last executing test programs: 6m12.557314494s ago: executing program 2 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) writev(r1, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000100)='G', 0x1}], 0x2) pipe(&(0x7f0000000080)) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) 6m12.20402873s ago: executing program 2 (id=2596): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000180)=0xffffffff) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 6m11.672877213s ago: executing program 2 (id=2597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2105, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'dh\x00', 0x1, 0x7, 0xb}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 6m11.256790656s ago: executing program 2 (id=2600): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000001c0)=0xfffffffb, 0x4) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)) sendmsg$key(r0, &(0x7f0000000000)={0xa00, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e0000000000000000000000050018"], 0x70}}, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0x5, 0x4, 0xff, 0x9, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x90}}, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) 6m10.879910749s ago: executing program 2 (id=2602): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="66b8aa0000000f23d00f21f866351000000d0f23f80f01d166b8c50000000f23d80f21f86635400000e00f23f8660fc7b60d00bad004ec660fc771000f09f20fe6b58686660f38db9b000066b9160300000f32", 0x53}], 0x1, 0x1, &(0x7f0000000240)=[@cr4={0x1, 0x2509e0}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="0f069a29000000200166baf80cb86ea18184ef66bafc0c66b8db0066efd8b859000000b9800000c00f3235004000000f30b9be0b0000b850000000ba000000000f30360f08f30f0966ba610066b80c0066ef0f011a", 0x55}], 0x1, 0x33, &(0x7f0000000100)=[@flags={0x3, 0x200000}], 0x1) 6m10.669134453s ago: executing program 2 (id=2603): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m9.971987424s ago: executing program 32 (id=2603): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m34.116672423s ago: executing program 4 (id=2885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000740)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x6, [{{0x2, 0x2, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @multicast2}}]}, 0x390) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r8, 0xffffffffffffffff, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 4m31.396438598s ago: executing program 4 (id=2891): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf2589000000acb0ef176e2a37233a08000300", @ANYRES32=r6, @ANYBLOB="10001d800c0000800600050015000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0x15, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 4m27.655301777s ago: executing program 4 (id=2895): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x4d) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4e, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000002c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000240)={0x1, 0x1}) open(&(0x7f0000000380)='./file0/file0\x00', 0x40000, 0x2a) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000174cbc18c8c9941225f9ed4f0c016709f18cb7b03c2b1729"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000440)={{@local, 0x8}, 0x7, 0x0, 0x1, 0x8, 0x0, 0x34b, 0x20000003, 0x6}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 4m24.671767686s ago: executing program 4 (id=2900): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40008041) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x6, 0x7, 0x3, 0x8, 0x10, "722a609d5b8e6760"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x4}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="24005a80200001800500040003"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fedbdf2564000000080001004f00000008000300", @ANYRES32=0x0, @ANYBLOB="41a83f80d3451efb751e0f7c8bb56e93c032402f8b5339d0bb33b3b1e98c1ee86b979bdecf994de41aa5469ef973c850a56608c536d910a3a74075ad29b24584ae51a2286c16040592bc9e6a6a5cde3deb61da495dd21db1b26ef90a70e5fa9e84992ecd3006e01782263bd226a113d6d8ab855b6a23dc3527771221273c038fb1d22dcc464b63360d4199af15fc17"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = socket$igmp(0x2, 0x3, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x2) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab701020301090212000100000000090400000000000000"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x240, 0x170, 0x0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff000000, 0xff], 'syz_tun\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x27, 0x0, 0x1}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x20}}, @common=@inet=@hashlimit1={{0x58}, {'vxcan1\x00', {0x2a, 0x1, 0x80000000, 0xf, 0x5, 0xffff, 0x7ff, 0xc0, 0x78}, {0x7}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'hsr0\x00', {0x2}}}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xff], 'veth1_vlan\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x7, 0x0, 0x33}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x400, 0xe0}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xff, 0xff, 0xff], [0xff, 0xffffffff, 0xff], 'caif0\x00', '\x00', {}, {}, 0x2f, 0x92, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 4m21.51305479s ago: executing program 4 (id=2908): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x44, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000c00)={0xb0000000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x610100, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}}, 0x4000) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r8}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000340), 0x8) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b5f470787f70e06d038e7ff7fc6e5539b3267078b089b3b08386c090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0xfffffff9, 0x2, 0x401, 0x80000000, 0x1, 0x773, 0x37}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000080)={r12, 0x4800000}, &(0x7f0000000180)=0x8) 4m20.814596678s ago: executing program 4 (id=2910): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbd) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbd) r2 = syz_io_uring_setup(0x1f6a, &(0x7f0000000480)={0x0, 0x149, 0x0, 0x0, 0x387}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82103, 0x0) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82103, 0x0) dup(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup(r5) (async) dup(r5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000100), 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) syz_io_uring_setup(0x3c69, &(0x7f0000000240)={0x0, 0x84fe, 0x4000, 0x1, 0x1, 0x0, r2}, &(0x7f0000000140), &(0x7f00000001c0)) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x400000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, &(0x7f0000000340)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @empty}, 0x1c) 4m5.211857524s ago: executing program 33 (id=2910): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbd) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbd) r2 = syz_io_uring_setup(0x1f6a, &(0x7f0000000480)={0x0, 0x149, 0x0, 0x0, 0x387}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82103, 0x0) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82103, 0x0) dup(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup(r5) (async) dup(r5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000100), 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) syz_io_uring_setup(0x3c69, &(0x7f0000000240)={0x0, 0x84fe, 0x4000, 0x1, 0x1, 0x0, r2}, &(0x7f0000000140), &(0x7f00000001c0)) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x400000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, &(0x7f0000000340)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @empty}, 0x1c) 3m15.818518309s ago: executing program 1 (id=3007): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a7a3ab203512100084590000000109021b000200000000090465020009"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a7a3ab203512100084590000000109021b000200000000090465020009"], 0x0) (async) 3m13.674367867s ago: executing program 1 (id=3058): r0 = socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7cc2f5062d080000"], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x6b1}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x4}) add_key$user(0x0, 0x0, &(0x7f00000002c0)="aa790b4b1deae7cbad64c4c70adbca720864cd03d89dd3a7ff4aa46793b9ac303756f36062afbf7634409dce5ef34eff", 0x4f, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x6d, 0x0, 0x400000, 0x5, 0xfff, 0xfffffffffffffffe, 0x20000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x40001) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000600)={0x40011, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0x100000000000400a}, 0x0, &(0x7f0000000400)={0x4, 0x2, 0x800000, 0x3, 0x0, 0x1}, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x7f, @mcast1, 0x3}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc200000000d76100"}, 0x3c) 3m12.861728243s ago: executing program 1 (id=3062): r0 = socket(0xa, 0x800, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r1, &(0x7f00000003c0)=""/159, 0x9f, 0x4) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000270, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2161, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) 3m11.334666497s ago: executing program 1 (id=3065): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$alg(r0, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="d4d063ea8cb1a4a371b2c4ab5510eea47bb4347cffe5c43b7c40dd8b07a0545adb17f147f69a29ceb47ebcd224d5eefe4ed9e88adcb884d1574c181075bc867fdb9d93f3a7f1", 0x46}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000000c0)="7425b1752afc28a9a3f40e308e32", 0xe}], 0x3, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="153d4dfbae1f995a541de8ddb0789ac0d2e6e84d4281b5a18b34acf74045b362d5737cf0981ded8b1719d8f8adac", 0x2e}, {&(0x7f0000000300)="8cb5cfcefff68e576b148529bb007f120c4811049e01882b05c8ce1fd642fa1b76fb0b08661dab4da2ccba076f22cf05c6de9710714b7e4a9c6e2517607b97ee29d5507fbf290ca729a9493b382d53b37926d1ddcaf36172e0cc47c0fbb8c2db677f392abec374df4ca76cc6218062923a15782534c21649edf6650ac2521334967eb198d496e7a4bc8aca78da51f16212491296f095b5", 0x97}, {&(0x7f00000003c0)="e7feef2bafd3eba4dad4c3579d99e2719254e37372ce4a605894ae24ddde53dae0c1b2f10b7c42eed9234515ca232aafc68b25280bfa94b211bcab2a06187df141c147770afc8682e0baf6b505015b4fd422e7ebc945d305be3310d81288bef0d216e26f37435d948468", 0x6a}, {&(0x7f0000000440)="b2d6624e2540c858cc1ad339bbd4f6f777971b4b1115150c13fdbaa315a59d471f03d389a94a97975fb4c6ae27f6f5acd4fa11d966b8e8a7dcae54c310a579ca1fe62fb5ca78", 0x46}], 0x4, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)='f', 0x1}], 0x1, 0x0, 0x0, 0x4004014}], 0x3, 0x91) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000100)) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000880)={0x0, 0x3cfe, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000273000/0x2000)=nil, 0x2000, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000500)={0x4, 0x8000, 0x7, 0x4, 0x15, "88321ab12882219f12a5b3886c0e74750d96ec"}) (async) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000600)="2e52c71dbf55b46fb0b7a08d06c56f3d6ba185f59dc068ad2b516831c24fa08acca43af104d2e0000ac8e10561be011feaa20e7c72baf57c", 0x38}, {&(0x7f0000000640)="b11c3fa8c619fb3fde8ee55367e930fefab810badc283aca06645d17e21dd893770a54919b30c4e264851ca93a8e78357aa66e428ec7edf61e4b334e9dc8709799fc85dfa5ca8612e2a3a1adb292dc961abbdcd38af7c835d7895a4c7f4359c6bd6078cbf2033a432a4a61f869c2af00f26408e18301440a6a7d4802082fdd9780e080f2521f191abd1a599fede1fd3091e4f7dedc62be9dc1ac368776b74674af182f8790394921dfc6662b5a925aa68add6f240f2debb3adf17d58943a304554d532d8568027915a8dcbdc09dbf1832c4a5d699a98a9", 0xd7}], 0x2) 3m11.099951168s ago: executing program 1 (id=3067): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000340)={r5, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x10) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req={0xffff, 0x1, 0x2, 0xf}, 0x10) close(r3) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x2, 0x3, 0xf}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m10.721650946s ago: executing program 1 (id=3068): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000008008000140000000020900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000001308000b40000000000900010073797a30"], 0xd4}}, 0x0) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x58b7cc2ef02cd77a, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100039042bbd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028006000300080800000400120006000e0001000000"], 0x48}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r7, &(0x7f0000000000)=""/165, 0xa5, 0x3) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r10, &(0x7f0000000240)="baa8672607ee615c7a816e72835f3b6d5b1926900ba3f9c51699737f5fa3096e763c7603ba00fb183aa74ed091b7e146a3b1fbfb7237b2734c577451d2", 0x3d, 0x6f7, &(0x7f0000000380)={r11, r12+60000000}) r13 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r13, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x0, &(0x7f0000000a00)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4007, @fd_index=0xe, 0x300000000, 0x0, 0x0, 0x10, 0x1, {0x2, r8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) lseek(r0, 0x7fff, 0x3) close_range(r16, 0xffffffffffffffff, 0x0) 2m54.682590458s ago: executing program 34 (id=3068): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000008008000140000000020900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000001308000b40000000000900010073797a30"], 0xd4}}, 0x0) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x58b7cc2ef02cd77a, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100039042bbd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028006000300080800000400120006000e0001000000"], 0x48}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r7, &(0x7f0000000000)=""/165, 0xa5, 0x3) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r10, &(0x7f0000000240)="baa8672607ee615c7a816e72835f3b6d5b1926900ba3f9c51699737f5fa3096e763c7603ba00fb183aa74ed091b7e146a3b1fbfb7237b2734c577451d2", 0x3d, 0x6f7, &(0x7f0000000380)={r11, r12+60000000}) r13 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r13, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x0, &(0x7f0000000a00)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4007, @fd_index=0xe, 0x300000000, 0x0, 0x0, 0x10, 0x1, {0x2, r8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) lseek(r0, 0x7fff, 0x3) close_range(r16, 0xffffffffffffffff, 0x0) 12.654898766s ago: executing program 6 (id=3467): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x28, 0x107, 0x8000000, 0x1, {0x5, 0x7c}}, 0x14}}, 0x40080c0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(0x0, 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) 11.2780922s ago: executing program 0 (id=3470): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = memfd_secret(0x80000) ppoll(&(0x7f0000000000)=[{r1, 0x1e0599e1de0dac20}, {r1, 0x40}, {r2, 0x8401}, {r1, 0x8000}, {r1, 0xc}, {r1, 0x1000}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x6]}, 0x8) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 10.659889893s ago: executing program 5 (id=3473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x1c0000, 0x4, 0x0, 0x6, 0x7, 0x7f, 0x400}, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$isdn(0x22, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff8, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x4000000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000000000000fb00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) 9.920020523s ago: executing program 7 (id=3475): connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4d, 0x6, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80040000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x2000, 0x3c4210}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280), 0x0, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x601, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000580)}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r5, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r5, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/fib_trie\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400280) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x20000) close(r6) 9.606376811s ago: executing program 5 (id=3476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2f, r1) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2f, r1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 9.398925759s ago: executing program 6 (id=3477): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0xa0, 0x1}}, @code={0x1, 0x74, {"66b885008ee80f20d835200000000f22d8dea200000080660f3adfe4956567f3f3440f07b952030000b809000000ba000000000f3066b804010f00d8440f20c03508000000440f22c08f899897509366baf80cb890ceca8eef66bafc0cb8d1170000ef"}}, @cpuid={0x2, 0x18, {0x2, 0x2fab84a1}}, @cpuid={0x2, 0x18, {0x4, 0xffffffff}}, @code={0x1, 0x64, {"430fc7ab99650000400f79448b4e66bad104ec48b8aa000000000000000f23d00f21f835000000080f23f8c4427d5a8cca04000000c0a300d000000a430f8821900000670fc75b41b9e00a00000f32f32603f3"}}, @cpuid={0x2, 0x18, {0x6, 0x1}}, @cpuid={0x2, 0x18, {0x0, 0x2}}, @code={0x1, 0x4c, {"470f01d1b9800000c00f3235004000000f300f06b9dd0200000f3266b849008ed8470f01df8f0978d230f08155000400000066b81f018ec0442ac1"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0xfffffffffffffffc}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x62, {"0f5800c462f9998eac66f75266420f3882b2b5000000b805000000b90a0000000f01c1470f07660f74a80600000066baf80cb821edf586ef66bafc0cecb96e0900000f3266450fc7760966b8f4000f00d0"}}], 0x25e}) ioctl$KVM_NMI(r0, 0xae9a) (async) r1 = memfd_secret(0x80000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = memfd_secret(0x80000) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)=']/\x00', &(0x7f0000000300)='\\[#(:/$,\x00', 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x440, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r3, 0x10199000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async) r4 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x125000) syz_open_dev$loop(&(0x7f0000000400), 0xffffffffffffff81, 0x1) poll(&(0x7f0000000440)=[{r4}, {r2, 0x13a4}, {r2, 0x2008}], 0x3, 0x1) (async) r5 = accept4$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14, 0x80000) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/233) (async) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20080820}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)=@newlinkprop={0x214, 0x6c, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x8000, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_EXT_MASK={0x8, 0x1d, 0x29}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_VFINFO_LIST={0x1b4, 0x16, 0x0, 0x1, [{0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x5fa5}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8001, 0x6e7, 0x1d7, 0x8100}}, {0x14, 0x1, {0x75d, 0xf34, 0xa, 0x8100}}, {0x14, 0x1, {0x5, 0xe5d, 0x0, 0x88a8}}, {0x14, 0x1, {0x9, 0x672, 0x7, 0x8100}}, {0x14, 0x1, {0x0, 0x649, 0x8, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x100, 0xf92}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3ff}}, @IFLA_VF_TRUST={0xc, 0x9, {0xde, 0x5}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x10000}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0xb1f7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8a70, 0x9}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x321, 0x8, 0x8100}}, {0x14, 0x1, {0x91, 0x983, 0x80, 0x8100}}, {0x14, 0x1, {0x10, 0x150, 0x1000, 0x8100}}, {0x14, 0x1, {0x3, 0x3b7, 0x6, 0x88a8}}, {0x14, 0x1, {0x2, 0xb22, 0x7, 0xc828}}, {0x14, 0x1, {0x4, 0xdac, 0x0, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x204000, 0x1, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4800}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x200}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x83}}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x200000c4}, 0x1000) r7 = dup(r1) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000900)={"32f841d7d4aa7df10826f1e0a701fb330b4aa284ff532a2883dc35fc29d2e9fa", r7, 0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000940)={0x0, 0x2, 0xc411, 0x1}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000d40)={{r8}, {@val={r9}, @max}}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000d80)={0x2, 0x7fffffff}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000f00)=0xe8) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000802, r11, &(0x7f0000000f40)={0x1, 0x3, 0x8, 0x3b1e942b, 0x0, 0x8, 0x1, 0x81, 0x9}) open_tree(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x801) syz_io_uring_setup(0x33cf, &(0x7f0000001000)={0x0, 0x6142, 0x40, 0x1, 0x5}, &(0x7f0000001080), &(0x7f00000010c0)) getsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000001100), &(0x7f0000001140)=0x4) (async) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000001180), &(0x7f00000011c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001200)={0x0, 0x488, 0x30, 0x1, 0x1ff, 0x1}, &(0x7f0000001240)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000001280)={0x9, 0x18009, 0xfff, 0xb, r12}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x100010, r3, 0xc24a4000) 9.296114156s ago: executing program 5 (id=3478): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800900017f7665766800000000040002800800200032000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 9.121263992s ago: executing program 6 (id=3479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000b7080000000000007baaf8ff00000000b5080000080000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000800000018230020", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 8.531864568s ago: executing program 6 (id=3482): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="97f0972655b2"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)="7008fa193f7db839e76dca2f44702a7e9eafe0cd176658f21eb5b5d2c3ae76b36d83f89e339ab2a278cffaf3af838e9adc5ab74433cf38b8992790b8ea3f91a2608a045a4f365c731920ddf4077ea88a5dd19f05863123334beaf0e3956a3900", 0x60}, {&(0x7f0000000080)="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", 0xfa1}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001"], 0x4c}}, 0x0) 8.248490203s ago: executing program 0 (id=3483): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x4) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) dup(r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netpci0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000067000000080001003c000000080003", @ANYRES32, @ANYBLOB="0c00080000000000000000000800c300741300000800c40001000200"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r7, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 7.907939185s ago: executing program 6 (id=3484): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x80000000, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000001c0)={0x2, 0x6, 0x8, 0x100, 'syz1\x00', 0xfffffff7}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x148) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x80000007}) epoll_wait(r4, &(0x7f0000000080), 0x0, 0xb089) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008804) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.746982186s ago: executing program 7 (id=3485): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x38}}, 0x4000040) writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r3, &(0x7f0000001f80)=""/4096, 0x1000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="080000000a140306000000000000000006001500"], 0x28}}, 0x818) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000011) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x1a2) getdents64(r10, &(0x7f00000010c0)=""/4067, 0xfe3) 6.479346359s ago: executing program 5 (id=3488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x310, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x4c, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}, {0xb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xe, 0x8797, 0x8, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x5, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x3, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x1, 0x2, 0x6, 0x1, 0xff, 0x0, 0x3}, 0xe) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) close_range(r2, 0xffffffffffffffff, 0x0) 5.886407192s ago: executing program 5 (id=3489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b00010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) eventfd(0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 5.638309608s ago: executing program 0 (id=3490): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x8) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) getsockopt$MRT(r5, 0x0, 0xce, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0), &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c001980080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.896175541s ago: executing program 0 (id=3491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x408800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r4 = dup2(r3, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) (async) write$vhost_msg_v2(r4, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) (async, rerun: 64) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) (async, rerun: 64) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000008009b000040"]) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.236620961s ago: executing program 0 (id=3493): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x40, 0x93cbdfa27418ee13, 0xe, "f9ba220c4c93375f37405c9a93c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000004a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.212467619s ago: executing program 7 (id=3495): connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4d, 0x6, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80040000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x2000, 0x3c4210}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280), 0x0, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x601, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000580)}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r5, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r5, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400280) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x20000) close(r6) 3.840156554s ago: executing program 3 (id=3496): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x242101, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f00000004c0)="174405", 0x3}], 0x1) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) 3.621846105s ago: executing program 6 (id=3497): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xcdfc}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) dup(r0) syz_io_uring_setup(0x2f59, &(0x7f0000000380)={0x0, 0x5079, 0x40, 0x3, 0x288}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x11c, &(0x7f0000000280)=0xfffffffa, 0x0, 0x4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netpci0\x00'}) 3.31404211s ago: executing program 3 (id=3498): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe0040010000000008000100000001"], 0x24}}, 0x2000a000) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91106f000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe0040010000000008000100000001"], 0x24}}, 0x2000a000) (async) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) (async) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91106f000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7}, 0x94) (async) 2.703941114s ago: executing program 3 (id=3499): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000640)=""/25, 0x19}], 0x7, &(0x7f0000000700)=""/197, 0xc5}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/167, 0xa7}], 0x1, &(0x7f0000000900)=""/216, 0xd8}, 0x7aa}, {{&(0x7f0000000a00)=@ax25={{0x3, @null}, [@bcast, @netrom, @bcast, @remote, @default, @bcast, @netrom, @null]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/98, 0x62}], 0x1, &(0x7f0000000b40)=""/41, 0x29}, 0x7d2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001100)={r2, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x4c08, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='1', 0x1) landlock_create_ruleset(&(0x7f0000000340)={0x7f64, 0x2, 0x2}, 0x18, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r7 = syz_open_pts(r6, 0x0) r8 = dup(r7) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000080)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fedbdf250000000057e6aa710e849710f87f4eae3ede87466e4a64b489f68bb93aad4369f5dfbdcbc9fe7b956322793b12c5976c5907545085b9906dae14ea844ccfb9e724e7482283cc", @ANYRES32=0x0, @ANYBLOB="000000001000040020001280080001006772650014000280060011004e21000006000f0008000000"], 0x40}, 0x1, 0xffffffea, 0x0, 0x4}, 0x804c) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, 0xffffffffffffffff, 0x15b77000) 2.432419794s ago: executing program 0 (id=3500): socket$xdp(0x2c, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x40981) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x305e, &(0x7f00000005c0)={0x0, 0xbc23, 0x10000, 0x1, 0x403f, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0xffffffffffffff9a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xa, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x41564e57}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x103a, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa1daaaaaaaaaa4188a8340081001300884800000000000000004585101c006800000102907800000000ac1414bb1f009078ac1e01018cc1208069fb56336bf812a5164fbf1ce1abce99070486b78a092001d7e42a583d63884b0c6fd00723dd07d256989d066147c2c0cf96e09a392be592ac6d468367e6afa23d15328bb7638d19948bf57d81cef08fc75b1aa6497e3c1c3d47f29a71f963aef0b1f7592514c902829726a7dd3c68d6e4461e1584b2416a3b073a63a141aff4956e59f7254cbdc8c125af012f00e34c21c52c53ef6268a608c2ee5fdc7f83c81ed189f6eabe7a351bf35daaa6cd8496ab1c029f7a4288edc48298dd28a484c9f85c671424967a3c67d8e3c2bdf73d5a49fe73b8a40761080efdb1aeaab59191fe53792adb8660d253acdcc487abc88f990d6bf13764ccf642adde40a588eb50303a283882620903da45055d66ffdd9d3fb218254630ce81ef71e9ab5ffe53b272dbca571ee94d631d4f704658cba430e8b3a614d0b0f5ae9204a08742b9c78ca5ca48b091dbcb6f6e8915a185271ce5d582d3942a08cd6d8085154b412fc854939e7a2b777da16c30664ac8f9b0d8fa80d843667e5a32e8f7080a4da7dacb58f255fb59c7a5babc4c339797e0f30fd62b61095ddf9fce2636c3b11b8438c1892df89f6ca39c14a3bbd64d18e02944093cc9ff39ce618e40b36026266b755dc979f9fd56cb4cd15a913ffd4e0a2a947585f43263d0594c7211012e3c8cb634f0b6d3e3c1741d2a8b5f5d95c1f7119952bfa0f2b96b11f235e8bdb9a9a1ed7114cf6449011eab50d67a36201dede01e26577fc71c758dae47863de4d4adac52326cd6d204ae7c166b4cdd5693652f8ec27b667fddb9319b5bcbf244ea74d1a14b76c49e3f9ca908dd7ffc524b1271fa6a79aa65df4519472052a4c5a162a5a886e02cb63f8d3daee3bc40a1f7f710c9cf5919560535987f78515bbf882b81fbe56951df6743862d8981940e6c946a9b9befd2ef3485ac37672a92b7fe7d8f954deb5dedc0c16db962b22c4032ea75c788e5489ee9eae0b851ebad70be1143d835bb3423244e976311d8da070363d34c420f970e82090db60d61cba39f90ba1f2ae4dfeb58af8d210e98c0025d3c6f0356b6e327d323dcc4334e4ebd72407ad9b7234996dc77e5470e284668607626841d30d203c443a6981558121449c171a91683bf94ecb2f0c9151f69ffa2cceb079c31e08e760c10842569fe8c0049f6c18d16f4905b641a04ee07a8b6cb953c613b58e1b5d5a4699f4a8b5d3df8d4fec12aa4a1e2e8424f1c216557022ba14042e738f851fc6f5bbe9d54a6ec01f64bc23bab247075ef83fb9cc8c2a11753d0b2e3981065b0183835bf8d221c51255cf6406537838010501ba6f140333c269a746acfbff117c88eda39e7c7788262b3ca5a275f7416678c4ce9b83576696eea3e590dfe9aa17f80805a19e227aede2e2c3f970af1d628c3ca0340f86383929f904b8ced3dcbf87eb358d249dc8795fef9314f554fca6f387f7f099b669e9b858416812282643e0625fa6e4e6cd3d5d4effe162e29cf1014002a5456611e7456e72f0bb5226545ff63db164ea68b5801dbbd7015a20294369be383ffc08311e248812e08adfc6d564fecacc15258b90751319fa1e2d380f53f1a81ab7b2bd9f22419aa6cbd5875f096a35e4a2cafd8f472afbd0bfc007986c60b7bab3a5230850e3ea22a0129a78adec78f0cac16e8f51b28a7364f02592116b4bce06e2ec21fc66feacb16c89958706d4ab6e196e1ce20559786ff7e557671977a89bf6f932b8323737d64a9afe6059e4577bda1eb69cfa8aaed66dd28ac0902ef284ebc1879ca1b12863f76825f2bf595f8f7e01227ed7ca879adfe38b0e06584127bc7fd5d87de79ee3e3aaa288a6a2d7a5a78e273ba3f4aa447d0fca117fdd47552cfa72216ff9625b132ddc72161f6f7f6f1d99481cb0ff60ed2f2670dfb9c19abe2fb5c5891a197e8c5de5969e932407100fdea996ccac4e525e1b46478321421c87f3d248103a365267a190a982d95f53c9d8209a7d83f5870493f05b60d5decf99adf91a3904b820810fdab2f0908ab8448f213253332856643ab79e66f46d842524a30730a5d0bf46cf96ba111f9d8422c844a6b11cdb35818b679d6c54ce183d624b6594de9836fda1314c63d668ab5ba55672e48e4f2532dab83cd60e78f11719e4d67b8109d7e165d6c96240b7a74180fba2f52950750c69e051c35c9341d7a8692bc3c9a90768c12ebc82dfc95de7ac7b7ae3eed05a6c6f71142a0a3e4c86220ccc83de546c7517cfc31e0fc2431fed461ad0987fbd9f5a7ca625a597a88916adf0db94cc10650a6c0df4478a141e0f48da7e7f16158fd5ed8738498de0c8681001b8f4c29232b07aed3c69fe8f69d6e3c3bb02c73763b7a435fef8eb46a9384b2145dfba49e6fac1a1c04b3e945fa769d01b8324e173fabe02e2ec98bbd669173412de12ef2bd939826a7c19e914aa37bcf15ed308ce9ab14ed4d8c25b135519df5d7cf262949ae59d820f1fcba7748d373654ae9fcf5a01e8f7178b8bb3bc9940958490e9ade0b7212d90dfd78068dc7f59e0712f79f2d112876923a3c94df7ea5fb695ea0a8370b50d2175f16ec9bdb2a423c19e5ecfeaa6552ed6c2809fdeb2a2ca397b48ccb9557ba5d44cf3231c877b6a4c26e745a7eeb5a2fb93cabc8ef733449fd7e38219c605a513a8db07ee78786664afab8310c45f2c03f9f9e68d30696262b0c8087c905edde11c08041c14bbfd61d25c543058348196e9019b46dd260625f503d5ddc3a57e5808efe1450c10b6bcd97067da7b636b096e5a152083e98a1f72d70a995136f9fca89a800fd3d05130610a6210bcb3bc88a1dcf6e257f737b14aaa5f444418343c9c2343ff97634303f6f684f6467360dea969a08ec63bfe753f9f9a0d028971dfc01ad4eeec73cdeb0524558f2e158b15050c23601d252aafc7ef10bce23224fd567c0df4a9072aec27657220dd19cb49a363aa2f52913c5abf3f900c4e7ccdca2277e712b330f1ff7c45f0f98f63e496fb66e809981875423d9cce0f0a3f7d4a3d14b66f842093b99c31c3e3dd2298f6eb514433b242217dcd70ca3fa3a41889eba66551611f49bccf10492ca6aa8d1a774e14d09fe30059e6ea2c175e5806d4b6d647b6277595c3b55f708c03693d26e11f9dd220a0ecd721e3dc65deb2fd8f177da2efaef2ffaf9f58b491c19ac4eac500ba91c8c8a2e37321755f5d26a24bf288c0baad6ace6f14f25e95334cf38ad5d47e7545671d9ceaf1b836c691a1f53e50c3709a5950dff93a5dacffff223da6393208f1ca86bd16de5de7e99a3f7439af43d0616bf8236e52a05f91bb047010ab95ed4215f98d80b25b1fa2ec3996f117f0e165a74fcc2a094189036608597ddf0127b847d1db9d5d0d12272043bc17543357538889a4bc206de096735321138b1ca0bf3ac67dc41fa288e10e989a55b50f06d7e603bfdc9d5b7094c27aeb1a8b7528042b58c4f59bd99e984c8eda1daa6aac4c0a3f37412c921adcf1539a9f73554ef96c056da747694681b87ce5f1f90e065a87159c72a50490b50ac6f7790dfad3590165b067a7c554e09f8bd0e2d92ccf4db63a854fc761dd93eecd9b4d9dcfadd0a380b362fad0223ab1950c6ab7298a85fc23f70d52dc339a319b004f4381476a2468d3b6f3c3aed3e9fbcad8364915e942fae7b778ff1a9ba622d1513091abd7992d32ddbd96f467c5e790a364ab2d409519f08415a8a18303cae2f09196c71d542c8f6bb41654128535c87452bded9b7622d6fff2ec2b37b24548c83ac4408c7e285193dced5e32bb60a99d117fb5a7ea26ede336308f92bc583bfe0fd461981440b2ff7ca9a9ed529c9d53019e3859062ac51ae69559028cd37a40f5a402b4c14c6cc40f3b9c4a4a3b90bf55d2e97f8d2591af6b3b46692aaf6837363cb0587c04d30d4ce4b834dd84a29dee6f5bf292be24c0a0d46bff7dba031f07a9bcb24e10217f7beeb0259ab374618543f72376774602e386d39b77d8861bf8994a2b62d355ead9b8aae697b0b27de233204a69c4082c7b85854998c4c0db92c801ee9c367e193cd84c313de2256a21fb3f1695f842353c52da316b40cd7511d9e0946e2204e23c4c6f332508f933c40231107e3415b9c961064334c2ebf1a66bbfb8222339b55ddac5c567268ef80c1b25bc74a186a4342c8f1b274b8155330ec1dba177a7a03e55e36bdc434943fee13a08e7d06acc30f5ad0ff5bc1a7c642946703ad1b81217f8bc894648fade745cf78b4e65f89d31ffc21fad6b4f1bcc06921435fae9b151f41c4501b5052d463d14a65c3bd17058bd798aafc8af2e130673874b67a3c09a4f7cb87e57c7ad89a3f5b6e185514e0196bba1893552e7c6d43d6338e42e9d6c3a089c185dca7f2a0ef3d130ff460aef7a7db5bd8f39c078c58c21a01a3bbfe1c07624d579b799f86205b8191186357b0a7c2afed92fb329cfcbe2a7496b4d155e8d8bd667bb849e9c5fecc8552f57be7fe690de35484cc50b7c558941fb197d6834e04f0fab124abc44f2b309eab2a468667be84887bf99b7e2ced9b78f444b38945502c7eee5f0504f56e591fbbd48dfd8e736bf33daeab60e9e25674c2ed285082245be206d3a51c4cc9311d1aafe43306ece9f013592c4d975a39ff9d58a82129d805708608b71be7c4b13de2fe1d186c8ad3da304f1a7d528e71f2b5e19f2aadc174d1ba0cc4b6f79a200729a55f351f99bf898cd418c58c7035e4960799de0f5ed19e4b8cab043ba88ca8399c8a2a3234b709500bbea677fd6140c92ef97bf5b4a502d282fc4b82eefd4eaec845dcff3eed898bf43b51453d83a80f2242b3016de734ab4f720f34269ed5c4ec3f8ea05645c83b41de8b7c2b01e30091069667e5180b33a7fe555e629816e66af02b1ddb50fdb3dea4c9ae1392113179af099a45e1da2a9aad8ce78c72bfcbb97256a0fa5c03cf0bfe0f4bd88fa743809b8030de02ff307ed2bc67cd24b21058fd8d83cf521bfc6d8fa09e6ffdcc73f75c408a7954d871d40b8715e273a343e02099d39d901bc3b7f5d4d5fe3f2c40c75c54d531be68191e63bb0cd0951db6c43b702908831c98fda12bbaa5b5a228a93127ca83286c70d2a4907972cfbeb8b504bbd8e612c25b0bf5cd479b5628be58de4f7a4e8409ddb4dc080b3abb784654059225f13e98e303ea35c038693a5853bf1064e4bb6861253397c05d929889288dfccb94c316b118924842c26888ab888dc84f2632edbadc301b9e8c206192f739e2f140d9b412bf00c1705f055315037153787476c99d39fe004b402bf669e22071b988d8dc0dc7976cb65c22269021a24b130775144db9d1fcdbd02a85232a7e058d143386cb81359814fcecd549e7db4c9173c9043fa832decbcf0da8f7b97ec4ff0e02d0d20c533875b05a67e8f66965e9ff1b7f7bc9bceb432f1efa01cec4ebc74125fc17c57e4c9e6244570adf15be9485eb8af03e19edf5ebc2d0520ddc3814b3733bc59d203ceab2726d1660d62e93dd5699cb1327dc91f9d93926db714bd94d29b559f8312e977d2d7159e67fb2539ac3f9a4a8b9e1cfe13f92dfb888dfa9236d473d79ebbf07f54229a022069c5a9c330ea25c1dcef0cf6ba12436b2c0fc072f82f87982a71900cce98f8c722e969742ab370f0b82b06eaeb41c5bdf709165fd02bed88b443dcfe93b18ab9521dfa0bc842c7fd6cb925531e712cfaf42a158d0b0552b454e28dcb42a162ac0e5eba61f672ec9d693faad12d23f3a12f927e2717ce2e471e0f25ee13f22a6c3180ae0e92d6a7f"], &(0x7f0000000180)={0x1, 0x1, [0xf74, 0x8bf, 0x9f3, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) 1.593149465s ago: executing program 3 (id=3501): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='sysv\x00', 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)={0x420000, 0x142, 0x8}, 0x18) (async) r1 = fsmount(r0, 0x1, 0xbfa07e0aa2c72af2) fchdir(r1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0x200004) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c050002000000000008000740fdfffffd0800064000000001"], 0x94}}, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000440)={0x2}) 1.507993332s ago: executing program 5 (id=3502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x28, 0x107, 0x8000000, 0x1, {0x5, 0x7c}}, 0x14}}, 0x40080c0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(0x0, 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) 863.829687ms ago: executing program 3 (id=3503): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e", 0xb, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, 0x0, r0}, &(0x7f00000000c0)=""/69, 0x45, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000004800)=[{{&(0x7f0000000340)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x18}}], 0x1, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xd, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4a24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c) listen(r7, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0xdbd}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 849.780739ms ago: executing program 7 (id=3504): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f0000004240)='mountstats\x00') r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) (async) sched_setattr(0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, 0x0) close_range(r2, r1, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002180)={0x4, 0x8101, 0xff}) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) (async) ptrace(0x10, 0x0) bind$rxrpc(r1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) (async) ptrace$setregs(0xf, 0x0, 0x2, &(0x7f00000001c0)="5ca98b99dd02036e9443a21d13f1e1ebfa3136dab64deda0a10ef848aeae5f713309c414c431a8411bc13ec80d237a84b1e4cc13b58c37a9e9774b4f7444235c4af1594dfc4294876f54558570322ba5640c83bfa785d8b06ac9caf80002f0cba77542a0f8047e93998a03ce8cb9bfd351") (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@remote, @loopback, [0x3b12536397520718, 0xff, 0x0, 0xff], [0xffffff00, 0xff, 0xff000000, 0xff], 'veth1_to_bridge\x00', 'dummy0\x00', {}, {0xff}, 0x4, 0xb5, 0x4, 0x71}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x2, 0x0, [0xc, 0x4, 0x40, 0xfffa, 0x1, 0xea, 0x0, 0xc, 0x1, 0x0, 0x9a3d, 0x3ff, 0x3ff, 0x3, 0x41d7, 0x9953], 0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xffffff00, 0xff000000, 0xff000000], [0xff, 0x0, 0xff000000, 0xffffff00], 'vcan0\x00', 'macsec0\x00', {}, {0xff}, 0x73, 0x0, 0x7, 0xb}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x4, 0x3ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 489.580243ms ago: executing program 7 (id=3505): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000003f0000000000000000b7080000000000007baaf8ff00000000b5080000080000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000800000018230020", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 65.775712ms ago: executing program 3 (id=3506): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) epoll_create1(0x80000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x4000000) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1", 0x9}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async, rerun: 32) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 7 (id=3507): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x80000000, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000001c0)={0x2, 0x6, 0x8, 0x100, 'syz1\x00', 0xfffffff7}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x148) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x80000007}) epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0xb089) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008804) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r6, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) kernel console output (not intermixed with test programs): iled to get vendor val 0x000e size 3: -121 [ 1194.277533][T18908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.300351][T18908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.313901][T17259] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1194.321586][T17259] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 1194.355611][ T7723] usbhid 1-1:0.0: can't add hid device: -71 [ 1194.361711][ T7723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1194.421909][T17259] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1194.474078][ T7723] usb 1-1: USB disconnect, device number 105 [ 1194.662900][T18920] netlink: 'syz.5.3084': attribute type 5 has an invalid length. [ 1194.843320][T10134] team0 (unregistering): Port device team_slave_1 removed [ 1195.218957][T10134] team0 (unregistering): Port device team_slave_0 removed [ 1196.351212][ T5924] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1196.513806][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 1196.522061][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1196.556396][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1196.579702][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1196.606032][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1196.617996][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1196.655642][ T5924] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1196.665888][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.686345][ T5924] usb 1-1: Product: syz [ 1196.694489][ T5924] usb 1-1: Manufacturer: syz [ 1196.705701][ T5924] usb 1-1: SerialNumber: syz [ 1196.715957][ T5924] usb 1-1: config 0 descriptor?? [ 1196.955017][ T5924] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1197.023074][ T5924] input input49: Device does not respond to id packet M [ 1197.054979][ T5924] input input49: Device does not respond to id packet P [ 1197.090361][ T5924] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1197.121467][ T5924] input input49: Device does not respond to id packet B [ 1197.141626][ T7723] usb 6-1: USB disconnect, device number 42 [ 1197.196676][ T5924] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1197.202924][ T5924] input input49: Device does not respond to id packet N [ 1197.268713][ T7723] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1197.308331][ T5924] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1197.318214][ T7723] cp210x 6-1:0.0: device disconnected [ 1197.364978][ T5924] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1197.394057][ T5924] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 1197.782907][T18946] fuse: Unknown parameter 'æ¹>ï镉 %' [ 1197.894565][ T7723] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1198.014665][T18948] fuse: Bad value for 'fd' [ 1198.053772][ T7723] usb 6-1: device descriptor read/64, error -71 [ 1198.294619][ T7723] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1198.350871][T10134] IPVS: stop unused estimator thread 0... [ 1198.445105][ T7723] usb 6-1: device descriptor read/64, error -71 [ 1198.595480][ T7723] usb usb6-port1: attempt power cycle [ 1198.943833][ T7723] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1198.984558][ T7723] usb 6-1: device descriptor read/8, error -71 [ 1199.025229][T16424] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1199.037217][T16424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1199.047552][T16424] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1199.060021][T16424] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1199.068096][T16424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1199.185818][T17214] usb 1-1: USB disconnect, device number 106 [ 1199.253891][ T7723] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1199.297805][ T7723] usb 6-1: device descriptor read/8, error -71 [ 1199.434431][ T7723] usb usb6-port1: unable to enumerate USB device [ 1199.862782][T17214] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1200.076661][T17214] usb 1-1: config 0 has no interfaces? [ 1200.128167][T17214] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1200.137727][T17214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.167002][T17214] usb 1-1: Product: syz [ 1200.171652][T17214] usb 1-1: Manufacturer: syz [ 1200.179341][T17214] usb 1-1: SerialNumber: syz [ 1200.213163][T17214] usb 1-1: config 0 descriptor?? [ 1200.287356][T18754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1200.333480][T18754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1200.550434][T18754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1200.820465][T18967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.829997][T18967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.868318][T18754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1201.152628][T16424] Bluetooth: hci0: command tx timeout [ 1201.883790][T17214] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1202.077034][T17214] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1202.192040][T17214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.323000][T17214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.448954][T17214] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1202.566270][T17214] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1202.713808][T17214] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1202.735840][T18958] chnl_net:caif_netlink_parms(): no params data found [ 1202.752943][T17214] usb 6-1: Manufacturer: syz [ 1202.780232][T17214] usb 6-1: config 0 descriptor?? [ 1202.920382][T18754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.214595][T16424] Bluetooth: hci0: command tx timeout [ 1203.295144][T18997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.324156][T18997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.366436][T17214] usbhid 6-1:0.0: can't add hid device: -71 [ 1203.386761][T17214] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1203.404902][T17214] usb 6-1: USB disconnect, device number 47 [ 1203.482815][T18754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.577837][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.585118][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.618683][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.625960][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.717743][T17214] usb 1-1: USB disconnect, device number 107 [ 1204.074556][T18958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.098822][T18958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.144278][T18958] bridge_slave_0: entered allmulticast mode [ 1204.152963][T18958] bridge_slave_0: entered promiscuous mode [ 1204.242043][T18958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.302428][T18958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.330495][T18958] bridge_slave_1: entered allmulticast mode [ 1204.354786][T18958] bridge_slave_1: entered promiscuous mode [ 1204.549291][T17214] IPVS: starting estimator thread 0... [ 1204.674190][T19024] IPVS: using max 32 ests per chain, 76800 per kthread [ 1204.830575][T18958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.939322][T18958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.284372][T16424] Bluetooth: hci0: command tx timeout [ 1205.382756][T18958] team0: Port device team_slave_0 added [ 1205.395247][T19027] kvm: pic: non byte write [ 1205.459166][T18958] team0: Port device team_slave_1 added [ 1205.479850][T19007] delete_channel: no stack [ 1205.553413][T18754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.977345][T18958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.007905][T18958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.160404][T18958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.275683][T18958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.308671][T18958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.433772][T18958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.770943][T18417] usb 2-1: USB disconnect, device number 75 [ 1207.082562][T18958] hsr_slave_0: entered promiscuous mode [ 1207.093730][T17214] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1207.136367][T18958] hsr_slave_1: entered promiscuous mode [ 1207.162814][T18958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1207.172661][T18958] Cannot create hsr debugfs directory [ 1207.211443][T18754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.298367][T17214] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.349456][T17214] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1207.364055][T16424] Bluetooth: hci0: command tx timeout [ 1207.376911][T17214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.435899][T17214] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1207.529554][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.795220][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.210213][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.329301][T18754] veth0_vlan: entered promiscuous mode [ 1208.468933][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.603698][T17214] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1209.016300][T17214] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1209.026637][T17214] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1209.067498][T17214] usb 1-1: USB disconnect, device number 108 [ 1209.212071][T18754] veth1_vlan: entered promiscuous mode [ 1209.604093][T18754] veth0_macvtap: entered promiscuous mode [ 1209.657829][T18754] veth1_macvtap: entered promiscuous mode [ 1210.356967][T18958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1210.482045][T18754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.534198][ T5924] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1210.625803][T18958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1210.718378][T18958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1210.921128][ T5924] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.944184][ T5924] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1210.948734][T18958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1210.954653][ T5924] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.976228][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.021178][T19082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1211.048752][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1211.090473][T18754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.356330][ T5917] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1211.536149][ T5917] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1211.547545][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.563265][T18754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.596222][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.608578][T18754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.632879][T18754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.647790][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1211.673797][T18754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.694653][ T5917] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1211.738115][ T5917] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1211.807817][ T5917] usb 7-1: Manufacturer: syz [ 1211.849873][ T5917] usb 7-1: config 0 descriptor?? [ 1212.067249][ T64] bridge_slave_1: left allmulticast mode [ 1212.125949][ T64] bridge_slave_1: left promiscuous mode [ 1212.146541][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.229779][ T64] bridge_slave_0: left allmulticast mode [ 1212.236755][ T64] bridge_slave_0: left promiscuous mode [ 1212.254857][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.283515][T19092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.299544][T19092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.326465][ T5917] usbhid 7-1:0.0: can't add hid device: -71 [ 1212.344102][ T5917] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1212.378568][ T5917] usb 7-1: USB disconnect, device number 4 [ 1213.223930][T18417] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1213.329126][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.343375][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.360216][ T64] bond0 (unregistering): Released all slaves [ 1213.387891][T18417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.424502][T18417] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1213.467987][T18417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.483050][T18417] usb 7-1: Product: syz [ 1213.507435][T18417] usb 7-1: Manufacturer: syz [ 1213.528811][T18417] usb 7-1: SerialNumber: syz [ 1213.567247][T18417] usb 7-1: config 0 descriptor?? [ 1213.590581][T18417] usb 7-1: bad CDC descriptors [ 1213.626022][T18417] usb 7-1: unsupported MDLM descriptors [ 1213.852576][T19110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.890351][T19110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.974176][T18417] usb 7-1: USB disconnect, device number 5 [ 1214.241089][T10134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.305784][T10134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.374446][ T64] hsr_slave_0: left promiscuous mode [ 1214.398787][ T64] hsr_slave_1: left promiscuous mode [ 1214.408459][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.416529][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.431444][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.454240][T18417] usb 1-1: USB disconnect, device number 109 [ 1214.483827][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.650123][ T64] veth1_macvtap: left promiscuous mode [ 1214.694239][ T64] veth0_macvtap: left promiscuous mode [ 1214.700003][ T64] veth1_vlan: left promiscuous mode [ 1214.719868][ T64] veth0_vlan: left promiscuous mode [ 1215.075146][T18417] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 1215.123699][ T5944] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1215.280832][T18417] usb 1-1: Invalid ep0 maxpacket: 16 [ 1215.351634][ T5944] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 1215.360553][ T5944] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.375398][ T5944] usb 7-1: config 135 has no interface number 0 [ 1215.390147][ T5944] usb 7-1: config 135 interface 230 has no altsetting 0 [ 1215.429082][ T5944] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1215.438826][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.447052][T18417] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 1215.455369][ T5944] usb 7-1: Product: syz [ 1215.463923][ T5944] usb 7-1: Manufacturer: syz [ 1215.482346][ T5944] usb 7-1: SerialNumber: syz [ 1215.641734][T18417] usb 1-1: Invalid ep0 maxpacket: 16 [ 1215.651272][T18417] usb usb1-port1: attempt power cycle [ 1215.699826][T19139] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3111'. [ 1215.721511][T19139] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3111'. [ 1216.064269][T18417] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1216.099467][T18417] usb 1-1: Invalid ep0 maxpacket: 16 [ 1216.254290][T18417] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1216.275712][T18417] usb 1-1: Invalid ep0 maxpacket: 16 [ 1216.282800][ T5917] usb 7-1: USB disconnect, device number 6 [ 1216.282845][T18417] usb usb1-port1: unable to enumerate USB device [ 1216.440396][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1216.513101][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1217.233491][T18959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.251905][ T5917] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1217.291876][T18959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.400101][T18958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.440046][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1217.457919][T18958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.468116][ T5917] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1217.482137][ T5917] usb 7-1: config 0 has no interface number 0 [ 1217.510755][ T5917] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1217.518708][T18959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.529202][T18959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.531485][ T5917] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1217.551124][ T5917] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1217.571802][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.580990][ T5917] usb 7-1: Product: syz [ 1217.615735][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.623000][T10140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.640519][ T5917] usb 7-1: Manufacturer: syz [ 1217.653534][ T5917] usb 7-1: SerialNumber: syz [ 1217.677588][ T5917] usb 7-1: config 0 descriptor?? [ 1217.795013][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 1217.897398][ T5917] radio-si470x 7-1:0.35: this is not a si470x device. [ 1217.936513][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1217.936534][ T30] audit: type=1326 audit(1752535519.739:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.013987][ T5917] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1218.044006][ T5944] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1218.052070][ T30] audit: type=1326 audit(1752535519.739:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.192878][ T30] audit: type=1326 audit(1752535519.739:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.267750][ T5944] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1218.279089][T18958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.337386][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.352794][ T30] audit: type=1326 audit(1752535519.749:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.379744][T19182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.431707][T19182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.452834][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.510074][ T30] audit: type=1326 audit(1752535519.749:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.517044][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1218.610440][ T30] audit: type=1326 audit(1752535519.749:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.665663][T18958] veth0_vlan: entered promiscuous mode [ 1218.685084][ T5944] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1218.692103][T18958] veth1_vlan: entered promiscuous mode [ 1218.717511][ T30] audit: type=1326 audit(1752535519.739:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.772391][ T5944] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1218.798204][ T30] audit: type=1326 audit(1752535519.749:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.842903][ T5944] usb 6-1: Manufacturer: syz [ 1218.871632][T18958] veth0_macvtap: entered promiscuous mode [ 1218.888560][ T30] audit: type=1326 audit(1752535519.749:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1218.916998][ T30] audit: type=1326 audit(1752535519.749:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.0.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc71078e929 code=0x7ffc0000 [ 1219.049633][ T5944] usb 6-1: config 0 descriptor?? [ 1219.114494][T18958] veth1_macvtap: entered promiscuous mode [ 1219.224628][T18958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.279760][T18958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.354138][T18958] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.374743][T18958] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.394057][T18958] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.405695][T18958] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.422851][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1219.445323][T19192] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20002 [ 1219.521440][T19170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.575256][T19192] binder: 19189:19192 ioctl 400c620e 200000000380 returned -22 [ 1219.604502][T19170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.616698][ T5944] usbhid 6-1:0.0: can't add hid device: -71 [ 1219.635256][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1219.700668][ T5944] usb 6-1: USB disconnect, device number 48 [ 1219.749502][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.760222][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.949648][ T5917] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 1220.054206][T18417] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1220.083847][ T5924] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1220.127214][ T5917] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 1220.165456][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.175205][ T5917] usb 7-1: USB disconnect, device number 7 [ 1220.182675][ T5917] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 1220.190085][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.305403][T18417] usb 4-1: Using ep0 maxpacket: 8 [ 1220.343815][T18417] usb 4-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 1220.414325][T18417] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 1220.437385][T18417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 218, changing to 11 [ 1220.448983][T18417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 50524, setting to 1024 [ 1220.460885][T18417] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1220.476281][T18417] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1220.603996][T18417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 1220.612680][T18417] usb 4-1: SerialNumber: syz [ 1220.842977][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.851575][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.863822][T18417] usb 4-1: config 0 descriptor?? [ 1220.961462][T19194] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1221.073787][ T5917] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1221.256918][ T5917] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1221.294964][ T5917] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1221.313766][ T5917] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1221.324518][ T5917] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1221.334111][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.356519][T19208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1221.416451][ T5917] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1221.483869][T17259] usb 1-1: new low-speed USB device number 115 using dummy_hcd [ 1221.511125][T19219] loop6: detected capacity change from 0 to 1 [ 1221.570945][T19219] Dev loop6: unable to read RDB block 1 [ 1221.654562][T17259] usb 1-1: Invalid ep0 maxpacket: 32 [ 1221.667281][T19219] loop6: unable to read partition table [ 1221.673284][T19219] loop6: partition table beyond EOD, truncated [ 1221.723653][T19219] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1221.814937][T19225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3121'. [ 1221.827646][T17259] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 1221.835524][T18417] usb 4-1: USB disconnect, device number 66 [ 1221.865282][ T5917] usb 6-1: USB disconnect, device number 49 [ 1222.023987][T17259] usb 1-1: Invalid ep0 maxpacket: 32 [ 1222.057258][T17259] usb usb1-port1: attempt power cycle [ 1222.423750][ T5917] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1222.444393][T17259] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 1222.494706][T17259] usb 1-1: Invalid ep0 maxpacket: 32 [ 1222.623671][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 1222.636123][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.661619][T17259] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 1222.689159][ T5917] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1222.718714][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.735156][T17259] usb 1-1: Invalid ep0 maxpacket: 32 [ 1222.760027][ T5917] usb 6-1: Product: syz [ 1222.764742][ T5917] usb 6-1: Manufacturer: syz [ 1222.769429][ T5917] usb 6-1: SerialNumber: syz [ 1222.774344][T17259] usb usb1-port1: unable to enumerate USB device [ 1222.827053][ T5917] usb 6-1: config 0 descriptor?? [ 1223.049331][ T5924] usb 6-1: USB disconnect, device number 50 [ 1224.083784][T17259] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1224.252350][T17259] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1224.273323][T17259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.299107][T17259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.310875][T17259] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1224.362354][T17259] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1224.376274][T17259] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1224.845761][T17259] usb 6-1: Manufacturer: syz [ 1224.854613][T17259] usb 6-1: config 0 descriptor?? [ 1225.187430][T19287] loop6: detected capacity change from 0 to 1 [ 1225.221308][T19287] Dev loop6: unable to read RDB block 1 [ 1225.262869][T19287] loop6: unable to read partition table [ 1225.299167][T19268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.304200][T19287] loop6: partition table beyond EOD, truncated [ 1225.344105][T19287] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1225.348651][T19268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.439088][T17259] usbhid 6-1:0.0: can't add hid device: -71 [ 1225.483001][T17259] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1225.543223][T17259] usb 6-1: USB disconnect, device number 51 [ 1226.317128][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1226.323373][T19306] vti0: entered promiscuous mode [ 1226.420006][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1226.439781][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1226.483968][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1226.496990][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1227.648735][ T30] kauditd_printk_skb: 578 callbacks suppressed [ 1227.654962][T19332] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1227.660843][ T30] audit: type=1326 audit(1752535529.459:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1227.913913][ T30] audit: type=1326 audit(1752535529.459:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1227.988547][ T30] audit: type=1326 audit(1752535529.469:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1228.193726][ T30] audit: type=1326 audit(1752535529.469:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f780a38d290 code=0x7ffc0000 [ 1228.442644][ T30] audit: type=1326 audit(1752535529.469:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1228.567419][ T51] Bluetooth: hci3: command tx timeout [ 1228.627158][T18417] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 1228.673815][ T30] audit: type=1326 audit(1752535529.469:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1228.912656][T18417] usb 6-1: device descriptor read/64, error -71 [ 1228.968774][T19309] chnl_net:caif_netlink_parms(): no params data found [ 1229.025057][ T30] audit: type=1326 audit(1752535529.469:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1229.108978][ T30] audit: type=1326 audit(1752535529.469:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1229.193983][T18417] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 1229.247064][T10134] bridge_slave_1: left allmulticast mode [ 1229.252781][T10134] bridge_slave_1: left promiscuous mode [ 1229.271088][ T30] audit: type=1326 audit(1752535529.479:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1229.293605][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.313105][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.363967][T18417] usb 6-1: device descriptor read/64, error -71 [ 1229.397676][T10134] bridge_slave_0: left allmulticast mode [ 1229.420375][ T30] audit: type=1326 audit(1752535529.479:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1229.442842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.643706][T10134] bridge_slave_0: left promiscuous mode [ 1229.660007][T18417] usb usb6-port1: attempt power cycle [ 1229.666469][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.022681][T18417] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 1230.089223][T18417] usb 6-1: device descriptor read/8, error -71 [ 1230.343740][T18417] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 1230.386790][T18417] usb 6-1: device descriptor read/8, error -71 [ 1230.488482][T10134] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1230.541715][T18417] usb usb6-port1: unable to enumerate USB device [ 1230.654009][ T51] Bluetooth: hci3: command tx timeout [ 1230.845466][T10134] tipc: Disabling bearer [ 1231.234958][T10134] bond0 (unregistering): left allmulticast mode [ 1231.241521][T10134] bond_slave_0: left allmulticast mode [ 1231.247538][T10134] bond_slave_1: left allmulticast mode [ 1231.257253][T10134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.268866][T10134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.279163][T10134] bond0 (unregistering): Released all slaves [ 1231.852777][T10134] bond1 (unregistering): Released all slaves [ 1232.099378][T10134] bond2 (unregistering): Released all slaves [ 1232.724452][ T51] Bluetooth: hci3: command tx timeout [ 1232.776492][T10134] tipc: Left network mode [ 1233.108161][T19309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.160947][T19309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.198588][T19398] netlink: 'syz.6.3150': attribute type 1 has an invalid length. [ 1233.310030][T19309] bridge_slave_0: entered allmulticast mode [ 1233.330771][T19309] bridge_slave_0: entered promiscuous mode [ 1233.572453][T19309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.587190][T19309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.598549][T19309] bridge_slave_1: entered allmulticast mode [ 1233.635528][T19309] bridge_slave_1: entered promiscuous mode [ 1233.862918][T19399] bond1: entered promiscuous mode [ 1233.876902][T19399] bond1: entered allmulticast mode [ 1233.887582][T19399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1234.391169][T19402] bridge1: entered promiscuous mode [ 1234.422193][T19402] bridge1: entered allmulticast mode [ 1234.441352][T19402] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1234.465410][T18959] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1234.684780][ T3476] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1234.804164][ T51] Bluetooth: hci3: command tx timeout [ 1235.366013][T19421] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3154'. [ 1235.399729][T19423] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3154'. [ 1235.772799][T19421] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1235.830074][T19421] 0ªX¹¦D: entered allmulticast mode [ 1235.839228][T19421] veth0_macvtap: entered allmulticast mode [ 1235.855365][T19421] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1235.914178][T19423] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 1235.951343][T19423] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1236.168349][T10134] hsr_slave_0: left promiscuous mode [ 1236.180036][T10134] hsr_slave_1: left promiscuous mode [ 1236.213381][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3158'. [ 1236.230384][T19433] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3158'. [ 1236.303883][ T5964] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1236.571704][ T5964] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 1236.609132][ T5964] usb 4-1: config 0 has no interface number 0 [ 1236.629813][ T5964] usb 4-1: config 0 interface 32 has no altsetting 0 [ 1236.640296][ T5964] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffb2, bcdDevice=e0.eb [ 1236.668957][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.689326][ T5964] usb 4-1: config 0 descriptor?? [ 1236.712384][T19447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1236.767861][T19447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1236.916559][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1236.916580][ T30] audit: type=1326 audit(1752535538.739:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.6.3160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f670f18e929 code=0x0 [ 1236.948674][ T5964] usb 4-1: string descriptor 0 read error: -71 [ 1236.990992][ T5964] option 4-1:0.32: GSM modem (1-port) converter detected [ 1237.244082][ T5964] usb 4-1: USB disconnect, device number 67 [ 1237.280718][ T5964] option 4-1:0.32: device disconnected [ 1238.065508][T10134] team0 (unregistering): Port device team_slave_1 removed [ 1238.131609][T10134] team0 (unregistering): Port device team_slave_0 removed [ 1238.591483][T19309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.637273][T19309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.060808][T19309] team0: Port device team_slave_0 added [ 1239.084287][T19309] team0: Port device team_slave_1 added [ 1239.560838][T19309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.674808][T19309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.033748][T19309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.065952][T19309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.072972][T19309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.107545][T19309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.229810][T10134] IPVS: stop unused estimator thread 0... [ 1240.267764][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3168'. [ 1240.370340][T19309] hsr_slave_0: entered promiscuous mode [ 1240.386828][T19309] hsr_slave_1: entered promiscuous mode [ 1240.393719][ T5917] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1240.564695][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1240.577937][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.597264][ T5917] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1240.620280][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.673320][ T5917] usb 6-1: config 0 descriptor?? [ 1241.175317][ T5917] uclogic 0003:28BD:0071.0036: interface is invalid, ignoring [ 1241.257414][T19477] program syz.3.3167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1241.390651][T19501] usb usb8: usbfs: process 19501 (syz.6.3170) did not claim interface 0 before use [ 1241.492557][T19491] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3167'. [ 1241.693703][T17259] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1241.964301][T17259] usb 7-1: device descriptor read/64, error -71 [ 1242.216980][T19309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1242.268983][T19309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1242.306264][T19309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1242.334236][T17259] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1242.358919][T19309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1242.473704][T17259] usb 7-1: device descriptor read/64, error -71 [ 1242.585932][T17259] usb usb7-port1: attempt power cycle [ 1242.724706][T19309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.963791][T17259] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1243.018672][T19309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.037751][T17259] usb 7-1: device descriptor read/8, error -71 [ 1243.128551][T18959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.135783][T18959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.207177][ T5924] usb 6-1: USB disconnect, device number 56 [ 1243.299570][T18959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.306829][T18959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.323674][T17259] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1243.378874][T17259] usb 7-1: device descriptor read/8, error -71 [ 1243.503987][T17259] usb usb7-port1: unable to enumerate USB device [ 1243.788916][T19309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.972313][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3173'. [ 1244.029644][T19309] veth0_vlan: entered promiscuous mode [ 1244.178483][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.185015][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.394822][T19309] veth1_vlan: entered promiscuous mode [ 1244.567692][T19309] veth0_macvtap: entered promiscuous mode [ 1244.651710][T19309] veth1_macvtap: entered promiscuous mode [ 1244.751537][T19309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.802281][T19309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1244.889411][T19309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.928548][T19309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.947669][T19309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.957742][T19309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.350694][T17259] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1245.781118][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 1245.852519][T17259] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1245.861679][T17259] usb 7-1: not running at top speed; connect to a high speed hub [ 1245.876639][T17259] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1245.897197][T17259] usb 7-1: config 8 interface 0 has no altsetting 0 [ 1245.928150][T17259] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1245.956877][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.970748][T17259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.002463][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.010250][T17259] usb 7-1: Product: syz [ 1246.022579][T17259] usb 7-1: Manufacturer: syz [ 1246.032574][T17259] usb 7-1: SerialNumber: syz [ 1246.148712][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.185097][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.405882][T17259] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1246.432722][T17259] usb 7-1: selecting invalid altsetting 0 [ 1246.706277][T17259] snd-usb-audio 7-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 1246.750732][T19589] input: syz1 as /devices/virtual/input/input51 [ 1246.764515][T18417] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1246.850822][T17259] usb 7-1: USB disconnect, device number 12 [ 1246.979340][T18417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.007078][T18272] udevd[18272]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.098775][T18417] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1247.184332][T18417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1247.216000][T18417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.236042][T18417] usb 1-1: Product: syz [ 1247.258958][T18417] usb 1-1: Manufacturer: syz [ 1247.289317][T18417] usb 1-1: SerialNumber: syz [ 1247.554870][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.603978][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.787398][T18417] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1247.917866][T18417] usb 1-1: USB disconnect, device number 119 [ 1248.384143][T18417] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1248.569570][T18417] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 1248.578103][T18417] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.607920][T18417] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1248.701574][T18417] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1248.746278][T18417] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1248.816370][T18417] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.867003][T18417] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1248.909276][T18417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.151543][T19619] bridge0: entered promiscuous mode [ 1249.403960][T19619] macsec1: entered promiscuous mode [ 1249.890155][ T30] audit: type=1326 audit(1752535551.709:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1250.024729][ T30] audit: type=1326 audit(1752535551.739:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1250.191835][ T7723] IPVS: starting estimator thread 0... [ 1250.242857][ T30] audit: type=1326 audit(1752535551.739:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1250.314950][T19635] IPVS: using max 32 ests per chain, 76800 per kthread [ 1250.462211][ T30] audit: type=1326 audit(1752535551.739:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1250.562321][ T30] audit: type=1326 audit(1752535551.739:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1250.703860][ T30] audit: type=1326 audit(1752535551.739:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19628 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f780a38e929 code=0x7ffc0000 [ 1251.370969][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1251.413839][T18417] usb 1-1: usb_control_msg returned -71 [ 1251.473632][T18417] usbtmc 1-1:16.0: can't read capabilities [ 1251.521766][T18417] usbtmc 1-1:16.0: Failed to submit iin_urb [ 1251.559859][T18417] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -90 [ 1251.633918][T18417] usb 1-1: USB disconnect, device number 120 [ 1251.724304][T17259] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1251.819032][T19664] loop6: detected capacity change from 0 to 1 [ 1251.861490][T19664] Dev loop6: unable to read RDB block 1 [ 1251.899531][T19664] loop6: unable to read partition table [ 1251.921690][T19664] loop6: partition table beyond EOD, truncated [ 1251.959761][T19664] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1252.038525][T17259] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 1252.116859][T17259] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.325448][T17259] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1252.354560][T17259] usb 7-1: config 1 has no interface number 0 [ 1252.370402][T17259] usb 7-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1252.393449][T17259] usb 7-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.422610][T17259] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1252.453000][T17259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.495015][T17259] usb 7-1: Product: syz [ 1252.503984][T17259] usb 7-1: Manufacturer: syz [ 1252.508730][T17259] usb 7-1: SerialNumber: syz [ 1252.573376][T17259] cdc_wdm 7-1:1.128: skipping garbage [ 1252.585019][ T7723] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1252.596897][T17259] cdc_wdm 7-1:1.128: cdc-wdm0: USB WDM device [ 1252.662678][T17259] cdc_wdm 7-1:1.128: Unknown control protocol [ 1252.713876][T18425] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1254.136426][ T7723] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.157627][ T7723] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1254.183867][T18425] usb 1-1: Using ep0 maxpacket: 8 [ 1254.217106][T19655] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3191'. [ 1254.284657][T18425] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.295691][ T7723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.313863][T18425] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1254.329930][T18425] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1254.340462][T18425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.376736][T18425] usb 1-1: config 0 descriptor?? [ 1254.397641][ T7723] usb 4-1: config 0 descriptor?? [ 1254.494633][ T7723] pwc: Askey VC010 type 2 USB webcam detected. [ 1254.682771][ T5924] usb 7-1: USB disconnect, device number 13 [ 1255.073868][ T7723] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1255.117272][ T7723] pwc: recv_control_msg error -32 req 02 val 2700 [ 1255.136084][ T7723] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1255.253959][ T7723] pwc: recv_control_msg error -32 req 04 val 1000 [ 1255.278933][ T7723] pwc: recv_control_msg error -32 req 04 val 1300 [ 1255.667928][ T7723] pwc: recv_control_msg error -71 req 04 val 1400 [ 1255.716380][ T7723] pwc: recv_control_msg error -71 req 02 val 2000 [ 1255.781829][ T7723] pwc: recv_control_msg error -71 req 02 val 2100 [ 1255.828955][ T7723] pwc: recv_control_msg error -71 req 04 val 1500 [ 1255.833427][ T7723] pwc: recv_control_msg error -71 req 02 val 2500 [ 1255.834974][ T7723] pwc: recv_control_msg error -71 req 02 val 2400 [ 1255.836157][ T7723] pwc: recv_control_msg error -71 req 02 val 2600 [ 1255.836839][ T7723] pwc: recv_control_msg error -71 req 02 val 2900 [ 1255.844414][ T7723] pwc: recv_control_msg error -71 req 02 val 2800 [ 1255.845108][ T7723] pwc: recv_control_msg error -71 req 04 val 1100 [ 1255.845474][ T7723] pwc: recv_control_msg error -71 req 04 val 1200 [ 1255.866409][ T7723] pwc: Registered as video103. [ 1255.870714][ T7723] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 1255.929425][ T7723] usb 4-1: USB disconnect, device number 68 [ 1256.973742][ T5924] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1257.264062][ T7723] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1257.423711][ T5924] usb 4-1: device descriptor read/64, error -71 [ 1257.426139][ T7723] usb 7-1: config 0 has no interfaces? [ 1257.442241][ T7723] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1257.454496][ T7723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.473030][ T7723] usb 7-1: Product: syz [ 1257.503717][ T7723] usb 7-1: Manufacturer: syz [ 1257.508752][ T7723] usb 7-1: SerialNumber: syz [ 1257.534721][ T7723] usb 7-1: config 0 descriptor?? [ 1257.753640][ T5924] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1258.013955][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.057510][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1258.078641][T18405] usb 1-1: USB disconnect, device number 121 [ 1258.133112][ T5924] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1258.227779][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.299685][ T5924] usb 4-1: config 0 descriptor?? [ 1258.730497][ T5924] kovaplus 0003:1E7D:2D50.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1258.748733][T19746] loop6: detected capacity change from 0 to 1 [ 1258.793116][T19746] Dev loop6: unable to read RDB block 1 [ 1258.821715][T19746] loop6: unable to read partition table [ 1258.843952][T19746] loop6: partition table beyond EOD, truncated [ 1258.953829][T19746] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1259.121416][ T5924] kovaplus 0003:1E7D:2D50.0037: couldn't init struct kovaplus_device [ 1259.146327][ T5924] kovaplus 0003:1E7D:2D50.0037: couldn't install mouse [ 1259.188965][ T5924] kovaplus 0003:1E7D:2D50.0037: probe with driver kovaplus failed with error -5 [ 1259.563704][T17214] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1259.701283][T19763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.734453][T19763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.776213][T17214] usb 1-1: Using ep0 maxpacket: 32 [ 1259.790461][T17214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.811352][T17214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.914886][T17214] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1259.943751][T17214] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1259.983606][T17214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.007867][T17214] usb 1-1: config 0 descriptor?? [ 1260.208488][ T5917] usb 7-1: USB disconnect, device number 14 [ 1260.446812][T17214] hid (null): report_id 0 is invalid [ 1260.488999][T17214] hid (null): unknown global tag 0x4e [ 1260.576889][T17214] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0038/input/input53 [ 1260.642939][T19755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.654693][T19755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.764848][T17214] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0038/input/input54 [ 1260.902339][ T5924] usb 4-1: USB disconnect, device number 70 [ 1261.146837][T17214] kye 0003:0458:5011.0038: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1261.364156][ T5924] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1261.536542][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1261.556852][ T5924] usb 4-1: not running at top speed; connect to a high speed hub [ 1261.598909][T17214] usb 1-1: USB disconnect, device number 122 [ 1261.614578][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.639552][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.697178][ T5924] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1261.718410][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.733757][ T5924] usb 4-1: Product: syz [ 1261.761822][ T5924] usb 4-1: Manufacturer: syz [ 1261.776072][ T5924] usb 4-1: SerialNumber: syz [ 1262.061271][T19788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.074312][T19788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.170665][ T5924] usb 4-1: 0:2 : does not exist [ 1262.218349][ T5924] usb 4-1: USB disconnect, device number 71 [ 1262.482769][T18274] udevd[18274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1262.763897][ T5917] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1262.993647][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 1263.041535][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.107028][ T5917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1263.141464][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1263.223878][T18425] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1263.264472][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.331782][ T5917] usb 1-1: config 0 descriptor?? [ 1263.386773][T18425] usb 4-1: config 0 has no interfaces? [ 1263.478358][T18425] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1263.494101][T18425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.511885][T18425] usb 4-1: Product: syz [ 1263.517496][T18425] usb 4-1: Manufacturer: syz [ 1263.522202][T18425] usb 4-1: SerialNumber: syz [ 1263.551849][T18425] usb 4-1: config 0 descriptor?? [ 1263.960992][T19817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.983318][T19817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.054883][T19817] misc userio: No port type given on /dev/userio [ 1264.112292][T19839] misc userio: The device must be registered before sending interrupts [ 1264.154867][T19817] veth0_macvtap: left promiscuous mode [ 1264.179381][T19839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.318667][T19839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.553680][T17259] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1264.742625][T17259] usb 7-1: config 0 has no interfaces? [ 1264.757011][T19817] veth0_macvtap: entered promiscuous mode [ 1264.770000][T17259] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1264.782076][T17259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.822346][T17259] usb 7-1: Product: syz [ 1264.837245][T17259] usb 7-1: Manufacturer: syz [ 1264.847903][T17259] usb 7-1: SerialNumber: syz [ 1264.857782][T17259] usb 7-1: config 0 descriptor?? [ 1266.168287][T17259] usb 4-1: USB disconnect, device number 72 [ 1266.577053][ T5917] usb 1-1: USB disconnect, device number 123 [ 1266.623788][T17259] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1266.838311][T17259] usb 4-1: Using ep0 maxpacket: 32 [ 1266.857314][T17259] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1266.892610][T17259] usb 4-1: config 0 has no interface number 0 [ 1266.904676][ T49] veth0_macvtap: left promiscuous mode [ 1266.937840][T17259] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1266.949630][T17259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.985874][T17259] usb 4-1: Product: syz [ 1267.019309][T17259] usb 4-1: Manufacturer: syz [ 1267.050097][T17259] usb 4-1: SerialNumber: syz [ 1267.082490][T17259] usb 4-1: config 0 descriptor?? [ 1267.084142][ T5917] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1267.111677][T17259] smsc95xx v2.0.0 [ 1267.263725][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 1267.270977][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.290446][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.317590][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1267.330732][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1267.343805][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.366529][ T5917] usb 1-1: config 0 descriptor?? [ 1267.814346][T19891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.836082][T19891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.912287][ T5917] logitech 0003:046D:C293.0039: unknown main item tag 0x0 [ 1267.929959][T17259] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1267.940948][ T5917] logitech 0003:046D:C293.0039: unknown main item tag 0x0 [ 1267.964266][ T5917] logitech 0003:046D:C293.0039: unknown main item tag 0x0 [ 1267.972887][T17259] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1268.013384][ T5917] logitech 0003:046D:C293.0039: unknown main item tag 0x0 [ 1268.075814][ T5917] logitech 0003:046D:C293.0039: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 1268.131296][T17259] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1268.144871][ T5917] logitech 0003:046D:C293.0039: no inputs found [ 1268.182350][T17214] usb 7-1: USB disconnect, device number 15 [ 1268.185213][T17259] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1268.240499][ T5917] usb 1-1: USB disconnect, device number 124 [ 1268.292322][T17259] usb 4-1: USB disconnect, device number 73 [ 1268.436752][T19900] fido_id[19900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1268.734286][T17214] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1268.893935][T17214] usb 7-1: Using ep0 maxpacket: 32 [ 1268.915478][T17214] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1268.928743][T17214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.995852][T17214] usb 7-1: config 0 descriptor?? [ 1269.033087][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1269.053329][T17214] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1269.459309][T19904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.474353][T19904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.962525][T17214] gspca_sunplus: reg_r err -71 [ 1269.972075][T17214] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1270.032376][T17214] usb 7-1: USB disconnect, device number 16 [ 1270.518609][T19935] netlink: 'syz.0.3231': attribute type 4 has an invalid length. [ 1272.007753][T17259] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1272.167197][T17259] usb 6-1: Using ep0 maxpacket: 8 [ 1272.176378][T17259] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.214523][T17259] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1272.259590][T17259] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1272.286728][T17259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.315146][T17259] usb 6-1: config 0 descriptor?? [ 1273.103901][T17259] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1273.292190][T17259] usb 1-1: config 0 has no interfaces? [ 1273.308582][T17259] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1273.319298][T17259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.342866][T17259] usb 1-1: Product: syz [ 1273.434240][T17259] usb 1-1: Manufacturer: syz [ 1273.988037][T17259] usb 1-1: SerialNumber: syz [ 1274.152541][T17259] usb 1-1: config 0 descriptor?? [ 1275.657213][T19998] netlink: 'syz.3.3241': attribute type 8 has an invalid length. [ 1275.683920][T18425] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1275.843878][T18425] usb 7-1: Using ep0 maxpacket: 32 [ 1275.853092][T18425] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1275.869411][T18425] usb 7-1: config 0 has no interface number 0 [ 1275.878751][T18425] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1275.906579][T18425] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1275.917350][T18425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.987024][T18425] usb 7-1: Product: syz [ 1276.015715][T18403] usb 6-1: USB disconnect, device number 57 [ 1276.053663][T18425] usb 7-1: Manufacturer: syz [ 1276.079266][T18425] usb 7-1: SerialNumber: syz [ 1276.115286][T18425] usb 7-1: config 0 descriptor?? [ 1276.302143][T18425] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1276.357423][T18425] em28xx 7-1:0.132: Video interface 132 found: [ 1276.583800][ T5944] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1276.677659][T18425] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1276.738532][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 1276.795806][T18403] usb 1-1: USB disconnect, device number 125 [ 1276.833706][ T5944] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 1276.885458][ T5944] usb 6-1: config 0 has no interface number 0 [ 1276.902248][ T5944] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1276.919824][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.961168][ T5944] usb 6-1: Product: syz [ 1276.977949][ T5944] usb 6-1: Manufacturer: syz [ 1277.006405][ T5944] usb 6-1: SerialNumber: syz [ 1277.028781][ T5944] usb 6-1: config 0 descriptor?? [ 1277.034305][T18425] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1277.068860][ T5944] net1080 6-1:0.183: probe with driver net1080 failed with error -22 [ 1277.078886][T18425] em28xx 7-1:0.132: board has no eeprom [ 1277.174323][T18425] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1277.215748][T18425] em28xx 7-1:0.132: analog set to bulk mode. [ 1277.221919][T17259] em28xx 7-1:0.132: Registering V4L2 extension [ 1277.353700][ T5944] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1277.545064][T20019] binder: BINDER_SET_CONTEXT_MGR already set [ 1277.551127][T20019] binder: 20018:20019 ioctl 4018620d 200000000040 returned -16 [ 1277.593778][ T5944] usb 1-1: config 0 has no interfaces? [ 1277.672994][ T5944] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1277.691963][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.701818][ T5944] usb 1-1: Product: syz [ 1277.904710][T20033] netlink: 'syz.5.3243': attribute type 10 has an invalid length. [ 1277.913109][T20033] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1277.945772][ T5944] usb 1-1: Manufacturer: syz [ 1277.950650][ T5944] usb 1-1: SerialNumber: syz [ 1277.996892][ T5944] usb 1-1: config 0 descriptor?? [ 1278.019424][T17259] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 1278.261172][T17259] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 1278.271763][T18403] usb 7-1: USB disconnect, device number 17 [ 1278.274753][T17259] em28xx 7-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 1278.293062][T18403] em28xx 7-1:0.132: Disconnecting em28xx [ 1278.908220][T17259] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1278.932889][T17259] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1278.957304][T17259] em28xx 7-1:0.132: No AC97 audio processor [ 1279.018974][T17259] usb 7-1: Decoder not found [ 1279.053143][T17259] em28xx 7-1:0.132: failed to create media graph [ 1279.098641][T17259] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1279.162324][T17259] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1279.235062][T18403] em28xx 7-1:0.132: Closing input extension [ 1279.291509][T18403] em28xx 7-1:0.132: Freeing device [ 1280.671502][T18403] usb 6-1: USB disconnect, device number 58 [ 1280.945341][T20071] dvmrp0: entered allmulticast mode [ 1281.413927][T18403] usb 1-1: USB disconnect, device number 126 [ 1281.420415][T20087] netlink: zone id is out of range [ 1282.780029][T20122] @ÿ: renamed from veth0_vlan (while UP) [ 1284.565759][T20120] syz.6.3261 (20120): drop_caches: 2 [ 1284.970734][T20147] team_slave_0: entered promiscuous mode [ 1284.976981][T20147] team_slave_1: entered promiscuous mode [ 1285.068124][T20147] macsec1: entered promiscuous mode [ 1285.073415][T20147] team0: entered promiscuous mode [ 1285.122944][T20147] macsec1: entered allmulticast mode [ 1285.139159][ T7723] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1285.174591][ T30] audit: type=1326 audit(1752535586.989:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.5.3266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e93b8e929 code=0x0 [ 1285.186788][T20147] team0: entered allmulticast mode [ 1285.196647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.234178][T20155] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1285.254259][T20147] team_slave_0: entered allmulticast mode [ 1285.290624][T20147] team_slave_1: entered allmulticast mode [ 1285.314176][T20147] team0: Device macsec1 is already an upper device of the team interface [ 1285.333767][ T7723] usb 4-1: Using ep0 maxpacket: 16 [ 1285.349188][ T7723] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1285.370959][ T7723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.385434][ T7723] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1285.406456][ T7723] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1285.441681][T20147] team0: left allmulticast mode [ 1285.451287][T20147] team_slave_0: left allmulticast mode [ 1285.463876][ T7723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.477923][T20147] team_slave_1: left allmulticast mode [ 1285.483474][T20147] team0: left promiscuous mode [ 1285.512687][ T7723] usb 4-1: Product: syz [ 1285.519394][ T7723] usb 4-1: Manufacturer: syz [ 1285.521686][T20147] team_slave_0: left promiscuous mode [ 1285.529646][T20147] team_slave_1: left promiscuous mode [ 1285.533819][ T7723] usb 4-1: SerialNumber: syz [ 1285.819003][ T7723] usb 4-1: 0:2 : does not exist [ 1285.842073][ T7723] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1285.907796][T20175] loop6: detected capacity change from 0 to 1 [ 1285.919066][T20175] Dev loop6: unable to read RDB block 1 [ 1285.932662][T20175] loop6: unable to read partition table [ 1285.971333][T20175] loop6: partition table beyond EOD, truncated [ 1285.983658][T20175] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1286.076935][ T7723] usb 4-1: USB disconnect, device number 74 [ 1287.044262][T20200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3273'. [ 1287.773840][ T7723] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 1287.938550][ T7723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1287.980927][ T7723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.032468][ T7723] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1288.137942][ T7723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.172267][ T7723] usb 4-1: config 0 descriptor?? [ 1288.755433][ T7723] glorious 0003:258A:0036.003A: unknown main item tag 0x1 [ 1288.813948][ T7723] glorious 0003:258A:0036.003A: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 1288.967950][T20205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.979271][T20205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.061096][T17259] usb 4-1: USB disconnect, device number 75 [ 1289.560695][T20229] binder: 20226:20229 ioctl c0306201 2000000000c0 returned -22 [ 1289.613882][T20228] binder: 20226:20228 ioctl c0306201 2000000000c0 returned -22 [ 1289.947510][ T7723] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1290.025902][T20241] veth1_macvtap: left promiscuous mode [ 1290.035822][T20241] macsec0: entered promiscuous mode [ 1290.100041][T20244] veth1_macvtap: entered promiscuous mode [ 1290.128672][T20244] macsec0: left promiscuous mode [ 1290.134296][ T7723] usb 7-1: Using ep0 maxpacket: 8 [ 1290.185162][ T7723] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1290.235505][ T7723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.291941][ T7723] usb 7-1: Product: syz [ 1290.311413][ T7723] usb 7-1: Manufacturer: syz [ 1290.336952][ T7723] usb 7-1: SerialNumber: syz [ 1290.363408][ T7723] usb 7-1: config 0 descriptor?? [ 1290.387753][ T7723] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1291.523752][ T5917] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1291.733677][ T7723] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1291.772860][ T5917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1291.871047][ T5917] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1291.891531][ T5917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1291.934985][ T7723] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 1291.935349][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.951739][ T7723] usb 6-1: config 2 has no interface number 0 [ 1291.983712][ T7723] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1292.027183][ T7723] usb 6-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 1292.048740][ T7723] usb 6-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1292.069721][T20262] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1292.098492][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1292.116432][ T7723] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1292.143135][ T7723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.218113][ T7723] usb 6-1: Product: syz [ 1292.265855][ T7723] usb 6-1: Manufacturer: syz [ 1292.307239][ T7723] usb 6-1: SerialNumber: syz [ 1292.385193][T20266] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1292.586745][T18403] usb 7-1: USB disconnect, device number 18 [ 1294.058420][T20302] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3290'. [ 1294.541839][T17259] usb 4-1: USB disconnect, device number 76 [ 1297.540514][ T7723] usb 6-1: probing VID:PID(0424:012C) [ 1297.640794][ T7723] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 1297.662194][ T7723] usb 6-1: vub300 testing BULK IN EndPoint(1) 82 [ 1297.686437][ T7723] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 1297.737355][ T7723] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 1298.197797][T20358] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1298.890081][T20379] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3306'. [ 1299.924142][T18417] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1300.209462][T18417] usb 7-1: Using ep0 maxpacket: 16 [ 1300.513906][T20406] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1300.656225][T18417] usb 7-1: config 8 has an invalid interface number: 198 but max is 0 [ 1300.679866][T18417] usb 7-1: config 8 has an invalid descriptor of length 36, skipping remainder of the config [ 1300.744008][T18417] usb 7-1: config 8 has no interface number 0 [ 1300.795976][T18417] usb 7-1: config 8 interface 198 has no altsetting 0 [ 1300.844799][T18417] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 1300.854049][T18417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.863048][T18417] usb 7-1: Product: syz [ 1300.874387][T18417] usb 7-1: Manufacturer: syz [ 1300.879561][T18417] usb 7-1: SerialNumber: syz [ 1302.566862][T16424] Bluetooth: hci1: command 0x0406 tx timeout [ 1303.702633][T18417] ums-onetouch 7-1:8.198: USB Mass Storage device detected [ 1303.843183][T20441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1303.921884][T18417] usb 7-1: USB disconnect, device number 19 [ 1304.564800][T20458] netlink: 'syz.7.3318': attribute type 6 has an invalid length. [ 1304.603305][T20458] netlink: 'syz.7.3318': attribute type 7 has an invalid length. [ 1304.615565][T20458] netlink: 'syz.7.3318': attribute type 8 has an invalid length. [ 1304.662065][ T30] audit: type=1804 audit(1752535606.479:1415): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3320" name="/newroot/50/file1" dev="fuse" ino=1 res=1 errno=0 [ 1305.455900][T20480] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3321'. [ 1305.488354][T18417] IPVS: starting estimator thread 0... [ 1305.592302][T20483] IPVS: using max 36 ests per chain, 86400 per kthread [ 1305.609530][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.617194][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.838730][T20489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1306.863441][T20504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.896303][T20504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.315859][T20567] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1311.363712][ T5944] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1311.565365][ T5944] usb 4-1: config 0 has no interfaces? [ 1311.585230][ T5917] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1311.601496][ T5944] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1311.629855][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.646055][ T5944] usb 4-1: Product: syz [ 1311.651998][ T5944] usb 4-1: Manufacturer: syz [ 1311.695745][ T5944] usb 4-1: SerialNumber: syz [ 1311.712720][ T5944] usb 4-1: config 0 descriptor?? [ 1311.771780][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1311.799935][ T5917] usb 7-1: config 0 has an invalid interface number: 101 but max is 1 [ 1311.820506][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.873697][ T5917] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1311.922683][ T5917] usb 7-1: config 0 has no interface number 0 [ 1312.000409][ T5917] usb 7-1: config 0 interface 101 has no altsetting 0 [ 1312.015100][ T5917] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1312.020476][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.035398][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.044505][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.058873][ T5917] usb 7-1: config 0 descriptor?? [ 1312.085180][ T5917] hub 7-1:0.101: bad descriptor, ignoring hub [ 1312.091535][ T5917] hub 7-1:0.101: probe with driver hub failed with error -5 [ 1312.394130][T18403] usb 7-1: USB disconnect, device number 20 [ 1313.299986][T20603] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1313.872654][ T5917] usb 4-1: USB disconnect, device number 77 [ 1314.384826][ T5944] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1314.543799][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 1314.558319][ T5944] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1314.654331][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.710037][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.835347][ T5944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1314.874111][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.908094][ T5944] usb 4-1: Product: syz [ 1314.943081][ T5944] usb 4-1: Manufacturer: syz [ 1314.973794][ T5944] usb 4-1: SerialNumber: syz [ 1315.444941][ T5944] usb 4-1: 0:2 : does not exist [ 1316.100000][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.124696][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.220258][T20637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.271567][T20637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.523646][T18417] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1316.693854][T18417] usb 7-1: Invalid ep0 maxpacket: 32 [ 1316.833934][T18417] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1317.033658][T18417] usb 7-1: Invalid ep0 maxpacket: 32 [ 1317.070695][ T5944] usb 4-1: USB disconnect, device number 78 [ 1317.083995][T18417] usb usb7-port1: attempt power cycle [ 1317.455872][T18417] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1317.509315][T18417] usb 7-1: Invalid ep0 maxpacket: 32 [ 1317.519422][T20651] fuse: Unknown parameter '0x0000000000000004' [ 1317.653751][T20654] input: syz0 as /devices/virtual/input/input57 [ 1317.710971][T18417] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1317.794885][T18417] usb 7-1: Invalid ep0 maxpacket: 32 [ 1317.804067][T18417] usb usb7-port1: unable to enumerate USB device [ 1317.903750][T20664] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1318.093759][ T5924] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1318.147226][T20669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.157416][T20669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.266135][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 1318.305952][ T5924] usb 4-1: config 0 has an invalid interface number: 101 but max is 1 [ 1318.314306][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.330404][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1318.350698][ T5924] usb 4-1: config 0 has no interface number 0 [ 1318.360638][ T5924] usb 4-1: config 0 interface 101 has no altsetting 0 [ 1318.368767][ T5924] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1318.385488][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.582305][ T5924] usb 4-1: config 0 descriptor?? [ 1318.607921][ T5924] hub 4-1:0.101: bad descriptor, ignoring hub [ 1318.626906][ T5924] hub 4-1:0.101: probe with driver hub failed with error -5 [ 1318.814677][ T5924] usb 4-1: USB disconnect, device number 79 [ 1319.448750][T20690] netlink: 'syz.6.3361': attribute type 1 has an invalid length. [ 1319.552131][T20700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1319.673943][ T5944] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1319.850853][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.863719][ T5944] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1319.891166][ T5944] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1320.108202][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.233030][ T5944] usb 4-1: config 0 descriptor?? [ 1320.256888][ T5944] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1320.270844][ T5944] dvb-usb: bulk message failed: -22 (3/0) [ 1320.333873][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1320.354144][ T5944] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1320.368985][ T5944] usb 4-1: media controller created [ 1320.407156][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1320.451968][ T5944] dvb-usb: bulk message failed: -22 (6/0) [ 1320.509823][ T5944] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1320.563123][ T5944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 1320.653147][ T5944] dvb-usb: schedule remote query interval to 150 msecs. [ 1320.697021][ T5944] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1320.855487][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 1320.861452][ T5944] dvb-usb: error while querying for an remote control event. [ 1321.071920][T17259] dvb-usb: bulk message failed: -22 (1/0) [ 1321.077948][T17259] dvb-usb: error while querying for an remote control event. [ 1321.114792][T17259] usb 4-1: USB disconnect, device number 80 [ 1321.255152][T17259] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1321.967428][T20743] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1321.993912][ T5924] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1322.164084][T17214] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1322.171983][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 1322.185412][ T5924] usb 1-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1322.200036][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1322.235699][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1322.274821][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.302550][ T5924] usb 1-1: Product: syz [ 1322.314667][ T5924] usb 1-1: Manufacturer: syz [ 1322.319562][ T5924] usb 1-1: SerialNumber: syz [ 1322.327557][T17214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.339501][T17214] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1322.383060][T17214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.430279][T17214] usb 7-1: config 0 descriptor?? [ 1322.564640][T20756] netlink: 'syz.5.3372': attribute type 13 has an invalid length. [ 1322.582240][ T5924] usb 1-1: 0:2 : does not exist [ 1322.600531][T20756] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1322.621278][ T5924] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1322.663171][T20756] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 1322.784251][ T5924] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1322.801301][ T5924] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1322.992399][ T5924] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1323.010928][T17214] magicmouse 0003:05AC:0265.003B: unbalanced delimiter at end of report description [ 1323.034858][T17214] magicmouse 0003:05AC:0265.003B: magicmouse hid parse failed [ 1323.047059][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1323.066555][T17214] magicmouse 0003:05AC:0265.003B: probe with driver magicmouse failed with error -22 [ 1323.077224][ T5924] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1323.093855][ T5924] usb 1-1: USB disconnect, device number 127 [ 1323.170038][T18274] udevd[18274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.192417][T17259] usb 7-1: USB disconnect, device number 25 [ 1323.347513][T20767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.373030][T20767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.656886][T20767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.686518][T20767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.712191][T20769] fuse: Invalid rootmode [ 1323.963662][ T5924] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1324.120258][ T5924] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1324.163772][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.214587][ T5924] usb 1-1: config 0 descriptor?? [ 1324.256020][ T5924] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1324.422529][ T5924] gspca_spca508: reg_read err -32 [ 1324.454121][ T5924] gspca_spca508: reg_read err -32 [ 1324.470402][ T5924] gspca_spca508: reg_read err -32 [ 1324.731792][ T5924] gspca_spca508: reg_read err -71 [ 1324.759243][ T5924] gspca_spca508: reg write: error -71 [ 1324.787130][T20790] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3376'. [ 1324.865918][ T5924] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 1324.929502][ T5924] usb 1-1: USB disconnect, device number 2 [ 1325.335332][T20802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1327.853037][T20830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.872688][T20830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.005006][ T7723] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1328.164011][ T7723] usb 1-1: Using ep0 maxpacket: 16 [ 1328.191927][ T7723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.218432][ T7723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.248911][ T7723] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1328.279331][T17259] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1328.299623][ T7723] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1328.330182][ T7723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.359986][ T7723] usb 1-1: config 0 descriptor?? [ 1328.463669][T17259] usb 4-1: Using ep0 maxpacket: 16 [ 1328.493797][T17259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.531842][T17259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.583661][T17259] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1328.633696][T17259] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1328.669440][T17259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.704573][T17259] usb 4-1: config 0 descriptor?? [ 1329.021524][T20828] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1329.335639][T20858] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1329.366762][ T7723] usbhid 1-1:0.0: can't add hid device: -71 [ 1329.396874][ T7723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1329.481461][ T7723] usb 1-1: USB disconnect, device number 3 [ 1329.485681][T20860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.626088][T20860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.936036][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888033566000: rx timeout, send abort [ 1331.050711][T20869] delete_channel: no stack [ 1331.843063][T17259] usbhid 4-1:0.0: can't add hid device: -71 [ 1331.891445][T17259] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1331.907931][T20887] netlink: 'syz.0.3391': attribute type 4 has an invalid length. [ 1332.014377][T17259] usb 4-1: USB disconnect, device number 81 [ 1332.413657][T17259] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1332.723896][T17259] usb 4-1: device descriptor read/64, error -71 [ 1332.993764][T17259] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1333.088821][ T30] audit: type=1326 audit(1752535634.899:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.204304][T17259] usb 4-1: device descriptor read/64, error -71 [ 1333.236418][ T30] audit: type=1326 audit(1752535634.899:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.591330][T17259] usb usb4-port1: attempt power cycle [ 1333.657621][ T30] audit: type=1326 audit(1752535634.899:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.720103][T20913] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3396'. [ 1333.742594][ T30] audit: type=1326 audit(1752535634.899:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.773803][ T30] audit: type=1326 audit(1752535634.899:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.855851][ T30] audit: type=1326 audit(1752535634.899:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.889345][ T30] audit: type=1326 audit(1752535634.899:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1333.983659][T17259] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1334.094063][ T30] audit: type=1326 audit(1752535634.899:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1334.145990][T17259] usb 4-1: device descriptor read/8, error -71 [ 1334.296326][ T30] audit: type=1326 audit(1752535634.899:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1334.873734][T17259] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1334.904586][ T30] audit: type=1326 audit(1752535634.909:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f670f18e929 code=0x7ffc0000 [ 1334.944772][T17259] usb 4-1: device descriptor read/8, error -71 [ 1335.122896][T17259] usb usb4-port1: unable to enumerate USB device [ 1335.783758][T17214] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1335.941266][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1335.949235][T17214] usb 4-1: Using ep0 maxpacket: 32 [ 1336.027574][T17214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1336.059986][T17214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1336.077771][T17214] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1336.106977][T17214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1336.137485][T17214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1336.162298][T17214] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1336.181114][T17214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.181889][ T5924] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1336.214786][T17214] usb 4-1: Product: syz [ 1336.220611][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.223988][T20933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.239692][T17214] usb 4-1: Manufacturer: syz [ 1336.250619][T17214] usb 4-1: SerialNumber: syz [ 1336.255456][T20933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.269256][ T5924] usb 1-1: Product: syz [ 1336.282052][ T5924] usb 1-1: Manufacturer: syz [ 1336.290956][ T5924] usb 1-1: SerialNumber: syz [ 1336.306057][T17214] usb 4-1: config 0 descriptor?? [ 1336.312627][T20923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1336.324033][ T5924] usb 1-1: config 0 descriptor?? [ 1336.350419][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1336.360847][T17214] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 1336.377498][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.422312][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.472089][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.488674][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1336.510208][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.551320][T20925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.577998][T20925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.591867][T19223] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.619648][ T5924] gspca_sunplus: reg_r err -71 [ 1336.625870][ T5924] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1336.657968][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.674401][ T5924] usb 1-1: USB disconnect, device number 4 [ 1336.716563][T20922] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.756198][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.781681][ T5203] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1336.851318][T17214] usb 4-1: USB disconnect, device number 86 [ 1337.403020][T20944] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1338.449564][T20959] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3408'. [ 1338.584770][T20959] veth3: entered promiscuous mode [ 1339.654999][T20979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.688808][T20979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.285226][T20984] netlink: 'syz.0.3409': attribute type 4 has an invalid length. [ 1340.623726][T17214] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1340.817890][T17214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1340.844928][T20991] netlink: 4400 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1340.857873][T20991] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 1340.945660][T17214] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 1340.954362][T17214] usb 4-1: config 6 has no interface number 0 [ 1340.960492][T17214] usb 4-1: config 6 interface 200 has no altsetting 0 [ 1340.990105][T17214] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1340.999543][T17214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.008945][T17214] usb 4-1: Product: syz [ 1341.029724][T17214] usb 4-1: Manufacturer: syz [ 1341.106938][T17214] usb 4-1: SerialNumber: syz [ 1341.387726][T20995] syz.6.3415: attempt to access beyond end of device [ 1341.387726][T20995] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1341.940169][T20994] batadv_slave_0: entered allmulticast mode [ 1342.121533][T20990] batadv_slave_0: left allmulticast mode [ 1342.166074][T17214] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1342.219716][T17214] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1342.300755][T17214] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1342.311994][T17214] usb 4-1: media controller created [ 1342.353731][T21000] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1342.380652][T17214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1342.564282][T17214] dvb-usb: recv bulk message failed: -22 [ 1342.748311][T17214] dvb-usb: bulk message failed: -71 (6/0) [ 1342.771077][T17214] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1342.893748][T17214] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 1342.907950][T17214] dvb-usb: schedule remote query interval to 150 msecs. [ 1342.916467][T17214] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1342.967859][T17214] usb 4-1: USB disconnect, device number 87 [ 1343.074241][T18403] dvb-usb: bulk message failed: -19 (1/0) [ 1343.080151][T18403] dvb-usb: error while querying for an remote control event. [ 1343.341985][T17214] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1343.763738][T17214] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1344.044094][T21023] loop6: detected capacity change from 0 to 1 [ 1344.059995][T21023] Dev loop6: unable to read RDB block 1 [ 1344.071478][T21023] loop6: unable to read partition table [ 1344.086856][T21023] loop6: partition table beyond EOD, truncated [ 1344.093301][T21023] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1344.123706][T17214] usb 4-1: device not accepting address 88, error -71 [ 1345.223745][T17214] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1345.433256][T17214] usb 4-1: config 0 has no interfaces? [ 1345.681948][T17214] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1345.868081][T17214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.939850][T17214] usb 4-1: Product: syz [ 1345.953630][T17214] usb 4-1: Manufacturer: syz [ 1345.958305][T17214] usb 4-1: SerialNumber: syz [ 1346.001597][T17214] usb 4-1: config 0 descriptor?? [ 1346.440146][T21054] 2: renamed from hsr0 (while UP) [ 1346.508213][T21059] trusted_key: encrypted_key: insufficient parameters specified [ 1346.532202][T21058] netlink: 'syz.5.3427': attribute type 4 has an invalid length. [ 1347.509633][T21071] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1347.564060][T18425] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1347.746940][T18425] usb 7-1: Using ep0 maxpacket: 16 [ 1347.758401][T18425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1347.836987][T18425] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1347.858969][T18425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.872827][T18425] usb 7-1: Product: syz [ 1347.885691][T18425] usb 7-1: Manufacturer: syz [ 1347.922383][T18425] usb 7-1: SerialNumber: syz [ 1347.986939][T18425] usb 7-1: config 0 descriptor?? [ 1348.010783][T18425] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1348.040507][T18425] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1348.236122][T21076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.262790][T21076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.362322][ T5917] usb 4-1: USB disconnect, device number 89 [ 1348.484454][T18425] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1348.607575][T18425] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1348.623926][T18425] em28xx 7-1:0.0: board has no eeprom [ 1348.630161][T21084] x_tables: duplicate underflow at hook 3 [ 1348.643829][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.702300][T21088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.743623][T18425] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1348.751518][T18425] em28xx 7-1:0.0: dvb set to bulk mode. [ 1348.754436][T21088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.790624][T17259] em28xx 7-1:0.0: Binding DVB extension [ 1348.830305][T18425] usb 7-1: USB disconnect, device number 26 [ 1348.938187][T18425] em28xx 7-1:0.0: Disconnecting em28xx [ 1349.019557][T17259] em28xx 7-1:0.0: Registering input extension [ 1349.062204][T18425] em28xx 7-1:0.0: Closing input extension [ 1349.193469][T18425] em28xx 7-1:0.0: Freeing device [ 1349.513953][T17214] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1350.018863][T17214] usb 1-1: Using ep0 maxpacket: 8 [ 1350.047103][T17214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.105132][T17214] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1350.213646][T17214] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1350.258381][T17214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.325306][T18425] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1350.327772][T17214] usb 1-1: config 0 descriptor?? [ 1350.486946][T18425] usb 7-1: config 0 has no interfaces? [ 1350.496146][T18425] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1350.523183][T18425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.567497][T18425] usb 7-1: Product: syz [ 1350.577875][T18425] usb 7-1: Manufacturer: syz [ 1350.650326][T18425] usb 7-1: SerialNumber: syz [ 1350.715153][T18425] usb 7-1: config 0 descriptor?? [ 1352.438281][T18425] usb 7-1: USB disconnect, device number 27 [ 1352.605804][T17214] usb 1-1: USB disconnect, device number 5 [ 1353.396859][T18425] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 1353.565903][T18425] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1353.583860][T18425] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.699835][T21139] netlink: 'syz.5.3444': attribute type 4 has an invalid length. [ 1353.759909][T18425] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1354.413835][T17259] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1354.524020][ T5917] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1354.580418][T17259] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1354.598329][T17259] usb 7-1: config 1 has no interface number 0 [ 1354.613224][T17259] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.626032][T17259] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1354.636121][T17259] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 123 [ 1354.649815][T17259] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1354.659433][T17259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.667634][T17259] usb 7-1: Product: syz [ 1354.672104][T17259] usb 7-1: Manufacturer: syz [ 1354.676966][T17259] usb 7-1: SerialNumber: syz [ 1354.685999][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 1354.694726][T21149] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1354.712209][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.724310][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.736330][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1354.749641][ T5917] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1354.758823][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.782607][ T5917] usb 4-1: config 0 descriptor?? [ 1354.897967][T21144] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1354.941285][T17259] cdc_ncm 7-1:1.1: bind() failure [ 1354.970121][T17259] usb 7-1: USB disconnect, device number 28 [ 1355.410646][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 1355.421559][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1355.440138][ T5917] usb 4-1: USB disconnect, device number 90 [ 1355.945151][T18425] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 1355.972891][T18425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.024287][T18425] usb 1-1: can't set config #1, error -71 [ 1356.081333][T18425] usb 1-1: USB disconnect, device number 6 [ 1356.443799][ T5944] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1356.633783][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 1356.655725][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.686645][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1356.728921][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1356.763160][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1356.779873][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.811382][ T5944] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1356.832562][ T5944] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1356.842442][ T5944] usb 4-1: Manufacturer: syz [ 1356.864144][ T5944] usb 4-1: config 0 descriptor?? [ 1357.086116][T21171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.104152][T21171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.474507][ T5944] rc_core: IR keymap rc-hauppauge not found [ 1357.533712][ T5944] Registered IR keymap rc-empty [ 1357.562458][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1357.626095][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1357.665510][T21188] fuse: Unknown parameter 'Y€±0x0000000000000003' [ 1357.698843][ T5944] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1357.804304][ T5944] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64 [ 1357.882823][T21192] loop6: detected capacity change from 0 to 1 [ 1357.883147][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1357.915322][T21192] Dev loop6: unable to read RDB block 1 [ 1357.925837][T21192] loop6: unable to read partition table [ 1357.932062][T21192] loop6: partition table beyond EOD, truncated [ 1357.933810][T17259] IPVS: starting estimator thread 0... [ 1357.947267][T21192] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1357.993799][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.023914][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.043785][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.084107][T21196] IPVS: using max 25 ests per chain, 60000 per kthread [ 1358.101976][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.194850][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.249005][T21198] FAULT_INJECTION: forcing a failure. [ 1358.249005][T21198] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.261932][T21198] CPU: 1 UID: 0 PID: 21198 Comm: syz.6.3463 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1358.261963][T21198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1358.261978][T21198] Call Trace: [ 1358.261988][T21198] [ 1358.261999][T21198] dump_stack_lvl+0x189/0x250 [ 1358.262034][T21198] ? __pfx____ratelimit+0x10/0x10 [ 1358.262071][T21198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.262099][T21198] ? __pfx__printk+0x10/0x10 [ 1358.262136][T21198] ? __pfx___might_resched+0x10/0x10 [ 1358.262169][T21198] should_fail_ex+0x414/0x560 [ 1358.262206][T21198] ? video_usercopy+0xaa9/0x14f0 [ 1358.262234][T21198] should_failslab+0xa8/0x100 [ 1358.262265][T21198] __kvmalloc_node_noprof+0x161/0x5f0 [ 1358.262294][T21198] ? video_usercopy+0xaa9/0x14f0 [ 1358.262328][T21198] video_usercopy+0xaa9/0x14f0 [ 1358.262367][T21198] ? __pfx___video_do_ioctl+0x10/0x10 [ 1358.262396][T21198] ? __pfx_video_usercopy+0x10/0x10 [ 1358.262438][T21198] ? __fget_files+0x2a/0x420 [ 1358.262471][T21198] ? __fget_files+0x2a/0x420 [ 1358.262500][T21198] ? __fget_files+0x3a0/0x420 [ 1358.262534][T21198] v4l2_ioctl+0x18a/0x1e0 [ 1358.262562][T21198] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1358.262589][T21198] __se_sys_ioctl+0xfc/0x170 [ 1358.262615][T21198] do_syscall_64+0xfa/0x3b0 [ 1358.262635][T21198] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.262668][T21198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.262690][T21198] ? clear_bhb_loop+0x60/0xb0 [ 1358.262716][T21198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.262738][T21198] RIP: 0033:0x7f670f18e929 [ 1358.262759][T21198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.262780][T21198] RSP: 002b:00007f670ff72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1358.262803][T21198] RAX: ffffffffffffffda RBX: 00007f670f3b5fa0 RCX: 00007f670f18e929 [ 1358.262820][T21198] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 1358.262835][T21198] RBP: 00007f670ff72090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.262849][T21198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.262863][T21198] R13: 0000000000000000 R14: 00007f670f3b5fa0 R15: 00007f670f4dfa28 [ 1358.262897][T21198] [ 1358.270536][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.698001][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.874247][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.988830][T21212] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1358.998065][ T5944] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.069255][ T5944] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1359.090773][ T5944] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1359.210069][ T5944] usb 4-1: USB disconnect, device number 91 [ 1359.546821][T21217] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1359.927008][T21226] vlan2: entered allmulticast mode [ 1359.932425][T21226] vlan1: entered allmulticast mode [ 1359.938313][T21226] veth0_vlan: entered allmulticast mode [ 1360.123770][T17259] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1360.287136][T17259] usb 4-1: config 0 has no interfaces? [ 1360.297411][T17259] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1360.307136][T17259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.457237][T17259] usb 4-1: Product: syz [ 1360.482557][T17259] usb 4-1: Manufacturer: syz [ 1360.528310][T17259] usb 4-1: SerialNumber: syz [ 1360.701858][T17259] usb 4-1: config 0 descriptor?? [ 1360.737983][T21230] tipc: Enabling of bearer rejected, failed to enable media [ 1361.010851][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1361.183827][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1361.314824][ T5917] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1361.493661][T21243] FAULT_INJECTION: forcing a failure. [ 1361.493661][T21243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.547633][T21243] CPU: 0 UID: 0 PID: 21243 Comm: syz.7.3474 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1361.547657][T21243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1361.547669][T21243] Call Trace: [ 1361.547676][T21243] [ 1361.547683][T21243] dump_stack_lvl+0x189/0x250 [ 1361.547708][T21243] ? __pfx____ratelimit+0x10/0x10 [ 1361.547734][T21243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1361.547753][T21243] ? __pfx__printk+0x10/0x10 [ 1361.547775][T21243] ? __might_fault+0xb0/0x130 [ 1361.547802][T21243] should_fail_ex+0x414/0x560 [ 1361.547829][T21243] _copy_from_user+0x2d/0xb0 [ 1361.547849][T21243] video_usercopy+0xafc/0x14f0 [ 1361.547877][T21243] ? __pfx___video_do_ioctl+0x10/0x10 [ 1361.547896][T21243] ? __pfx_video_usercopy+0x10/0x10 [ 1361.547924][T21243] ? __fget_files+0x2a/0x420 [ 1361.547947][T21243] ? __fget_files+0x2a/0x420 [ 1361.547967][T21243] ? __fget_files+0x3a0/0x420 [ 1361.547989][T21243] v4l2_ioctl+0x18a/0x1e0 [ 1361.548009][T21243] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1361.548027][T21243] __se_sys_ioctl+0xfc/0x170 [ 1361.548046][T21243] do_syscall_64+0xfa/0x3b0 [ 1361.548060][T21243] ? lockdep_hardirqs_on+0x9c/0x150 [ 1361.548085][T21243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.548100][T21243] ? clear_bhb_loop+0x60/0xb0 [ 1361.548121][T21243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.548142][T21243] RIP: 0033:0x7ff8d0d8e929 [ 1361.548161][T21243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.548181][T21243] RSP: 002b:00007ff8d1b35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.548203][T21243] RAX: ffffffffffffffda RBX: 00007ff8d0fb5fa0 RCX: 00007ff8d0d8e929 [ 1361.548219][T21243] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 1361.548234][T21243] RBP: 00007ff8d1b35090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.548248][T21243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.548262][T21243] R13: 0000000000000000 R14: 00007ff8d0fb5fa0 R15: 00007ff8d10dfa28 [ 1361.548295][T21243] [ 1361.587044][ T5917] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1362.282982][ T5917] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1362.294728][ T5917] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1362.310414][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1362.325429][ T5917] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1362.369280][ T5917] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1362.453385][ T5917] usb 1-1: Product: syz [ 1362.475240][T21252] trusted_key: encrypted_key: insufficient parameters specified [ 1362.519523][ T5917] usb 1-1: Manufacturer: syz [ 1362.533576][ T5917] usb 1-1: SerialNumber: syz [ 1362.566768][ T5917] usb 1-1: config 0 descriptor?? [ 1362.618389][ T5917] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1362.653541][ T5917] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1362.865925][ T5917] usb 1-1: USB disconnect, device number 7 [ 1362.871929][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1362.898215][ T5917] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1363.083601][T18425] usb 4-1: USB disconnect, device number 92 [ 1363.637337][T21273] netlink: 'syz.6.3482': attribute type 2 has an invalid length. [ 1363.680436][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1364.030550][T21279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1364.473762][T18425] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1365.182194][T21293] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1365.519232][T21292] netlink: 'syz.6.3484': attribute type 4 has an invalid length. [ 1365.737158][T21300] xt_hashlimit: overflow, try lower: 17286/0 [ 1366.307356][T21305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.319604][T21305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.367245][T21282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.611329][T21309] netlink: 'syz.0.3490': attribute type 2 has an invalid length. [ 1367.054412][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.060990][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.914026][T17214] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1368.146344][T17214] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1368.163353][T17214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.226910][T17214] usb 1-1: config 0 descriptor?? [ 1368.246460][T17214] cp210x 1-1:0.0: cp210x converter detected [ 1368.666043][T17214] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1368.868239][T17214] usb 1-1: USB disconnect, device number 8 [ 1368.943658][T18425] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1368.990578][T17214] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1369.067481][T17214] cp210x 1-1:0.0: device disconnected [ 1369.143602][T18425] usb 7-1: Using ep0 maxpacket: 16 [ 1369.159812][T18425] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1369.168691][T18425] usb 7-1: config 0 has no interface number 0 [ 1369.182175][T18425] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1369.267590][T18425] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1369.276870][T18425] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1369.314776][T18425] usb 7-1: Product: syz [ 1369.329789][T18425] usb 7-1: SerialNumber: syz [ 1369.367027][T18425] usb 7-1: config 0 descriptor?? [ 1369.390081][T21347] loop4: detected capacity change from 0 to 524255232 [ 1369.491301][T18425] cm109 7-1:0.8: invalid payload size 6, expected 4 [ 1369.567450][T18425] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input65 [ 1369.803893][T21349] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1370.885447][T21365] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1371.974164][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1371.981161][ C0] ------------[ cut here ]------------ [ 1371.986624][ C0] URB ffff888033c14d00 submitted while active [ 1371.993416][ C0] WARNING: CPU: 0 PID: 21337 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff3/0x1890 [ 1372.003185][ C0] Modules linked in: [ 1372.007376][ C0] CPU: 0 UID: 0 PID: 21337 Comm: syz.6.3497 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1372.017755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1372.027832][ C0] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 1372.033412][ C0] Code: 00 eb 5c e8 ef f1 9e fa e9 be f0 ff ff e8 e5 f1 9e fa c6 05 ab a7 6a 08 01 90 48 c7 c7 60 41 34 8c 48 89 de e8 9e d4 62 fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 bf f1 9e fa eb 11 e8 b8 f1 9e fa bd [ 1372.053037][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 1372.059118][ C0] RAX: a4bcf0098fb95c00 RBX: ffff888033c14d00 RCX: 0000000000040000 [ 1372.067098][ C0] RDX: ffffc900021c1000 RSI: 0000000000005555 RDI: 0000000000005556 [ 1372.075102][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 1372.083083][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 1ffff1100b24440a [ 1372.091151][ C0] R13: dffffc0000000000 R14: ffff888033c14d08 R15: 0000000000000820 [ 1372.099221][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1372.108165][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.114842][ C0] CR2: 000000110c32679b CR3: 000000002401c000 CR4: 00000000003526f0 [ 1372.122822][ C0] Call Trace: [ 1372.126120][ C0] [ 1372.128979][ C0] ? kcov_remote_start+0x97/0x7f0 [ 1372.134049][ C0] cm109_urb_irq_callback+0x718/0xc80 [ 1372.139449][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 1372.144839][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1372.150665][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1372.156580][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1372.161974][ C0] dummy_timer+0x862/0x4550 [ 1372.166533][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1372.171946][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1372.177549][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1372.182527][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1372.187484][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1372.192437][ C0] __hrtimer_run_queues+0x529/0xc60 [ 1372.197669][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1372.203416][ C0] ? read_tsc+0x9/0x20 [ 1372.207493][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1372.213318][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1372.218447][ C0] handle_softirqs+0x286/0x870 [ 1372.223234][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1372.228017][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1372.233319][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1372.238559][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1372.243254][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1372.248493][ C0] irq_exit_rcu+0x9/0x30 [ 1372.252745][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1372.258421][ C0] [ 1372.261366][ C0] [ 1372.264308][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1372.270307][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1372.276831][ C0] Code: 74 05 e8 4b e9 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 13 0d 1f f6 65 8b 05 bc 79 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1372.296452][ C0] RSP: 0018:ffffc900048ef620 EFLAGS: 00000206 [ 1372.302530][ C0] RAX: a4bcf0098fb95c00 RBX: 0000000000000a02 RCX: a4bcf0098fb95c00 [ 1372.310525][ C0] RDX: 0000000000000006 RSI: ffffffff8d998d37 RDI: 0000000000000001 [ 1372.318509][ C0] RBP: ffffc900048ef6b0 R08: ffffffff8fa1f5f7 R09: 1ffffffff1f43ebe [ 1372.326496][ C0] R10: dffffc0000000000 R11: fffffbfff1f43ebf R12: dffffc0000000000 [ 1372.334478][ C0] R13: ffff8880285bef00 R14: ffffffff8ede1540 R15: 1ffff9200091dec4 [ 1372.342493][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1372.348852][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 1372.354245][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 1372.359658][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 1372.365592][ C0] dummy_pullup+0x19b/0x200 [ 1372.370114][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 1372.375151][ C0] usb_gadget_disconnect_locked+0x140/0x4b0 [ 1372.381066][ C0] gadget_unbind_driver+0xc4/0x430 [ 1372.386198][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1372.391945][ C0] device_release_driver_internal+0x46f/0x7c0 [ 1372.398042][ C0] driver_detach+0x1f3/0x2d0 [ 1372.402653][ C0] bus_remove_driver+0x226/0x2f0 [ 1372.407600][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 1372.413342][ C0] raw_release+0xd7/0x260 [ 1372.417694][ C0] ? __pfx_raw_release+0x10/0x10 [ 1372.422648][ C0] __fput+0x449/0xa70 [ 1372.426705][ C0] task_work_run+0x1d1/0x260 [ 1372.431326][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1372.436469][ C0] do_exit+0x6b5/0x22e0 [ 1372.440754][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1372.445828][ C0] ? __pfx_do_exit+0x10/0x10 [ 1372.450457][ C0] do_group_exit+0x21c/0x2d0 [ 1372.455066][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1372.460285][ C0] get_signal+0x1286/0x1340 [ 1372.464817][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1372.470396][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1372.476585][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1372.482066][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1372.487372][ C0] do_syscall_64+0x2bd/0x3b0 [ 1372.491980][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1372.497226][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.503658][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1372.508355][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.514270][ C0] RIP: 0033:0x7f670f18e929 [ 1372.518697][ C0] Code: Unable to access opcode bytes at 0x7f670f18e8ff. [ 1372.525813][ C0] RSP: 002b:00007f670ff72038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1372.534244][ C0] RAX: 0000000000010106 RBX: 00007f670f3b5fa0 RCX: 00007f670f18e929 [ 1372.542327][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1372.550357][ C0] RBP: 00007f670f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1372.558350][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1372.566335][ C0] R13: 0000000000000000 R14: 00007f670f3b5fa0 R15: 00007f670f4dfa28 [ 1372.574338][ C0] [ 1372.577383][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1372.584673][ C0] CPU: 0 UID: 0 PID: 21337 Comm: syz.6.3497 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1372.595008][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1372.605074][ C0] Call Trace: [ 1372.608367][ C0] [ 1372.611224][ C0] dump_stack_lvl+0x99/0x250 [ 1372.615833][ C0] ? __asan_memcpy+0x40/0x70 [ 1372.620472][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1372.625703][ C0] ? __pfx__printk+0x10/0x10 [ 1372.630327][ C0] panic+0x2db/0x790 [ 1372.634257][ C0] ? __pfx_panic+0x10/0x10 [ 1372.638701][ C0] __warn+0x31b/0x4b0 [ 1372.642697][ C0] ? usb_submit_urb+0xff3/0x1890 [ 1372.647663][ C0] ? usb_submit_urb+0xff3/0x1890 [ 1372.652625][ C0] report_bug+0x2be/0x4f0 [ 1372.656974][ C0] ? usb_submit_urb+0xff3/0x1890 [ 1372.661932][ C0] ? usb_submit_urb+0xff3/0x1890 [ 1372.666891][ C0] ? usb_submit_urb+0xff5/0x1890 [ 1372.671847][ C0] handle_bug+0x84/0x160 [ 1372.676105][ C0] exc_invalid_op+0x1a/0x50 [ 1372.680733][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1372.685596][ C0] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 1372.691162][ C0] Code: 00 eb 5c e8 ef f1 9e fa e9 be f0 ff ff e8 e5 f1 9e fa c6 05 ab a7 6a 08 01 90 48 c7 c7 60 41 34 8c 48 89 de e8 9e d4 62 fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 bf f1 9e fa eb 11 e8 b8 f1 9e fa bd [ 1372.710782][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 1372.716864][ C0] RAX: a4bcf0098fb95c00 RBX: ffff888033c14d00 RCX: 0000000000040000 [ 1372.724850][ C0] RDX: ffffc900021c1000 RSI: 0000000000005555 RDI: 0000000000005556 [ 1372.732835][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 1372.740817][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 1ffff1100b24440a [ 1372.748806][ C0] R13: dffffc0000000000 R14: ffff888033c14d08 R15: 0000000000000820 [ 1372.756806][ C0] ? usb_submit_urb+0xff2/0x1890 [ 1372.761775][ C0] ? kcov_remote_start+0x97/0x7f0 [ 1372.766824][ C0] cm109_urb_irq_callback+0x718/0xc80 [ 1372.772217][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 1372.777612][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1372.783540][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1372.789472][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1372.794864][ C0] dummy_timer+0x862/0x4550 [ 1372.799407][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1372.804802][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1372.810391][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1372.815356][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1372.820311][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1372.825270][ C0] __hrtimer_run_queues+0x529/0xc60 [ 1372.830523][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1372.836258][ C0] ? read_tsc+0x9/0x20 [ 1372.840336][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1372.846259][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1372.851401][ C0] handle_softirqs+0x286/0x870 [ 1372.856188][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1372.860969][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1372.866271][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1372.871495][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1372.876100][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1372.881318][ C0] irq_exit_rcu+0x9/0x30 [ 1372.885580][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1372.891236][ C0] [ 1372.894185][ C0] [ 1372.897124][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1372.903119][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1372.909642][ C0] Code: 74 05 e8 4b e9 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 13 0d 1f f6 65 8b 05 bc 79 2e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1372.929261][ C0] RSP: 0018:ffffc900048ef620 EFLAGS: 00000206 [ 1372.935344][ C0] RAX: a4bcf0098fb95c00 RBX: 0000000000000a02 RCX: a4bcf0098fb95c00 [ 1372.943348][ C0] RDX: 0000000000000006 RSI: ffffffff8d998d37 RDI: 0000000000000001 [ 1372.951338][ C0] RBP: ffffc900048ef6b0 R08: ffffffff8fa1f5f7 R09: 1ffffffff1f43ebe [ 1372.959332][ C0] R10: dffffc0000000000 R11: fffffbfff1f43ebf R12: dffffc0000000000 [ 1372.967323][ C0] R13: ffff8880285bef00 R14: ffffffff8ede1540 R15: 1ffff9200091dec4 [ 1372.975328][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1372.981693][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 1372.987087][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 1372.992478][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 1372.998400][ C0] dummy_pullup+0x19b/0x200 [ 1373.002940][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 1373.007981][ C0] usb_gadget_disconnect_locked+0x140/0x4b0 [ 1373.013900][ C0] gadget_unbind_driver+0xc4/0x430 [ 1373.019037][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1373.024788][ C0] device_release_driver_internal+0x46f/0x7c0 [ 1373.030882][ C0] driver_detach+0x1f3/0x2d0 [ 1373.035506][ C0] bus_remove_driver+0x226/0x2f0 [ 1373.040483][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 1373.046305][ C0] raw_release+0xd7/0x260 [ 1373.050690][ C0] ? __pfx_raw_release+0x10/0x10 [ 1373.055670][ C0] __fput+0x449/0xa70 [ 1373.059685][ C0] task_work_run+0x1d1/0x260 [ 1373.064328][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1373.069516][ C0] do_exit+0x6b5/0x22e0 [ 1373.073723][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1373.078784][ C0] ? __pfx_do_exit+0x10/0x10 [ 1373.083419][ C0] do_group_exit+0x21c/0x2d0 [ 1373.088120][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1373.093341][ C0] get_signal+0x1286/0x1340 [ 1373.097905][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1373.103486][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1373.109697][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1373.115173][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1373.120473][ C0] do_syscall_64+0x2bd/0x3b0 [ 1373.125081][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1373.130309][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.136398][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1373.141105][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.147017][ C0] RIP: 0033:0x7f670f18e929 [ 1373.151443][ C0] Code: Unable to access opcode bytes at 0x7f670f18e8ff. [ 1373.158649][ C0] RSP: 002b:00007f670ff72038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1373.167085][ C0] RAX: 0000000000010106 RBX: 00007f670f3b5fa0 RCX: 00007f670f18e929 [ 1373.175181][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1373.183169][ C0] RBP: 00007f670f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1373.191175][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1373.199265][ C0] R13: 0000000000000000 R14: 00007f670f3b5fa0 R15: 00007f670f4dfa28 [ 1373.207274][ C0] [ 1373.210668][ C0] Kernel Offset: disabled [ 1373.215028][ C0] Rebooting in 86400 seconds..