last executing test programs: 8m35.780415278s ago: executing program 4 (id=1580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m34.796139324s ago: executing program 4 (id=1584): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000914000/0x2000)=nil, 0x2000, 0x1f) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000680), 0x76, 0x183301) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) (async) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d023c94264d886da0c2c2ac357c951a7618f81f39bba9bb9cb01644760b1d0d9f26eea5e3c64531ff07183eb317405311a0ea7caa9f092babe66e847584aa064c2947ccb7d220a3fa7b2fdb5e1ff3d50550389d3e55b7d3265d9b80978b2144c132621199827a19b30503dc891ba93f8e3e2975db6c6dafcf4297dbbce5bc055d778aebd412561fb7644044d52439ab87bb46fcaedab64360f9bc0bac", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="1edf4c53ccb7abe577e69ddaac337896aa2cf35fa8ae2d4018d68f948a5cb9a4bd2e581c63fdce"]) read$FUSE(r1, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x2118483, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) unshare(0x2040400) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000040)=0x5) (async, rerun: 64) read$FUSE(r1, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r8 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800480, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000\x00000140000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000010001,allow_other,blksize=0x0000000000001400,allow_other,allow_other,blksize=0x0000000000002e00,allow_other,blksize=0x0000000000001800,pcr=00000000000000000029,\x00'], 0x1, 0x0, &(0x7f0000000080)="6a22ad66c4a88234bec97121a6256a19209747bfc617ba8c9381309dba9f8c346d046a2aaf") getdents64(r8, &(0x7f0000000200)=""/166, 0xa6) syz_fuse_handle_req(r1, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x0, 0x1, 0x40000000000, 0x400000004, 0x2, 0xe767, 0x6, 0xe96, 0x0, 0x0, r7, r4, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, 0x0) 8m33.510518676s ago: executing program 4 (id=1588): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x8, 0x7c, 0x4, 0x3fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x98, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x54, 0x7, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x800) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) listen(r11, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xfffc, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x91, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x40000008, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0xfb, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x100071, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x21, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x2, 0x5, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x5, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0x400ff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x4800, 0x6, 0x7, 0x8040, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x7, 0x3010, 0x6, 0x9, 0x1, 0x7, 0x8, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x8, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0x1000bf, 0x2, 0x3ff, 0x1007ff, 0xfffffff9, 0x1, 0x2, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x80009, 0x40bb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x4, 0x5, 0xce7, 0x1ff, 0x80, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d694, 0xa1f, 0x200, 0x620, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2440, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 8m32.51951959s ago: executing program 4 (id=1593): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0xffffffff, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000040)={0x10201, 0x1, 0xdddd1000, 0x1000, &(0x7f0000b86000/0x1000)=nil, 0xf, r4}) 8m31.965413467s ago: executing program 4 (id=1599): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae00000800010002000000080003000200000008000100020000000800070006000000080007000600000006"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 8m31.282908678s ago: executing program 4 (id=1601): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000006, 0x30f}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040804) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd, 0x5, 0x0, 0xb, 0x7}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 8m30.3259328s ago: executing program 32 (id=1601): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000006, 0x30f}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040804) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd, 0x5, 0x0, 0xb, 0x7}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 7m16.908227026s ago: executing program 2 (id=1945): r0 = socket(0x2, 0x80800, 0x5) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @local, 0x80}, 0x1c) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00bb0013006bcd9e3fe3dceb48aa31086b308703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20000004) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x3b, 0x1780d33e41788ac9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x89, r3, 0x0, 0x0, 0x1}}, 0x20) mmap(&(0x7f00004e0000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x42795000) unshare(0x28020480) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000002c0)) fcntl$getflags(r1, 0x408) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x10000021, 0x0, @tid=r7}, &(0x7f0000bbdffc)) sched_setattr(r7, &(0x7f00000001c0)={0x38, 0x5, 0x6, 0x8001, 0x7ff, 0x0, 0x2, 0x10000, 0xe, 0x8000}, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000200)={0x2, 0x4, 0x4}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00'}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 7m15.400259494s ago: executing program 2 (id=1951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = eventfd(0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@raw={0xf2, 0x8, "90eaf0941be2"}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = syz_io_uring_setup(0x835, &(0x7f0000000180)={0x0, 0x679d, 0x8, 0x0, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4d}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) 7m13.56874245s ago: executing program 2 (id=1956): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xd164, 0x200) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x1, 0xd}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_int(r3, 0x29, 0x4d11efc2c0f041fa, &(0x7f00000003c0)=0x1, 0x4) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000480)={0x6, 0x0, 0x1, 0x1, 0x0, [0x5, 0x7, 0x7fff, 0x2]}) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="ea8456eaadcd474c0c66c6e732ed88e794e013c01ca201277fa1c4b173378f59ed0f16840d9844ebccbac574b23eddf3766ba1ca13a1001cf8c11d79dabc20f7d4a58f3c7e12d800ff87bbb579d1", 0x4e, 0x0) r5 = add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="812b0ab397752d78fd4d06063f9d7f07886a53efcc74be1e7d9f4622c3b2a69019aec0ccc58f644d2a6f2815", 0x2c, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000680)={0x0, r4, r5}, &(0x7f00000006c0)=""/230, 0xe6, 0x0) r6 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key$fscrypt_provisioning(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)={0x2, 0x0, @d}, 0x18, r6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000900), &(0x7f0000000940)=0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x8, 0x9}) keyctl$get_security(0x11, r4, &(0x7f0000000ac0)=""/99, 0x63) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8008224a}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) mknodat$loop(r3, &(0x7f0000000c80)='./file0\x00', 0x0, 0x0) ftruncate(r3, 0x5) keyctl$get_keyring_id(0x0, r7, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000d00)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000e00)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000cc0), &(0x7f0000000e40)=@v3={0x3000000, [{0x3, 0x8000}, {0x0, 0x2}], r9}, 0x18, 0x2) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f0000000e80)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000f40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000f00), 0x106, 0x3}}, 0x20) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xac, r8, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10000804}, 0x44001) recvmmsg$unix(r10, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001100)=""/248, 0xf8}, {&(0x7f0000001200)=""/60, 0x3c}, {&(0x7f0000001240)=""/90, 0x5a}, {&(0x7f00000012c0)=""/190, 0xbe}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/84, 0x54}, {&(0x7f0000002400)=""/132, 0x84}, {&(0x7f00000024c0)=""/96, 0x60}, {&(0x7f0000002540)=""/60, 0x3c}], 0x9, &(0x7f0000002640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002740)=""/44, 0x2c}, {&(0x7f0000002780)=""/149, 0x95}, {&(0x7f0000002840)=""/183, 0xb7}, {&(0x7f0000002900)=""/28, 0x1c}, {&(0x7f0000002940)=""/217, 0xd9}, {&(0x7f0000002a40)=""/108, 0x6c}, {&(0x7f0000002ac0)=""/19, 0x13}, {&(0x7f0000002b00)=""/71, 0x47}, {&(0x7f0000002b80)=""/129, 0x81}, {&(0x7f0000002c40)=""/102, 0x66}], 0xa, &(0x7f0000002d80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000002e80), 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/174, 0xae}, {&(0x7f0000002fc0)=""/111, 0x6f}, {&(0x7f0000003040)=""/196, 0xc4}, {&(0x7f0000003140)=""/137, 0x89}, {&(0x7f0000003200)=""/179, 0xb3}], 0x5}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000005940)=[{&(0x7f00000033c0)=""/225, 0xe1}, {&(0x7f00000034c0)=""/56, 0x38}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/71, 0x47}, {&(0x7f0000004580)=""/147, 0x93}, {&(0x7f0000004640)=""/32, 0x20}, {&(0x7f0000004680)=""/226, 0xe2}, {&(0x7f0000004780)=""/241, 0xf1}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/185, 0xb9}], 0xa}}], 0x4, 0x40000000, 0x0) 7m13.543010289s ago: executing program 2 (id=1957): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r1, 0x402, 0x20) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000001100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2089090, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0xb038}}, {@audit}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000380)="5dfb8c4148aeeae4f2ec68c0f8316077c5bfc79f8142b5438094c64246f2cf1897c163c80366e90abc1be40e20398365cb84809940c03fc04accd84edf3d12b67b7b19e86d7622bbae1035ec7d79845da56ab973755bb65b270b8daf73e54d4351b0d84bcef4180f6659df04545500c51942d764ab8cd5e40d5cba550a5c06caac0fe59ffab0424c40e1817b0ff5e8b5dbabea56a08f7bc7e8415b8630dfcc48667fa869ad68a5dfb0e338f11877faabe4bdb51c8d0f0f473ac6") 7m13.460449315s ago: executing program 2 (id=1959): r0 = socket$isdn(0x22, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r3, &(0x7f0000000100)="e1", 0x1, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x3d, 0x0, 0x2}, {}, {0x7, 0x0, 0x81, 0xc556}, {0x6}]}) close_range(r4, r0, 0x2) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000900)=0x81) syz_usb_control_io$uac1(r5, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f00000000c0)=0x79, 0x4) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x60, 0x8, 0xec, {0xec, 0x9, "8abfd4c47377fd04d9b029127dadf0428aa1f744161a0694388840c88480d7e9ccb2067a4023448a7025680d1fe05e9602e90c873e66adb5c4c3bb8dfc08eab73e51589a98a95f03a3b1f21e2593edbacb3cdac5038fe10b49e2e3e4e7e2a16394124608c27d01a287131687a6c7fe4355c91a6418c647400e9e7fd5efae8dc34ba7a628c76c82210c17dca35b25177ac2c81365c669e2327b95b76138fac9259474f37b94ad58362e7195cd0d0e51ac58b16bbc3d03b8cd4ef0459fb77a5a754d635144a5bae39c35e2d4a1536316666a62957128945caa7e05173ce3fc13aa8ae9dfd870e1ee5034f8"}}, &(0x7f00000003c0)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "8d33c5557dc19f8ab4eb81d8c06028f957f5527785ff571f5711544d28775cd25afd0c28508c867316ed9b0ec950ae02e91c1c24c062332516571f208809582254635a3fcd3569d9d5a3449a90deb4e666fcc682073cdedcc4111227dd66b9f94cda63a8b7a35b415bd9561c84db8ad69f2d8b778dc8ddcd1da124950fa1bc3e357680f9120817d2d7644f93f5c6abfa4e6fd4ba8288707b1a9e8435bc0d9e7e9aee6568ae60deaca6510ea7e2d249d8bddcf0ccd8ae735694d4f9144f39486a6244d0decda7f3e60cc658c02a7f13999a7554df190e6c1976b6"}}, &(0x7f0000000140)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x6, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "7594a60c606c4b433fe48d6ffea8e4a9"}, @generic={0x2b, 0x10, 0x3, "2707919013a8469d57bb8c3f08d1948845babc34cc1339525c9f9d42ccfe4bb98883291282a8d981"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x3, 0x40, "aad4ceba", ']0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x8, @empty, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x10}]}, &(0x7f0000000200)=0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) 2m34.345658963s ago: executing program 6 (id=3089): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2m33.662515912s ago: executing program 6 (id=3094): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000080)=""/214, 0xd6) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000280)={0x6, 0x4e46c30e, 0x4, {0x2, @sliced={0x2f9, [0x200, 0x4, 0x6, 0x9, 0x4, 0xa, 0xff80, 0x5, 0x8001, 0x80, 0xe00, 0x1, 0x200, 0x401, 0x9, 0x6, 0x0, 0x6, 0x5, 0x7, 0x4, 0x0, 0x10, 0x0, 0x7, 0x1f3, 0x0, 0xd067, 0x4, 0x0, 0xff, 0x8, 0x2, 0x3, 0x8, 0x45, 0x9, 0x4, 0x3f, 0x1, 0xa, 0x2, 0x8, 0x7, 0x7ff6, 0xc, 0x401, 0x1], 0xab000000}}, 0x7}) r3 = dup(r0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x11, 0x1, 0x0, 0x4, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x11, 0x1, 0x0, 0x4, 0x0}) 2m17.927597747s ago: executing program 34 (id=3094): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000080)=""/214, 0xd6) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000280)={0x6, 0x4e46c30e, 0x4, {0x2, @sliced={0x2f9, [0x200, 0x4, 0x6, 0x9, 0x4, 0xa, 0xff80, 0x5, 0x8001, 0x80, 0xe00, 0x1, 0x200, 0x401, 0x9, 0x6, 0x0, 0x6, 0x5, 0x7, 0x4, 0x0, 0x10, 0x0, 0x7, 0x1f3, 0x0, 0xd067, 0x4, 0x0, 0xff, 0x8, 0x2, 0x3, 0x8, 0x45, 0x9, 0x4, 0x3f, 0x1, 0xa, 0x2, 0x8, 0x7, 0x7ff6, 0xc, 0x401, 0x1], 0xab000000}}, 0x7}) r3 = dup(r0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x11, 0x1, 0x0, 0x4, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x11, 0x1, 0x0, 0x4, 0x0}) 10.577796316s ago: executing program 5 (id=3514): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000740), 0x0, 0x40080) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x80000000, 0x994, 0x1, 0x3}, 0x2, 0x0, 0x66a4, 0x6, 0x6, 0x10, 0x1f, 0x4, 0x6, 0x8, {0x7, 0x6, 0x0, 0xae29, 0x9, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4201, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3}, {0x0, 0x5}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000780)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfffffffb}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x18) uname(0xfffffffffffffffc) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 9.557475779s ago: executing program 5 (id=3518): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x3, "c08f2b"}, 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000140)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) recvmmsg$unix(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x33}}], 0x400000000000269, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) 8.228691575s ago: executing program 7 (id=3521): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000ff0000000000aa14000700", @ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000090) 7.238203447s ago: executing program 0 (id=3524): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/kexec_crash_size', 0x102, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x3}}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="203111000000084677"], 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0/file0'}, 0x11) 6.669720683s ago: executing program 1 (id=3525): socket(0x200000000000011, 0x2, 0xd) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000a57000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) ftruncate(r1, 0xffff) close(0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r3) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f0000000640)=ANY=[], 0x200002e6) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x101021) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r6) fcntl$setpipe(r4, 0x407, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x9, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) 6.486488143s ago: executing program 7 (id=3527): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffc8, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x4], [0x400000000000000]}) unshare(0x22020600) r3 = mq_open(&(0x7f0000000440)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01dZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xde\x87\x8f\xcd\xc1\xb05b\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\xb49\xf4M\xd3\xf2\x9f\xa1\x1d\x80\xb6\x16s\x89\xe0\xab=c\xfe,i\xe7yU\x83\x97\x7f3\x84x\xe4\x14\xa8mw\xc9\xe2\xe2n\xb5a\x9c\xb1\xdf\xf8\x91\xfd\xd5\xc3\xd9Q\x9b\xae\xca\x8c\xd6\x12S\x9e\xf3Q\xeb\xa3-\x92. \x1c\xef\xa2\x1d\x16\x95\xbdE\xd6|\xfd\xe1\xa57\x9a`4\x85\x1e\x97\x81\x12!\xeaK\xa1\xcd\xa4\xc2\xdfvs\xda$\\\x8c\x9c\xaa7\xe8\x8a\xec\xb2\xd6\"\x82\xe5\xf1\x9f\x00}\xc4\xa9\x96\xcc\x81\x99\x11U\b\xb0i\x03\t\x9e^P\xd3\x18%\xd52\x80\xce\xac\rh\x14\xe5 M\xbc\xaakD\x15\xb6\x1f\xbe\x06#\xe2_\xdau\xa5u\xb9L\x0f\xcdw\xe4;\xf8mF(hU\xbf\r\xc8\xaf\xdaU}\x85\x9f\x8e^\xc6\x97\xb8\xa4zy;G\x84h\x0e\xc1_\xe3\x03Vss\xcf\xef\xca\x90\x9b\x9d\xcf\xc47\x86\xbd\f\xa8-\xbf\xe8<\xb2h\xf5\x8cm\x88T\xba\xc5\x95\x03\xec\x19\x8f+[{\xb7\f\xd2\x16\x8d\x95\xf9@\x8d\xeb\xdf\"P\xaf\x84\x1eh', 0x40, 0x4, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000180)) chmod(&(0x7f0000000140)='./file0\x00', 0x3961d4ce52efd4dc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @broadcast}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x6, 0x9, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8000, 0x80, 0x9, 0x675}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x4000, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r4, 0x34, 0x0, 0x7, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000300), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 6.424516014s ago: executing program 1 (id=3528): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40084) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)=0x2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff", 0x15}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xf0, 0x2000000, 0x448, 0x448, 0xf0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, 0x32, 0x36, 0x3}}}, {{@ipv6={@mcast1, @loopback, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x5]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8001]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 6.244879203s ago: executing program 3 (id=3529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106010000000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfd, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000002000600000000000400050000000000100007000000000020"], 0x24, 0x2) 5.655602201s ago: executing program 7 (id=3530): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\x00\x00\x00\x00\x00\x00\n\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') 5.483456801s ago: executing program 3 (id=3531): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000ffffffffffffffc100", [0x8, 0xffffffff9673e35d]}}) 5.405410279s ago: executing program 7 (id=3532): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x4f) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006d5c9e3e2fd38ca0cf0255214c05dbbfe767ad5deb047baa896d482c1018ddfb77b05c12755dcfd0d3b907e21626652b208cca7f0729663c98912c88cb56ee6863035de91a9deabe0568b3818ef4e"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x10000000) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000ff0f000000000000000000000018110000960806d708ed99bb90d12cde4ed62afac15a8a72eb235e8fe53cec8643b5bb6ee80471b4a7117bddffd3fb637452a9de6ad932b5ab8230e60127f78aa09e35c68013b8cc91bb7370af9f4949b665b900450ec187d1c3fd372d659f8e1d4094cbb53a923a0700000000000000b15fe02fa6e68176a8f5b37ba6d2f32d6e4827bb7542dcf5a11a3a5108698192cae700"/172, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000d0000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r6 = memfd_create(&(0x7f00000000c0)='-\xaa]{\x00\x00\x00A]Z\xb4@\x00\x80\x00\x00\x81\n\x04r\xfar\xb1', 0x6) lseek(r6, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x16) r7 = socket(0x10, 0x803, 0x2) r8 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d440000904650001be866d24090501024000010309"], 0x0) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(r8, 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = syz_open_dev$usbfs(&(0x7f0000000300), 0x90000000000, 0x688042) ioctl$USBDEVFS_REAPURBNDELAY(r10, 0x4008550d, &(0x7f00000003c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES16=r8, @ANYRES16=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.639306061s ago: executing program 1 (id=3533): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_ifreq(0xffffffffffffffff, 0x8947, &(0x7f0000000400)={'bond0\x00', @ifru_addrs=@llc={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @broadcast}}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(r3, 0x0, 0x2, &(0x7f0000000d40)={{0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) wait4(r3, 0x0, 0x8, &(0x7f00000000c0)={{}, {0x0}}) syz_clone3(&(0x7f00000007c0)={0x100281100, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYRES64=r5, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 4.525184041s ago: executing program 3 (id=3534): ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x6f5, &(0x7f0000000040)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@getlink={0x140, 0x12, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x20450, 0x100}, [@IFLA_OPERSTATE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xc0, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xc, 0x8000}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x8}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xaaf, @link_local}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x3}}]}]}, @IFLA_MTU={0x8}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x47}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x228, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "d7c70b7fd20501e6df0ee98efe31ce342a6bb1ab792745731e32eddf17524b35517d"}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c55}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74ed850f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x953, @remote, 0xf6e}}}}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4}, 0xc0a0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000680)={'syz0\x00', {0x2, 0xe3c, 0x9, 0x359}, 0x3c, [0x5, 0x2, 0x1, 0x1, 0x9, 0x4, 0x8, 0xc1bf, 0x3, 0x401, 0xcfc8, 0xcc, 0x6, 0x5, 0x400, 0x9, 0x5, 0xebc, 0x3, 0x0, 0x5, 0x7, 0x1, 0x8000, 0x7, 0x3ff, 0x9, 0x0, 0x2, 0x0, 0xfffffffd, 0xfff, 0xfffffffc, 0x4, 0x7, 0x9, 0x1, 0x7, 0x10, 0x800, 0x2, 0x1, 0x1, 0x9, 0xef, 0x4ff6, 0x2, 0x33d0, 0x1ff, 0x4, 0x9, 0xfffffff8, 0x9, 0x83, 0x1, 0x4, 0xf7f, 0x9, 0x7, 0xfcd, 0x100, 0x6, 0x7, 0xf], [0x2f, 0x7, 0x850, 0x8, 0x81, 0x9, 0x89, 0x4, 0x140000, 0x4, 0xfffffff6, 0x2, 0x0, 0x6, 0x5, 0x6, 0x100, 0x7, 0x84bf, 0xb, 0x3ff, 0x7, 0xcb3, 0xb, 0x200, 0x281, 0x7ff, 0xfffffffa, 0x80000000, 0x5, 0x5, 0x7, 0x4, 0x4, 0x1, 0x7ff, 0x5, 0x8, 0x5, 0x4, 0x8, 0x8a78, 0xb152, 0x7, 0x96, 0xae2, 0x2, 0x7, 0x6, 0x3, 0x5, 0x0, 0x3, 0xff, 0x5, 0x2fd6f384, 0x504, 0x9, 0x40, 0x9, 0x3, 0x0, 0x7fffffff, 0x9], [0x5, 0x7, 0x6, 0x101, 0x9, 0x1, 0x8eb, 0xe2, 0x7, 0x5, 0x96f, 0xbd, 0x2, 0xfffff625, 0x4, 0x7, 0x0, 0x4, 0x3, 0xfffffffc, 0x5, 0xa, 0x7fff, 0xfffffffb, 0x81, 0x0, 0x8, 0x7f, 0x9, 0x7, 0x9d4, 0x80000000, 0x3d, 0x0, 0xa0, 0x9, 0xd9, 0x8, 0x9, 0xa49, 0x4, 0x4, 0x395d3fe2, 0x7, 0x2, 0x7, 0x9, 0x3, 0xfffffff8, 0x2, 0x400, 0x741e5db0, 0x200, 0x3ff, 0x6, 0xffffff01, 0x800, 0x5, 0x10000, 0x5, 0x1ff, 0x5, 0x6, 0x8], [0x9, 0xbd0, 0x0, 0x7, 0xfffffffb, 0xfff, 0x1, 0x6, 0x2, 0x2, 0x4, 0xf9c, 0x8, 0x5c, 0x6, 0xfffff801, 0x10, 0xb, 0x7f29, 0x3f, 0x50, 0x61f, 0x7, 0x3, 0x6, 0x6, 0x4, 0x5, 0x8, 0x5, 0x81, 0x7, 0x9, 0x197d, 0x5, 0xa, 0x9, 0x523, 0x6, 0xfffffeff, 0x80000000, 0x8d5, 0xfe, 0x7, 0x5, 0xffffffff, 0xfffffff8, 0xfffffff4, 0x49, 0x80000001, 0x8, 0x6, 0x7, 0xffffffff, 0x7fff, 0x6, 0x2, 0x6, 0xd, 0x10001, 0xc6, 0xff, 0x1000, 0xa2d]}, 0x45c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', r2, 0x29, 0x6, 0x9, 0x7, 0x12, @mcast2, @empty, 0x7, 0x80, 0x7, 0xffffffff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80104000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb0, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xb0}}, 0x480d4) move_pages(r0, 0x3, &(0x7f0000000d80)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000dc0)=[0x7ff, 0x9, 0x3, 0x5763c6bf], &(0x7f0000000e00)=[0x0], 0x6) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000ec0)={'syztnl0\x00', r2, 0x1, 0x1, 0x1, 0x4, {{0x6, 0x4, 0x3, 0x20, 0x18, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001080)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xec, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x20000009) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000010c0)) r9 = openat$incfs(r1, &(0x7f0000001100)='.pending_reads\x00', 0x200000, 0x64) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfd5b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x180c0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001280)=0x0) move_pages(r10, 0x6, &(0x7f00000012c0)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil], &(0x7f0000001300)=[0x3, 0x922, 0xfffff9b3, 0x7fff, 0x9f2], &(0x7f0000001340), 0x4) ioctl$TCFLSH(r9, 0x540b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000001380)={0x2}) fremovexattr(r4, &(0x7f00000013c0)=@known='system.advise\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000001400)={0x0, 'netdevsim0\x00', {0x1}, 0x5}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x4, '\x00', r6, r9, 0x1, 0x5, 0x3}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xb0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f00000014c0), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'ip_vti0\x00', 'veth0_to_bond\x00', 0x4, 0x1, 0x35, 0xe0a0, 0x8, 0x100, {0x9b}, {0x5}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x1, 0xe93, 0x3ff, 'snmp_trap\x00', 'syz1\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) write$binfmt_script(r9, &(0x7f0000001800)={'#! ', './file0', [{}, {0x20, '\\#\x00'}], 0xa, "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"}, 0x10a) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x50, 0x1, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa6}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa2e}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc880) 4.304814662s ago: executing program 5 (id=3535): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000002300)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58e5c5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f", 0x79, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0, 0xffffffffffffff78}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0xfffffffffffffea2, 0x3, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) 4.203730517s ago: executing program 3 (id=3536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1a96}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 4.037364106s ago: executing program 0 (id=3537): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000007fff0000000000aa14000700", @ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000090) 3.539855631s ago: executing program 0 (id=3538): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) signalfd(r0, &(0x7f0000001380), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 3.538894786s ago: executing program 1 (id=3539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) (async, rerun: 32) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x0, 0x14bd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x52, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002200000000c3ffd4a0000000000000"], 0x0}, 0x0) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r9 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xffffffffffffffff) keyctl$invalidate(0x15, r9) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf25310000000c009900020000004a00000008005200", @ANYRES32=r6, @ANYBLOB="081003e76e49a53d2db0d5d143aec3b2b9855b284886c23b16e8325d623b89ed863a44dec9a1e9dad0dd8e6b04ce14965523c2e0ca4e2506c97f50c2ad3404d4", @ANYRES32=r12, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0xfffffd53, 0x1, 0x3, "5e3697df829b83c7b359060a4490e6b5cf7a9aaab15f987b9f05d5600b8984bf", 0x38415262}) 3.200198357s ago: executing program 7 (id=3540): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0xad}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x4, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x149b82, 0xb300bb1401d27a12) write$cgroup_int(r5, &(0x7f0000000000)=0x800, 0x12) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@empty, @private=0xa010100, 0x1, "ae3028ea8e00ae10c2f31c3a22013d217f213005eb48af9d03f93ca571f757b2", 0x800, 0x0, 0x8001, 0xe5}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 2.993189856s ago: executing program 1 (id=3541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106010000000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfd, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000002000600000000000400050000000000100007000000000020"], 0x24, 0x2) 2.978127871s ago: executing program 0 (id=3542): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "db19ff47"}]}}, 0x0}, 0x0) 2.143449554s ago: executing program 0 (id=3543): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000e5000000000000003c980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb89}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x1}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000e5000000000000003c980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb89}, 0x94) (async) 1.893212266s ago: executing program 3 (id=3544): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) 1.60103831s ago: executing program 3 (id=3545): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0069ae26bd7000000000001c000000ff000004000000000800", @ANYRES32=0x0, @ANYBLOB="2d0e9b4b4421b0b5ea7bd4a2eacc9b806da39259f219f0ed7bdb75785f38e7f76acca6d2b6817509a6837317db4e81fd3ddb986bb8f7616d8e30351c8e5dfd1316dcb65bce32cb1fa07448259f8ca61703eda8a150ce26294e0bd0fb60225117684577487458fbe41473252fb701f0"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r10 = open$dir(&(0x7f0000000000)='./file0\x00', 0x12102, 0x10) mknodat$loop(r10, &(0x7f0000000280)='./file0\x00', 0x10, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) 1.60051719s ago: executing program 1 (id=3546): userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) unshare(0x22020600) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000000020601000000040000000000070000030c000780080006400000009c2400078008000a400000958c080017400000000108000640000000010800094000000001da43e50408000940000000010800124000000007060004404e1200000c0002800800014064010102"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x11) sendfile(r5, r5, 0x0, 0x2000007ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040941b09000000000000010902240001"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x8000098bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x6, 0x4, 0xb, 0x5, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x460, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x9, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x101, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x6, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 1.549638992s ago: executing program 7 (id=3547): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x46c00, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x1, 0x0, 0x40, 0x0, [{@empty}, {}, {@dev}, {}]}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 1.462366645s ago: executing program 5 (id=3548): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000410000000000000000000000aa14000700", @ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000090) 1.260563287s ago: executing program 0 (id=3549): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x31, "4c004c277de93645eda8a443d7f609e1a17b353bd91a89d246c658ba3e713ff66662f590090eedf30853ff85e704740c3e"}, &(0x7f0000000040)=0x39) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x4, 0x10}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x7f}, &(0x7f00000001c0)=0xc) syz_clone3(&(0x7f0000000380)={0x8000, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, {0x2b}, &(0x7f00000002c0)=""/43, 0x2b, &(0x7f0000000300)=""/52, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, r8, 0x0, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x7}) syz_usb_connect(0x6, 0x9c6, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xb9, 0x50, 0x39, 0xff, 0xccd, 0x62, 0xa418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b4, 0x3, 0x3, 0xf, 0x0, 0x6, [{{0x9, 0x4, 0x22, 0xe3, 0x3, 0x93, 0x6c, 0xa5, 0xaa, [], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7c, 0x8, 0x5, [@generic={0x5c, 0x1, "11653ae5ab1c8dbda5c707f1fb55c48a667374fd85f5b53443adf9eed5f0fed5318bac4886050a78598af07f7335ed4600a4b45cdec46ed753a00f718d27ef15e28d22e2d8fd3c1bdfbc9c53cca289b249cef24ce01b1cb4fe2c"}, @generic={0x1a, 0x30, "be0502cae5b7cad8ef0323e11e7c4f5f2a846c8dec469702"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x9, 0x7, 0x9, [@generic={0xa0, 0x22, "6c2d9456a84385254c363979b686a9867a66d24755ce4461921cf7daea22b4db8d596e562693d8cb072d88033a70110b0c113666995d1c27644643a9d61a9a38f95a0c6271d2fe16d6ddee34de98193025696ed21af6c583276342d156858d6adf754b6a0968b5237331c4e5d09480190211b36974d0afded60fa11e7147466eb66a87e54277148266d561ad5f1f89019aa8638d21adad82f071757afbfa"}]}}]}}, {{0x9, 0x4, 0x25, 0x6d, 0xa, 0x78, 0x48, 0x55, 0x81, [@uac_as, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8a8, 0xffff, 0x24f}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x9, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x3b}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x6, 0x5, 0xf6}]}], [{{0x9, 0x5, 0x6, 0x1, 0x40, 0x3, 0xa4, 0x8, [@generic={0xf0, 0x11, "0f5ae3ad645694c43aeb665896d81b4e4d12d05e822d81c0e6749dd13db3e5ab8166254a63386a4b84f8bcfea259f4fb32bf5912b13f890426c9ea2366a7e99a921b5785ac6689c491b403a9886fc72fda4ac31a6c4e391f63fe6bcf6184b37864524f3f047d9360fa41a9417e632f6e16373b51c248c6ff271b20ed6ced44ce402e6577a5cd427b1ce76968e1cb3265d5ee7a1684468aa6cbeedac37d52c2a179e4140b4981c850fe8d583e609f2055f3fd52524fa84d00c5125f2508b38dce740a2e9d0976f96b1867a29e23d83f24f6524285c50dec6481105e0ce6b17fcb1f2e08ce970d7c937aa4b35d9c37"}, @generic={0x68, 0x0, "867b042d8beed15ecf6b4904af772f1b650af6ba1bedf1de6043cf00e09be1063c17ad73c5dfedd0de497739d4f42912351768599fed3d6a483c54c5ec4a969971e3010ba14379092c3b510003bba4ce3664ee487ec6b1c01640c125f3228ddaef8dff01c50e"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x5, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xc17}, @generic={0x42, 0x21, "cde139aed7a8e488ead792284bb167836bf27e9cdaa59d58ec93e8a9171234497ae7daa8e4f0f996711ee276b01e175ad80803ae77a0abd443c01ec8fbbfd2bd"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x5, 0x7, 0x4, [@generic={0x9f, 0x3, "46e9ee1d34fcb92f21f245e2e012e8356e52e91a25a53cef3fd7eb76fad57836d2cf8cc23f85a5c8119ef4f2db8919ab0eccaa3480d430a62d90c6a32c35291ce3440da8e7a8bb4e19334605a491fee7f6f7229a7b8dd15fb0b3b9cec55edcea871f819cf2090abe3fdf9e86269aa5d35778229f2979655a5ce7d0e8f3409996e918007378579450d556af67137c0f81b49e7f2df1c0fb91fd345be304"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x0, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x1, 0x51, 0xfe, [@generic={0xe7, 0x10, "be077619e5b2f26d1c09bf45e41bad3eab43e2f40ca6081efc4a92f7ede48aae279db49d6ffd959e2ad40ab2cdc543809c1eb6a5c2fe7f8dc8b23f1bc155f78fc0129bd5de653b84179fe9e0370461f7f365b9eb0503153f48c9f8dba62844eceadd19e82dcc9e701cb80fb591323c8dde0f92c35b3df7b3f1c1a1228c5b19ea519c0ca503b08dc0cb7d9d9ea819c0300f822518ca0d5419a3858c92ad25f7b01d40e156277b40b45eb53a4d9c3f45482cc51a602c148ebffb4e18dcd1f6818e409eebbcd8695a184d10632ffc623f0a0761963405c59dc37d346719f9df0681cf48f63df1"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x1, 0xd, 0x6, [@generic={0x77, 0x4, "72dea95568f6a1a53a8e420c558131127d22c5020ebd6777c79a96bc95f1acab28ef39d8afd097c3c1127689397f453568e49f0ac2600ba742f97c7e321d5623cf73fd7484af3ab25f9c6747afe8d50397f935947d98a10bee7c389f84e0a20ef59ddbbb7d0b30337c1f8e381ee0a9e5a342da9759"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x5, 0x1581}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x6, 0x80, [@generic={0x25, 0x11, "005b12f2c4d526f511f04dbc451a277023b71ee61f556f91e3c414cade0b087b007ffe"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x9, 0x74, 0xfd, [@generic={0xf1, 0x22, "a7e55e25a4a898dbebc7b6c2cdc6baaaf62c88e049996e6dd80edda6c568f65688047b4cff4d486da3ee9b4f9f849c2f67e91bbc588823ac4def4fce99fce5dabcdfb565bf78141ab757b1b17ab72d4d93e12ab6f2d34a3d1ecc085a84cabd358092c5db473c8f4cfcd57082fea53f29ed9e416a3a7c632173bef749370e42a6c56e47c641bad04be6a0934d8d81fcea946ec5c21cb10a6051e0ea462d48802ad0d886340ac18c2275eaeef0036609f041d1add5961b683c2601ac960c2379737f1858a5ba46c72b0afcd2b9b413e732f0570d8356bfa9551b48764a29b40f4d49293c6eeff90c17c9b7959b918009"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x5, 0x63, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x32c7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x3, 0x4, [@generic={0xc1, 0x8, "917ef2486d0fa9daf8bbd1638fa2a3e201dfdf7fe4be49026be87665e5099d9af43fcfec0130c3964dbc113fdfbf2b9ed3d35a5f90e7f617a95d677d5abe537257d41ccbed12629ff8890ca17d99bc3b94ce00797f4b282910731b61cc6358a8a7f2e47ef0e38aaf5606e2e54bcdb10d4b416c1b689730d805b526d5e9271dd6fbfc4b5c02ade6b5d52617a5a366747d9b5fc5310989064a35d51a3cca02ecd0edefada68bde3c4e29ca45fb09014365c28fb9bc668e0565fa06e42c56efd1"}]}}]}}, {{0x9, 0x4, 0xb1, 0x0, 0x7, 0xca, 0xf0, 0x69, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x90, 0x3}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0xd6, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x8, 0xc6, 0x5, [@generic={0xc9, 0x10, "5b76c1b3f75fc227f56fd80aca098697831b5ff5812240fe74c7d7db089d2984433d81a8bcd64e639e5cb0557d1875e224300d784d98711d61afef24cb438ba429ab3df6464d7c6790ba7303778f4ad9ddff977a249be83457aec6c65e85a6f27989b4d622bb0a24fe572461badbe0b00d95cf7e1fd69fdc16723e69676e25c5e0df01857d53ac9f731e1adcf31439dd479fd646d9106b668ceecf63f91df61920335beafbe20c419e061caf38e02f3e70522a471622a80fcd77e49c21dea4cbce8bb1eb494e47"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x4, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xd, 0x66, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x0, 0x73}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0xc, 0x8, [@generic={0x61, 0xf, "6df1b60ecc006b6ac3be4e00a2277d90bf151fd7438ad6099fe587ba1dada054115b1eb21110dda72bda9a0b59d4f1acf22e7b9e0953d6678e586b99bbb55ac80ae558b93eb92a91903fc1975cc8ee6882b59574937fdc35a10bf02b2b7ffd"}, @generic={0x9a, 0x24, "c4cc912bc8528e2e3df7e245ef500fa8b44a6fd0008af94e9fff299e4d2eb2ca7c601b61cdfcd94d6e83ceb0949bb7418b04e8575d47d3c6aaee61e47d7f3423bb7714741247c3aec9a0534705dae5991afe924cd3ba4616d4c046ffedf7d35e2bdf524a3420b2432fb12da4eff2f8bee34262bf49709b98a1bb3338ac7ce5c9827e02a01092bef61f1d9a99ec4acc3678b3389a07fd54b8"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x201, 0x5, 0xf, 0x7, 0x10, 0x3}, 0x123, &(0x7f0000000ec0)={0x5, 0xf, 0x123, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x3, 0x8}, @generic={0xed, 0x10, 0x1, "8758e2cab8b2e94b8ff6337aaf2e1416d04a617d56c613d312385fff6b34957871f59258431612a0d648bfd608531f88f1bf132235f3d6166e13117715829d832618a37cdd4630ed53dc08e0b8bef29a9a5166c04e6a596929d6c56af7ae55b1fdf2f9604392178ff23af3e81b0606e49a17fdd820f9c1b3213fc9ec316977b32551d20c48a2e5733913cfc9d77daad914cb26cea2acdba4d7cc0ef72add41c9eb409566c9fb45f29747fbaae75ce46f6e5203d3fb815bab1e8f329c7d046b00005a048ddbb1aca985baf321a6ed5c29ef8eef683d1c48de69a1c2752d353f303f50292c9412b1c2e79c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0xe2, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x4b6, 0xf0f, 0x609f, [0x0, 0xffcf, 0x3fc0, 0xf, 0x0]}]}, 0x5, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1004}}, {0x5d, &(0x7f0000001040)=@string={0x5d, 0x3, "2429952145cce91c38d76b15ae99e587ced9abf20f53206968395f1b4130866d34d9457c32e2bde2805d7234eb6519b47d2ce980a14ec62ef274aa1265846354097911bff4bb389b43afc1427e8a6ce54fa6b6c77180ded6318a74"}}, {0xc2, &(0x7f00000010c0)=@string={0xc2, 0x3, "4fc2fc64efd837e7971199e61a0c31f1aeb2aeb8e07f25d4fb21aa1b08b2be52ca3c27d1a8e205367be9eea65b9154179794a0b64d1ee184ce131edf2a223940e1890686be4a9d41aaacde694992c4115207e8953b388994a2a9e39e4d8f32da543bded689a726ea99ea2129b1108e67aac0b8eea70e0b32754177ebaaada6c40cc5b0d7730653cf60e7c5569a3427882d1e549158dbb7431fb6d1033148ec43d2acd0d2e7b95bb0c991740aec740823c63b3b36f78e8bc0248cf7f4076eac08"}}, {0x72, &(0x7f00000011c0)=@string={0x72, 0x3, "2364987eebd7e3415ad4034a7b0a33d00fea9d9a3f500cce3ccbd903e88553aa77143025a0c95b0f577ec3979c91a0b12eae20b649b6a6dd96874506496869e9b04aca089a0128fc1bfeecf6f1a86f9d03a801be15bb72fae632ff945b8d538fad8e1cfed96374064848251cc5821969"}}, {0x63, &(0x7f0000001240)=@string={0x63, 0x3, "ce5e15ae94271319ef4bd4dd507e01d27f1ee08526c71c9235b00c793ebfe898080758d8822d4f6e4fc7ffdcfbfec2d7e813de9db85f6f67eda1bd2689238e730f39ca900d1b090c56cb16dba28be4b04981d6ae6d88524a2ed667f81e39e3d9c7"}}]}) syz_usb_connect(0x1, 0x1b1, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x7a, 0xc6, 0xb9, 0x40, 0x421, 0x6aa, 0x1110, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19f, 0x1, 0x7, 0x81, 0x50, 0xb, [{{0x9, 0x4, 0x4b, 0x5, 0x7, 0x1, 0xc6, 0xe7, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x6, 0x7f, "5ad5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x1, 0x5, 0x5, 0x81, 0x6}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x1, "d8149aaf"}]}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x0, 0xa1, 0x8, [@generic={0xd8, 0x24, "4949c032758918f625884361d5d0827e23138ac931e0fd27304724b1f6206df2f1c69df0829c96399683c25c040d7c1a6bca1ea8a4afa9c2a3eaf85f709f028f73a310ef4e1158d1ed21053ac8e6c143113a18328139b80cca8b8654b81f7877d15bd497053641540ee7ea979db6ad05a3f4acd16e3026a4eb895f9f56dfe57f191c8e56f43a369233728458d516ff7c98e84f87fd5ec2219dcb6fdc9e282c8bd19784d88b5d67d5a4c0aa0b9e0384c308bddafda1de2763b565f85b6f73ef1666d3eccbda17cf749d9b21a2989ddb4af89d2d86d3ae"}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x10, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x3, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x1, 0xc, 0x4, [@generic={0x2c, 0x23, "83e1f93a0ec20d481eafa28661727adbdcda2f1a5f45bbbe9ef597813a7660421f2170f8cad70be04708"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0x1, 0x4, [@generic={0x7, 0x30, "e7cf3402c7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x3, 0xb, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xaf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x9dbf}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x6, 0x6, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x6, 0x25, 0x7}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x300, 0x9, 0xf4, 0x1, 0x20, 0x7}, 0x75, &(0x7f0000001540)={0x5, 0xf, 0x75, 0x1, [@generic={0x70, 0x10, 0x3, "da63d760613acd9584441182d15af529c2b1ad4313859fffc14a36bc7fd6ec686a302b3f6023d76d9122c73595a5df12dc26b3ed267f17b9c730587da48482f952f35f96cf9ca6ba65d491741ca22b32b2eddda677853d2adcb4269c8a86969c0a66b7d8280111552dff6759a3"}]}, 0x2, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x42a}}]}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000016c0)={0x0, @nl=@unspec, @phonet={0x23, 0x4, 0x9, 0x6}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x9, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001680)='veth1_to_hsr\x00', 0x6, 0x8, 0xfffc}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000001740)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa, "815b3f21e0c1bd"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002740)={{0x0, 0x800, 0xfffffffffffffff8, 0x2, 0x0, 0xffffffffffffff80, 0x7, 0x8, 0x8, 0x2, 0xe, 0x80000001, 0xd2a4, 0xc43, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000003740)={r9, r10, "4a4559068e98638a7e9927190c47dcbb1c75a057b0a6f4c4753bfc755a62e374adb1634890fe2ea6bad520b1965677b3b818458c0235bbffd9dcd9075420f59763748c62d0d3d2278c89b15544dfbbe34f79725045a90d2fbd59a708040b6106902942f4581dc125cef94963d82a1e960b974ec93abff16eade9a3eb1a59a8680d91ccba340736a008c09f97b20ae89ad50aa810d7206994e7ad61fd936fbe39c9c54b1f39fdd9a7b7b118111781b03801e50c943e6b88324506356a4c278d50744a06a1dad071b6df295ae195f98d81abb4c84708587ab574381cef4f0fb83ee71a1f40cc93e84cc2105d34b9def43df6c3a9b3b073513e77b6770d935ff931", "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"}) r11 = openat2(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', &(0x7f0000004780)={0x400, 0x100, 0x2}, 0x18) read$fb(r11, &(0x7f00000047c0)=""/93, 0x5d) timer_create(0x7, &(0x7f0000004840)={0x0, 0x13, 0x4, @tid=r7}, &(0x7f0000004880)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000048c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @remote}}}, 0x84) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000004980)={0x7ff, "d488cf29d7ca218688bc506d423912b1befde4bb3ad7d89a7ad6bc820d8a91bc", 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r12, 0x82307202, &(0x7f00000049c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000004c00)={0x0, 0x6, 0x3}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000004c40)={0x3a, @multicast2, 0x4e21, 0x3, 'ovf\x00', 0x7, 0x1, 0x2}, 0x2c) r13 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x3) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000004e80)={0x7c, 0x0, &(0x7f0000004d40)=[@request_death, @free_buffer={0x40086303, r13}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000004c80)={@fda={0x66646185, 0xa, 0x1, 0x21}, @fda={0x66646185, 0x7, 0x0, 0x15}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000004d00)={0x0, 0x20, 0x40}}, 0x40}, @acquire_done], 0x8b, 0x0, &(0x7f0000004dc0)="ef9285ef0a414056641050af7fa8d85ae0b79e909bd3eb9d44f289947699ff3cbc7acee7fb8abdacb55965bdb8b00bf4c5a41ba6c0834aad1ae9922691c6234e38f84e1b435a5c8bef1d359c97fa103f62dd7d61efbbaf9fe43b04a5c38978a447e87e74bd1a16b4116d0fe88f6729e130babd59a3b8f342bab4c50e667690f8534de76eb9907c744d67bc"}) syz_open_dev$sndctrl(&(0x7f0000004ec0), 0x9883, 0x301000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f40), r11) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f00000052c0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000005280)={&(0x7f0000004f80)={0x2c8, r14, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xdada}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4305}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x240, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7ff2}, @broadcast, @random="11bdbda74a85", @random="37966dc6ac32", {0x3, 0x8}}, @a_msdu=[{@broadcast, @device_b, 0x54, "b6d3c2ff994a9867a72bd5bec3b7d986ba9bd8d50c76386645b901cac0cacae796307550a59e7c90aa882ccda6a78c724415123b4e56ad86928fdf16b76319d9753499746ff108aed29a31353259a66ee41ce4d1"}, {@device_b, @device_b, 0x39, "82f41510b4d13e54e35b5ce0f4c115debb4864e8169f85ca705156cde434b5215719f7667f62c5e0c9136146b839d0e093bc127d59d45f547f"}, {@broadcast, @broadcast, 0x91, "11a7b69103c13167947c79bb12eb0ea6b3d27f5e2709e36594c7bc50e3aa9312ddec7c9c2cd60785cc9472e8835ce3ce3c73a14a09fae455e29196edb397450a29dedd61339c76b0a5053a560f970f6b48b861e6ce68bfa2ac91a8458f77c4b49a7937d32a417b19f25798a8a02183b95446561b81057fb1afd80080dde92c712a2eca790eb712d31de11626c7f34212cf"}, {@broadcast, @device_b, 0xa7, "3e2bbaa346d0598baa443f19222d73b6241c498c5bc924a85d3f3cedbc710fd175bcbd926877532834ff6f246392848219c760fe61913138f6a4a472bd48d82c4186aa24e8aace46ff10f4841b1ac8091f1b31c812d0b8d9809ac6c66ba1572d1ead359f661c7adb67445fd67ffa1faf3aef0231b8de5c55d22bb3819d0522c3244f05612434e2802bb07af90201b39ca8c053c85b5aa0eae6c8485cf9a52ba57e7d4f5817d810"}, {@broadcast, @broadcast, 0xf, "90a02c770e710325435b410bfb0911"}]}}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @from_mac, {0x7, 0x6a0}, @value=@ver_80211n={0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x3e, @val={0x8c, 0x18, {0x764, "83bc529b5c4e", @long="fbe861edcb0b78ae8a7bd687e9daa5ad"}}}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.00392823s ago: executing program 5 (id=3550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c020000bb0001000000000000e946007f0000010040000000000000000d00000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000ba531edcfc2019f20742aad259354867ff076713b2baecf9c9c9a8c4d8c703b3f398", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x26c}}, 0x0) 0s ago: executing program 5 (id=3551): syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x9}, @from_mac, @broadcast, @from_mac=@device_b, {0x6, 0x3}}, @a_msdu=[{@device_a, @broadcast, 0x18, "e5d7eb0db7e507ef306764025a9f34d18603602ba1e0c9be"}, {@device_a, @device_b, 0x5b, "fb1f9681f607962895e753848a819562c83f0c422fe39de2b6ab50919f4e7683836e450a18ad65c351a9b7f306b172f2f521896cb28255bdec036167bfe63bfd56efe718870d3a3a8feaaff6c3f7539526aa872fefafb5063fc324"}, {@device_b, @device_b, 0x93, "2ec51d4a707e03a2a254edd4c3872c60aac4bd19e73a83475bc34fd16ec2f5f24453b04e5ccd61f2b63577711b21742531cbd8ba3f60ccae50efaf2265d1e2aec18688acef70f9d37cf3df0c38c655247114537cfc59d0822c5e4e0d950f7b3e6baa3fe977ecfad99308401f88ad7b5faf3d3be3dd6f192cd786a9999fe7131d82530789f990b24c678fcafcc0275be87c24f7"}]}, 0x150) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000810500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d8040000000000400012800b00010062726964676500003000028005002400000000000c0031"], 0x68}, 0x1, 0x0, 0x0, 0x4012}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x5f8e, &(0x7f00000000c0)={0x0, 0x79af, 0x80, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r9, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xffffffffffffff2c, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r12], 0x50}, 0x1, 0xba01}, 0x0) r13 = socket(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0xfffffffb, 0x8, 0x100, 0x7, r14, r15, 0x1ff}) sendmmsg$unix(r4, &(0x7f0000005340)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f00000005c0)="cfce83aa3126afaaa24aab3f9cf07ebec851d0faf61de9de3aa317c1d3e43dcd07fd1786dd0e878ba2134cb391e8334da2b4c8acd6a3bdf3be28a35d85a535872957321ef22168463a7745a826ef3a3aeda51a9457655fac3cdc5994b4ac420e3388e890dc0f22332def0d7be760661b36e71a8cc2cdfe1e0ef6734c7586a8013f5d43304499d161dc", 0x89}, {&(0x7f00000007c0)="7141afdcb17839ac96afb968f1597c7a77a3f2c24f0ed33783687498185c7e630f42ffc0f93b5992f9b4b9cd85b2481ef4e8f3dd0d7594f5a767ca43fa503af8cb3bd667283e2f650ef29f8980", 0x4d}, {&(0x7f0000000480)="67d3a0ef4e25a544a2eaa21dc65d9e35371a25", 0x13}, {&(0x7f0000001900)="8b3a32844898588fb7e65875c37ead6d3a91064d7fd74e796071ee372e40d145f7fe471981b0ee03755075b04887eeb5df4027488c92077691a954356d5247f7dd343d78b8c02a44ad667ad3478f0081278047dd7174367baae2669db8d1a5d0d36d60252b5779ae819dd1e6fbd8d7f8dc78bd6461aa5a0c5fdf58c852878f50", 0x80}], 0x6, &(0x7f0000003c40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r10, r1]}}], 0x80, 0xa9f5849981aada2d}}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="3a21ef6669af5cd1832653dd9feee5c3b3bd9c39cabda13a3551bbad9185be63ed54a0f2741cff4ede2257a59ce8aa47cff76efed755cf847566021ad7cd1554ce4a9514efd30946fd5b37d2da9407623583be6a9ca8d4cf0510abb5b44cd7e58bb7a2114b1fdf1625c2a1508d72e1e66e7d19e69dfface731b73acd3451baee68e1a7907b441f0ce25ad48dab6d31b08f10cfb2ff2cc84a367a6b5a594b6d4b6b8208d949e34291bcecfa0c3affb32ba6fc510ea781db829a42bb2089b88fbc", 0xc0}], 0x2, 0x0, 0x0, 0x4000014}}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004dc0)="008aa179f0ed3ecaddc02671e493f8", 0xf}], 0x1, &(0x7f0000004e40)=[@rights={{0x20, 0x1, 0x1, [r13, r13, 0xffffffffffffffff, r3]}}], 0x20, 0x4008000}}, {{&(0x7f0000004e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000001a00)="59037eec3351cb08dbfad54faa8b7d9a8f085d0196944978ece4eb0d581766df62e3b96e8c479b16a1a9a77ae197ad832282b6b5c574f6beeeed0ed826c6023939810bef705bf24ffbc5c63c41fbb2b97d53cc53a66b2b219146ec122ef0bc7ef5f6d0f668f0fcca0f955c3e4b3c89eb41027a86ccfe40e29dc38060138ecb506c99073a2027f0a7b050ebb1eff4e102bdb2e01474f33027d23ab9edd63aa5d1819f74a559d57a28b6c5dd93d4d3bf71ec87f3b4d8db4636fb5fa665e9a17a2ceb6c93", 0xc3}, {&(0x7f0000005000)="c62e1c616ee33bf1c5c71d294a5069f02558307c5a1c83a730da1d66dc318aed7367bf07b152149960d4d4904745b1e9ac0969ff18ca28ee0a7609bd77d869bfbc26c1bdb1bc647a441ae208588e7409c83d06fc875bafb455f5c3049fabc11769993f6bf60e672e0d2458dfc6cb454d82bd05071256d7b31ad4d60022a59a8827b35a27b8cc7a60fb54f4e61291aed34947efee39e33c87d9d51022f0b5fdee3b2390901e41e2b26622800fcd9d0cbdbe476023842f47913ae42313dd0f87a134c4a00760ecdee393dcfc214e541205b3a84ac19b0b90061aa4a40d3f53f512f3dc0e03f1f4ba0b8c5f", 0xea}, {&(0x7f0000005100)="1c36d5199935981fb1218040f1217b97c267d8080e8032d812bf42ece87757ee9b62e2cd08c0d84d69ef76f178f2c4269c5e107201dacbbe163c0d60c0974a1fe4fcd8f7ab76584eeedc3e9498bbd3f4b87bb46b2e6036f059fb68070a01ad3668c6a88a99e7e89501d633bcb8a1fcc5c972e0637c561e051a1131b04596635f21a618b77c2589f9b604690303ea28d692a2065b7fcf800288", 0x99}, {&(0x7f00000051c0)="8a9b197051ee6f22dc8858717d68b923555773d346e279dc2442c53de36eba2269de6e248649476727077b9d77594892c88d007e59e5a8d360f0079e66c6f5145d67dac8a2837d5f22b2afdf86b3e11ccd5d0710bfaf0555af6d11fedd0743c098f87061e6bf21338523fb161fe4778a815690e0010c339f282f91d76aeeab6c82f39c0164c1a7baa5d20192eca18b9358817f920ec3528a7e59ab8a3d5ed179ae2bd3d89a908f38443b94b89550e1dee1600bef79b97600ad7053ec22c19b", 0xbf}, {&(0x7f0000005280)="ae87cc93c1ea678d079bdafa7694f2769436cf528cd6a6fa56ccd1f39bfbd9e1", 0x20}], 0x5, 0x0, 0x0, 0x24000080}}], 0x4, 0x40040) write(r13, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): active interface with an up link [ 776.099784][T17754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.286013][ T5834] Bluetooth: hci0: command tx timeout [ 776.587756][T17831] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 776.627035][T17754] team0: Port device team_slave_0 added [ 776.683846][T17754] team0: Port device team_slave_1 added [ 777.058360][T17836] loop2: detected capacity change from 0 to 7 [ 777.071967][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 777.091863][T17754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.120488][T17754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.190645][T17836] Dev loop2: unable to read RDB block 7 [ 777.213536][T17836] loop2: unable to read partition table [ 777.223724][T17836] loop2: partition table beyond EOD, truncated [ 777.285421][T17836] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 777.412794][T17754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.467020][T17754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.494951][T17754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.671985][T17754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.064925][T17844] ip6gre1: entered promiscuous mode [ 778.071109][T17844] ip6gre1: entered allmulticast mode [ 778.269195][T17754] hsr_slave_0: entered promiscuous mode [ 778.301408][T17754] hsr_slave_1: entered promiscuous mode [ 778.332270][T17754] debugfs: 'hsr0' already exists in 'hsr' [ 778.355377][T17754] Cannot create hsr debugfs directory [ 778.366019][ T5834] Bluetooth: hci0: command tx timeout [ 779.435824][T15023] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 779.606160][T15023] usb 6-1: Using ep0 maxpacket: 32 [ 779.647405][T15023] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 779.655534][T15023] usb 6-1: config 0 has no interface number 0 [ 779.695311][T17868] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 779.706103][T15023] usb 6-1: config 0 interface 12 has no altsetting 0 [ 779.723452][T17754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 779.737153][T15023] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 779.752905][T15023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.765628][T15023] usb 6-1: Product: syz [ 779.803819][T17754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 779.822252][T15023] usb 6-1: Manufacturer: syz [ 779.833220][T15023] usb 6-1: SerialNumber: syz [ 779.862684][T15023] usb 6-1: config 0 descriptor?? [ 780.446235][ T5834] Bluetooth: hci0: command tx timeout [ 780.451720][T17754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 780.570009][T17754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 780.824804][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 780.906920][T17874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.335542][T17754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.403594][T17754] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.442590][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.449820][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.513557][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.520755][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.736003][T17754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.900235][T17754] veth0_vlan: entered promiscuous mode [ 781.948963][T17754] veth1_vlan: entered promiscuous mode [ 782.022400][T17754] veth0_macvtap: entered promiscuous mode [ 782.073251][T17754] veth1_macvtap: entered promiscuous mode [ 782.139487][T15023] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 782.148852][T17754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.163401][T15023] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 782.192742][T17754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.211811][T15023] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 782.237337][T15023] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 782.259229][ T1142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.294693][ T1142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.304649][T15023] usb 6-1: USB disconnect, device number 76 [ 782.341778][ T1142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.378478][ T1142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.572864][T13121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.599994][T13121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.622173][T17903] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3131'. [ 782.683110][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.700287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.078125][T17920] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 786.422048][T17953] netlink: 'syz.0.3140': attribute type 27 has an invalid length. [ 786.865816][T15023] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 787.195974][T15023] usb 2-1: Using ep0 maxpacket: 8 [ 787.224916][T15023] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 787.247628][T15023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.275926][T16315] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 787.285854][T15023] usb 2-1: Product: syz [ 787.290173][T15023] usb 2-1: Manufacturer: syz [ 787.305851][T15023] usb 2-1: SerialNumber: syz [ 787.413553][T15023] usb 2-1: config 0 descriptor?? [ 787.495278][T13216] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.526148][T13216] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.537999][T16315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.560214][T13216] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.574278][T16315] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 787.602916][T16315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.654954][T16315] usb 4-1: config 0 descriptor?? [ 787.694939][T16315] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 787.734044][T15023] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 787.875485][T16315] pwc: send_video_command error -71 [ 787.900355][T16315] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 787.925045][T16315] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 787.973760][T16315] usb 4-1: USB disconnect, device number 51 [ 788.357771][T17951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.371770][T17951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.196911][T15023] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 789.220035][T15023] usb 2-1: USB disconnect, device number 49 [ 790.261914][T17995] netlink: 'syz.5.3148': attribute type 27 has an invalid length. [ 790.449838][T18000] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 791.066486][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 791.351640][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 792.184752][T18018] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3153'. [ 792.725100][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 792.756028][ T6751] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 792.897080][ T6751] usb 6-1: device descriptor read/64, error -71 [ 793.145910][ T6751] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 793.315905][ T6751] usb 6-1: device descriptor read/64, error -71 [ 793.438744][ T6751] usb usb6-port1: attempt power cycle [ 793.675815][ T5920] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 793.718906][T18041] netlink: 'syz.0.3158': attribute type 27 has an invalid length. [ 793.842297][ T6751] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 793.889420][ T6751] usb 6-1: device descriptor read/8, error -71 [ 794.065896][ T5894] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 794.116627][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 794.136115][ T6751] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 794.156712][ T6751] usb 6-1: device descriptor read/8, error -71 [ 794.238445][ T5894] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.259474][ T5894] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.271658][ T6751] usb usb6-port1: unable to enumerate USB device [ 794.338734][ T5920] usb 2-1: config 0 has no interfaces? [ 794.381816][ T5894] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 794.410113][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 794.431408][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 794.452744][ T5920] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 794.481260][ T5894] usb 8-1: SerialNumber: syz [ 794.496803][ T5920] usb 2-1: Manufacturer: syz [ 794.523710][ T5920] usb 2-1: config 0 descriptor?? [ 794.782505][T18037] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 794.801374][T18037] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 794.946125][ T5894] usb 8-1: 0:2 : does not exist [ 795.033623][ T5894] usb 8-1: USB disconnect, device number 2 [ 795.366642][T18056] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 795.489324][T18061] overlayfs: missing 'lowerdir' [ 796.540724][T16316] usb 2-1: USB disconnect, device number 50 [ 797.716683][T18092] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3168'. [ 797.755873][ T5894] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 797.916077][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 797.924434][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.935700][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.945815][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 797.945871][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 797.945895][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.947906][ T5894] usb 6-1: config 0 descriptor?? [ 798.409138][T18105] loop2: detected capacity change from 0 to 7 [ 798.425464][T18105] Dev loop2: unable to read RDB block 7 [ 798.435547][T18105] loop2: unable to read partition table [ 798.452605][T18105] loop2: partition table beyond EOD, truncated [ 798.486076][T18105] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 798.514170][ T5894] microsoft 0003:045E:07DA.003B: ignoring exceeding usage max [ 798.619148][ T5205] Dev loop2: unable to read RDB block 7 [ 798.634409][ T5205] loop2: unable to read partition table [ 798.637948][ T5894] microsoft 0003:045E:07DA.003B: unsupported Resolution Multiplier 0 [ 798.640347][T15023] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 798.677107][ T5205] loop2: partition table beyond EOD, truncated [ 798.721997][ T5894] microsoft 0003:045E:07DA.003B: implement() called with n (152) > 32! (kworker/0:5) [ 798.928908][T15023] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 798.988491][T15023] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 799.015479][T15023] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.081840][T15023] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 799.117460][T15023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.150541][T15023] usb 4-1: Product: syz [ 799.162285][T15023] usb 4-1: Manufacturer: syz [ 799.205653][T15023] usb 4-1: SerialNumber: syz [ 799.234568][T15023] hub 4-1:1.0: bad descriptor, ignoring hub [ 799.247507][T15023] hub 4-1:1.0: probe with driver hub failed with error -5 [ 799.444184][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.453236][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.464299][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.518957][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.614250][T15023] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 799.635845][T16018] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 799.717091][T15023] usb 4-1: USB disconnect, device number 52 [ 799.733830][T15023] usblp0: removed [ 799.805950][T16018] usb 8-1: device descriptor read/64, error -71 [ 799.950264][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'. [ 799.962304][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 799.995100][T18117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.046095][T16018] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 800.185845][T16018] usb 8-1: device descriptor read/64, error -71 [ 800.227655][T18117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.346282][T16018] usb usb8-port1: attempt power cycle [ 800.468449][ T5894] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 800.506964][ T5894] microsoft 0003:045E:07DA.003B: no inputs found [ 800.530022][ T5894] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway [ 800.647479][T18125] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3175'. [ 800.753928][T16018] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 800.776575][T16018] usb 8-1: device descriptor read/8, error -71 [ 800.799847][ T5894] usb 6-1: USB disconnect, device number 81 [ 800.859006][T18121] fido_id[18121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 801.015862][T16018] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 801.046474][T16018] usb 8-1: device descriptor read/8, error -71 [ 801.193077][T16018] usb usb8-port1: unable to enumerate USB device [ 801.653021][T18142] loop2: detected capacity change from 0 to 7 [ 801.663583][ T6644] Dev loop2: unable to read RDB block 7 [ 801.672090][ T6644] loop2: unable to read partition table [ 801.678175][ T6644] loop2: partition table beyond EOD, truncated [ 801.690996][T18142] Dev loop2: unable to read RDB block 7 [ 801.707087][T18142] loop2: unable to read partition table [ 801.713058][T18142] loop2: partition table beyond EOD, truncated [ 801.730510][T18142] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 801.751522][ T5205] Dev loop2: unable to read RDB block 7 [ 801.767715][ T5205] loop2: unable to read partition table [ 801.773638][ T5205] loop2: partition table beyond EOD, truncated [ 802.138355][T18148] loop2: detected capacity change from 0 to 7 [ 802.176704][T18148] Dev loop2: unable to read RDB block 7 [ 802.186989][T18148] loop2: unable to read partition table [ 802.203111][T18148] loop2: partition table beyond EOD, truncated [ 802.222537][T18148] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 802.965850][T16315] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 803.065487][T18150] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 803.128877][T16315] usb 4-1: config index 0 descriptor too short (expected 23044, got 59) [ 803.137552][T16315] usb 4-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 803.222818][T16315] usb 4-1: config 239 has 0 interfaces, different from the descriptor's value: 30 [ 803.234131][T16315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.243823][T16315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 803.252246][T16315] usb 4-1: SerialNumber: syz [ 803.830857][T16315] usb 4-1: USB disconnect, device number 53 [ 804.083242][T18185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3190'. [ 804.165864][T16315] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 804.335866][T16315] usb 4-1: Using ep0 maxpacket: 32 [ 804.353692][T16315] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 804.364734][T16315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.415897][T16315] usb 4-1: Product: syz [ 804.420664][T16315] usb 4-1: Manufacturer: syz [ 804.429799][T16315] usb 4-1: SerialNumber: syz [ 804.453836][T16315] usb 4-1: config 0 descriptor?? [ 804.547849][T18193] bond1: option all_slaves_active: invalid value (9) [ 804.644869][T18193] bond1 (unregistering): Released all slaves [ 804.669231][T18200] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3191'. [ 804.690441][T16315] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 804.739001][T18202] loop2: detected capacity change from 0 to 7 [ 804.758913][ T6644] Dev loop2: unable to read RDB block 7 [ 804.773641][ T6644] loop2: unable to read partition table [ 805.058060][ T6644] loop2: partition table beyond EOD, truncated [ 805.136948][T18177] ip6tnl0: Caught tx_queue_len zero misconfig [ 805.205149][T18202] Dev loop2: unable to read RDB block 7 [ 805.211007][T18202] loop2: unable to read partition table [ 805.226706][T18202] loop2: partition table beyond EOD, truncated [ 805.246848][T18202] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 805.386016][T16315] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 805.568211][T16315] usb 4-1: device descriptor read/64, error -71 [ 805.617155][ T5894] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 805.778240][ T5894] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 805.788796][ T5894] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 805.817725][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.847321][T16315] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 805.871927][ T5894] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 805.996095][T16315] usb 4-1: device descriptor read/64, error -71 [ 806.172876][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.203823][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.265917][T16315] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 806.306611][T16315] usb 4-1: device descriptor read/8, error -71 [ 806.511736][ T30] audit: type=1326 audit(1767926955.669:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18216 comm="syz.0.3199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f773d38f749 code=0x0 [ 806.595878][T16315] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 806.636923][T16315] usb 4-1: device descriptor read/8, error -71 [ 806.753571][T16315] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 806.787593][T16315] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 806.821207][T16315] usb 4-1: USB disconnect, device number 54 [ 806.926465][ T5894] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 806.966155][T16315] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 807.499494][ T5894] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 807.527444][ T5894] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 808.015818][T16018] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 808.155877][T16018] usb 6-1: device descriptor read/64, error -71 [ 808.185940][T15023] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 808.207581][T16315] usb 4-1: device descriptor read/64, error -71 [ 808.390628][T15023] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 808.406399][T16018] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 808.441054][ T5894] usb 8-1: USB disconnect, device number 7 [ 808.576566][T16315] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 808.619329][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.625657][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.744830][T15023] usb 2-1: config 201 has no interface number 0 [ 808.825880][T15023] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 808.883334][T15023] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 808.905379][T15023] usb 2-1: config 201 interface 249 has no altsetting 0 [ 808.938306][T15023] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 808.955860][T16018] usb 6-1: device descriptor read/64, error -71 [ 808.969768][T15023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.979679][T16315] usb 4-1: Using ep0 maxpacket: 16 [ 808.987122][T16315] usb 4-1: config 0 has an invalid interface number: 213 but max is 1 [ 809.007651][T16315] usb 4-1: config 0 has no interface number 1 [ 809.017040][T15023] usb 2-1: Product: syz [ 809.028068][T15023] usb 2-1: Manufacturer: syz [ 809.032716][T15023] usb 2-1: SerialNumber: syz [ 809.038116][T16315] usb 4-1: config 0 interface 0 has no altsetting 0 [ 809.058660][T16315] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 809.068428][T16018] usb usb6-port1: attempt power cycle [ 809.095995][T16315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.115668][T16315] usb 4-1: Product: syz [ 809.125835][T16315] usb 4-1: Manufacturer: syz [ 809.136184][T16315] usb 4-1: SerialNumber: syz [ 809.148187][T16315] usb 4-1: config 0 descriptor?? [ 809.179678][T16315] usb 4-1: selecting invalid altsetting 0 [ 809.205808][T16315] usb 4-1: Could not set interface, error -22 [ 809.281257][T18242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.310007][T18242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.375445][T18240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.384603][T18240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.394208][T15023] ath6kl: Failed to submit usb control message: -71 [ 809.423485][T15023] ath6kl: unable to send the bmi data to the device: -71 [ 809.435895][T16018] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 809.460983][T15023] ath6kl: Unable to send get target info: -71 [ 809.468423][T16018] usb 6-1: device descriptor read/8, error -71 [ 809.493423][T15023] ath6kl: Failed to init ath6kl core: -71 [ 809.542431][T15023] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 809.630855][T15023] usb 2-1: USB disconnect, device number 51 [ 809.756045][T16018] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 809.796667][T16018] usb 6-1: device descriptor read/8, error -71 [ 809.907006][T16018] usb usb6-port1: unable to enumerate USB device [ 810.699993][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 810.943217][T16315] usb 4-1: USB disconnect, device number 56 [ 811.939989][T18281] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3214'. [ 812.292464][T18291] netlink: 'syz.5.3216': attribute type 1 has an invalid length. [ 812.305250][T18292] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 812.348314][T18294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3216'. [ 812.838093][T18291] bond4: entered promiscuous mode [ 812.843898][T18291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 813.021301][T16315] IPVS: starting estimator thread 0... [ 813.116028][T18302] IPVS: using max 33 ests per chain, 79200 per kthread [ 813.332829][T18308] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 813.386676][ T5894] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 813.556110][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 813.563190][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.610112][ T5894] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 813.650638][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.680883][ T5894] usb 6-1: Product: syz [ 813.697913][ T5894] usb 6-1: Manufacturer: syz [ 813.735022][ T5894] usb 6-1: SerialNumber: syz [ 813.753600][ T5894] usb 6-1: config 0 descriptor?? [ 813.779669][ T5894] gspca_main: t613-2.14.0 probing 17a1:0128 [ 813.979541][ T5894] gspca_t613: unknown sensor 0000 [ 813.979624][ T5894] t613 6-1:0.0: probe with driver t613 failed with error -22 [ 813.991151][ T5894] usb 6-1: USB disconnect, device number 86 [ 814.205945][T16315] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 814.337745][T16315] usb 2-1: device descriptor read/64, error -71 [ 814.647055][T16315] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 814.796131][T16315] usb 2-1: device descriptor read/64, error -71 [ 814.993497][T16315] usb usb2-port1: attempt power cycle [ 815.445943][T16315] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 815.561197][T16315] usb 2-1: device descriptor read/8, error -71 [ 815.767056][ T6751] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 816.164749][ T6751] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 816.168810][T16315] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 816.205803][ T6751] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 816.234645][ T6751] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 816.257466][T16315] usb 2-1: device descriptor read/8, error -71 [ 816.283052][ T6751] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 816.349379][ T6751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 816.365948][ T24] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 816.386833][T16315] usb usb2-port1: unable to enumerate USB device [ 816.406296][ T6751] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 816.475186][ T6751] usb 6-1: language id specifier not provided by device, defaulting to English [ 816.586069][ T24] usb 4-1: device descriptor read/64, error -71 [ 816.607040][ T6751] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 816.643966][ T6751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.686471][T18375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3229'. [ 816.697239][ T6751] usb 6-1: config 0 descriptor?? [ 816.707407][T18367] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 816.748448][ T6751] hub 6-1:0.0: bad descriptor, ignoring hub [ 816.791176][ T6751] hub 6-1:0.0: probe with driver hub failed with error -5 [ 816.840163][ T6751] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input86 [ 816.865955][ T24] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 817.072057][ T24] usb 4-1: device descriptor read/64, error -71 [ 817.216376][ T24] usb usb4-port1: attempt power cycle [ 817.555834][ T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 817.656852][ T24] usb 4-1: device descriptor read/8, error -71 [ 817.915855][ T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 818.000363][ T24] usb 4-1: device descriptor read/8, error -71 [ 818.133976][ T24] usb usb4-port1: unable to enumerate USB device [ 818.896908][ T6751] usb 6-1: USB disconnect, device number 87 [ 819.655872][T16314] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 819.885923][T16314] usb 4-1: Using ep0 maxpacket: 8 [ 819.904587][T16314] usb 4-1: config 0 has an invalid interface number: 254 but max is 0 [ 819.923160][T16314] usb 4-1: config 0 has no interface number 0 [ 819.943439][T16314] usb 4-1: config 0 interface 254 has no altsetting 0 [ 819.975638][T16314] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 820.008619][T16314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 820.031049][T16314] usb 4-1: Product: syz [ 820.044177][T16314] usb 4-1: Manufacturer: syz [ 820.057948][T16314] usb 4-1: SerialNumber: syz [ 820.098588][T16314] usb 4-1: config 0 descriptor?? [ 820.132251][T16314] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 820.313183][T18413] netlink: 'syz.5.3238': attribute type 10 has an invalid length. [ 820.332798][T18400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.357789][T18400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.667689][T16314] gspca_sn9c2028: read1 error -110 [ 820.686193][T16314] gspca_sn9c2028: read1 error -32 [ 820.704249][T16314] gspca_sn9c2028: read1 error -32 [ 820.710755][ T30] audit: type=1326 audit(1767926969.869:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 820.741348][T16314] sn9c2028 4-1:0.254: probe with driver sn9c2028 failed with error -32 [ 820.780998][ T30] audit: type=1326 audit(1767926969.889:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 820.835217][ T30] audit: type=1326 audit(1767926969.889:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 820.881516][T18424] loop4: detected capacity change from 0 to 1 [ 820.898866][ T30] audit: type=1326 audit(1767926969.889:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 820.923894][T15023] usb 4-1: USB disconnect, device number 61 [ 820.937766][T18424] Dev loop4: unable to read RDB block 1 [ 820.993413][T18424] loop4: unable to read partition table [ 821.075375][T18424] loop4: partition table beyond EOD, truncated [ 821.087543][T18424] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 821.390883][T16314] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 821.426058][ T30] audit: type=1326 audit(1767926969.889:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdee138de97 code=0x7ffc0000 [ 821.578943][T16314] usb 2-1: Using ep0 maxpacket: 8 [ 821.599500][T16314] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 821.611962][T16314] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 821.641376][ T30] audit: type=1326 audit(1767926969.899:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdee1390eea code=0x7ffc0000 [ 821.668188][T16314] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 821.698400][T16314] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.726476][ T30] audit: type=1326 audit(1767926969.899:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.1.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdee138df90 code=0x7ffc0000 [ 821.754004][T16314] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 821.766809][T18430] netlink: 'syz.7.3243': attribute type 27 has an invalid length. [ 821.808246][T16314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.099979][T18430] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.108476][T18430] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.143325][T16314] usb 2-1: usb_control_msg returned -71 [ 822.222818][T16314] usbtmc 2-1:16.0: can't read capabilities [ 822.267301][T16314] usb 2-1: USB disconnect, device number 56 [ 822.332454][T18438] ptrace attach of "./syz-executor exec"[17754] was attempted by ""[18438] [ 822.386354][ T5894] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 822.546341][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 822.563665][ T5894] usb 4-1: config 0 has an invalid interface number: 245 but max is 1 [ 822.590541][ T5894] usb 4-1: config 0 has an invalid interface number: 126 but max is 1 [ 822.617711][ T5894] usb 4-1: config 0 has an invalid interface number: 244 but max is 1 [ 822.652837][ T5894] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 822.683073][ T5894] usb 4-1: config 0 has no interface number 0 [ 822.704509][ T5894] usb 4-1: config 0 has no interface number 1 [ 822.730098][ T5894] usb 4-1: config 0 has no interface number 2 [ 822.761517][ T5894] usb 4-1: too many endpoints for config 0 interface 244 altsetting 32: 107, using maximum allowed: 30 [ 822.837685][ T5894] usb 4-1: config 0 interface 244 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 822.903348][ T5894] usb 4-1: config 0 interface 245 has no altsetting 0 [ 822.947982][ T5894] usb 4-1: config 0 interface 126 has no altsetting 0 [ 823.044081][T18430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.060061][ T5894] usb 4-1: config 0 interface 244 has no altsetting 0 [ 823.081664][T18430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.244033][ T5894] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 823.262816][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.305818][T16018] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 823.313268][ T5894] usb 4-1: Product: syz [ 823.328388][ T5894] usb 4-1: Manufacturer: syz [ 823.347425][ T5894] usb 4-1: SerialNumber: syz [ 823.363867][ T5894] usb 4-1: config 0 descriptor?? [ 823.475845][T16018] usb 8-1: Using ep0 maxpacket: 16 [ 823.525569][T16018] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.534348][T16018] usb 8-1: config 0 has no interface number 0 [ 823.548845][T16018] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 823.568315][T16018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.630047][T16018] usb 8-1: Product: syz [ 823.650863][T12664] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.664027][T18437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.677752][T16018] usb 8-1: Manufacturer: syz [ 823.687435][T12664] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.705420][T16018] usb 8-1: SerialNumber: syz [ 823.716846][T18437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.731230][T12664] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.744543][T16018] usb 8-1: config 0 descriptor?? [ 823.766852][T16018] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 823.769525][ T5894] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 823.795580][T12664] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.811313][ T5894] usb 4-1: selecting invalid altsetting 0 [ 823.846738][ T2347] pvrusb2: Invalid write control endpoint [ 823.860426][ T5894] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 823.879792][ T5205] Dev loop4: unable to read RDB block 1 [ 823.896321][ T5205] loop4: unable to read partition table [ 823.902385][ T5894] usb 4-1: selecting invalid altsetting 0 [ 824.112612][ T5894] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 824.192753][ T5894] usb 4-1: selecting invalid altsetting 0 [ 824.219482][ T5894] usb 4-1: USB disconnect, device number 62 [ 824.244220][ T5205] loop4: partition table beyond EOD, truncated [ 824.327631][T16018] gspca_spca1528: reg_w err -110 [ 824.349193][T16018] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 824.386886][ T2347] pvrusb2: Invalid write control endpoint [ 824.402090][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 824.436044][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 824.462906][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 824.510699][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 824.538716][ T2347] pvrusb2: Device being rendered inoperable [ 824.544833][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 824.612430][ T24] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 824.625130][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.643284][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 824.680311][ T2347] pvrusb2: Attached sub-driver cx25840 [ 824.699206][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 824.733070][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.782081][ T24] usb 2-1: Product: syz [ 824.794374][ T24] usb 2-1: Manufacturer: syz [ 824.822747][ T24] usb 2-1: SerialNumber: syz [ 824.852743][ T24] usb 2-1: config 0 descriptor?? [ 824.889168][ T24] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 824.914717][ T24] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 825.090681][ T5920] usb 2-1: USB disconnect, device number 57 [ 825.118342][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 825.154267][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 825.188068][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 825.221820][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 825.252288][ T2347] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 825.483238][ T2347] TUNER: Unable to find symbol tda829x_probe() [ 825.516501][ T5920] usb 8-1: USB disconnect, device number 8 [ 825.536794][ T2347] DVB: Unable to find symbol tda9887_attach() [ 825.543089][ T2347] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 825.553521][ T2347] pvrusb2: Attached sub-driver tuner [ 825.593056][ T2347] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 825.703225][ T2347] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 825.831822][ T2347] pvrusb2: Invalid write control endpoint [ 826.153516][ T2347] pvrusb2: Invalid write control endpoint [ 826.191642][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 826.247026][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 826.303638][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 826.324049][ T2347] pvrusb2: Device being rendered inoperable [ 826.330595][ T2347] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 826.362779][ T2347] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 826.390212][ T2347] pvrusb2: Attached sub-driver cx25840 [ 826.591978][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 826.639725][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 826.675907][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 826.705387][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 826.736227][ T2347] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 826.914055][T18496] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 826.988451][T18496] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 827.009621][ T2347] TUNER: Unable to find symbol tda829x_probe() [ 827.183576][ T2347] DVB: Unable to find symbol tda9887_attach() [ 827.200022][ T2347] tuner: 3-0043: Tuner 4 found with type(s) Radio TV. [ 827.228331][ T2347] pvrusb2: Attached sub-driver tuner [ 827.244030][ T2347] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 827.275303][ T2347] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 827.334763][ T2347] pvrusb2: Invalid write control endpoint [ 827.503603][ T2347] pvrusb2: Invalid write control endpoint [ 827.528043][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 827.563566][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 827.589462][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 827.615316][ T2347] pvrusb2: Device being rendered inoperable [ 827.637400][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 827.662393][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 827.681853][ T2347] pvrusb2: Attached sub-driver cx25840 [ 827.829682][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 827.839529][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 827.848537][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 827.858252][ T2347] pvrusb2: Attempted to execute control transfer when device not ok [ 827.878738][ T2347] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 828.586196][ T5920] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 828.855892][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 828.882495][ T30] audit: type=1800 audit(1767926977.989:1155): pid=18530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3264" name="nullb0" dev="devtmpfs" ino=3989 res=0 errno=0 [ 828.910121][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.948898][ T2347] TUNER: Unable to find symbol tda829x_probe() [ 828.982972][ T5920] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 829.060327][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.104662][ T5920] usb 6-1: config 0 descriptor?? [ 829.175663][ T2347] DVB: Unable to find symbol tda9887_attach() [ 829.224352][ T2347] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 829.258745][ T2347] pvrusb2: Attached sub-driver tuner [ 829.301119][T18533] ip6gre1: entered promiscuous mode [ 829.312466][ T2347] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 829.327659][T18533] ip6gre1: entered allmulticast mode [ 829.344915][ T2347] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 829.611326][T13214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.626923][T13214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.636292][T16018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.996094][T16018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.014947][T16018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.246196][ T5894] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 830.396998][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 830.438475][ T5894] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 830.468618][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.519334][ T5894] usb 4-1: config 0 descriptor?? [ 830.588539][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 830.618890][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.689588][ T9] usb 8-1: config 0 descriptor?? [ 830.716641][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input87 [ 830.916767][T18539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.949925][ T5894] usb 4-1: Cannot read MAC address [ 830.952290][T18539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.955393][ T5894] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 831.097483][T16018] usb 8-1: USB disconnect, device number 9 [ 831.187741][ T5920] usbhid 6-1:0.0: can't add hid device: -71 [ 831.205372][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 831.246043][ T5920] usb 6-1: USB disconnect, device number 88 [ 831.526399][ T5894] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 831.725886][ T5920] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 831.906313][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 831.923781][ T5920] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 831.963772][ T5920] usb 6-1: config 0 has no interface number 0 [ 831.993023][ T5920] usb 6-1: config 0 interface 12 has no altsetting 0 [ 832.042491][ T5920] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 832.082960][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.122705][ T5920] usb 6-1: Product: syz [ 832.143160][ T5920] usb 6-1: Manufacturer: syz [ 832.160349][ T5920] usb 6-1: SerialNumber: syz [ 832.200984][ T5920] usb 6-1: config 0 descriptor?? [ 833.499677][ T5920] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 833.528995][ T5920] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 833.556432][ T5920] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 833.584334][ T5920] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 833.640417][ T5920] usb 6-1: USB disconnect, device number 89 [ 833.796377][T16315] usb 4-1: USB disconnect, device number 63 [ 833.983935][T18567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3277'. [ 834.029124][T18567] ip6gre2: entered promiscuous mode [ 834.044882][T18567] ip6gre2: entered allmulticast mode [ 834.051002][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.674469][T18590] netlink: 'syz.7.3282': attribute type 21 has an invalid length. [ 834.700063][T18590] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3282'. [ 834.709901][T18590] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3282'. [ 835.053008][T18594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3283'. [ 835.889370][T18604] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 835.896009][T18604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 835.920127][T18604] vhci_hcd vhci_hcd.0: Device attached [ 836.236944][T16315] usb 44-1: SetAddress Request (2) to port 0 [ 836.249729][T16315] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 836.335198][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 836.352007][T18607] vhci_hcd: connection reset by peer [ 836.357764][T13217] vhci_hcd vhci_hcd.5: stop threads [ 836.380375][T13217] vhci_hcd vhci_hcd.5: release socket [ 836.399720][T13217] vhci_hcd vhci_hcd.5: disconnect device [ 836.786705][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 837.100763][T18621] hsr0: entered promiscuous mode [ 837.119245][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3290'. [ 837.166602][T18622] hsr_slave_0: left promiscuous mode [ 837.191170][T18622] hsr_slave_1: left promiscuous mode [ 837.251744][T18622] hsr0 (unregistering): left promiscuous mode [ 837.800701][ T24] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 838.008529][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 838.056030][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.177708][T18619] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 838.188679][ T24] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 838.207476][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.740873][ T24] usb 2-1: config 0 descriptor?? [ 838.850731][T18629] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 839.216673][T18648] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 839.408818][ T24] hid (null): report_id 57294 is invalid [ 839.427532][ T24] asus 0003:0B05:18C6.003C: collection stack underflow [ 839.451140][ T24] asus 0003:0B05:18C6.003C: item 0 1 0 12 parsing failed [ 839.477676][ T24] asus 0003:0B05:18C6.003C: Asus hid parse failed: -22 [ 839.504551][ T24] asus 0003:0B05:18C6.003C: probe with driver asus failed with error -22 [ 839.570496][T18652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.633319][ T24] usb 2-1: USB disconnect, device number 59 [ 839.950907][T18659] sctp: [Deprecated]: syz.7.3299 (pid 18659) Use of int in max_burst socket option deprecated. [ 839.950907][T18659] Use struct sctp_assoc_value instead [ 840.011967][T18660] sit0: entered promiscuous mode [ 840.046713][T18660] netlink: 'syz.7.3299': attribute type 1 has an invalid length. [ 840.077601][T18660] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3299'. [ 840.505547][T18672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3302'. [ 841.405956][T16315] usb 44-1: device descriptor read/8, error -110 [ 841.818944][T16315] usb usb44-port1: attempt power cycle [ 842.387865][T16315] usb usb44-port1: unable to enumerate USB device [ 842.485842][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 842.533764][T18699] ip6gre2: entered promiscuous mode [ 842.552713][T18699] ip6gre2: entered allmulticast mode [ 842.602384][T18364] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 842.630044][T16018] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 842.640158][T18364] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 842.657638][ T24] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 842.690147][ T24] usb 4-1: config 0 has no interface number 0 [ 842.716407][ T24] usb 4-1: New USB device found, idVendor=12d6, idProduct=0455, bcdDevice=29.3d [ 842.767886][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.807601][ T24] usb 4-1: Product: syz [ 842.840043][ T24] usb 4-1: Manufacturer: syz [ 842.883186][ T24] usb 4-1: config 0 descriptor?? [ 843.165972][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.259440][ T5920] usb 4-1: USB disconnect, device number 64 [ 843.658473][T16018] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 843.676681][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 844.280072][T18731] netlink: 'syz.7.3316': attribute type 4 has an invalid length. [ 844.731804][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'. [ 844.782008][T18735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3317'. [ 845.045876][T16315] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 845.053537][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 845.242340][T16315] usb 8-1: Using ep0 maxpacket: 32 [ 845.249122][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 845.271282][T16315] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 845.288109][ T24] usb 2-1: config 0 has no interfaces? [ 845.319712][T16315] usb 8-1: config 0 has no interface number 0 [ 845.326208][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 845.336119][T16315] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 845.350911][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.362022][T16315] usb 8-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.381794][ T24] usb 2-1: config 0 descriptor?? [ 845.408580][T16315] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 845.424284][T16315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.433120][T16315] usb 8-1: Product: syz [ 845.438171][T16315] usb 8-1: Manufacturer: syz [ 845.442914][T16315] usb 8-1: SerialNumber: syz [ 845.461861][T16315] usb 8-1: config 0 descriptor?? [ 845.478617][T18741] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 845.498608][T16315] asix 8-1:0.188: probe with driver asix failed with error -22 [ 845.525862][T16018] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 845.543089][T18750] ip6gre3: entered promiscuous mode [ 845.549202][T18750] ip6gre3: entered allmulticast mode [ 845.557769][T13216] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 845.587286][T16314] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 845.595130][T13216] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 845.636961][T16314] usb 2-1: USB disconnect, device number 60 [ 845.666154][T16018] usb 4-1: device descriptor read/64, error -71 [ 845.906078][T16018] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 846.056982][T16018] usb 4-1: device descriptor read/64, error -71 [ 846.077966][T16314] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 846.171945][T16018] usb usb4-port1: attempt power cycle [ 846.527396][T16018] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 846.562211][T16018] usb 4-1: device descriptor read/8, error -71 [ 846.805921][T16018] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 846.836708][T16018] usb 4-1: device descriptor read/8, error -71 [ 846.962381][T16018] usb usb4-port1: unable to enumerate USB device [ 848.417071][ T5920] usb 8-1: USB disconnect, device number 10 [ 848.551633][T18772] loop5: detected capacity change from 0 to 7 [ 848.575492][T18772] Dev loop5: unable to read RDB block 7 [ 848.598109][T18772] loop5: unable to read partition table [ 848.619630][T18772] loop5: partition table beyond EOD, truncated [ 848.646403][T18772] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 849.008650][T18782] sctp: [Deprecated]: syz.3.3329 (pid 18782) Use of int in maxseg socket option. [ 849.008650][T18782] Use struct sctp_assoc_value instead [ 849.255923][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 849.255941][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 849.345928][T16018] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 849.387779][T18789] bridge1: entered promiscuous mode [ 849.440088][T18791] ip6gre4: entered promiscuous mode [ 849.445504][T18791] ip6gre4: entered allmulticast mode [ 849.521419][T16018] usb 8-1: config 0 has no interfaces? [ 849.535922][T16315] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 849.571492][T16018] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 849.587366][T16018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.599973][T16018] usb 8-1: Product: syz [ 849.605359][T16018] usb 8-1: Manufacturer: syz [ 849.610620][T16018] usb 8-1: SerialNumber: syz [ 849.621507][T16018] usb 8-1: config 0 descriptor?? [ 849.665542][T18796] veth0: entered promiscuous mode [ 849.689739][ T30] audit: type=1326 audit(1767926998.849:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.0.3334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773d38f749 code=0x0 [ 849.760222][T16315] usb 6-1: unable to get BOS descriptor or descriptor too short [ 849.768729][T16315] usb 6-1: not running at top speed; connect to a high speed hub [ 849.782211][T16315] usb 6-1: config 2 has an invalid interface number: 212 but max is 1 [ 849.795894][T16315] usb 6-1: config 2 has an invalid interface number: 226 but max is 1 [ 849.826974][T16315] usb 6-1: config 2 has no interface number 0 [ 849.854686][T16315] usb 6-1: config 2 has no interface number 1 [ 849.873974][T16315] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 849.915383][T16315] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 849.950287][T16315] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 849.963442][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3330'. [ 850.002362][T16018] usb 8-1: USB disconnect, device number 11 [ 850.042817][T16315] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 850.089847][T16315] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 850.159936][T16315] usb 6-1: config 2 interface 212 has no altsetting 0 [ 850.211298][T12664] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 850.222224][T16315] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 850.269742][ T5920] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 850.276482][T16315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.286603][T12664] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 850.369518][T16315] usb 6-1: Product: syz [ 850.389526][T16315] usb 6-1: Manufacturer: syz [ 850.412059][T16315] usb 6-1: SerialNumber: syz [ 850.470609][T18794] veth0: left promiscuous mode [ 850.706500][ T5920] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 850.744240][T16315] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input88 [ 850.754649][ T30] audit: type=1326 audit(1767926999.889:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 850.860073][ T30] audit: type=1326 audit(1767926999.929:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 850.893669][T16315] usb 6-1: USB disconnect, device number 90 [ 850.899777][ C1] xpad 6-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 850.916310][ T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 851.013952][ T30] audit: type=1326 audit(1767926999.939:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.113635][ T30] audit: type=1326 audit(1767926999.939:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.185486][ T30] audit: type=1326 audit(1767926999.939:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.265105][ T30] audit: type=1326 audit(1767926999.939:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.374157][ T30] audit: type=1326 audit(1767926999.989:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.397029][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 851.463484][ T30] audit: type=1326 audit(1767926999.999:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.509515][ T30] audit: type=1326 audit(1767926999.999:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.3.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 851.585880][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 851.593182][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 851.608619][ T24] usb 2-1: config 0 has no interface number 0 [ 851.633454][ T24] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 851.664811][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 851.692483][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 851.734522][T18836] loop2: detected capacity change from 0 to 7 [ 851.760237][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 851.781784][ T6644] Dev loop2: unable to read RDB block 7 [ 851.794386][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.804907][ T6644] loop2: unable to read partition table [ 851.819684][T18839] ip6gre1: entered promiscuous mode [ 851.825480][ T6644] loop2: partition table beyond EOD, truncated [ 851.832078][ T24] usb 2-1: Product: syz [ 851.836683][ T24] usb 2-1: Manufacturer: syz [ 851.842280][T18836] Dev loop2: unable to read RDB block 7 [ 851.852246][ T24] usb 2-1: SerialNumber: syz [ 851.857126][T18839] ip6gre1: entered allmulticast mode [ 851.862870][T18836] loop2: unable to read partition table [ 851.872141][ T24] usb 2-1: config 0 descriptor?? [ 851.882817][T18836] loop2: partition table beyond EOD, truncated [ 851.897788][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.909901][T18842] veth1_to_bond: entered allmulticast mode [ 851.917056][T18836] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 851.941018][T13214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.958511][T13214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.966511][T16018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 852.133812][ T24] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -12 [ 852.154782][ T24] usb 2-1: USB disconnect, device number 61 [ 852.191805][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.656060][T16018] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 852.698018][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 852.886434][T16018] usb 4-1: Using ep0 maxpacket: 8 [ 852.920468][T16018] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 852.928707][T16018] usb 4-1: config 0 has no interface number 0 [ 852.934777][T16018] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.945706][T16018] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 853.013673][T16018] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 853.025241][T16018] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 853.043393][T16018] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 853.064426][T16018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.082055][T16018] usb 4-1: config 0 descriptor?? [ 853.086769][ T5920] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 853.105247][T16018] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 853.235889][T16315] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 853.246212][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 853.253148][ T5920] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 853.271329][ T5920] usb 2-1: config 0 has no interface number 0 [ 853.292188][ T5920] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 853.330548][ T5920] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 853.352119][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.389289][ T5920] usb 2-1: Product: syz [ 853.415616][T16018] usb 4-1: USB disconnect, device number 69 [ 853.421650][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 853.431106][T18855] ldusb 4-1:0.55: Write buffer overflow, 465 bytes dropped [ 853.451971][ T5920] usb 2-1: Manufacturer: syz [ 853.452575][T18855] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19 [ 853.474566][T16315] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 853.489069][T16315] usb 6-1: config 0 has no interface number 0 [ 853.495586][T16315] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 853.507945][T16018] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 853.516673][ T5920] usb 2-1: SerialNumber: syz [ 853.559903][ T5920] usb 2-1: config 0 descriptor?? [ 853.565452][T16315] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.583320][T18865] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 853.592310][T16315] usb 6-1: config 0 interface 113 has no altsetting 0 [ 853.694033][T16315] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 853.703572][T16315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.766746][T16315] usb 6-1: Product: syz [ 853.770975][T16315] usb 6-1: Manufacturer: syz [ 853.777039][T16315] usb 6-1: SerialNumber: syz [ 853.808909][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.849467][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.850645][T16315] usb 6-1: config 0 descriptor?? [ 853.902928][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.946096][ C1] usb 6-1: NFC: Urb failure (status -71) [ 853.954034][T16315] usb 6-1: NFC: Unable to get FW version [ 853.971836][T16315] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 853.984327][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.042105][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.126432][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 854.126806][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.180072][T18877] veth1_macvtap: left promiscuous mode [ 854.195071][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.212070][T18877] macsec0: entered allmulticast mode [ 854.240394][T18867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.302457][T18867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.310644][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.331266][T18879] veth1_macvtap: entered promiscuous mode [ 854.366112][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 854.366126][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 854.396354][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.404959][T18879] veth1_macvtap: entered allmulticast mode [ 854.414373][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 854.431350][T18879] macsec0: left allmulticast mode [ 854.446466][T18879] veth1_macvtap: left allmulticast mode [ 854.484345][ T24] usb 8-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 854.514879][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.535573][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.549816][ T24] usb 8-1: Product: syz [ 854.561971][ T24] usb 8-1: Manufacturer: syz [ 854.577225][ T24] usb 8-1: SerialNumber: syz [ 854.588233][T18863] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 854.610741][ T24] usb 8-1: config 0 descriptor?? [ 854.644410][ T24] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 854.865514][T18842] veth1_to_bond: left allmulticast mode [ 854.955998][T16315] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 855.000418][T18884] netlink: 'syz.0.3354': attribute type 30 has an invalid length. [ 855.007242][ T5920] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 855.185885][T16315] usb 4-1: Using ep0 maxpacket: 32 [ 855.195322][T16315] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 855.214257][ T5920] asix 2-1:0.188: probe with driver asix failed with error -71 [ 855.236481][T16315] usb 4-1: config 0 has no interface number 0 [ 855.247777][T16315] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.275064][ T5920] usb 2-1: USB disconnect, device number 62 [ 855.523849][T16315] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 855.561614][T16315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.716970][T16315] usb 4-1: Product: syz [ 855.721210][T16315] usb 4-1: Manufacturer: syz [ 855.726043][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 855.742722][T16315] usb 4-1: SerialNumber: syz [ 855.773980][T16315] usb 4-1: config 0 descriptor?? [ 855.804212][T16315] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 855.838748][T16315] em28xx 4-1:0.132: Video interface 132 found: [ 855.878403][T18894] ip6gre5: entered promiscuous mode [ 855.900571][T18894] ip6gre5: entered allmulticast mode [ 855.928759][ T1008] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 855.953500][ T1008] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 855.961931][T16314] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 855.969701][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 856.108400][T16314] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 856.142745][T18889] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3355'. [ 856.181365][ T5920] usb 6-1: USB disconnect, device number 91 [ 856.209955][T16315] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 856.396083][T16314] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 856.690009][T16315] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 856.725945][T16315] em28xx 4-1:0.132: board has no eeprom [ 856.802720][T16315] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 856.823687][T16315] em28xx 4-1:0.132: analog set to bulk mode. [ 856.853633][T16018] em28xx 4-1:0.132: Registering V4L2 extension [ 856.865888][T16314] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 856.895439][T16315] usb 4-1: USB disconnect, device number 70 [ 856.945457][T16315] em28xx 4-1:0.132: Disconnecting em28xx [ 857.058081][T16314] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 857.116769][T16314] usb 6-1: config 0 has no interface number 0 [ 857.177788][T16314] usb 6-1: New USB device found, idVendor=2c7c, idProduct=6007, bcdDevice=66.3f [ 857.219959][T16314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.245987][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.259546][T16314] usb 6-1: Product: syz [ 857.263803][T16314] usb 6-1: Manufacturer: syz [ 857.268644][T16314] usb 6-1: SerialNumber: syz [ 857.314518][T16314] usb 6-1: config 0 descriptor?? [ 857.348369][T16314] option 6-1:0.227: GSM modem (1-port) converter detected [ 857.467843][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 857.467861][ T30] audit: type=1326 audit(1767927006.619:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 857.469799][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 857.496591][ T30] audit: type=1326 audit(1767927006.629:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 857.496641][ T30] audit: type=1326 audit(1767927006.629:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 857.496691][ T30] audit: type=1326 audit(1767927006.629:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 857.523050][T16018] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 857.599553][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3359'. [ 857.665911][T18911] netlink: 'syz.1.3359': attribute type 6 has an invalid length. [ 857.700907][T16018] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 857.709155][ T30] audit: type=1326 audit(1767927006.629:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 857.812800][T16018] em28xx 4-1:0.132: No AC97 audio processor [ 857.813767][ T30] audit: type=1326 audit(1767927006.629:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 857.946726][ T30] audit: type=1326 audit(1767927006.629:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 858.029993][T16018] usb 4-1: Decoder not found [ 858.034668][T16018] em28xx 4-1:0.132: failed to create media graph [ 858.056607][ T30] audit: type=1326 audit(1767927006.629:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 858.161167][T16018] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 858.166530][ T30] audit: type=1326 audit(1767927006.629:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 858.211767][T16018] em28xx 4-1:0.132: Remote control support is not available for this card. [ 858.282883][T16315] em28xx 4-1:0.132: Closing input extension [ 858.286609][ T30] audit: type=1326 audit(1767927006.629:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.1.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdee138f749 code=0x7ffc0000 [ 858.452873][T16315] em28xx 4-1:0.132: Freeing device [ 858.771903][T18927] xt_ecn: cannot match TCP bits for non-tcp packets [ 858.792503][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3363'. [ 859.646163][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 859.673163][ T24] pwc: send_video_command error -71 [ 859.712334][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 859.753345][ T6751] IPVS: starting estimator thread 0... [ 859.783269][ T24] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 859.845903][T18939] IPVS: using max 28 ests per chain, 67200 per kthread [ 859.846419][ T24] usb 8-1: USB disconnect, device number 12 [ 860.446040][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 860.469808][ T6751] usb 6-1: USB disconnect, device number 92 [ 860.487702][T16310] IPVS: starting estimator thread 0... [ 860.490287][ T6751] option 6-1:0.227: device disconnected [ 860.596453][T18947] IPVS: using max 30 ests per chain, 72000 per kthread [ 861.245006][T18952] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3368'. [ 862.029124][T18962] loop2: detected capacity change from 0 to 7 [ 862.046822][ T6644] Dev loop2: unable to read RDB block 7 [ 862.052579][ T6644] loop2: unable to read partition table [ 862.058948][ T6644] loop2: partition table beyond EOD, truncated [ 862.075052][T18962] Dev loop2: unable to read RDB block 7 [ 862.094448][T18962] loop2: unable to read partition table [ 862.115492][T18962] loop2: partition table beyond EOD, truncated [ 862.134855][T18962] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 862.322173][T18967] sit0: left promiscuous mode [ 862.432875][T18969] vim2m vim2m.0: vidioc_s_fmt queue busy [ 862.463697][T18967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.492105][T18967] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.822836][T18967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 863.005920][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 863.005987][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 863.236713][ T6751] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 863.486392][ T6751] usb 4-1: Using ep0 maxpacket: 32 [ 863.503967][ T6751] usb 4-1: config 32 has too many interfaces: 39, using maximum allowed: 32 [ 863.527745][ T6751] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 863.640079][ T6751] usb 4-1: config 32 has 0 interfaces, different from the descriptor's value: 39 [ 863.685244][T18985] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 863.691887][T18985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 863.706935][ T6751] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 863.736372][ T6751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.786629][ T6751] usb 4-1: Product: syz [ 863.796388][T18985] vhci_hcd vhci_hcd.0: Device attached [ 863.860740][T18987] vhci_hcd: connection closed [ 863.873327][ T6751] usb 4-1: Manufacturer: syz [ 863.892689][T13217] vhci_hcd vhci_hcd.0: stop threads [ 863.925883][ T6751] usb 4-1: SerialNumber: syz [ 863.941236][T13217] vhci_hcd vhci_hcd.0: release socket [ 863.980863][T13217] vhci_hcd vhci_hcd.0: disconnect device [ 864.036107][T16310] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 864.181566][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.192812][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.208831][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.220273][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.798995][ T6751] usb 4-1: USB disconnect, device number 71 [ 866.033266][T19012] loop2: detected capacity change from 0 to 7 [ 866.042705][ T6644] Dev loop2: unable to read RDB block 7 [ 866.050778][ T6644] loop2: unable to read partition table [ 866.060774][ T6644] loop2: partition table beyond EOD, truncated [ 866.070751][T19012] Dev loop2: unable to read RDB block 7 [ 866.076695][T19012] loop2: unable to read partition table [ 866.083951][T19012] loop2: partition table beyond EOD, truncated [ 866.135912][T19012] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 866.165297][ T5205] Dev loop2: unable to read RDB block 7 [ 866.176173][ T5205] loop2: unable to read partition table [ 866.182405][ T5205] loop2: partition table beyond EOD, truncated [ 866.296315][ T6751] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 866.496195][ T6751] usb 4-1: Using ep0 maxpacket: 32 [ 866.502959][ T6751] usb 4-1: config 0 has an invalid interface number: 38 but max is 0 [ 866.522757][ T6751] usb 4-1: config 0 has no interface number 0 [ 866.559290][ T6751] usb 4-1: config 0 interface 38 has no altsetting 0 [ 866.587811][ T6751] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 866.617769][ T6751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.648024][ T6751] usb 4-1: Product: syz [ 866.677530][ T6751] usb 4-1: Manufacturer: syz [ 866.694127][ T6751] usb 4-1: SerialNumber: syz [ 866.713719][ T6751] usb 4-1: config 0 descriptor?? [ 866.742243][ T6751] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 866.845989][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 867.280578][ T6751] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 867.316158][ T6751] gspca_pac7302 4-1:0.38: probe with driver gspca_pac7302 failed with error -110 [ 868.198628][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d579c00: rx timeout, send abort [ 868.210996][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807d579c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 868.260331][ T6751] usb 4-1: USB disconnect, device number 72 [ 869.161238][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 869.161251][ T30] audit: type=1326 audit(1767927018.309:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.210780][T19054] loop2: detected capacity change from 0 to 7 [ 869.221175][ T6644] Dev loop2: unable to read RDB block 7 [ 869.227076][ T6644] loop2: unable to read partition table [ 869.233733][ T6644] loop2: partition table beyond EOD, truncated [ 869.255536][ T30] audit: type=1326 audit(1767927018.309:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.256453][T19054] Dev loop2: unable to read RDB block 7 [ 869.349537][T19054] loop2: unable to read partition table [ 869.350048][ T30] audit: type=1326 audit(1767927018.309:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.439892][T19054] loop2: partition table beyond EOD, truncated [ 869.452809][ T30] audit: type=1326 audit(1767927018.309:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f11db58f783 code=0x7ffc0000 [ 869.486925][T19054] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 869.523204][ T30] audit: type=1326 audit(1767927018.309:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.575249][ T5205] Dev loop2: unable to read RDB block 7 [ 869.580661][ T30] audit: type=1326 audit(1767927018.309:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.583054][ T5205] loop2: unable to read partition table [ 869.625979][ T30] audit: type=1326 audit(1767927018.309:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.695878][ T30] audit: type=1326 audit(1767927018.309:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 869.806723][ T5205] loop2: partition table beyond EOD, truncated [ 869.853224][ T30] audit: type=1326 audit(1767927018.309:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 870.048748][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.081072][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.499511][ T30] audit: type=1326 audit(1767927018.309:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11db58f749 code=0x7ffc0000 [ 870.931083][T19078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 871.258351][T19085] ip6gre2: entered promiscuous mode [ 871.292805][T19085] ip6gre2: entered allmulticast mode [ 871.321467][T13217] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.352849][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.361287][T13217] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.577682][T19089] loop2: detected capacity change from 0 to 7 [ 871.593595][T19089] Dev loop2: unable to read RDB block 7 [ 871.596580][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.624490][T19089] loop2: unable to read partition table [ 871.638746][T19089] loop2: partition table beyond EOD, truncated [ 871.648825][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.696502][T19089] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 871.779212][T19092] PKCS8: Unsupported PKCS#8 version [ 871.809530][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3407'. [ 872.004635][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3408'. [ 872.369269][T19100] binder: 19095:19100 ioctl c018620c 200000000380 returned -1 [ 872.606028][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 872.654012][T19111] loop2: detected capacity change from 0 to 7 [ 872.662756][ T6644] Dev loop2: unable to read RDB block 7 [ 872.692682][ T6644] loop2: unable to read partition table [ 872.698726][ T6644] loop2: partition table beyond EOD, truncated [ 872.727922][T19111] Dev loop2: unable to read RDB block 7 [ 872.738006][T19111] loop2: unable to read partition table [ 872.836628][T19111] loop2: partition table beyond EOD, truncated [ 872.843090][T19111] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 873.511091][T19121] ip6gre2: entered promiscuous mode [ 873.529555][T19121] ip6gre2: entered allmulticast mode [ 873.552272][T13121] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 873.580474][T13121] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 873.588292][T16310] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 873.737318][T16310] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 873.886356][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 874.026149][T16018] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 874.104782][T16310] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 874.275225][T16310] usb 4-1: Using ep0 maxpacket: 32 [ 874.358429][T16310] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 874.399009][T16310] usb 4-1: config 0 has no interface number 0 [ 874.413337][T16310] usb 4-1: config 0 interface 12 has no altsetting 0 [ 874.432176][T16310] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 874.466992][T16310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.479981][T19153] netlink: 'syz.7.3418': attribute type 12 has an invalid length. [ 874.588124][T16310] usb 4-1: Product: syz [ 874.592329][T16310] usb 4-1: Manufacturer: syz [ 874.611446][T16310] usb 4-1: SerialNumber: syz [ 874.645369][T16310] usb 4-1: config 0 descriptor?? [ 874.710666][T19158] fuse: blksize only supported for fuseblk [ 875.166281][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 875.578560][T19165] ip6gre3: entered promiscuous mode [ 875.590790][T19165] ip6gre3: entered allmulticast mode [ 875.612945][T13124] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 875.639361][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 875.854909][T19171] fuse: Bad value for 'user_id' [ 875.910770][T19171] fuse: Bad value for 'user_id' [ 876.076433][ T9] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 876.246282][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 876.406530][ T9] usb 6-1: new low-speed USB device number 94 using dummy_hcd [ 876.699433][T16310] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 876.726431][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 876.727885][T16310] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 876.739364][ T9] usb usb6-port1: attempt power cycle [ 876.760396][T19181] loop5: detected capacity change from 0 to 7 [ 876.765375][T16310] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 876.809046][T19181] Dev loop5: unable to read RDB block 7 [ 876.820980][T16310] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 876.848185][T19181] loop5: unable to read partition table [ 876.883589][T19181] loop5: partition table beyond EOD, truncated [ 876.894812][T19181] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 876.895070][T16310] usb 4-1: USB disconnect, device number 73 [ 877.264445][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 877.266470][ T9] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 877.363659][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 877.496744][ T9] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 877.536884][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 877.551103][ T9] usb usb6-port1: unable to enumerate USB device [ 877.725932][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 877.725951][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 878.660543][T19203] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3438'. [ 879.150843][T19210] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3439'. [ 879.250919][T19206] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 879.449153][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 879.449172][ T30] audit: type=1326 audit(1767927028.609:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19204 comm="syz.1.3439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdee138f749 code=0x0 [ 879.646621][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 879.660951][T19233] fuse: Bad value for 'fd' [ 879.698231][T19233] ipip0: entered promiscuous mode [ 879.703393][T19233] ipip0: entered allmulticast mode [ 879.813314][ T1008] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.860275][ T1008] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.932594][ T1008] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.958963][ T1008] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.990671][ T1008] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.004649][ T1008] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.917699][T19252] loop5: detected capacity change from 0 to 7 [ 880.963799][T19252] Dev loop5: unable to read RDB block 7 [ 881.025817][T19252] loop5: unable to read partition table [ 881.031687][T19252] loop5: partition table beyond EOD, truncated [ 881.079088][T19252] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 881.096111][T19254] TCP: TCP_TX_DELAY enabled [ 881.566114][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 881.585933][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 881.823849][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 881.896340][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 881.931958][ T9] usb 8-1: config index 0 descriptor too short (expected 46935, got 18) [ 881.967604][ T9] usb 8-1: config 0 has too many interfaces: 116, using maximum allowed: 32 [ 881.986148][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 881.994031][ T24] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 882.007657][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.022501][ T24] usb 2-1: config 0 has no interface number 0 [ 882.036114][ T24] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 882.056164][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 116 [ 882.119400][ T24] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.123432][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 882.161736][ T24] usb 2-1: config 0 interface 85 has no altsetting 0 [ 882.178611][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.212031][ T9] usb 8-1: Product: syz [ 882.226755][ T9] usb 8-1: Manufacturer: syz [ 882.241969][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 882.262808][ T9] usb 8-1: SerialNumber: syz [ 882.270756][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.279445][ T24] usb 2-1: Product: syz [ 882.283633][ T24] usb 2-1: Manufacturer: syz [ 882.288856][ T24] usb 2-1: SerialNumber: syz [ 882.296120][ T24] usb 2-1: config 0 descriptor?? [ 882.296498][ T9] usb 8-1: config 0 descriptor?? [ 882.314094][T19269] sctp: [Deprecated]: syz.0.3455 (pid 19269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 882.314094][T19269] Use struct sctp_sack_info instead [ 882.580493][T19261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.580871][T19261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.582112][T19261] warning: `syz.7.3452' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 882.588243][ T9] usb 8-1: USB disconnect, device number 13 [ 882.750196][ T24] appletouch 2-1:0.85: Failed to read mode from device. [ 882.757814][ T24] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 882.784357][ T24] usb 2-1: USB disconnect, device number 63 [ 882.845997][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 882.878655][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3459'. [ 883.349410][ T24] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 883.490436][T19293] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3461'. [ 883.625633][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 883.710461][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 883.746991][T19296] loop5: detected capacity change from 0 to 7 [ 883.778934][T19296] Dev loop5: unable to read RDB block 7 [ 883.794344][T19296] loop5: unable to read partition table [ 883.800792][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 883.811181][T19296] loop5: partition table beyond EOD, truncated [ 883.817530][ T24] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 883.817557][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 883.817579][ T24] usb 4-1: config 0 has no interface number 0 [ 883.817850][ T24] usb 4-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.838110][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 883.838140][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.838160][ T24] usb 4-1: Product: syz [ 883.934890][T19296] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 883.937766][ T24] usb 4-1: Manufacturer: syz [ 883.972364][ T24] usb 4-1: SerialNumber: syz [ 883.994476][ T24] usb 4-1: config 0 descriptor?? [ 884.111044][T19300] fuse: Unknown parameter '' [ 884.344676][ T24] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 884.376351][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 884.496596][ T24] usb 4-1: USB disconnect, device number 74 [ 885.040869][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 885.245018][ T24] usb 2-1: config 0 has no interfaces? [ 885.307612][T19316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.367148][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 885.393974][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.405782][ T24] usb 2-1: Product: syz [ 885.412091][T19316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.427344][ T24] usb 2-1: Manufacturer: syz [ 885.431967][ T24] usb 2-1: SerialNumber: syz [ 885.468586][ T24] usb 2-1: config 0 descriptor?? [ 885.489305][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3468'. [ 885.556541][T15023] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 885.757653][T15023] usb 4-1: Using ep0 maxpacket: 16 [ 885.789677][T19310] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.793981][T15023] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 885.820345][ T24] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 885.871079][T15023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.881294][T15023] usb 4-1: Product: syz [ 885.885667][T15023] usb 4-1: Manufacturer: syz [ 885.904877][T15023] usb 4-1: SerialNumber: syz [ 885.934864][T15023] usb 4-1: config 0 descriptor?? [ 886.039625][ T24] usb 6-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 886.055232][T19332] fuse: Unknown parameter 'V' [ 886.075352][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 886.108468][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2032, bcdDevice= 0.00 [ 886.108590][T19335] Cannot find del_set index 0 as target [ 886.162013][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.215634][ T24] usb 6-1: config 0 descriptor?? [ 886.241413][T19339] netlink: 'syz.3.3467': attribute type 10 has an invalid length. [ 886.513381][T15023] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 886.712403][T15023] usb 4-1: USB disconnect, device number 75 [ 886.968882][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 887.071316][T19357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3476'. [ 887.354388][T19366] fuse: Unknown parameter '' [ 887.412926][T15023] usb 2-1: USB disconnect, device number 64 [ 887.469911][T19367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3477'. [ 887.604804][T19365] tipc: Started in network mode [ 887.611008][T19365] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 887.629328][T19365] tipc: Enabled bearer , priority 10 [ 888.008328][T15023] usb 6-1: USB disconnect, device number 97 [ 888.019950][T19376] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 888.289980][T19380] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 888.575846][T15023] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 888.747424][T16310] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 888.779981][T15023] usb 8-1: Using ep0 maxpacket: 8 [ 888.794232][T15023] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 888.817465][T15023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.842266][T15023] usb 8-1: Product: syz [ 888.851805][ T24] tipc: Node number set to 8432298 [ 888.878448][T15023] usb 8-1: Manufacturer: syz [ 888.910018][T15023] usb 8-1: SerialNumber: syz [ 888.925885][T16310] usb 4-1: Invalid ep0 maxpacket: 64 [ 888.950876][T15023] usb 8-1: config 0 descriptor?? [ 888.972346][T15023] gspca_main: se401-2.14.0 probing 047d:5003 [ 889.066087][T16310] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 889.235814][T16310] usb 4-1: Invalid ep0 maxpacket: 64 [ 889.251595][T16310] usb usb4-port1: attempt power cycle [ 889.646250][T16310] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 889.726538][T16310] usb 4-1: Invalid ep0 maxpacket: 64 [ 889.877636][T16310] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 889.950725][T16310] usb 4-1: Invalid ep0 maxpacket: 64 [ 889.980095][T16310] usb usb4-port1: unable to enumerate USB device [ 890.231632][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3487'. [ 890.336702][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3487'. [ 890.480849][T15023] gspca_se401: read req failed req 0x06 error -19 [ 890.532913][T15023] usb 8-1: USB disconnect, device number 14 [ 890.818831][T19424] fuse: Unknown parameter '' [ 891.297737][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3494'. [ 891.360246][T19441] macvtap1: entered promiscuous mode [ 891.365578][T19441] erspan0: entered promiscuous mode [ 891.456082][T19441] macvtap1: entered allmulticast mode [ 891.461515][T19441] erspan0: entered allmulticast mode [ 891.486110][T19446] netlink: 4908 bytes leftover after parsing attributes in process `syz.5.3494'. [ 891.652012][T19446] macvtap1: left promiscuous mode [ 891.669844][T19446] erspan0: left promiscuous mode [ 891.674992][T19446] macvtap1: left allmulticast mode [ 891.847067][T16310] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 891.856515][T19446] erspan0: left allmulticast mode [ 892.037822][ T5920] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 892.085918][ T24] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 892.116246][T16310] usb 2-1: Using ep0 maxpacket: 8 [ 892.129239][T16310] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 892.156586][T16310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.176501][T16310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 892.195796][T16310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.217178][T16310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.226531][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 892.240161][ T5920] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 892.256432][ T5920] usb 6-1: config 0 has no interface number 0 [ 892.258165][T16310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 892.283828][T16310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.287270][ T5920] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 892.304124][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 892.321203][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.339574][ T24] usb 4-1: Product: syz [ 892.367997][ T24] usb 4-1: Manufacturer: syz [ 892.373571][ T5920] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 892.384596][ T24] usb 4-1: SerialNumber: syz [ 892.406023][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.407579][ T24] usb 4-1: config 0 descriptor?? [ 892.414039][ T5920] usb 6-1: Product: syz [ 892.414058][ T5920] usb 6-1: Manufacturer: syz [ 892.414073][ T5920] usb 6-1: SerialNumber: syz [ 892.457507][ T5920] usb 6-1: config 0 descriptor?? [ 892.476660][T19450] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 892.611224][T16310] usb 2-1: GET_CAPABILITIES returned 0 [ 892.713666][T19441] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 892.729078][T16310] usbtmc 2-1:16.0: can't read capabilities [ 892.784161][T16310] usb 2-1: USB disconnect, device number 65 [ 892.861704][ T30] audit: type=1326 audit(1767927042.009:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 892.912426][ T30] audit: type=1326 audit(1767927042.009:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 892.995675][ T30] audit: type=1326 audit(1767927042.009:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.072558][ T30] audit: type=1326 audit(1767927042.009:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.159196][ T30] audit: type=1326 audit(1767927042.039:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.223079][ T30] audit: type=1326 audit(1767927042.049:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.305866][ T30] audit: type=1326 audit(1767927042.049:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.346338][ T30] audit: type=1326 audit(1767927042.049:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.346401][ T5920] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 893.380720][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 893.381604][ T30] audit: type=1326 audit(1767927042.049:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.433361][ T30] audit: type=1326 audit(1767927042.049:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.3.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11db52b829 code=0x7ffc0000 [ 893.469225][T19456] tunl0: Caught tx_queue_len zero misconfig [ 893.527971][ T24] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 893.537611][T19461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3499'. [ 893.550320][ T24] airspy 4-1:0.0: Could not detect board [ 893.557056][ T5920] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 893.562365][ T24] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 893.616110][ T5920] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 893.653847][ T5920] asix 6-1:0.188: probe with driver asix failed with error -71 [ 893.796752][ T5920] usb 6-1: USB disconnect, device number 98 [ 893.903665][T19449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.916771][T19449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.346491][ T24] usb 4-1: USB disconnect, device number 80 [ 894.683283][T19479] loop2: detected capacity change from 0 to 7 [ 894.727013][ T5920] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 894.783916][ T6644] Dev loop2: unable to read RDB block 7 [ 894.789991][ T6644] loop2: unable to read partition table [ 894.812095][ T6644] loop2: partition table beyond EOD, truncated [ 894.825218][T19479] Dev loop2: unable to read RDB block 7 [ 894.844719][T19479] loop2: unable to read partition table [ 894.855672][T19479] loop2: partition table beyond EOD, truncated [ 894.904086][T19479] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 894.916459][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 894.928063][ T5920] usb 6-1: config 1 interface 0 altsetting 180 bulk endpoint 0x82 has invalid maxpacket 8 [ 894.964436][ T5920] usb 6-1: config 1 interface 0 altsetting 180 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 895.032022][ T5920] usb 6-1: config 1 interface 0 has no altsetting 0 [ 895.090854][ T5920] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 895.121241][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.144315][ T5920] usb 6-1: Product: Ъ [ 895.164233][ T5920] usb 6-1: Manufacturer: ⡻玙Ღ䈙堅䗜맏ퟞ䡃凣疆鞦柞ꈎᔦ唯⣨ꛦ룱╌蝦ⷓ璱„ꃗ戹峮౹ [ 895.209528][ T5920] usb 6-1: SerialNumber: 容뢬풿骶긘䫅뢆釾洲୳ [ 895.272630][T19472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 895.324855][T19472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 895.450507][T19487] fuse: Unknown parameter '00000000000000000290' [ 895.537689][T19491] vivid-007: disconnect [ 895.648857][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 895.883252][ T5920] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 895.894031][ T5920] usb 6-1: USB disconnect, device number 99 [ 896.349349][T19481] vivid-007: reconnect [ 896.372600][T19505] ip6gre6: entered promiscuous mode [ 896.372623][T19505] ip6gre6: entered allmulticast mode [ 896.395976][T13123] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 896.396250][T13123] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 896.418040][ T24] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 896.717810][ T24] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 896.737302][T19511] loop5: detected capacity change from 0 to 7 [ 896.739013][ T24] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 896.746495][T19511] Dev loop5: unable to read RDB block 7 [ 896.746539][T19511] loop5: unable to read partition table [ 896.746723][T19511] loop5: partition table beyond EOD, truncated [ 896.746743][T19511] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 896.827379][T19506] fuse: Unknown parameter 'user_id00000000000000000000' [ 896.999090][T19500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 896.999153][T19500] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 897.000442][T19500] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 897.000479][T19500] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 897.417772][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 897.565982][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 897.567989][ T24] usb 8-1: device descriptor read/64, error -71 [ 897.633406][T19530] Cannot find del_set index 0 as target [ 897.688127][T19500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 897.688151][T19500] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 897.701123][T19530] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3515'. [ 897.738051][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 897.988204][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 898.287037][ T24] usb 8-1: device descriptor read/64, error -71 [ 898.320114][T19500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 898.324133][T19500] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 898.397614][ T24] usb usb8-port1: attempt power cycle [ 898.530874][T19500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 898.552308][T19543] loop2: detected capacity change from 0 to 7 [ 898.585122][T19543] Dev loop2: unable to read RDB block 7 [ 898.612257][T19500] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 898.669287][T19543] loop2: unable to read partition table [ 898.679567][T19543] loop2: partition table beyond EOD, truncated [ 898.826087][T19543] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 898.866035][T16018] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 898.875894][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 898.898339][T19500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 898.904369][T19500] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 898.914592][ T24] usb 8-1: device descriptor read/8, error -71 [ 899.045099][T16018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.103476][T16018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.153281][T16018] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 899.236016][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 899.351578][T16018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.368899][T16018] usb 6-1: config 0 descriptor?? [ 899.402250][ T24] usb 8-1: device descriptor read/8, error -71 [ 899.516268][ T24] usb usb8-port1: unable to enumerate USB device [ 899.599802][T16018] usbhid 6-1:0.0: can't add hid device: -71 [ 899.631949][T16018] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 899.670051][T16018] usb 6-1: USB disconnect, device number 100 [ 900.254073][T19556] vivid-007: ================= START STATUS ================= [ 900.261951][T16018] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 900.273432][T19556] vivid-007: Generate PTS: true [ 900.279272][T19556] vivid-007: Generate SCR: true [ 900.295192][T19556] tpg source WxH: 320x240 (Y'CbCr) [ 900.306100][T19550] fuse: Unknown parameter '00000000000000000447' [ 900.324250][T19556] tpg field: 1 [ 900.339947][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 900.376346][T19556] tpg crop: (0,0)/320x240 [ 900.385071][T19556] tpg compose: (0,0)/320x240 [ 900.430921][T19556] tpg colorspace: 8 [ 900.459332][T16018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.485985][T16018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.496212][T19556] tpg transfer function: 0/0 [ 900.508202][T19556] tpg Y'CbCr encoding: 0/0 [ 900.516901][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 900.540750][T16018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 900.595844][T16018] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 900.615490][T19556] tpg quantization: 0/0 [ 900.625274][T16018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.633711][T19556] tpg RGB range: 0/2 [ 900.643979][T19556] vivid-007: ================== END STATUS ================== [ 900.654523][T16018] usb 6-1: config 0 descriptor?? [ 900.768006][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 900.838404][T19563] loop5: detected capacity change from 0 to 7 [ 900.870239][ T6644] Dev loop5: unable to read RDB block 7 [ 900.896869][ T6644] loop5: unable to read partition table [ 900.930118][ T6644] loop5: partition table beyond EOD, truncated [ 900.985213][T19563] Dev loop5: unable to read RDB block 7 [ 901.017346][T19563] loop5: unable to read partition table [ 901.077943][T19563] loop5: partition table beyond EOD, truncated [ 901.084175][T19563] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 901.191146][T16018] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 901.406047][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 901.622811][T19577] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3527'. [ 901.669652][T19577] ..0: renamed from hsr0 [ 901.700746][T19577] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 901.714767][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 901.735405][T19581] loop9: detected capacity change from 0 to 7 [ 901.742909][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.751195][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.769330][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.777445][T16018] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 901.805425][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.815862][T19577] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.838777][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.877241][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.885449][ C1] plantronics 0003:047F:FFFF.003D: hid_field_extract() called with n (132) > 32! (syz.5.3518) [ 901.906025][T19577] ..0: entered allmulticast mode [ 901.913689][T19587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3529'. [ 901.931514][T19577] hsr_slave_0: entered allmulticast mode [ 901.938459][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 901.960531][T19577] hsr_slave_1: entered allmulticast mode [ 901.967019][T16018] usb 2-1: Using ep0 maxpacket: 32 [ 901.975897][T19581] ldm_validate_partition_table(): Disk read failed. [ 902.001151][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.009931][T16018] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 902.021818][T19577] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check. [ 902.037325][T16018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.045331][T16018] usb 2-1: Product: syz [ 902.051023][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.060312][T16018] usb 2-1: Manufacturer: syz [ 902.065060][T16018] usb 2-1: SerialNumber: syz [ 902.072004][T19581] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.153087][T16018] usb 2-1: config 0 descriptor?? [ 902.183759][T19581] Dev loop9: unable to read RDB block 0 [ 902.210491][T19581] loop9: unable to read partition table [ 902.280346][T19581] loop9: partition table beyond EOD, truncated [ 902.317106][T19581] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 902.317106][T19581] ) failed (rc=-5) [ 902.390666][T16018] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 066 [ 902.525927][T11892] usb 6-1: reset high-speed USB device number 101 using dummy_hcd [ 902.532045][T19595] loop2: detected capacity change from 0 to 7 [ 902.541949][ T6644] Dev loop2: unable to read RDB block 7 [ 902.551079][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3532'. [ 902.560223][ T6644] loop2: unable to read partition table [ 902.566366][ T6644] loop2: partition table beyond EOD, truncated [ 902.575299][T19595] Dev loop2: unable to read RDB block 7 [ 902.585478][T19575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.602268][T19575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.620378][T19595] loop2: unable to read partition table [ 902.630244][T19595] loop2: partition table beyond EOD, truncated [ 902.637767][T16018] usb 2-1: USB disconnect, device number 66 [ 902.662735][T19595] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 902.721592][ T5205] Dev loop2: unable to read RDB block 7 [ 902.729253][ T5205] loop2: unable to read partition table [ 902.735169][ T5205] loop2: partition table beyond EOD, truncated [ 902.945915][ T24] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 903.129391][ T24] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 903.145888][ T24] usb 8-1: config 7 has no interface number 0 [ 903.165858][ T24] usb 8-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 903.183912][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.204129][ T24] usb 8-1: Product: syz [ 903.213971][ T24] usb 8-1: Manufacturer: syz [ 903.227698][ T24] usb 8-1: SerialNumber: syz [ 903.719080][T19612] fuse: Unknown parameter '00000000000000000543' [ 903.972475][ T24] as10x_usb: device has been detected [ 904.002951][T19620] ip6gre7: entered promiscuous mode [ 904.032876][T19620] ip6gre7: entered allmulticast mode [ 904.034151][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 904.122509][ T24] usb 8-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 904.205873][ T24] as10x_usb: error during firmware upload part1 [ 904.212936][ T24] Registered device Elgato EyeTV DTT Deluxe [ 904.219131][ T24] usb 8-1: USB disconnect, device number 19 [ 904.258357][T19561] usb 6-1: USB disconnect, device number 101 [ 904.358507][T13120] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 904.380569][T13120] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 904.388400][T16310] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 904.518138][ T24] Unregistered device Elgato EyeTV DTT Deluxe [ 904.519464][ T24] as10x_usb: device has been disconnected [ 904.695967][T16310] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 904.763501][T16310] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 904.775670][T19631] program syz.7.3540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.245968][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 905.686428][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 905.894492][T19640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3541'. [ 906.608841][T19659] ip6gre4: entered promiscuous mode [ 906.614104][T19659] ip6gre4: entered allmulticast mode [ 906.635596][ T4427] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 906.667599][ T6751] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 906.675357][ T4427] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 906.826242][T19561] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 906.927852][T11892] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 906.966424][T19561] usb 8-1: device descriptor read/64, error -71 [ 907.116246][T11892] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 907.221499][T19561] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 907.359404][T11892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.375429][T19561] usb 8-1: device descriptor read/64, error -71 [ 907.406556][ T6751] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 907.428216][T11892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 907.518981][T19561] usb usb8-port1: attempt power cycle [ 907.534276][T11892] usb 2-1: New USB device found, idVendor=1b94, idProduct=0009, bcdDevice= 0.00 [ 907.564553][T11892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.733822][T11892] usb 2-1: config 0 descriptor?? [ 907.886351][T19561] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 907.906927][T19561] usb 8-1: device descriptor read/8, error -71 [ 908.068126][T19673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.176258][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3551'. [ 908.206093][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 908.226662][T19561] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 908.405214][T19674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3551'. [ 908.446156][ T31] INFO: task syz.6.3094:17566 blocked for more than 143 seconds. [ 908.727732][T19561] usb 8-1: device descriptor read/8, error -71 [ 908.861211][T19561] usb usb8-port1: unable to enumerate USB device [ 908.877327][ T31] Tainted: G L syzkaller #0 [ 908.883861][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 908.913934][ T31] task:syz.6.3094 state:D stack:28184 pid:17566 tgid:17565 ppid:13411 task_flags:0x400040 flags:0x00080002 [ 908.929277][ T31] Call Trace: [ 908.932662][ T31] [ 908.935682][ T31] __schedule+0x149b/0x4fd0 [ 908.941626][ T31] ? __pfx___schedule+0x10/0x10 [ 908.954541][ T31] ? schedule+0x91/0x360 [ 908.959124][ T31] schedule+0x165/0x360 [ 908.963480][ T31] schedule_preempt_disabled+0x13/0x30 [ 908.970867][ T31] __mutex_lock+0x7e6/0x1350 [ 908.975626][ T31] ? __mutex_lock+0x5bb/0x1350 [ 909.003419][ T31] ? usbdev_open+0x16e/0x760 [ 909.015218][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 909.020616][ T31] ? bus_find_device+0x273/0x2b0 [ 909.026860][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 909.032348][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 909.039602][ T31] ? usbdev_open+0xa7/0x760 [ 909.044207][ T31] usbdev_open+0x16e/0x760 [ 909.050883][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3551'. [ 909.066186][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 909.071930][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 909.078942][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 909.084320][ T31] chrdev_open+0x4cc/0x5e0 [ 909.090462][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 909.095492][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 909.102391][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 909.108666][ T31] do_dentry_open+0x7ce/0x1420 [ 909.113633][ T31] vfs_open+0x3b/0x340 [ 909.119019][ T31] ? path_openat+0x33f3/0x3dd0 [ 909.124007][ T31] path_openat+0x340e/0x3dd0 [ 909.130004][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 909.135591][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 909.142342][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 909.148684][ T31] ? getname_flags+0xb8/0x540 [ 909.153490][ T31] ? __pfx_path_openat+0x10/0x10 [ 909.159723][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 909.166402][ T31] do_filp_open+0x1fa/0x410 [ 909.171100][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 909.184098][ T31] ? _raw_spin_unlock+0x28/0x50 [ 909.190199][ T31] ? alloc_fd+0x64c/0x6c0 [ 909.194742][ T31] do_sys_openat2+0x121/0x200 [ 909.201084][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 909.206728][ T31] ? exc_page_fault+0x71/0xd0 [ 909.211520][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 909.218574][ T31] __x64_sys_openat+0x138/0x170 [ 909.227143][ T31] do_syscall_64+0xec/0xf80 [ 909.233328][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.239947][ T31] ? trace_irq_disable+0x37/0x100 [ 909.245101][ T31] ? clear_bhb_loop+0x60/0xb0 [ 909.257484][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.263560][ T31] RIP: 0033:0x7f3d5b78df90 [ 909.269128][ T31] RSP: 002b:00007f3d599f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 909.277898][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3d5b78df90 [ 909.286967][ T31] RDX: 0000000000000000 RSI: 00007f3d599f5c10 RDI: 00000000ffffff9c [ 909.295030][ T31] RBP: 00007f3d599f5c10 R08: 0000000000000000 R09: 0000000000000000 [ 909.311404][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 909.320447][ T31] R13: 00007f3d5b9e6038 R14: 00007f3d5b9e5fa0 R15: 00007f3d5bb0fa28 [ 909.328802][ T31] [ 909.332080][ T31] [ 909.332080][ T31] Showing all locks held in the system: [ 909.348243][T19675] bridge_slave_1: left allmulticast mode [ 909.367305][T19675] bridge_slave_1: left promiscuous mode [ 909.374220][T19675] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.385716][ T31] 3 locks held by kworker/1:0/24: [ 909.399947][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 909.461098][ T31] #1: ffffc900001e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 909.501959][ T31] #2: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 909.544731][ T31] 1 lock held by khungtaskd/31: [ 909.569663][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 909.601192][ T31] 2 locks held by getty/5596: [ 909.609463][ T31] #0: ffff88814d78d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 909.620266][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 909.640711][ T31] 7 locks held by kworker/0:7/5923: [ 909.658579][ T31] 4 locks held by syz-executor/17532: [ 909.673795][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 909.684581][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 909.719582][ T31] #2: ffff88807e764658 (&sb->s_type->i_lock_key#9){+.+.}-{3:3}, at: lock_for_kill+0x84/0x210 [ 909.730244][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 909.742326][ T31] #3: ffffffff99b04bd0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0xb4/0x380 [ 909.769430][ T31] 1 lock held by syz.6.3094/17566: [ 909.780841][ T31] #0: ffff888028b88198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 909.791321][ T31] 1 lock held by syz.1.3546/19664: [ 909.796777][ T31] 2 locks held by syz.5.3551/19675: [ 909.803242][ T31] #0: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x3ce/0x720 [ 909.823090][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 909.846240][T19675] bridge_slave_0: left allmulticast mode [ 909.851996][ T31] [ 909.854481][T19675] bridge_slave_0: left promiscuous mode [ 909.863318][ T31] ============================================= [ 909.863318][ T31] [ 909.874578][T19675] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.905298][ T31] NMI backtrace for cpu 1 [ 909.905321][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 909.905348][ T31] Tainted: [L]=SOFTLOCKUP [ 909.905356][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 909.905371][ T31] Call Trace: [ 909.905379][ T31] [ 909.905388][ T31] dump_stack_lvl+0xe8/0x150 [ 909.905417][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 909.905444][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 909.905477][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 909.905506][ T31] sys_info+0x135/0x170 [ 909.905528][ T31] watchdog+0xf95/0xfe0 [ 909.905559][ T31] ? watchdog+0x20a/0xfe0 [ 909.905591][ T31] kthread+0x711/0x8a0 [ 909.905619][ T31] ? __pfx_watchdog+0x10/0x10 [ 909.905644][ T31] ? __pfx_kthread+0x10/0x10 [ 909.905671][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 909.905700][ T31] ? __pfx_kthread+0x10/0x10 [ 909.905725][ T31] ret_from_fork+0x510/0xa50 [ 909.905744][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 909.905760][ T31] ? __switch_to+0xc9e/0x1480 [ 909.905787][ T31] ? __pfx_kthread+0x10/0x10 [ 909.905812][ T31] ret_from_fork_asm+0x1a/0x30 [ 909.905853][ T31] [ 910.025418][ T31] Sending NMI from CPU 1 to CPUs 0: [ 910.030719][ C0] NMI backtrace for cpu 0 [ 910.030739][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.030766][ C0] Tainted: [L]=SOFTLOCKUP [ 910.030773][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 910.030784][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 910.030806][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 a1 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 910.030822][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 910.030838][ C0] RAX: 0000000000f965fd RBX: ffffffff819713ee RCX: 0000000080000001 [ 910.030851][ C0] RDX: 0000000000000001 RSI: ffffffff8d79227f RDI: ffffffff8bc08360 [ 910.030863][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 910.030876][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822370 [ 910.030889][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 910.030900][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 910.030915][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 910.030927][ C0] CR2: 00007f719e5a2f98 CR3: 000000007ef5a000 CR4: 00000000003526f0 [ 910.030943][ C0] Call Trace: [ 910.030950][ C0] [ 910.030957][ C0] default_idle+0x13/0x20 [ 910.030977][ C0] default_idle_call+0x73/0xb0 [ 910.030998][ C0] do_idle+0x1be/0x4d0 [ 910.031019][ C0] ? __pfx_do_idle+0x10/0x10 [ 910.031037][ C0] ? do_idle+0x4ab/0x4d0 [ 910.031056][ C0] cpu_startup_entry+0x44/0x60 [ 910.031074][ C0] rest_init+0x2de/0x300 [ 910.031095][ C0] start_kernel+0x381/0x3d0 [ 910.031113][ C0] x86_64_start_reservations+0x24/0x30 [ 910.031135][ C0] x86_64_start_kernel+0x143/0x1c0 [ 910.031162][ C0] common_startup_64+0x13e/0x147 [ 910.031190][ C0] [ 910.247918][T16018] usb 2-1: USB disconnect, device number 67 [ 910.278860][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 910.285754][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 910.296450][ T31] Tainted: [L]=SOFTLOCKUP [ 910.300815][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 910.310973][ T31] Call Trace: [ 910.314265][ T31] [ 910.317201][ T31] vpanic+0x1e0/0x670 [ 910.321205][ T31] panic+0xb9/0xc0 [ 910.324945][ T31] ? __pfx_panic+0x10/0x10 [ 910.329375][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 910.334754][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 910.340916][ T31] watchdog+0xfdf/0xfe0 [ 910.345083][ T31] ? watchdog+0x20a/0xfe0 [ 910.349412][ T31] kthread+0x711/0x8a0 [ 910.353480][ T31] ? __pfx_watchdog+0x10/0x10 [ 910.358152][ T31] ? __pfx_kthread+0x10/0x10 [ 910.362798][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 910.367999][ T31] ? __pfx_kthread+0x10/0x10 [ 910.372604][ T31] ret_from_fork+0x510/0xa50 [ 910.377196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 910.382295][ T31] ? __switch_to+0xc9e/0x1480 [ 910.386969][ T31] ? __pfx_kthread+0x10/0x10 [ 910.391553][ T31] ret_from_fork_asm+0x1a/0x30 [ 910.396332][ T31] [ 910.399739][ T31] Kernel Offset: disabled [ 910.404075][ T31] Rebooting in 86400 seconds..