461][T25280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1780.692783][T25280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1780.711851][T25280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1780.731424][T25280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1780.796719][T25458] usb 6-1: device descriptor read/64, error -71 [ 1780.846984][T26928] loop2: detected capacity change from 0 to 6 [ 1780.882074][ T5208] buffer_io_error: 14 callbacks suppressed [ 1780.882095][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1780.917300][T25458] usb usb6-port1: attempt power cycle [ 1780.917944][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1780.934573][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.007151][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.015200][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.032854][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.045352][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.060325][ T5208] ldm_validate_partition_table(): Disk read failed. [ 1781.081939][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.099458][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.119589][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1781.128128][ T5208] Dev loop6: unable to read RDB block 0 [ 1781.138728][ T5208] loop6: unable to read partition table [ 1781.145298][ T5208] loop6: partition table beyond EOD, truncated [ 1781.266531][T17813] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1781.276731][T25458] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1781.317595][T25458] usb 6-1: device descriptor read/8, error -71 [ 1781.448095][T17813] usb 4-1: Using ep0 maxpacket: 32 [ 1781.473762][T17813] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 1781.510649][T17813] usb 4-1: config 4 has no interface number 0 [ 1781.539534][T17813] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.556608][T25458] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1781.582721][T17813] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.592916][T25545] tipc: Node number set to 11578026 [ 1781.609289][T25458] usb 6-1: device descriptor read/8, error -71 [ 1781.629162][T17813] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1781.683322][T17813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.740941][T25458] usb usb6-port1: unable to enumerate USB device [ 1781.770865][T17813] hub 4-1:4.128: USB hub found [ 1781.975996][T17813] hub 4-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 1782.110696][T26942] --map-set only usable from mangle table [ 1782.797758][ T5844] Bluetooth: hci1: command tx timeout [ 1783.025268][T25001] bridge0 (unregistering): left promiscuous mode [ 1783.253981][T25001] bond0 (unregistering): Released all slaves [ 1783.267471][T17842] usb 4-1: USB disconnect, device number 54 [ 1783.303694][T26926] chnl_net:caif_netlink_parms(): no params data found [ 1783.810876][T26926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.856907][T26926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.880167][T26926] bridge_slave_0: entered allmulticast mode [ 1783.927514][T26926] bridge_slave_0: entered promiscuous mode [ 1783.969550][T26926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.007837][T26926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.031949][T26926] bridge_slave_1: entered allmulticast mode [ 1784.068474][T26926] bridge_slave_1: entered promiscuous mode [ 1784.122866][T25001] batadv0: left promiscuous mode [ 1784.194178][T25001] hsr_slave_0: left promiscuous mode [ 1784.235921][T25001] hsr_slave_1: left promiscuous mode [ 1784.411784][T25001] pim6reg (unregistering): left allmulticast mode [ 1784.877112][ T5844] Bluetooth: hci1: command tx timeout [ 1785.228466][T26989] --map-set only usable from mangle table [ 1785.301602][T26991] netlink: 'syz.5.6136': attribute type 10 has an invalid length. [ 1786.163064][T26991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.233273][T26991] bond0: entered promiscuous mode [ 1786.245681][T26991] bond_slave_0: entered promiscuous mode [ 1786.292248][T26991] bond_slave_1: entered promiscuous mode [ 1786.340638][T26991] team0: Port device bond0 added [ 1786.433574][T26926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.478125][T26926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.525957][T26997] veth0_to_team: entered promiscuous mode [ 1786.554999][T26997] veth0_to_team: entered allmulticast mode [ 1786.879773][T26926] team0: Port device team_slave_0 added [ 1786.967467][T25280] Bluetooth: hci1: command tx timeout [ 1786.992585][T26926] team0: Port device team_slave_1 added [ 1787.153847][T26926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.161236][T26926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.191556][T26926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.227307][T27012] team_slave_0: entered promiscuous mode [ 1787.233076][T27012] team_slave_1: entered promiscuous mode [ 1787.240307][T27012] vlan2: entered promiscuous mode [ 1787.245769][T27012] team0: entered promiscuous mode [ 1787.421717][T26926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.540424][T26926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.581594][T26926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.916702][T26926] hsr_slave_0: entered promiscuous mode [ 1787.923655][T26926] hsr_slave_1: entered promiscuous mode [ 1787.988043][T27031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1787.997928][T27031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1788.140419][T27031] veth0: entered promiscuous mode [ 1788.172508][T27031] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1788.188735][ T30] kauditd_printk_skb: 2496 callbacks suppressed [ 1788.188756][ T30] audit: type=1326 audit(1749951565.772:34671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.196923][T27031] Cannot create hsr debugfs directory [ 1788.231951][ T30] audit: type=1326 audit(1749951565.772:34672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.267259][T27036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1788.305862][ T30] audit: type=1326 audit(1749951565.772:34673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.390170][ T30] audit: type=1326 audit(1749951565.772:34674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.422747][T25545] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1788.467045][ T30] audit: type=1326 audit(1749951565.772:34675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.573785][ T30] audit: type=1326 audit(1749951565.772:34676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.616463][T25545] usb 6-1: Using ep0 maxpacket: 16 [ 1788.627498][T25545] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1788.636571][T25545] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1788.643321][T25280] Bluetooth: hci4: command 0x0406 tx timeout [ 1788.676733][ T30] audit: type=1326 audit(1749951565.772:34677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.704745][T25545] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1788.707462][ T30] audit: type=1326 audit(1749951565.772:34678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.736408][ T30] audit: type=1326 audit(1749951565.772:34679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.764145][ T30] audit: type=1326 audit(1749951565.772:34680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27020 comm="syz.4.6145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e558 code=0x7ffc0000 [ 1788.775610][T25545] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1788.851316][T25545] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1788.872568][T25545] usb 6-1: config 0 has no interface number 0 [ 1788.891459][T25545] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1788.916388][T25545] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1788.982996][T25545] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1789.028014][T25545] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1789.037026][ T5844] Bluetooth: hci1: command tx timeout [ 1789.150802][T25545] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1789.170404][T25545] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1789.196370][T25545] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1789.208731][T25545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.226559][T25545] usb 6-1: Product: syz [ 1789.254732][T25545] usb 6-1: Manufacturer: syz [ 1789.283440][T25545] usb 6-1: SerialNumber: syz [ 1789.324299][T25545] usb 6-1: config 0 descriptor?? [ 1789.359082][T25545] usb 6-1: selecting invalid altsetting 2 [ 1789.969942][T19993] hid-generic 00A0:0008:0003.0038: unknown main item tag 0x0 [ 1790.056014][T27056] Cannot find add_set index 0 as target [ 1790.133230][T19993] hid-generic 00A0:0008:0003.0038: unknown main item tag 0x3 [ 1790.172732][T19993] hid-generic 00A0:0008:0003.0038: unknown main item tag 0x0 [ 1790.212815][T19993] hid-generic 00A0:0008:0003.0038: unknown main item tag 0x0 [ 1790.426848][T19993] hid-generic 00A0:0008:0003.0038: unknown main item tag 0x0 [ 1790.427240][T25545] get_1284_register timeout [ 1790.434438][T19993] hid-generic 00A0:0008:0003.0038: collection stack underflow [ 1790.476354][T25545] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 1790.476446][ C0] usb 6-1: async_complete: urb error -104 [ 1790.476897][T19993] hid-generic 00A0:0008:0003.0038: item 0 0 0 12 parsing failed [ 1790.484497][ C0] usb 6-1: async_complete: urb error -104 [ 1790.503879][ C0] usb 6-1: async_complete: urb error -104 [ 1790.509702][ C0] vkms_vblank_simulate: vblank timer overrun [ 1790.518493][T19993] hid-generic 00A0:0008:0003.0038: probe with driver hid-generic failed with error -22 [ 1790.599211][T26926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1790.634310][T25545] usb 6-1: USB disconnect, device number 35 [ 1790.685254][T26926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1790.779400][T26926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1790.835190][T26926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1791.056928][T27075] (unnamed net_device) (uninitialized): option mode: invalid value (186) [ 1791.260335][T26926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.403900][T26926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.469873][T24997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.477173][T24997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.538601][T12154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.545924][T12154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.715258][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.723082][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.944640][T27087] veth0_to_team: entered promiscuous mode [ 1791.957087][T27089] delete_channel: no stack [ 1791.963231][T27087] veth0_to_team: entered allmulticast mode [ 1792.113368][T26926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.290880][T27093] binder: BINDER_SET_CONTEXT_MGR already set [ 1792.325995][T27093] binder: 27092:27093 ioctl 4018620d 80000040 returned -16 [ 1792.329055][T26926] veth0_vlan: entered promiscuous mode [ 1792.607569][T26926] veth1_vlan: entered promiscuous mode [ 1792.935513][T27093] fuse: Bad value for 'fd' [ 1793.230579][T26926] veth0_macvtap: entered promiscuous mode [ 1793.266462][T26926] veth1_macvtap: entered promiscuous mode [ 1793.382602][T26926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.429367][T26926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.481547][T26926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.510740][T26926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.551518][T26926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.575853][T26926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.113075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.126533][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.419312][ T7583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.437862][ T7583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.956973][T17842] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1795.094177][T27136] fuse: Unknown parameter 'groŸ©xBCK8|X_£‘–up_id' [ 1795.117024][T17842] usb 3-1: Using ep0 maxpacket: 32 [ 1795.143992][T17842] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1795.183682][T17842] usb 3-1: config 4 has no interface number 0 [ 1795.216487][T17842] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.250387][T17842] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.295838][T17842] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1795.310575][T27112] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1795.320531][T27112] tipc: Started in network mode [ 1795.325456][T27112] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1795.353023][T17842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.372480][T27112] tipc: Enabled bearer , priority 17 [ 1795.394719][T27133] ªªªªªª: renamed from vlan0 (while UP) [ 1795.431835][T17842] hub 3-1:4.128: USB hub found [ 1795.465223][T27133] tipc: Disabling bearer [ 1795.680594][T17842] hub 3-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 1795.831769][T27143] delete_channel: no stack [ 1797.332907][T27146] Cannot find add_set index 0 as target [ 1797.368678][T25280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1797.380618][T25280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1797.397994][T25280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1797.417905][T25280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1797.437032][T25280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1798.700652][T27168] chnl_net:caif_netlink_parms(): no params data found [ 1799.109014][T27187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6175'. [ 1799.227190][T19993] usb 3-1: USB disconnect, device number 91 [ 1799.359521][T27168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.406555][T27168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.426470][T27168] bridge_slave_0: entered allmulticast mode [ 1799.453870][T27168] bridge_slave_0: entered promiscuous mode [ 1799.480960][T27193] hsr0: entered promiscuous mode [ 1799.516998][T25280] Bluetooth: hci2: command tx timeout [ 1799.608439][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1799.703756][T27168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.737481][T27168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.773958][T27168] bridge_slave_1: entered allmulticast mode [ 1799.796523][T27168] bridge_slave_1: entered promiscuous mode [ 1799.815090][T27202] delete_channel: no stack [ 1800.043734][T27168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.101664][T27168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.138423][T27210] binder: 27209:27210 ioctl 400c620e 0 returned -14 [ 1800.242848][ T30] kauditd_printk_skb: 772 callbacks suppressed [ 1800.242870][ T30] audit: type=1800 audit(1749951577.822:35453): pid=27216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6181" name="file2" dev="tmpfs" ino=39 res=0 errno=0 [ 1800.348003][T27168] team0: Port device team_slave_0 added [ 1800.369802][T27168] team0: Port device team_slave_1 added [ 1800.525647][T27168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.546181][T27168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.596259][T27168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.609609][T27168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.627474][T27168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.699841][T27168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.005296][T27230] loop2: detected capacity change from 0 to 7 [ 1801.051498][T27230] Dev loop2: unable to read RDB block 7 [ 1801.073367][T27168] hsr_slave_0: entered promiscuous mode [ 1801.095253][T27230] loop2: unable to read partition table [ 1801.105602][T27230] loop2: partition table beyond EOD, truncated [ 1801.115804][T27168] hsr_slave_1: entered promiscuous mode [ 1801.130877][T27230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1801.147289][T27168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1801.150135][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6186'. [ 1801.175592][T27168] Cannot create hsr debugfs directory [ 1801.488533][T27240] loop2: detected capacity change from 0 to 7 [ 1801.525752][T27062] Dev loop2: unable to read RDB block 7 [ 1801.541042][T27062] loop2: unable to read partition table [ 1801.572731][T27062] loop2: partition table beyond EOD, truncated [ 1801.612338][T25280] Bluetooth: hci2: command tx timeout [ 1801.620954][T27240] Dev loop2: unable to read RDB block 7 [ 1801.628160][T27240] loop2: unable to read partition table [ 1801.634085][T27240] loop2: partition table beyond EOD, truncated [ 1801.706905][T27240] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1801.776267][T25545] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1801.946491][T25545] usb 3-1: Using ep0 maxpacket: 8 [ 1801.974840][T25545] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1802.000667][T25545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.017718][T25545] usb 3-1: Product: syz [ 1802.036235][T25545] usb 3-1: Manufacturer: syz [ 1802.051148][T25545] usb 3-1: SerialNumber: syz [ 1802.071776][T25545] usb 3-1: config 0 descriptor?? [ 1802.099479][T25545] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1802.247542][T27252] delete_channel: no stack [ 1802.519198][T25545] gspca_sq930x: ucbus_write failed -71 [ 1802.549969][T27258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1802.594565][T27258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1802.617346][T27258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1802.642193][T27258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1802.695762][T27168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1802.711334][T27168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1802.741846][T27168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1802.756228][T25545] gspca_sq930x: Sensor ov9630 not yet treated [ 1802.762543][T25545] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1802.782987][T25545] usb 3-1: USB disconnect, device number 92 [ 1802.800482][T27168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1803.069334][T27168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.119442][T27168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.207716][T24997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.214941][T24997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1803.235292][T24997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.242565][T24997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1803.551282][T27168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1803.677684][T25280] Bluetooth: hci2: command tx timeout [ 1803.890577][T27282] team_slave_1 (unregistering): left promiscuous mode [ 1803.912898][T27282] team0: Port device team_slave_1 removed [ 1803.955995][T24997] tipc: Resetting bearer [ 1804.019263][T27168] veth0_vlan: entered promiscuous mode [ 1804.147853][T27168] veth1_vlan: entered promiscuous mode [ 1804.210933][ T30] audit: type=1326 audit(1749951581.792:35454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1804.278705][ T30] audit: type=1326 audit(1749951581.792:35455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1804.331782][ T30] audit: type=1326 audit(1749951581.792:35456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1804.478823][ T30] audit: type=1326 audit(1749951581.792:35457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1804.501819][T27168] veth0_macvtap: entered promiscuous mode [ 1804.525641][T27168] veth1_macvtap: entered promiscuous mode [ 1804.661944][T27168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1804.701174][T27168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1804.872169][T27168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.934724][T27168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.209374][ T30] audit: type=1326 audit(1749951581.792:35458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.236488][T27168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.245341][T27168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.396713][ T30] audit: type=1326 audit(1749951581.792:35459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.500949][ T30] audit: type=1326 audit(1749951581.792:35460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.610179][ T30] audit: type=1326 audit(1749951581.792:35461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.740130][ T30] audit: type=1326 audit(1749951581.792:35462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.769290][T25280] Bluetooth: hci2: command tx timeout [ 1805.804760][ T30] audit: type=1326 audit(1749951581.792:35463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.828480][ T30] audit: type=1326 audit(1749951581.792:35464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1805.977690][T27304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1806.000344][ T7584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.037592][ T7584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.082724][ T30] audit: type=1326 audit(1749951581.792:35465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1806.249821][T12154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.270252][T12154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.287739][ T30] audit: type=1326 audit(1749951581.792:35466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1806.314058][ T30] audit: type=1326 audit(1749951581.792:35467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1806.340768][ T30] audit: type=1326 audit(1749951581.792:35468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27275 comm="syz.5.6194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff6558 code=0x7ffc0000 [ 1806.916784][T25545] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1806.962122][T17814] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1807.076846][T17842] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1807.081138][T25545] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1807.147635][T25545] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.171497][T17814] usb 3-1: Using ep0 maxpacket: 16 [ 1807.245105][T17814] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.246986][T17842] usb 4-1: Using ep0 maxpacket: 32 [ 1807.263238][T25545] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1807.297276][T17842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1807.316949][T17814] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.316966][T17842] usb 4-1: can't read configurations, error -61 [ 1807.345639][T25545] usb 5-1: config 1 has no interface number 0 [ 1807.379748][T25545] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1807.413317][T17814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1807.433934][T17814] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1807.444145][T25545] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1807.457242][T17842] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1807.535940][T17814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.552384][T25545] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1807.597782][T25545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.617044][T17842] usb 4-1: Using ep0 maxpacket: 32 [ 1807.633169][T17814] usb 3-1: config 0 descriptor?? [ 1807.648717][T17842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1807.656028][T25545] usb 5-1: Product: syz [ 1807.705039][T25545] usb 5-1: Manufacturer: syz [ 1807.713325][T17842] usb 4-1: can't read configurations, error -61 [ 1807.720871][T25545] usb 5-1: SerialNumber: syz [ 1807.767229][T17842] usb usb4-port1: attempt power cycle [ 1807.876746][T19993] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1808.088034][T19993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1808.132960][T19993] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1808.164256][T19993] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1808.206948][T17842] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1808.224025][T27325] netlink: 'syz.0.6207': attribute type 3 has an invalid length. [ 1808.236892][T19993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1808.245854][T19993] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1808.272482][T17842] usb 4-1: Using ep0 maxpacket: 32 [ 1808.272501][T25545] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1808.308759][T17814] usb 3-1: USB disconnect, device number 93 [ 1808.379973][T17842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1808.397177][T19993] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1808.416676][T17842] usb 4-1: can't read configurations, error -61 [ 1808.453258][T19993] usb 6-1: string descriptor 0 read error: -22 [ 1808.469980][T19993] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1808.485394][T25545] usb 5-1: USB disconnect, device number 89 [ 1808.516927][T19993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.548410][T27322] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1808.562642][T19993] usb 6-1: 0:2 : does not exist [ 1808.568175][T17842] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1808.577015][T27327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6208'. [ 1808.594575][T27327] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1808.617458][T17842] usb 4-1: Using ep0 maxpacket: 32 [ 1808.632382][T17842] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1808.663181][T17842] usb 4-1: can't read configurations, error -61 [ 1808.680255][T17842] usb usb4-port1: unable to enumerate USB device [ 1808.841450][T17842] usb 6-1: USB disconnect, device number 36 [ 1808.862775][T27328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1809.196512][T25545] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1809.387057][T25545] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1809.435791][T25545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1809.517075][T25545] usb 5-1: Product: syz [ 1809.521329][T25545] usb 5-1: Manufacturer: syz [ 1809.525961][T25545] usb 5-1: SerialNumber: syz [ 1809.581669][T27338] syz.2.6212 (27338): drop_caches: 2 [ 1809.605513][T27341] netlink: 'syz.5.6213': attribute type 32 has an invalid length. [ 1809.619423][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6213'. [ 1809.641019][T25545] usb 5-1: config 0 descriptor?? [ 1809.651401][T27341] netlink: 'syz.5.6213': attribute type 32 has an invalid length. [ 1809.669907][T25545] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1809.696635][T25545] dvb-usb: bulk message failed: -22 (2/0) [ 1809.738176][T25545] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1809.774163][T27337] syz.2.6212 (27337): drop_caches: 2 [ 1809.799249][T25545] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1809.832959][T25545] usb 5-1: media controller created [ 1809.839410][T27337] syz.2.6212 (27337): drop_caches: 2 [ 1809.921463][T25545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1809.968169][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1810.081629][T25545] DVB: Unable to find symbol mt352_attach() [ 1810.096698][T25545] dvb-usb: bulk message failed: -22 (5/0) [ 1810.103036][T25545] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1810.120882][T25545] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1810.124809][T27354] loop2: detected capacity change from 0 to 7 [ 1810.138871][T26854] Dev loop2: unable to read RDB block 7 [ 1810.144520][T26854] loop2: unable to read partition table [ 1810.153111][T26854] loop2: partition table beyond EOD, truncated [ 1810.173103][T27354] Dev loop2: unable to read RDB block 7 [ 1810.185404][T27331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.188955][T27354] loop2: unable to read partition table [ 1810.201672][T27354] loop2: partition table beyond EOD, truncated [ 1810.203926][T27331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.209557][T27354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1810.226702][T25545] rc_core: IR keymap rc-dvico-mce not found [ 1810.232780][T25545] Registered IR keymap rc-empty [ 1810.255368][T25545] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1810.274966][T25545] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input163 [ 1810.288792][T25545] dvb-usb: schedule remote query interval to 100 msecs. [ 1810.301065][T25545] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1810.406875][T27360] netlink: 'syz.5.6219': attribute type 1 has an invalid length. [ 1810.410315][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1810.452094][T27360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1810.536355][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1810.656411][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1810.795867][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1810.868734][T27323] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1810.929250][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.030188][T27323] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1811.041324][T27323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.054019][T27323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1811.056196][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.065215][T27323] usb 4-1: config 1 has no interface number 0 [ 1811.084143][T27323] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1811.101906][T27323] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1811.125064][T27323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1811.135427][T27323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.162975][T27323] usb 4-1: Product: syz [ 1811.181278][T27323] usb 4-1: Manufacturer: syz [ 1811.191039][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.195227][T27323] usb 4-1: SerialNumber: syz [ 1811.265082][T27369] tipc: Enabling of bearer rejected, already enabled [ 1811.326462][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.446670][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.559812][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.622061][T27323] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1811.647561][T27323] usb 4-1: USB disconnect, device number 59 [ 1811.696485][T25545] dvb-usb: bulk message failed: -22 (1/0) [ 1811.980543][T25545] usb 5-1: USB disconnect, device number 90 [ 1812.141433][T25545] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1813.116998][T27383] lo: entered allmulticast mode [ 1813.177662][T27382] lo: left allmulticast mode [ 1813.539112][T27391] bond_slave_0: entered promiscuous mode [ 1813.544876][T27391] bond_slave_1: entered promiscuous mode [ 1813.638439][T27391] vlan2: entered promiscuous mode [ 1813.643568][T27391] bond0: entered promiscuous mode [ 1814.056222][T17814] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1814.174073][T27395] netlink: 'syz.0.6235': attribute type 11 has an invalid length. [ 1814.266642][T17814] usb 5-1: Using ep0 maxpacket: 8 [ 1814.275354][T17814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1814.312606][T17814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1814.347079][T17814] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1814.376428][T17814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1814.417743][T17814] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1814.455346][T17814] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1814.482562][T17814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.516357][T17814] usb 5-1: config 0 descriptor?? [ 1814.619059][T27393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1815.524515][T17814] usb 5-1: USB disconnect, device number 91 [ 1815.527544][T25280] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 1816.425202][T27423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1816.435044][T27423] openvswitch: netlink: Unknown nsh attribute 0 [ 1816.452493][T27423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1816.516547][T27426] FAULT_INJECTION: forcing a failure. [ 1816.516547][T27426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1816.530648][T27426] CPU: 0 UID: 0 PID: 27426 Comm: syz.5.6245 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1816.530677][T27426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1816.530691][T27426] Call Trace: [ 1816.530701][T27426] [ 1816.530711][T27426] dump_stack_lvl+0x189/0x250 [ 1816.530777][T27426] ? __pfx____ratelimit+0x10/0x10 [ 1816.530810][T27426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1816.530843][T27426] ? __pfx__printk+0x10/0x10 [ 1816.530868][T27426] ? fs_reclaim_acquire+0x7d/0x100 [ 1816.530905][T27426] should_fail_ex+0x414/0x560 [ 1816.530938][T27426] prepare_alloc_pages+0x213/0x610 [ 1816.530971][T27426] __alloc_frozen_pages_noprof+0x123/0x370 [ 1816.531004][T27426] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1816.531041][T27426] ? policy_nodemask+0x27c/0x720 [ 1816.531061][T27426] ? __lock_acquire+0xab9/0xd20 [ 1816.531098][T27426] alloc_pages_mpol+0x232/0x4a0 [ 1816.531128][T27426] vma_alloc_folio_noprof+0xe4/0x200 [ 1816.531152][T27426] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 1816.531177][T27426] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1816.531215][T27426] folio_prealloc+0x30/0x180 [ 1816.531240][T27426] __handle_mm_fault+0x2c88/0x5620 [ 1816.531298][T27426] ? __pfx___handle_mm_fault+0x10/0x10 [ 1816.531349][T27426] ? follow_page_pte+0x8d6/0x14b0 [ 1816.531391][T27426] handle_mm_fault+0x40a/0x8e0 [ 1816.531438][T27426] __get_user_pages+0x1af4/0x30b0 [ 1816.531485][T27426] ? __lock_acquire+0xab9/0xd20 [ 1816.531533][T27426] ? __pfx___get_user_pages+0x10/0x10 [ 1816.531567][T27426] ? get_user_pages_unlocked+0xb9/0x740 [ 1816.531598][T27426] ? down_read_killable+0x1d1/0x350 [ 1816.531622][T27426] ? is_valid_gup_args+0x11f/0x200 [ 1816.531655][T27426] get_user_pages_unlocked+0x1e3/0x740 [ 1816.531701][T27426] hva_to_pfn+0x313/0xc90 [ 1816.531733][T27426] ? __pfx_hva_to_pfn+0x10/0x10 [ 1816.531774][T27426] ? xas_start+0x390/0x770 [ 1816.531807][T27426] ? xa_load+0x60/0x210 [ 1816.531837][T27426] ? kvm_follow_pfn+0x21a/0x3c0 [ 1816.531862][T27426] __kvm_faultin_pfn+0xaa/0x100 [ 1816.531892][T27426] kvm_mmu_faultin_pfn+0x765/0x1d10 [ 1816.531935][T27426] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1816.531960][T27426] ? __pfx_fast_page_fault+0x10/0x10 [ 1816.531984][T27426] ? __kvm_mmu_topup_memory_cache+0x31a/0x610 [ 1816.532032][T27426] kvm_tdp_page_fault+0x273/0x370 [ 1816.532064][T27426] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1816.532098][T27426] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1816.532143][T27426] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1816.532183][T27426] kvm_mmu_page_fault+0x22f/0xb70 [ 1816.532220][T27426] ? __pfx_handle_ept_violation+0x10/0x10 [ 1816.532245][T27426] vmx_handle_exit+0x1090/0x18a0 [ 1816.532280][T27426] ? vcpu_run+0x361c/0x6f70 [ 1816.532320][T27426] vcpu_run+0x432e/0x6f70 [ 1816.532365][T27426] ? vcpu_run+0x361c/0x6f70 [ 1816.532443][T27426] ? __pfx_vcpu_run+0x10/0x10 [ 1816.532474][T27426] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1816.532507][T27426] ? rcu_is_watching+0x15/0xb0 [ 1816.532546][T27426] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1816.532584][T27426] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1816.532607][T27426] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1816.532628][T27426] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1816.532660][T27426] ? rcu_is_watching+0x15/0xb0 [ 1816.532694][T27426] ? trace_contention_end+0x39/0x120 [ 1816.532718][T27426] ? __mutex_lock+0x330/0xe80 [ 1816.532756][T27426] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1816.532782][T27426] ? __pfx___mutex_lock+0x10/0x10 [ 1816.532812][T27426] ? kasan_quarantine_put+0xdd/0x220 [ 1816.532858][T27426] kvm_vcpu_ioctl+0x95c/0xe90 [ 1816.532888][T27426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1816.532911][T27426] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1816.532958][T27426] ? __lock_acquire+0xab9/0xd20 [ 1816.533010][T27426] kvm_vcpu_compat_ioctl+0x203/0x390 [ 1816.533038][T27426] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1816.533063][T27426] ? __fget_files+0x3a0/0x420 [ 1816.533087][T27426] ? __fget_files+0x2a/0x420 [ 1816.533117][T27426] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1816.533155][T27426] __ia32_compat_sys_ioctl+0x543/0x840 [ 1816.533193][T27426] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1816.533250][T27426] ? __fget_files+0x3a0/0x420 [ 1816.533281][T27426] ? fput+0xa0/0xd0 [ 1816.533309][T27426] ? ksys_write+0x22a/0x250 [ 1816.533338][T27426] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1816.533373][T27426] ? lockdep_hardirqs_on+0x9c/0x150 [ 1816.533409][T27426] __do_fast_syscall_32+0xb6/0x2b0 [ 1816.533431][T27426] ? lockdep_hardirqs_on+0x9c/0x150 [ 1816.533467][T27426] do_fast_syscall_32+0x34/0x80 [ 1816.533489][T27426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1816.533515][T27426] RIP: 0023:0xf7ff6539 [ 1816.533534][T27426] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1816.533553][T27426] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1816.533575][T27426] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 1816.533590][T27426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1816.533602][T27426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1816.533613][T27426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1816.533625][T27426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1816.533655][T27426] [ 1816.547027][T19993] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1817.115307][T27433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6248'. [ 1817.134305][T27433] xfrm1: entered promiscuous mode [ 1817.141268][T27433] xfrm1: entered allmulticast mode [ 1817.226760][T19993] usb 3-1: device descriptor read/64, error -71 [ 1817.459184][T27445] netlink: 'syz.5.6253': attribute type 3 has an invalid length. [ 1817.486853][T19993] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1817.557152][T25545] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1817.630677][T19993] usb 3-1: device descriptor read/64, error -71 [ 1817.706569][T25545] usb 5-1: Using ep0 maxpacket: 16 [ 1817.714340][T25545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.725785][T25545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.738823][T25545] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1817.748481][T25545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.748865][T19993] usb usb3-port1: attempt power cycle [ 1817.769677][T25545] usb 5-1: config 0 descriptor?? [ 1817.991712][T25545] corsair 0003:1B1C:1B02.003A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 1818.119399][T19993] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1818.147482][T19993] usb 3-1: device descriptor read/8, error -71 [ 1818.187089][T25545] corsair 0003:1B1C:1B02.003A: Failed to get K90 initial state (error -71). [ 1818.208184][T25545] usb 5-1: USB disconnect, device number 92 [ 1818.388579][T19993] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1818.418248][T19993] usb 3-1: device descriptor read/8, error -71 [ 1818.496698][T27323] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1818.537055][T19993] usb usb3-port1: unable to enumerate USB device [ 1818.653638][T27323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1818.662632][T27323] usb 4-1: not running at top speed; connect to a high speed hub [ 1818.672579][T27323] usb 4-1: config index 0 descriptor too short (expected 24850, got 18) [ 1818.681490][T27323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.692168][T27323] usb 4-1: config 0 has no interfaces? [ 1818.700955][T27323] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=2a.9c [ 1818.710844][T27323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.719605][T27323] usb 4-1: Product: syz [ 1818.723831][T27323] usb 4-1: Manufacturer: syz [ 1818.729148][T27323] usb 4-1: SerialNumber: syz [ 1818.747567][T27323] usb 4-1: config 0 descriptor?? [ 1818.967760][T27323] usb 4-1: USB disconnect, device number 60 [ 1819.188972][T27473] xt_CT: No such helper "snmp" [ 1819.197211][T25545] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1819.361399][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1819.376719][T25545] usb 6-1: Using ep0 maxpacket: 32 [ 1819.387060][T25545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1819.398600][T25545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1819.418402][T25545] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1819.459139][T25545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.480880][T25545] usb 6-1: Product: syz [ 1819.489067][T25545] usb 6-1: Manufacturer: syz [ 1819.499233][T25545] usb 6-1: SerialNumber: syz [ 1819.510482][T25545] usb 6-1: config 0 descriptor?? [ 1819.519620][T25458] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1819.606408][T25545] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1819.748697][T25458] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1819.791496][T25458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.805988][T25458] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1819.816173][T25458] usb 5-1: config 1 has no interface number 0 [ 1819.825197][T25458] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1819.856994][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1819.857011][ T30] audit: type=1326 audit(1749951597.422:35525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1819.888611][T25458] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1819.918725][ T30] audit: type=1326 audit(1749951597.422:35526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1819.943002][ T30] audit: type=1326 audit(1749951597.422:35527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1819.943671][T25458] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1819.976288][T25458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.986356][T25458] usb 5-1: Product: syz [ 1819.990608][T25458] usb 5-1: Manufacturer: syz [ 1819.995311][T25458] usb 5-1: SerialNumber: syz [ 1820.025166][ T30] audit: type=1326 audit(1749951597.422:35528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.059253][T27486] --map-set only usable from mangle table [ 1820.105166][ T30] audit: type=1326 audit(1749951597.422:35529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.138413][T12827] usb 6-1: USB disconnect, device number 37 [ 1820.145781][ T7583] usb 6-1: Failed to submit usb control message: -71 [ 1820.159932][ T7583] usb 6-1: unable to send the bmi data to the device: -71 [ 1820.174781][ T7583] usb 6-1: unable to get target info from device [ 1820.182335][ T7583] usb 6-1: could not get target info (-71) [ 1820.205822][ T7583] usb 6-1: could not probe fw (-71) [ 1820.213486][ T30] audit: type=1326 audit(1749951597.422:35530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.350971][ T30] audit: type=1326 audit(1749951597.472:35531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27485 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.390797][ T30] audit: type=1326 audit(1749951597.632:35532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27485 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.443255][T25458] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1820.447766][ T30] audit: type=1326 audit(1749951597.632:35533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.484322][T25458] usb 5-1: USB disconnect, device number 93 [ 1820.529291][ T30] audit: type=1326 audit(1749951597.632:35534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.5.6262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1820.957735][T27497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6270'. [ 1821.362449][T27505] loop2: detected capacity change from 0 to 6 [ 1821.386455][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6272'. [ 1821.403663][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6272'. [ 1821.409905][ T5208] buffer_io_error: 14 callbacks suppressed [ 1821.409929][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.464052][T27506] tipc: Enabled bearer , priority 0 [ 1821.497073][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.505139][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.544378][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.567118][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.579584][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.598072][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.619883][ T5208] ldm_validate_partition_table(): Disk read failed. [ 1821.639589][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.659224][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.683479][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1821.695872][ T5208] Dev loop6: unable to read RDB block 0 [ 1821.705440][ T5208] loop6: unable to read partition table [ 1821.715800][ T5208] loop6: partition table beyond EOD, truncated [ 1821.837182][T25458] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1822.026416][T25458] usb 4-1: Using ep0 maxpacket: 32 [ 1822.051244][T25458] usb 4-1: config 1 has an invalid interface number: 233 but max is 0 [ 1822.066135][T25458] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1822.074903][T25458] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.089378][T25458] usb 4-1: config 1 has no interface number 0 [ 1822.095666][T25458] usb 4-1: config 1 interface 233 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1822.109636][T25458] usb 4-1: config 1 interface 233 has no altsetting 0 [ 1822.119791][T25458] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 1822.129327][T25458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.140862][T19993] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1822.141498][T25458] usb 4-1: Product: syz [ 1822.153170][T25458] usb 4-1: Manufacturer: syz [ 1822.158473][T25458] usb 4-1: SerialNumber: syz [ 1822.286849][T19993] usb 5-1: device descriptor read/64, error -71 [ 1822.371290][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6275'. [ 1822.386857][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6275'. [ 1822.415360][T27510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.433301][T27510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.459596][T25458] imon_raw 4-1:1.233: IR endpoint missing [ 1822.467367][T17813] tipc: Node number set to 10005162 [ 1822.486858][T25458] usb 4-1: USB disconnect, device number 61 [ 1822.526975][T19993] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1822.676795][T19993] usb 5-1: device descriptor read/64, error -71 [ 1822.801716][T19993] usb usb5-port1: attempt power cycle [ 1822.882239][T27524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6280'. [ 1823.156820][T19993] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1823.177599][T19993] usb 5-1: device descriptor read/8, error -71 [ 1823.208097][T27529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1823.417387][T19993] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1823.457683][T19993] usb 5-1: device descriptor read/8, error -71 [ 1823.490908][T27533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1823.587186][T19993] usb usb5-port1: unable to enumerate USB device [ 1823.613000][T27533] veth3: entered promiscuous mode [ 1823.635330][T27533] bridge2: port 1(veth3) entered blocking state [ 1823.649467][T27533] bridge2: port 1(veth3) entered disabled state [ 1823.670390][T27533] veth3: entered allmulticast mode [ 1824.866840][ T30] kauditd_printk_skb: 2773 callbacks suppressed [ 1824.866862][ T30] audit: type=1326 audit(1749951602.422:38308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.020379][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1825.030172][ T30] audit: type=1326 audit(1749951602.442:38309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.065316][T27545] vlan2: entered promiscuous mode [ 1825.096735][T27545] team0: entered promiscuous mode [ 1825.107069][ T30] audit: type=1326 audit(1749951602.442:38310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.135824][T27545] team_slave_0: entered promiscuous mode [ 1825.143804][T27545] team_slave_1: entered promiscuous mode [ 1825.219593][ T30] audit: type=1326 audit(1749951602.442:38311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.280842][ T30] audit: type=1326 audit(1749951602.442:38312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.386765][ T30] audit: type=1326 audit(1749951602.442:38313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.496815][ T30] audit: type=1326 audit(1749951602.442:38314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.568774][T27558] vlan2: entered allmulticast mode [ 1825.579479][T27558] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 1825.592558][ T30] audit: type=1326 audit(1749951602.442:38315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.614807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1825.623811][T27560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6293'. [ 1825.696813][ T30] audit: type=1326 audit(1749951602.442:38316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.811587][ T30] audit: type=1326 audit(1749951602.492:38317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27523 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc5558 code=0x7ffc0000 [ 1825.833888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1825.956890][T27567] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1826.034964][T27567] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1826.115870][T27573] netlink: 'syz.2.6298': attribute type 39 has an invalid length. [ 1828.644125][T27602] tipc: Started in network mode [ 1828.697264][T27602] tipc: Node identity , cluster identity 4711 [ 1828.994430][T27605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6305'. [ 1829.143970][T27609] vlan2: entered promiscuous mode [ 1829.677389][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 1830.281805][T27622] team0: Port device team_slave_1 removed [ 1830.334895][T27633] syz.3.6313 (27633): drop_caches: 2 [ 1830.382855][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1830.397815][T27624] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1830.633944][T27626] syz.3.6313 (27626): drop_caches: 2 [ 1830.684409][T27626] syz.3.6313 (27626): drop_caches: 2 [ 1831.256815][T27323] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1831.408746][T27323] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1831.426406][T27323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.446198][T27323] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1831.466886][T27323] usb 6-1: config 1 has no interface number 0 [ 1831.473537][T27323] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1831.546935][T27323] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1831.589974][T27323] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1831.600241][T27323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.616786][T27323] usb 6-1: Product: syz [ 1831.625621][T27323] usb 6-1: Manufacturer: syz [ 1831.635429][T27323] usb 6-1: SerialNumber: syz [ 1832.060616][T27323] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1832.104283][T27323] usb 6-1: USB disconnect, device number 38 [ 1832.469413][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1832.469434][ T30] audit: type=1326 audit(1749951610.052:38396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27659 comm="syz.4.6323" exe="/root/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf705e539 code=0x0 [ 1834.951757][T27697] hsr0: entered promiscuous mode [ 1835.729168][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6337'. [ 1835.849479][T17813] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1835.898419][T27698] Cannot find add_set index 0 as target [ 1836.078085][T17813] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.119674][T17813] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1836.187014][T17813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.264965][T17813] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1836.389105][T27714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6340'. [ 1836.501721][T27715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6341'. [ 1837.125218][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1837.178744][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1837.232487][T27725] tipc: Failed to obtain node identity [ 1837.297638][T27725] tipc: Enabling of bearer rejected, failed to enable media [ 1837.371918][T17813] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1837.382621][T17813] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1837.759023][T17813] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1837.867942][T17813] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1837.902456][T17813] usb 3-1: USB disconnect, device number 98 [ 1838.452689][T27738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1838.971471][T27744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6344'. [ 1840.206761][T19993] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1840.225594][T27760] geneve2: entered promiscuous mode [ 1840.317942][T27323] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1840.368954][T19993] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1840.386715][T19993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.415189][T19993] usb 3-1: config 0 has no interface number 0 [ 1840.425751][T19993] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1840.461701][T19993] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1840.488791][T27323] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1840.506894][T19993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.515005][T19993] usb 3-1: Product: syz [ 1840.519928][T27323] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1840.536781][T27323] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.547825][T19993] usb 3-1: Manufacturer: syz [ 1840.549567][T27769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1840.552457][T19993] usb 3-1: SerialNumber: syz [ 1840.556914][T27323] usb 5-1: config 220 has no interface number 2 [ 1840.571712][T27769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1840.575559][T19993] usb 3-1: config 0 descriptor?? [ 1840.597607][T27323] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1840.612284][T27759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1840.626618][T27759] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1840.626752][T27323] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1840.641327][T27323] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1840.662747][T19993] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1840.671617][T27769] tipc: Enabled bearer , priority 0 [ 1840.674655][T27323] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1840.703840][T27323] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1840.716252][T27323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.724357][T27323] usb 5-1: Product: syz [ 1840.728757][T27323] usb 5-1: Manufacturer: syz [ 1840.733480][T27323] usb 5-1: SerialNumber: syz [ 1840.950301][T27761] mmap: syz.4.6356 (27761): VmData 37502976 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1841.082879][T27323] usb 5-1: selecting invalid altsetting 0 [ 1841.093729][T17813] usb 3-1: USB disconnect, device number 99 [ 1841.298033][T27323] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1841.304513][T27323] usb 5-1: No valid video chain found. [ 1841.350009][T27323] usb 5-1: selecting invalid altsetting 0 [ 1841.369986][T27323] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1841.387795][T27323] usb 5-1: USB disconnect, device number 98 [ 1842.169000][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6364'. [ 1842.659322][T27776] Cannot find add_set index 0 as target [ 1843.881184][ T51] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1844.343509][T27831] FAULT_INJECTION: forcing a failure. [ 1844.343509][T27831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1844.372722][T27831] CPU: 0 UID: 0 PID: 27831 Comm: syz.3.6378 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1844.372748][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1844.372759][T27831] Call Trace: [ 1844.372766][T27831] [ 1844.372773][T27831] dump_stack_lvl+0x189/0x250 [ 1844.372804][T27831] ? __pfx____ratelimit+0x10/0x10 [ 1844.372829][T27831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1844.372854][T27831] ? __pfx__printk+0x10/0x10 [ 1844.372872][T27831] ? __might_fault+0xb0/0x130 [ 1844.372896][T27831] should_fail_ex+0x414/0x560 [ 1844.372920][T27831] _copy_from_user+0x2d/0xb0 [ 1844.372938][T27831] get_compat_msghdr+0xad/0x4a0 [ 1844.372964][T27831] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1844.372995][T27831] ___sys_sendmsg+0x193/0x2a0 [ 1844.373023][T27831] ? __pfx____sys_sendmsg+0x10/0x10 [ 1844.373070][T27831] ? __fget_files+0x2a/0x420 [ 1844.373087][T27831] ? __fget_files+0x3a0/0x420 [ 1844.373113][T27831] __sys_sendmsg+0x164/0x220 [ 1844.373135][T27831] ? __pfx___sys_sendmsg+0x10/0x10 [ 1844.373166][T27831] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1844.373192][T27831] ? lockdep_hardirqs_on+0x9c/0x150 [ 1844.373218][T27831] __do_fast_syscall_32+0xb6/0x2b0 [ 1844.373233][T27831] ? lockdep_hardirqs_on+0x9c/0x150 [ 1844.373261][T27831] do_fast_syscall_32+0x34/0x80 [ 1844.373279][T27831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1844.373299][T27831] RIP: 0023:0xf7fc2539 [ 1844.373313][T27831] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1844.373328][T27831] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1844.373345][T27831] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1844.373356][T27831] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1844.373366][T27831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1844.373375][T27831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1844.373384][T27831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1844.373405][T27831] [ 1844.374987][T27830] delete_channel: no stack [ 1844.656810][T19993] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1844.825862][T19993] usb 3-1: Using ep0 maxpacket: 16 [ 1844.843848][T19993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.864900][T19993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.887619][T19993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1844.903872][T19993] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1844.914195][T19993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.933656][T19993] usb 3-1: config 0 descriptor?? [ 1845.119243][T27844] netlink: 'syz.0.6382': attribute type 3 has an invalid length. [ 1845.131791][T27844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1845.161076][T27844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1845.178545][T27844] netlink: 'syz.0.6382': attribute type 3 has an invalid length. [ 1845.189011][T27844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1845.202587][T27844] netlink: 'syz.0.6382': attribute type 3 has an invalid length. [ 1845.213507][T27844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1845.231733][T27846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6383'. [ 1845.248236][T27846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6383'. [ 1845.398797][T19993] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1845.455907][T19993] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1845.503412][T19993] koneplus 0003:1E7D:2E22.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1845.787203][T27829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.805031][T27829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.901636][T25545] usb 3-1: USB disconnect, device number 100 [ 1846.201098][T27864] FAULT_INJECTION: forcing a failure. [ 1846.201098][T27864] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.265288][T27864] CPU: 1 UID: 0 PID: 27864 Comm: syz.0.6387 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1846.265323][T27864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1846.265337][T27864] Call Trace: [ 1846.265347][T27864] [ 1846.265357][T27864] dump_stack_lvl+0x189/0x250 [ 1846.265398][T27864] ? __pfx____ratelimit+0x10/0x10 [ 1846.265433][T27864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1846.265468][T27864] ? __pfx__printk+0x10/0x10 [ 1846.265510][T27864] should_fail_ex+0x414/0x560 [ 1846.265545][T27864] should_failslab+0xa8/0x100 [ 1846.265572][T27864] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1846.265607][T27864] ? skb_clone+0x212/0x3a0 [ 1846.265643][T27864] skb_clone+0x212/0x3a0 [ 1846.265678][T27864] __netlink_deliver_tap+0x404/0x850 [ 1846.265719][T27864] ? netlink_deliver_tap+0x2e/0x1b0 [ 1846.265748][T27864] netlink_deliver_tap+0x19c/0x1b0 [ 1846.265775][T27864] netlink_sendskb+0x68/0x140 [ 1846.265801][T27864] nfnetlink_rcv+0x2290/0x2520 [ 1846.265884][T27864] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1846.265936][T27864] ? ref_tracker_free+0x63a/0x7d0 [ 1846.266001][T27864] ? __netlink_deliver_tap+0x807/0x850 [ 1846.266038][T27864] ? netlink_deliver_tap+0x2e/0x1b0 [ 1846.266063][T27864] ? netlink_deliver_tap+0x2e/0x1b0 [ 1846.266093][T27864] netlink_unicast+0x758/0x8d0 [ 1846.266127][T27864] netlink_sendmsg+0x805/0xb30 [ 1846.266164][T27864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1846.266194][T27864] ? __import_iovec+0x5d4/0x7f0 [ 1846.266214][T27864] ? aa_sock_msg_perm+0x94/0x160 [ 1846.266245][T27864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1846.266273][T27864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1846.266301][T27864] __sock_sendmsg+0x21c/0x270 [ 1846.266339][T27864] ____sys_sendmsg+0x505/0x830 [ 1846.266374][T27864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1846.266419][T27864] ___sys_sendmsg+0x21f/0x2a0 [ 1846.266449][T27864] ? __pfx____sys_sendmsg+0x10/0x10 [ 1846.266513][T27864] ? __fget_files+0x2a/0x420 [ 1846.266537][T27864] ? __fget_files+0x3a0/0x420 [ 1846.266574][T27864] __sys_sendmsg+0x164/0x220 [ 1846.266605][T27864] ? __pfx___sys_sendmsg+0x10/0x10 [ 1846.266650][T27864] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1846.266687][T27864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1846.266723][T27864] __do_fast_syscall_32+0xb6/0x2b0 [ 1846.266746][T27864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1846.266784][T27864] do_fast_syscall_32+0x34/0x80 [ 1846.266805][T27864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1846.266839][T27864] RIP: 0023:0xf705e539 [ 1846.266860][T27864] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1846.266881][T27864] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1846.266903][T27864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c40 [ 1846.266919][T27864] RDX: 0000000000008880 RSI: 0000000000000000 RDI: 0000000000000000 [ 1846.266932][T27864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1846.266945][T27864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1846.266958][T27864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1846.266990][T27864] [ 1846.575982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1847.236804][T27323] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1847.400605][T27323] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1847.439698][T27323] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1847.452275][T27323] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1847.468033][T17846] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1847.488680][T27323] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1847.505627][T27323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1847.514650][T27323] usb 6-1: SerialNumber: syz [ 1847.666912][T17846] usb 4-1: Using ep0 maxpacket: 32 [ 1847.674441][T17846] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1847.697401][T17846] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1847.711549][T17846] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1847.726918][T17846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.743913][T17846] usb 4-1: Product: syz [ 1847.774201][T17846] usb 4-1: Manufacturer: syz [ 1847.779824][T27323] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 1847.790704][T27323] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 1847.802325][T17846] usb 4-1: SerialNumber: syz [ 1847.814247][T17846] usb 4-1: config 0 descriptor?? [ 1847.843434][T27323] usb 6-1: USB disconnect, device number 39 [ 1848.020552][T27893] program syz.4.6399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1848.392024][ T30] audit: type=1326 audit(1749951625.972:38397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.418441][T27900] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1848.431409][T27900] netlink: 'syz.5.6401': attribute type 39 has an invalid length. [ 1848.439675][ T30] audit: type=1326 audit(1749951625.992:38398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.464299][ T30] audit: type=1326 audit(1749951625.992:38399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.487506][T27900] veth0_macvtap: left promiscuous mode [ 1848.498390][ T30] audit: type=1326 audit(1749951625.992:38400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.520927][ T30] audit: type=1326 audit(1749951626.002:38401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.563458][ T30] audit: type=1326 audit(1749951626.002:38402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.622603][ T30] audit: type=1326 audit(1749951626.002:38403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.648296][ T30] audit: type=1326 audit(1749951626.002:38404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.674124][ T30] audit: type=1326 audit(1749951626.002:38405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.721224][ T30] audit: type=1326 audit(1749951626.002:38406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.5.6401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1848.787945][T27911] loop2: detected capacity change from 0 to 7 [ 1848.795537][T27911] Dev loop2: unable to read RDB block 7 [ 1848.808743][T27911] loop2: unable to read partition table [ 1848.814974][T27911] loop2: partition table beyond EOD, truncated [ 1848.841074][T27911] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1849.076601][T27323] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1849.186349][T17813] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1849.207897][T27323] usb 5-1: device descriptor read/64, error -71 [ 1849.256839][T17846] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1849.348477][T17813] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1849.359731][T17813] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1849.372901][T17813] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 1849.387620][T17813] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1849.396881][T17813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.404922][T17813] usb 6-1: Product: syz [ 1849.409253][T17813] usb 6-1: Manufacturer: syz [ 1849.414048][T17813] usb 6-1: SerialNumber: syz [ 1849.420093][T17846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1849.423023][T27915] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1849.444906][T17846] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1849.454893][T27323] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1849.463381][T17846] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1849.481086][T17846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1849.490790][T17846] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1849.504532][T17846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1849.521206][T17846] usb 3-1: string descriptor 0 read error: -22 [ 1849.528322][T17846] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1849.538142][T17846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.561780][T27917] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1849.580821][T17846] usb 3-1: 0:2 : does not exist [ 1849.607164][T27323] usb 5-1: device descriptor read/64, error -71 [ 1849.639273][T27915] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1849.728401][T27323] usb usb5-port1: attempt power cycle [ 1849.782230][T17846] usb 3-1: USB disconnect, device number 101 [ 1850.076331][T27323] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1850.112102][T27323] usb 5-1: device descriptor read/8, error -71 [ 1850.166042][T17846] usb 4-1: USB disconnect, device number 62 [ 1850.255336][T27915] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1850.272024][T17813] cdc_ncm 6-1:1.0: bind() failure [ 1850.285153][T17813] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1850.305398][T17813] cdc_ncm 6-1:1.1: bind() failure [ 1850.368828][T27323] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1850.432947][T27323] usb 5-1: device descriptor read/8, error -71 [ 1850.474295][T17813] usb 6-1: USB disconnect, device number 40 [ 1850.547558][T27323] usb usb5-port1: unable to enumerate USB device [ 1851.668654][T27941] loop2: detected capacity change from 0 to 7 [ 1851.686408][T27941] Dev loop2: unable to read RDB block 7 [ 1851.692366][T27941] loop2: unable to read partition table [ 1851.698894][T27941] loop2: partition table beyond EOD, truncated [ 1851.705467][T27941] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1852.108584][T27946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.137396][T27946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.377066][T17813] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1852.443545][T27939] --map-set only usable from mangle table [ 1852.532643][T27958] tipc: Enabled bearer , priority 0 [ 1852.584201][T17813] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1852.603771][T17813] usb 5-1: config 179 has no interface number 0 [ 1852.622889][T17813] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 1852.672314][T17813] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1852.691446][T17813] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 1852.705571][T17813] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1852.763850][T17813] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1852.786822][T17813] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1852.810183][T17813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.851609][T27945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1852.869680][T27945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1852.944242][T17813] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input173 [ 1853.078438][ T5193] input input173: unable to receive magic message: -110 [ 1853.127990][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.149060][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.179954][ T5193] input input173: unable to receive magic message: -71 [ 1853.224632][T17813] usb 5-1: USB disconnect, device number 103 [ 1853.224706][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1853.239119][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1853.289148][T17813] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1853.595560][T27977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.654562][T27977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.682444][T27975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1853.692410][T27975] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1853.707187][T27975] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1853.723778][T27975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.740554][T27975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.826908][T27323] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1853.966805][T27323] usb 3-1: device descriptor read/64, error -71 [ 1854.226950][T27323] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1854.366885][T27323] usb 3-1: device descriptor read/64, error -71 [ 1854.477516][T27323] usb usb3-port1: attempt power cycle [ 1854.846814][T27323] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1854.889587][T27323] usb 3-1: device descriptor read/8, error -71 [ 1854.968417][T28003] bond_slave_0: entered promiscuous mode [ 1854.974235][T28003] bond_slave_1: entered promiscuous mode [ 1854.985076][T28003] vlan2: entered promiscuous mode [ 1854.991740][T28003] bond0: entered promiscuous mode [ 1855.136861][T27323] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1855.167472][T27323] usb 3-1: device descriptor read/8, error -71 [ 1855.278055][T27323] usb usb3-port1: unable to enumerate USB device [ 1857.393137][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6443'. [ 1857.424603][T28028] netlink: 'syz.4.6444': attribute type 3 has an invalid length. [ 1857.466914][T28028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1857.507507][T28028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1857.555629][T28028] netlink: 'syz.4.6444': attribute type 3 has an invalid length. [ 1857.586502][T28028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1857.619091][T28028] netlink: 'syz.4.6444': attribute type 3 has an invalid length. [ 1857.641198][T28028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1860.199722][T12827] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1860.366212][T12827] usb 4-1: Using ep0 maxpacket: 16 [ 1860.374060][T12827] usb 4-1: config index 0 descriptor too short (expected 64967, got 165) [ 1860.382958][T12827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.393534][T12827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1860.405016][T12827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1860.414494][T12827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.422585][T12827] usb 4-1: Product: syz [ 1860.426979][T12827] usb 4-1: Manufacturer: syz [ 1860.434711][T12827] usb 4-1: SerialNumber: syz [ 1860.716665][T12827] usb 4-1: 0:2 : does not exist [ 1860.721724][T12827] usb 4-1: usbmixer: too many channels (41) in unit 5 [ 1860.753050][T12827] usb 4-1: USB disconnect, device number 63 [ 1860.798058][T27062] udevd[27062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1860.859986][T28073] netlink: 'syz.4.6460': attribute type 1 has an invalid length. [ 1860.933082][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6461'. [ 1861.306775][T17846] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1861.608833][T17846] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1861.699900][T17846] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1861.738962][T17846] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1861.772384][T28093] random: crng reseeded on system resumption [ 1861.954062][T17846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1862.004323][T17846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1862.050381][T17846] usb 5-1: SerialNumber: syz [ 1862.077512][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6467'. [ 1862.343370][T28093] vlan0: entered promiscuous mode [ 1862.372579][T28093] ip6gretap0: entered promiscuous mode [ 1862.466843][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6469'. [ 1862.559418][T17846] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 1862.575755][T17846] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 1862.691781][T17846] usb 5-1: USB disconnect, device number 104 [ 1862.943198][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1862.943216][ T30] audit: type=1326 audit(1749951640.512:38413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.5.6471" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x0 [ 1863.057886][T28106] loop2: detected capacity change from 0 to 6 [ 1863.094803][T27062] buffer_io_error: 14 callbacks suppressed [ 1863.094817][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.148666][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.187005][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.207626][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.216588][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.254715][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.268508][T28108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6473'. [ 1863.282236][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.313203][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.342980][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.373456][T27062] Buffer I/O error on dev loop2, logical block 0, async page read [ 1863.457301][ T5208] ldm_validate_partition_table(): Disk read failed. [ 1863.478210][ T5208] Dev loop6: unable to read RDB block 0 [ 1863.497146][ T5208] loop6: unable to read partition table [ 1863.501913][T28112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6475'. [ 1863.504615][ T5208] loop6: partition table beyond EOD, [ 1863.513818][T28112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6475'. [ 1863.525021][ T5208] truncated [ 1863.553014][T28112] batadv0: entered promiscuous mode [ 1863.560919][T28112] bridge0: entered promiscuous mode [ 1863.567283][T28112] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1863.580847][T28112] Cannot create hsr debugfs directory [ 1864.057424][T17846] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1864.180856][T28133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1864.207059][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6483'. [ 1864.218498][T17846] usb 3-1: Using ep0 maxpacket: 16 [ 1864.249505][T28117] program syz.2.6477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1864.296340][T17842] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1864.322014][T17846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1864.337664][T17846] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1864.364664][T17846] usb 3-1: can't read configurations, error -71 [ 1864.471043][T17842] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1864.480968][T17842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.495166][T17842] usb 6-1: config 0 descriptor?? [ 1864.520254][T17842] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1865.850658][T28158] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1866.224595][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6492'. [ 1866.235615][T28131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.253333][T28131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.310439][T28164] vlan2: entered promiscuous mode [ 1866.423766][T28168] vlan0: entered allmulticast mode [ 1866.695553][T28171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6495'. [ 1867.074210][T28178] netlink: 'syz.3.6499': attribute type 1 has an invalid length. [ 1867.316405][T12827] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1867.489028][T17842] gspca_stv06xx: I2C: Read error writing address: -71 [ 1867.517373][T17842] usb 6-1: USB disconnect, device number 41 [ 1867.577575][T12827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.602040][T12827] usb 3-1: config 0 has no interfaces? [ 1867.669711][T12827] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1867.681968][T12827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1867.692568][T12827] usb 3-1: SerialNumber: syz [ 1867.792321][T12827] usb 3-1: config 0 descriptor?? [ 1868.307271][T28179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.323958][T28179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.746428][T12827] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1868.931250][T12827] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 1868.948612][T12827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.978169][T12827] usb 6-1: config 0 has no interface number 0 [ 1868.994704][T12827] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1869.034882][T12827] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1869.073036][T12827] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1869.100972][T12827] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1869.172697][T12827] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1869.184648][T12827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.201695][T12827] usb 6-1: Product: syz [ 1869.211630][T12827] usb 6-1: Manufacturer: syz [ 1869.226428][T12827] usb 6-1: SerialNumber: syz [ 1869.250660][T12827] usb 6-1: config 0 descriptor?? [ 1869.286776][T12827] symbolserial 6-1:0.175: symbol converter detected [ 1869.317522][T12827] usb 6-1: symbol converter now attached to ttyUSB0 [ 1869.487628][T12827] usb 6-1: USB disconnect, device number 42 [ 1870.108234][T12827] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1870.129044][T12827] symbolserial 6-1:0.175: device disconnected [ 1870.205351][T19993] usb 3-1: USB disconnect, device number 108 [ 1870.480559][T28224] netlink: 'syz.4.6514': attribute type 13 has an invalid length. [ 1870.883047][T28224] gretap0: refused to change device tx_queue_len [ 1870.890564][T28224] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1870.998558][T28233] vlan0: entered promiscuous mode [ 1871.833281][T28245] fuse: Bad value for 'user_id' [ 1871.852609][T28245] fuse: Bad value for 'user_id' [ 1872.704047][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1872.881305][T28260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6528'. [ 1872.908103][T28262] FAULT_INJECTION: forcing a failure. [ 1872.908103][T28262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.923612][T28262] CPU: 0 UID: 0 PID: 28262 Comm: syz.4.6529 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1872.923644][T28262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1872.923659][T28262] Call Trace: [ 1872.923668][T28262] [ 1872.923677][T28262] dump_stack_lvl+0x189/0x250 [ 1872.923716][T28262] ? __pfx____ratelimit+0x10/0x10 [ 1872.923749][T28262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1872.923782][T28262] ? __pfx__printk+0x10/0x10 [ 1872.923806][T28262] ? __might_fault+0xb0/0x130 [ 1872.923839][T28262] should_fail_ex+0x414/0x560 [ 1872.923872][T28262] _copy_from_iter+0x1db/0x16f0 [ 1872.923909][T28262] ? rcu_is_watching+0x15/0xb0 [ 1872.923944][T28262] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1872.923968][T28262] ? __pfx__copy_from_iter+0x10/0x10 [ 1872.924003][T28262] ? __build_skb_around+0x257/0x3e0 [ 1872.924031][T28262] ? netlink_sendmsg+0x642/0xb30 [ 1872.924056][T28262] ? skb_put+0x11b/0x210 [ 1872.924084][T28262] netlink_sendmsg+0x6b2/0xb30 [ 1872.924120][T28262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1872.924149][T28262] ? __import_iovec+0x5d4/0x7f0 [ 1872.924168][T28262] ? aa_sock_msg_perm+0x94/0x160 [ 1872.924198][T28262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1872.924226][T28262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1872.924253][T28262] __sock_sendmsg+0x21c/0x270 [ 1872.924290][T28262] ____sys_sendmsg+0x505/0x830 [ 1872.924323][T28262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1872.924375][T28262] ___sys_sendmsg+0x21f/0x2a0 [ 1872.924410][T28262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1872.924474][T28262] ? __fget_files+0x2a/0x420 [ 1872.924496][T28262] ? __fget_files+0x3a0/0x420 [ 1872.924532][T28262] __sys_sendmsg+0x164/0x220 [ 1872.924562][T28262] ? __pfx___sys_sendmsg+0x10/0x10 [ 1872.924605][T28262] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1872.924640][T28262] ? lockdep_hardirqs_on+0x9c/0x150 [ 1872.924675][T28262] __do_fast_syscall_32+0xb6/0x2b0 [ 1872.924696][T28262] ? lockdep_hardirqs_on+0x9c/0x150 [ 1872.924732][T28262] do_fast_syscall_32+0x34/0x80 [ 1872.924753][T28262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1872.924779][T28262] RIP: 0023:0xf705e539 [ 1872.924799][T28262] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1872.924819][T28262] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1872.924841][T28262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1872.924857][T28262] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1872.924870][T28262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1872.924883][T28262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1872.924896][T28262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1872.924926][T28262] [ 1872.929630][T28260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6528'. [ 1874.728365][T28293] FAULT_INJECTION: forcing a failure. [ 1874.728365][T28293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.765367][T28293] CPU: 0 UID: 0 PID: 28293 Comm: syz.2.6541 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1874.765401][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1874.765416][T28293] Call Trace: [ 1874.765425][T28293] [ 1874.765435][T28293] dump_stack_lvl+0x189/0x250 [ 1874.765475][T28293] ? __pfx____ratelimit+0x10/0x10 [ 1874.765508][T28293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1874.765543][T28293] ? __pfx__printk+0x10/0x10 [ 1874.765567][T28293] ? __might_fault+0xb0/0x130 [ 1874.765600][T28293] should_fail_ex+0x414/0x560 [ 1874.765646][T28293] _copy_from_iter+0x1db/0x16f0 [ 1874.765686][T28293] ? rcu_is_watching+0x15/0xb0 [ 1874.765723][T28293] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1874.765747][T28293] ? __pfx__copy_from_iter+0x10/0x10 [ 1874.765782][T28293] ? __build_skb_around+0x257/0x3e0 [ 1874.765811][T28293] ? netlink_sendmsg+0x642/0xb30 [ 1874.765835][T28293] ? skb_put+0x11b/0x210 [ 1874.765877][T28293] netlink_sendmsg+0x6b2/0xb30 [ 1874.765918][T28293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1874.765947][T28293] ? __import_iovec+0x5d4/0x7f0 [ 1874.765965][T28293] ? aa_sock_msg_perm+0x94/0x160 [ 1874.765995][T28293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1874.766024][T28293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1874.766055][T28293] __sock_sendmsg+0x21c/0x270 [ 1874.766098][T28293] ____sys_sendmsg+0x505/0x830 [ 1874.766131][T28293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1874.766183][T28293] ___sys_sendmsg+0x21f/0x2a0 [ 1874.766213][T28293] ? __pfx____sys_sendmsg+0x10/0x10 [ 1874.766274][T28293] ? __fget_files+0x2a/0x420 [ 1874.766299][T28293] ? __fget_files+0x3a0/0x420 [ 1874.766335][T28293] __sys_sendmsg+0x164/0x220 [ 1874.766366][T28293] ? __pfx___sys_sendmsg+0x10/0x10 [ 1874.766410][T28293] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1874.766446][T28293] ? lockdep_hardirqs_on+0x9c/0x150 [ 1874.766482][T28293] __do_fast_syscall_32+0xb6/0x2b0 [ 1874.766504][T28293] ? lockdep_hardirqs_on+0x9c/0x150 [ 1874.766542][T28293] do_fast_syscall_32+0x34/0x80 [ 1874.766563][T28293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1874.766591][T28293] RIP: 0023:0xf7fc5539 [ 1874.766611][T28293] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1874.766631][T28293] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1874.766655][T28293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1874.766670][T28293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1874.766683][T28293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1874.766697][T28293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1874.766710][T28293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1874.766741][T28293] [ 1875.042216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1875.382043][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6543'. [ 1875.646796][T17846] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1875.838223][T17846] usb 3-1: Using ep0 maxpacket: 16 [ 1875.865044][T17846] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1875.866281][T28313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 1875.882872][T17846] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1875.882905][T17846] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1875.882929][T17846] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1875.882953][T17846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1875.882977][T17846] usb 3-1: config 0 has no interface number 0 [ 1875.883025][T17846] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1875.883057][T17846] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1875.883084][T17846] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1875.883122][T17846] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1876.170253][T17846] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1876.206706][T17846] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1876.228951][T17846] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1876.266694][T17846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.305188][ T5208] buffer_io_error: 24 callbacks suppressed [ 1876.305208][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.326778][T17846] usb 3-1: Product: syz [ 1876.331015][T17846] usb 3-1: Manufacturer: syz [ 1876.355647][T17846] usb 3-1: SerialNumber: syz [ 1876.361339][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.417668][T17846] usb 3-1: config 0 descriptor?? [ 1876.433169][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.451377][T17846] usb 3-1: selecting invalid altsetting 2 [ 1876.465805][T28321] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1876.493110][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.502463][T28321] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1876.526447][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.548425][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.570039][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.597388][ T5208] ldm_validate_partition_table(): Disk read failed. [ 1876.604323][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.629648][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.639938][ T5208] Buffer I/O error on dev loop6, logical block 0, async page read [ 1876.648578][ T5208] Dev loop6: unable to read RDB block 0 [ 1876.654771][ T5208] loop6: unable to read partition table [ 1876.661308][ T5208] loop6: partition table beyond EOD, truncated [ 1876.683104][ T30] audit: type=1326 audit(1749951654.262:38414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1876.785918][ T30] audit: type=1326 audit(1749951654.262:38415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1876.847777][ T30] audit: type=1326 audit(1749951654.282:38416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1876.910994][ T30] audit: type=1326 audit(1749951654.282:38417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1876.933385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1876.964409][ T30] audit: type=1326 audit(1749951654.282:38418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1876.991135][ T30] audit: type=1326 audit(1749951654.342:38419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1877.013450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.029826][ T30] audit: type=1326 audit(1749951654.342:38420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1877.052120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.088619][ T30] audit: type=1326 audit(1749951654.392:38421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1877.114963][T19993] hid-generic 00A0:0008:0003.003C: unknown main item tag 0x0 [ 1877.118157][ T30] audit: type=1326 audit(1749951654.392:38422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1877.129440][T19993] hid-generic 00A0:0008:0003.003C: unknown main item tag 0x3 [ 1877.224801][ T30] audit: type=1326 audit(1749951654.392:38423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28301 comm="syz.2.6545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1877.247136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1877.276907][T19993] hid-generic 00A0:0008:0003.003C: unknown main item tag 0x0 [ 1877.297872][T19993] hid-generic 00A0:0008:0003.003C: unknown main item tag 0x0 [ 1877.322341][T19993] hid-generic 00A0:0008:0003.003C: unknown main item tag 0x0 [ 1877.365818][T19993] hid-generic 00A0:0008:0003.003C: collection stack underflow [ 1877.403569][T19993] hid-generic 00A0:0008:0003.003C: item 0 0 0 12 parsing failed [ 1877.437801][T19993] hid-generic 00A0:0008:0003.003C: probe with driver hid-generic failed with error -22 [ 1877.516903][T17846] get_1284_register timeout [ 1877.570653][ C1] usb 3-1: async_complete: urb error -104 [ 1877.576585][ C1] usb 3-1: async_complete: urb error -104 [ 1877.582434][ C1] usb 3-1: async_complete: urb error -104 [ 1877.590275][T17846] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 1878.344920][T12827] usb 3-1: USB disconnect, device number 109 [ 1878.380579][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6559'. [ 1878.407120][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6559'. [ 1879.112665][T28362] Cannot find add_set index 0 as target [ 1880.214859][T28375] netlink: 8492 bytes leftover after parsing attributes in process `syz.4.6568'. [ 1880.477092][T19993] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1880.641553][T19993] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1880.721465][T19993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.771583][T19993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1880.844377][T19993] usb 3-1: config 1 has no interface number 0 [ 1880.894874][T19993] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1880.932803][T25458] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1880.969256][T19993] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1881.120609][T19993] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1881.130779][T25458] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1881.173482][T19993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.176650][T25458] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.225885][T25458] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1881.226801][T17846] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1881.249447][T25458] usb 6-1: config 1 has no interface number 0 [ 1881.261554][T19993] usb 3-1: Product: syz [ 1881.265788][T19993] usb 3-1: Manufacturer: syz [ 1881.265869][T25458] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1881.310755][T25458] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1881.347968][T19993] usb 3-1: SerialNumber: syz [ 1881.423986][T25458] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1881.439893][T25458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.450976][T25458] usb 6-1: Product: syz [ 1881.455280][T25458] usb 6-1: Manufacturer: syz [ 1881.481875][T25458] usb 6-1: SerialNumber: syz [ 1881.481885][T17846] usb 4-1: Using ep0 maxpacket: 8 [ 1881.497967][T17846] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 1881.519845][T17846] usb 4-1: config 0 has no interface number 0 [ 1881.567025][T17846] usb 4-1: config 0 interface 32 altsetting 110 bulk endpoint 0x8 has invalid maxpacket 64 [ 1881.584555][T17846] usb 4-1: config 0 interface 32 altsetting 110 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1881.601575][T17846] usb 4-1: config 0 interface 32 has no altsetting 0 [ 1881.620429][T17846] usb 4-1: New USB device found, idVendor=401e, idProduct=29ac, bcdDevice=7d.ed [ 1881.634280][T17846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.643377][T17846] usb 4-1: Product: syz [ 1881.648749][T17846] usb 4-1: Manufacturer: syz [ 1881.653454][T17846] usb 4-1: SerialNumber: syz [ 1881.694884][T17846] usb 4-1: config 0 descriptor?? [ 1881.701748][T28379] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1881.882339][T28375] team0 (unregistering): Port device team_slave_0 removed [ 1881.925515][T28379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.936831][T28379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.952947][T17846] usb-storage 4-1:0.32: USB Mass Storage device detected [ 1882.190065][T17846] usb 4-1: USB disconnect, device number 64 [ 1882.452388][T19993] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1882.479234][T19993] usb 3-1: USB disconnect, device number 110 [ 1882.527018][T25458] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1882.543321][T25458] usb 6-1: USB disconnect, device number 43 [ 1882.668813][T28388] delete_channel: no stack [ 1882.701196][T28391] fuse: Bad value for 'user_id' [ 1882.707448][T28391] fuse: Bad value for 'user_id' [ 1882.745543][T28393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6573'. [ 1882.883216][T28400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1882.901011][T28400] vlan2: entered allmulticast mode [ 1883.096300][T25458] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1883.266777][T25458] usb 5-1: Using ep0 maxpacket: 32 [ 1883.304153][T25458] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1883.320903][T25458] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1883.375544][T25458] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1883.417667][T25458] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1883.439811][T28416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1883.449581][T28416] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1883.466726][T25458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.468885][T28416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1883.496848][T25458] usb 5-1: Product: syz [ 1883.505198][T25458] usb 5-1: Manufacturer: syz [ 1883.517758][T25458] usb 5-1: SerialNumber: syz [ 1883.534425][T28416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1884.635241][T28423] team_slave_1 (unregistering): left promiscuous mode [ 1884.674086][T28423] team0: Port device team_slave_1 removed [ 1884.683615][T28426] netlink: 'syz.5.6586': attribute type 10 has an invalid length. [ 1884.731445][T28428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6586'. [ 1884.763993][T28428] tipc: Resetting bearer [ 1885.754869][T25458] usb 5-1: 0:2 : does not exist [ 1885.810164][T25458] usb 5-1: USB disconnect, device number 105 [ 1885.885777][T28428] tipc: Disabling bearer [ 1885.895763][T27062] udevd[27062]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1885.919706][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1885.938934][T28428] team_slave_0: left promiscuous mode [ 1886.044039][T28428] team0 (unregistering): Port device team_slave_0 removed [ 1886.098732][T28428] team0 (unregistering): Port device bond0 removed [ 1886.651442][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6594'. [ 1886.662713][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6594'. [ 1887.016783][T17842] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1887.146904][T17842] usb 4-1: device descriptor read/64, error -71 [ 1887.396953][T17842] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1887.536813][T17842] usb 4-1: device descriptor read/64, error -71 [ 1887.650798][T17842] usb usb4-port1: attempt power cycle [ 1887.997639][T17842] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1888.031900][T17842] usb 4-1: device descriptor read/8, error -71 [ 1888.126919][T17846] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1888.276980][T17842] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1888.291695][T17846] usb 5-1: Using ep0 maxpacket: 8 [ 1888.299641][T17846] usb 5-1: config 0 has no interfaces? [ 1888.305384][T17846] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice=11.00 [ 1888.324043][T17842] usb 4-1: device descriptor read/8, error -71 [ 1888.331960][T17846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.376909][T17846] usb 5-1: config 0 descriptor?? [ 1888.457862][T17842] usb usb4-port1: unable to enumerate USB device [ 1888.594995][ T5844] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 1888.595073][ T5844] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1889.890731][T28468] netlink: 'syz.3.6601': attribute type 10 has an invalid length. [ 1889.930583][T28468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.951091][T28468] team0: Port device bond0 added [ 1890.097916][T28468] lo: entered promiscuous mode [ 1890.145905][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6601'. [ 1890.161126][T28470] tipc: Resetting bearer [ 1900.111345][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1900.123416][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1900.143235][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1900.163455][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1900.175705][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1902.240645][ T5844] Bluetooth: hci3: command tx timeout [ 1902.252500][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1902.267217][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1902.277545][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1902.285663][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1902.295843][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1903.525032][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1903.543580][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1903.557033][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1903.566775][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1903.576508][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1904.324527][ T51] Bluetooth: hci6: command tx timeout [ 1904.331688][ T51] Bluetooth: hci3: command tx timeout [ 1905.529226][T25280] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1905.543623][T25280] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1905.554997][T25280] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1905.565339][T25280] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1905.574239][T25280] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1905.677058][T25280] Bluetooth: hci7: command tx timeout [ 1906.406416][T28496] Bluetooth: hci3: command tx timeout [ 1906.411901][T28496] Bluetooth: hci6: command tx timeout [ 1906.425829][T25280] Bluetooth: hci1: command 0x0406 tx timeout [ 1907.682470][T28500] Bluetooth: hci8: command tx timeout [ 1907.756977][T28500] Bluetooth: hci7: command tx timeout [ 1908.476951][T28500] Bluetooth: hci6: command tx timeout [ 1908.482437][T28500] Bluetooth: hci3: command tx timeout [ 1909.756767][T28500] Bluetooth: hci8: command tx timeout [ 1909.836989][T28500] Bluetooth: hci7: command tx timeout [ 1910.556330][T28500] Bluetooth: hci6: command tx timeout [ 1991.876023][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1991.882701][ C0] rcu: 0-...!: (10501 ticks this GP) idle=e624/0/0x3 softirq=205254/205254 fqs=0 [ 1991.893329][ C0] rcu: (t=10502 jiffies g=213705 q=5745 ncpus=2) [ 1991.899776][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g213705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1991.912205][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=134825 [ 1991.920201][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g213705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1991.931670][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1991.941645][ C0] rcu: RCU grace-period kthread stack dump: [ 1991.947537][ C0] task:rcu_preempt state:I stack:25992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1991.959466][ C0] Call Trace: [ 1991.962748][ C0] [ 1991.965689][ C0] __schedule+0x16f5/0x4d00 [ 1991.970227][ C0] ? schedule+0x165/0x360 [ 1991.974572][ C0] ? __pfx___schedule+0x10/0x10 [ 1991.979448][ C0] ? schedule+0x91/0x360 [ 1991.983708][ C0] schedule+0x165/0x360 [ 1991.987881][ C0] schedule_timeout+0x12b/0x270 [ 1991.992746][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1991.998129][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1992.003424][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1992.008998][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1992.013875][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1992.018842][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1992.024060][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1992.029361][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1992.034594][ C0] ? finish_swait+0xcd/0x1f0 [ 1992.039226][ C0] rcu_gp_kthread+0x99/0x390 [ 1992.043836][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1992.049046][ C0] ? __kthread_parkme+0x7b/0x200 [ 1992.053991][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1992.059025][ C0] kthread+0x70e/0x8a0 [ 1992.063106][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1992.068314][ C0] ? __pfx_kthread+0x10/0x10 [ 1992.072957][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1992.078186][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1992.083395][ C0] ? __pfx_kthread+0x10/0x10 [ 1992.087998][ C0] ret_from_fork+0x3fc/0x770 [ 1992.092609][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1992.097739][ C0] ? __switch_to_asm+0x39/0x70 [ 1992.102510][ C0] ? __switch_to_asm+0x33/0x70 [ 1992.107310][ C0] ? __pfx_kthread+0x10/0x10 [ 1992.111918][ C0] ret_from_fork_asm+0x1a/0x30 [ 1992.116720][ C0] [ 1992.119785][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1992.119811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1992.119823][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1992.119847][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d f4 17 fa 0b 48 89 de 5b e9 f3 b0 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 e0 9c 92 65 8b 15 d8 83 [ 1992.119873][ C0] RSP: 0018:ffffc900000075c0 EFLAGS: 00000246 [ 1992.119887][ C0] RAX: ffffffff866f1148 RBX: 0000000000000000 RCX: ffffffff8de95280 [ 1992.119899][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1992.119908][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff894d9c1e [ 1992.119918][ C0] R10: dffffc0000000000 R11: ffffffff866f1080 R12: 0000000000000000 [ 1992.119929][ C0] R13: dffffc0000000000 R14: ffff88802f968028 R15: 0000000000000000 [ 1992.119940][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 1992.119952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1992.119963][ C0] CR2: 000000002c41eff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1992.119976][ C0] Call Trace: [ 1992.119983][ C0] [ 1992.119988][ C0] team_select_queue+0xc8/0x130 [ 1992.120015][ C0] ? __pfx_team_select_queue+0x10/0x10 [ 1992.120045][ C0] netdev_core_pick_tx+0x11c/0x350 [ 1992.120071][ C0] __dev_queue_xmit+0x857/0x3a70 [ 1992.120093][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1992.120116][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1992.120146][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 1992.120168][ C0] ? __lock_acquire+0xab9/0xd20 [ 1992.120196][ C0] ? tipc_net+0x45/0x270 [ 1992.120215][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1992.120242][ C0] ? tipc_net+0x45/0x270 [ 1992.120258][ C0] ? tipc_net+0x45/0x270 [ 1992.120273][ C0] ? tipc_net+0x45/0x270 [ 1992.120291][ C0] ? tipc_net+0x205/0x270 [ 1992.120310][ C0] ? tipc_crypto_xmit+0x1e2/0x23a0 [ 1992.120337][ C0] ? tipc_net+0x45/0x270 [ 1992.120359][ C0] ? eth_header+0x11b/0x200 [ 1992.120383][ C0] ? eth_header+0x11b/0x200 [ 1992.120404][ C0] ? __pfx_eth_header+0x10/0x10 [ 1992.120425][ C0] tipc_l2_send_msg+0x337/0x400 [ 1992.120453][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 1992.120477][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1992.120501][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1992.120533][ C0] tipc_disc_timeout+0x580/0x6d0 [ 1992.120562][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1992.120597][ C0] call_timer_fn+0x17e/0x5f0 [ 1992.120619][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1992.120641][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1992.120661][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1992.120690][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1992.120712][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1992.120735][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1992.120759][ C0] __run_timer_base+0x61a/0x860 [ 1992.120778][ C0] ? ktime_get+0x3e/0x1f0 [ 1992.120803][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1992.120821][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1992.120851][ C0] run_timer_softirq+0xb7/0x180 [ 1992.120871][ C0] handle_softirqs+0x286/0x870 [ 1992.120898][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1992.120926][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1992.120954][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1992.120975][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1992.120999][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1992.121029][ C0] irq_exit_rcu+0x9/0x30 [ 1992.121067][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1992.121090][ C0] [ 1992.121095][ C0] [ 1992.121101][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1992.121119][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1992.121140][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 e6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1992.121153][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 1992.121165][ C0] RAX: 949e925ff4a4e700 RBX: ffffffff81975d58 RCX: 949e925ff4a4e700 [ 1992.121176][ C0] RDX: 0000000000000001 RSI: ffffffff8d981b97 RDI: ffffffff8be28700 [ 1992.121187][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1992.121199][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa108f0 [ 1992.121210][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1992.121223][ C0] ? do_idle+0x1e8/0x510 [ 1992.121243][ C0] default_idle+0x13/0x20 [ 1992.121257][ C0] default_idle_call+0x74/0xb0 [ 1992.121273][ C0] do_idle+0x1e8/0x510 [ 1992.121290][ C0] ? __pfx_do_idle+0x10/0x10 [ 1992.121315][ C0] cpu_startup_entry+0x44/0x60 [ 1992.121329][ C0] rest_init+0x2de/0x300 [ 1992.121345][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1992.121387][ C0] start_kernel+0x47d/0x500 [ 1992.121407][ C0] x86_64_start_reservations+0x24/0x30 [ 1992.121431][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1992.121453][ C0] common_startup_64+0x13e/0x147 [ 1992.121483][ C0] [ 1993.656162][ T35] sched: DL replenish lagged too much