last executing test programs: 22m26.229337224s ago: executing program 1 (id=1538): sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() io_uring_setup(0x497c, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 22m26.01597976s ago: executing program 1 (id=1539): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000600000000000000048b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c40100e64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08c3a8b1a62eb857a16c88f77dc934bdedda4a4ce08c9b2523392e791862db9d292b91072c11853fe7c5aed8fe10581d45df4505bff7413f8bed29339e30e51e5d391fafd38e30e61ce12315d3"], 0x60}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 22m24.061192926s ago: executing program 1 (id=1543): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x8dcdecc3069ae1b, 0x0, 0x2, 0x2000, &(0x7f0000819000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2}}}}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x4, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote, 0x20, 0x7800, 0xf, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0xe68942f5f290590, 0x7, 0x348, 0x0, {{0x11, 0x4, 0x1, 0x39, 0x44, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp={0x44, 0x4, 0xd0, 0x0, 0xc}, @generic={0x89, 0x2}, @timestamp={0x44, 0x28, 0xe4, 0x0, 0x3, [0x3, 0xb38, 0x3, 0xa, 0xa, 0x8, 0x3bc, 0x0, 0x7]}]}}}}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 22m21.259653799s ago: executing program 1 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000001a00)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="3703c0f1a40000ff463a41c95125", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x64}, 0x1, 0x0, 0x0, 0x600}, 0x0) 22m20.042344975s ago: executing program 1 (id=1559): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e00000000000000b9800000c00fb00c7e3636bda03235004000000f300f222566baf80cb82f4a1880ef66bafc0cecc4e23d3b8281143a3d420f07b8010000000f01c1f20f22e666b853008ed8c4"], 0x5e}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000002c80)={0x6000, 0x5000, 0x0, 0x1, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x3, 0xf1, 0x0, 0x3, 0x9, 0x52, 0x6, 0xc, 0x4, 0x5, 0xfb, 0x4}, {0x4, 0x8001, 0x0, 0xb, 0x3, 0xf, 0x81, 0xe, 0xe, 0x10, 0x0, 0x0, 0x7}, {0x5, 0x0, 0x7, 0x10, 0xd6, 0x9, 0x0, 0x7f, 0x4, 0xfa, 0x81, 0x5, 0x7f}], 0xffff1093}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m19.730688168s ago: executing program 1 (id=1562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4001, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0xffffff8d, 0xe, 0x0, 0x0) 22m19.137263121s ago: executing program 32 (id=1562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4001, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0xffffff8d, 0xe, 0x0, 0x0) 4m41.520237231s ago: executing program 3 (id=4221): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r5, 0x0, 0x1a3) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000000), 0xc, 0x2180) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) r7 = socket$inet(0x10, 0x1, 0x40) (async, rerun: 32) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) 4m39.530340769s ago: executing program 3 (id=4229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="79104800000000007900"], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e23, 0x8, @mcast2, 0xb}, 0x1c) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0xf7d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x10, 0x803, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 4m38.750403099s ago: executing program 3 (id=4232): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x40, 0xff, 0x0, 0x5}, {0x6, 0x60, 0x0, 0x8}]}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0xd000, 0x0, 0x8, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x8, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x5002, 0x3000, 0x8, r9, 0x4}) write$ppp(r0, &(0x7f00000003c0)="34ef365621e119", 0x7) r10 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {}, {0x3, 0x4}, {0x0, 0x3}, {0x1000}, {0x0, 0x1000}, {0x200000}, {}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000002780)={0x0}) r13 = fcntl$getown(r11, 0x9) capset(&(0x7f00000005c0)={0x20071026, r13}, &(0x7f0000000600)={0x7, 0x7, 0x9, 0x2, 0x5, 0x200}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000080)={r12, 0x1, r11}) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x4) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x5000, 0x2, r9, 0x9}) 4m36.339654413s ago: executing program 3 (id=4239): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) 4m35.295649642s ago: executing program 3 (id=4242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'dummy0\x00', @multicast}) (async, rerun: 64) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000200)=0x1, 0xb) (rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000000)=0x4, 0x4) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) unshare(0x66000080) (async) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800) r7 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) 4m34.819035086s ago: executing program 3 (id=4243): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)="2caeeaa92573ac57315bb9dcd069f4b8f3e1e06da3c24ff48b2108a04cd9e0da11a953206449a40914e43b520cf8d932f8ea8098bdbc6a7e0c7f3dfaa3374cc4795941cf21ecc02ad46abae13713", 0x4e, r1}, 0x68) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x44}}, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x2, "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"}) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 4m33.329511349s ago: executing program 33 (id=4243): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)="2caeeaa92573ac57315bb9dcd069f4b8f3e1e06da3c24ff48b2108a04cd9e0da11a953206449a40914e43b520cf8d932f8ea8098bdbc6a7e0c7f3dfaa3374cc4795941cf21ecc02ad46abae13713", 0x4e, r1}, 0x68) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x44}}, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x2, "46eeb2ad1f25adde5a557ed25bce30ec22345885abd53dd265aa01e6606e6644748b5f27729edd056f58ada34e40ca6c3f33668140c2e1bd8df0c7a3d2af32cda3f3f021b2a05e776c4349217a43b45f4f30bb30923eeb14b26746a17d6dbe41a7a39da71a46eed4e57bc95ab69928dcf65c69a0d7285ed3152a90f6dac94ead2fddd87db8ebf51e673428623ecd8eb5395201de494b78645ffe06f11889beba2e731f64d5222eebd0759d013e5b43532cfc9254fc4ba350bfdf9ff8f32a2d61176fe6c0d3ec26d5770d7e86446ad7adf0e5c58390a5da13e73b35f499781eb8d1c135a17ee7c49ed445a3157e639f0fed2f2bb6f917eab5c4e16db77706a490848edb4a021d0ac4a0d3d4a8d22e76230424415f71f86ddf2347c3fb2a1aa25413d933b4ff5eb3b8fb63be3ac2cd565d46f63099aed1e6d7b05ab6ef9307394fc4b18cb3cf6939a7102930a32da6443256f22db333fbb653d54d097a741df2b0e3cd60239c60923f7fb15d4d043997f4ddd231996fbf0900942bd3abf6be9536535ff6506569a495c93bb6c771724127761352dbdb58cfd6da67a9fe59857588d80df92da9adc8cacb7fd105d3bcec6fccd6cbb0fc25d2501f016ffe61712568f4fa0268a92fc4df5b558cfc6a0216cd6f7e4ada061584c7ac7e892e60f091b536dd81855310801dfd36f6d6bd212f962543c49feb14d9064f510cc021720910"}) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1m44.088417251s ago: executing program 5 (id=4764): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendto$packet(r1, &(0x7f00000000c0)="c9e3e8f3b5210a9107d132d0c4d3b0f9f20373cf8d481034b0ad8735f54cb7b4787c703fd8d8c4eed46999a1198b082d36a0cf9014f8f806da9f22d34796ed055c22dceaf9aca7e6d3346a26d2559fc5988ff0501491b7e5f4e326e4757590b0735d0fbd34e220", 0x67, 0x801, &(0x7f0000000140)={0x11, 0x17, r0}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19}}}}}}, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) 1m43.947392925s ago: executing program 5 (id=4765): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r3, 0x0, r3, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x1, 0xe4, 0x4, 0x884, r3, 0x100, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) socket$kcm(0x2, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x28020480) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r5, 0x540b, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m43.684703084s ago: executing program 5 (id=4767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) 1m43.465188904s ago: executing program 5 (id=4769): socket$inet(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001", @ANYBLOB="f15bb66236af0083e3967b7ffb585c9530f4911ce524b90a90cff88ff368e93c93bdb46eeadfe5012a6c1a556e8244d6b98d4f6d24b88917999d197b4d393bd3f2c9f1168136c7895869eb0cc605ec0be94d37f769be29a3"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000800010300001400140000004500002c006800000084907882e596e13fffff251a1414aa02000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540000049078001c17877b08"], 0x3a) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x40, 0x15, 0xe, "3c1e8b7f7ff6916d659527a0492a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m40.442527691s ago: executing program 5 (id=4784): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') pipe(&(0x7f0000000440)) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c140000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) write$apparmor_current(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) 1m40.159830458s ago: executing program 5 (id=4789): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r3, 0x0, r3, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x1, 0xe4, 0x4, 0x884, r3, 0x100, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) socket$kcm(0x2, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x28020480) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r5, 0x540b, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m39.617886994s ago: executing program 34 (id=4789): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r3, 0x0, r3, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x1, 0xe4, 0x4, 0x884, r3, 0x100, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) socket$kcm(0x2, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x28020480) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r5, 0x540b, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.190508767s ago: executing program 7 (id=5069): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000580)={0x0, 0xc6fe, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) syz_open_dev$usbfs(&(0x7f0000001c00), 0xda, 0x1e1041) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) r8 = memfd_create(&(0x7f0000000240)=';e\x00\b\x00\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) syz_io_uring_submit(0x0, r4, &(0x7f0000000640)=@IORING_OP_MKDIRAT={0x25, 0x26, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)='./file0\x00', 0x8, 0x0, 0x1}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000004c0)) r11 = dup(r10) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x1, r11}) close_range(r8, 0xffffffffffffffff, 0x0) lseek(r6, 0xffffffffffffffff, 0x0) r12 = syz_usb_connect$uac1(0x3, 0xae, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x4, 0x30, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x8}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x4, 0x8, "09aef6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x7, "a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x1, 0x7, {0x7, 0x25, 0x1, 0x40, 0x2, 0xaee}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe, 0x2, 0x1, 0x3, '\v'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0xf, 0x5, "12946b90"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xe, 0x9, 0x7, "054ccc7f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x8, 0x2, {0x7, 0x25, 0x1, 0x1, 0x7, 0x3ff}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x7, 0x4, 0x20, 0x4}, 0x35, &(0x7f0000000140)={0x5, 0xf, 0x35, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "e22c61b99adf3e771ea3e295b0faee9f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x9, 0x7, 0xff, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x1, 0xdf2b}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0xb978}]}, 0x6, [{0x64, &(0x7f0000000180)=@string={0x64, 0x3, "5fa8a707d151d372ffaf51674605398d55e9d35c22fdf82f949e7a85ba3f3fe10dc9a68fc4c1ee898bc77d8613b952835352c20213e76badd43b4a7a59c65b6d6f41036018895e81f5a0547e483c6531b44879b09d9b93f8bb216e3aa8e7e502cd77"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4a, &(0x7f0000000280)=@string={0x4a, 0x3, "4721b9763214e5524be909a4983a11b7640e2ea6ecdf818af994014f428515641c52d163a17f1fb1e3157be7638db4bc76d9f39255617b895e65eedf64887a4879afc597c08c7ddf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1007}}, {0x4f, &(0x7f0000000340)=@string={0x4f, 0x3, "6f71f11f2300a58a09c21d762904f9e2a72a25da7ebc0a154be2cdc5118a211571d6c7d33bcb763802d63cb1a7d49525aebd0c277492b2603e4d77b1e1b2f0dcb3316aec35a2f1e06e47681163"}}, {0x58, &(0x7f00000003c0)=@string={0x58, 0x3, "4a517effe0e5ac9a7e6a49c525c1ded94c4de242c0b00776ffb963363c60663a35e08fbe34024115e581622ce1982328bfa6e58602f10412e7f3f80bbe92ae5da2289bb6efc4f809369f730129dc7daf5e305e55c2e4"}}]}) syz_usb_control_io$uac1(r12, 0x0, 0x0) 7.169642845s ago: executing program 7 (id=5077): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09000000000000550901000000000095000000000000003c9804800000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1f, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000001e80)='net\x00') getdents(r1, &(0x7f0000001ec0)=""/241, 0xf1) 6.928032518s ago: executing program 7 (id=5079): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffeea, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "00fd3c2d871ac341e9a5345b"}}}}}}, 0x0) syz_emit_ethernet(0xb1, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="5ec682290349", @val={@void, {0x8100, 0x7, 0x0, 0xffe}}, {@mpls_mc={0x8848, {[], @llc={@snap={0x1, 0xaa, "0e", "d66569", 0x884c, "923eda034908febe40acefc1d4fefe0ea82e0dc43b69e4bd621e1ae1379c5de5ef90abfe9923957746196d3b88ae99da5457fcb516d042e8be96572975f2a62e0986374a74cde3a44d6c7aca1d624aa3c76f435b022cbffdbd911cd6fb6a5a2fbd2d0c033f08ac880da375cf9b8698696e8a62dddff9f9d4bbbdc7f0fb4f9337893cb781b44bd93900f99a039839406184d0a13ec33fc4"}}}}}}, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r8, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r9, @ANYBLOB="af6fe4b41c420788d53bcc4259048efd4a122bf60812b93fadaf9fae62c70edcba1bbbadd4e456e3489bcd9010dbb88fbe76866d9ccb8883424e91b00bc77c8395f1f983692e99395d68db249f54c9459f45e505776057ac93cb563aa729178ecdc26cbb2a1858886c341d9e928ada8a2a3310c82a0311b4fd5bd25ceef136ef7f12b3224b8b960424886be1c20bc327db292456b62ee8c0e402fea5cbe8b22a6df25cdc1129e551ee532fb729d6fbaf32428c2fdc9755aff9f83702ce0ecc92eddf25d4bc0d62165303d42f75c209fd"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) syz_emit_ethernet(0x6e, &(0x7f0000000c40)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0x0, 0x33, 0x0, @loopback, @empty, [@hopopts={0x2c}]}}}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000000008000000000000000000000064d5079a008463497bd951b886000000000000000041ac1a5d0000000000b8f50f002b70d5001f36d0b210e8c77b80a157", @ANYRES32=0x0, @ANYRES64=r3, @ANYRESDEC=r9], 0x138}, 0x1, 0x0, 0x0, 0x12fd27bfc12f7e0c}, 0x4010) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001000010000000000000000000000000000000000000300"/61, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x138}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000280)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x48, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x3, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r11, 0x1, 0x70bd28, 0x25dfdbfa, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 5.81518473s ago: executing program 6 (id=5088): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x901000, 0x25) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000004c0)={{r0}, 0x10000, 0xe2, 0x1}) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0x5}, 0x0, 0x0}) 5.018651172s ago: executing program 0 (id=5092): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef0098fc8ed802c0fe22a6a50000180012800e0001007769726567756172640000000400028008000d00", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) 4.977254646s ago: executing program 0 (id=5093): r0 = socket(0x22, 0x2, 0x24) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x6d, 0x8, 0x7d, @empty, @private1, 0x7, 0x8, 0x8, 0x2}}) r1 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000140)={0x3, 0x3f, 0x10, 0x9, &(0x7f0000001600)=[{}]}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000380)=""/4096) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020580411500000000000010902240001000000006f800904000005035a099930000000100000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x208) semop(r3, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x0, 0x0, 0x800}], 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)=[0xa8f]) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001680), 0x802, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f00000016c0)='syz1\x00') ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000000c0)={0x2, 0x100, 0x2d7, 0x0, 0xffff6d93, 0x4}) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r7}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019"], 0xd8}}, 0x80) 4.914983333s ago: executing program 2 (id=5094): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) write$cgroup_int(r1, &(0x7f0000000080)=0x7, 0x12) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.722506437s ago: executing program 2 (id=5095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @multicast2}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) read$proc_mixer(r2, &(0x7f0000000100)=""/176, 0xb0) r3 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfef2, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffd}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x40, 0x0, 0x778a, 0xffff}, {0x3, 0x0, 0x9}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8) close(r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5}) io_uring_enter(r7, 0x3f80, 0x3697, 0x25, 0x0, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r10, 0x400, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{r7, 0x10}, {r6, 0x50}, {r6, 0x8}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x10001]}, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000440)={"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"}) 3.791904833s ago: executing program 7 (id=5096): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.584323421s ago: executing program 7 (id=5097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404355040000000000000109022400010000000409045388f6c6389a7300000200000080092100000001c005000905"], 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in=@local, 0x4e24, 0x10, 0x0, 0x0, 0xa, 0x80, 0x0, 0x2f}, {}, {}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x21, 0x14, {0x14, 0x24, "b0388e69a8b381cce36a3ce346b88b52978b"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x17, 0xf5, "b94f8adb093736263618ac493a949f683ff3cdbd62f0f7cdf3de3a645d9c1e8e78a713eba84d66adc00d5a0a578a53aac83529dc4df7e8d353d2ef7bc87af3a79bdd29404b4899ed16c4082e87fa4536633ed0a056dbd22df248d6e2311e6f46c832cad83ba3acb93262faf2a05d64156f4e590b94b970b3ea3f346b17596e779d677a2bc55e70e3cae8b88ed436caab80a780226dd7b10f4f494f4090bb9eafae1f19d0415645f38122df5591422696cac9dc2a8a85033f8b10338e564583c2db5ab72b52de037f5c0012b1989e63aab73d686323350f9ba775c16175b07fce8ff3fcb1687f2d587f54c7147137054f2ff9d490ab"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/hardlockup_count', 0x8100, 0x120) read$char_usb(r2, &(0x7f00000000c0)=""/18, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xdf}]}], {0x14}}, 0x60}}, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x3026245a, 0x80, 0xffff, 0x20, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000d2000c00000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4107}, 0x4c) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="400c5e00000006116d2e8038658eb845539aaca8fa5f655843ff09b041a4031fec096bf07c645148889cd583dc4a1f62c8c4eb45b12a7be0fdb9087a18250b334f9364675a3ed17baa5697ee8433627dcddefb867176b23fb3e4505c84dbd75b8f9901b9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.49031846s ago: executing program 2 (id=5098): socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x78, 0xc, "e0835245ccc96062b652a2d8e18cef66037db1b7fd495656769e0e4268fe303922affc2e5ef2548621f3ad8fdb077e6b855c64975181440c12ec087b131ff85bdb97986794e9ce87e21c215d9732b26a7ec325cb39fe711301b7ef78399ee72bf804a1eadb6f3de17a0dd7430bcd7220044bfa7d"}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000001ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000001940)={{0x1, 0x0, 0x80, {0x2, 0x5000, 0x1}}, "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", "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"}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xa) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="15460100ee20000008002500f2ffffff13003500726f736530000000000000009d0000007c0034801400350070696d726567310000000000000000001400350076657468305f766c616e000000000000140035000100000072657461703000000000000014003500766c61007669727c1a1dc31f69300000000000001400500d4feffc2a60fa1c350073797a5f74756e0000000000000000001d0a7ce5d0"], 0xb8}, 0x1, 0x0, 0x0, 0x40013}, 0x0) 2.708166485s ago: executing program 6 (id=5099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x11, 0x3, 0x0, "98428555711f775fe300200001000000000000000000ad7183eb0000ff00", 0x43353039}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000500)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x2a, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.590838407s ago: executing program 2 (id=5100): prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x80009, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x6, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f00000c2000/0x1000)=nil, 0x1000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x1df) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) userfaultfd(0x80001) 2.483604254s ago: executing program 6 (id=5101): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83f, 0x800, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknod$loop(0x0, 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000006c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0) dup2(r6, r4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.236783103s ago: executing program 6 (id=5102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000040000000400000025bf"], 0x50) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0xffffffff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.034603458s ago: executing program 6 (id=5103): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x100000001, 0x400000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x2, "c6fbf0bddf7241f5c57eac40871ba6af7ca55beac36bc971814cee0728a437edc1268093eee392ee83f721e2189a83a661c91b2acdedcb36a06e3cdd2e97e2ed", {0x8, 0x6}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x0, 'batadv_slave_0\x00', {}, 0xff01}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xfffffffa}, &(0x7f0000000240)=0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0xd005, 0xfe01, 0x0, 0x9, 0x7fff, 0x55a, 0x447, 0xb8, r3}, &(0x7f0000000340)=0x20) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0xfff9, 0x1, 0xfa, 0x1}, {0x8, 0x6, 0x99, 0xfff}, {0x7, 0x5, 0x1, 0x6}]}) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) sysfs$1(0x1, &(0x7f0000002440)='freezer.state\x00') (async) sendfile(r0, r1, &(0x7f0000002480)=0x3, 0x9) gettid() (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000024c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sysfs$1(0x1, &(0x7f0000002540)='(\x00') fcntl$notify(r0, 0x402, 0xc) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x8, 0x10, 0x0, 0x0, 0x4, 0x1}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000002680), 0x4) (async) r5 = socket$inet_sctp(0x2, 0xbf7d88691fcecaf1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000026c0)={0x2, 0x209, 0x88, 0xa, r3}, &(0x7f0000002700)=0x10) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002780)={r4, 0x3c, &(0x7f0000002740)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, &(0x7f00000027c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000002800)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000003f80)={&(0x7f0000002840)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000003ec0)=[{&(0x7f0000002880)="9ea7108673bb5b08676fe8479708219b86e62cf19f135b3d4b52bc67f6790f715fbf8f65e02608056079f7b5f14c4d494b4f47a4e6a8d6147fda9df520d3a271b0a1b5931cebc03469e95f2c01a2e96a4139bb5b357229f8e813692a477dd251289ca9669e6dc04330b63b2ab1eebaac213fdd63273ad6b9d6d82a7bb47a6b2365e6d11313597a90a71532fa97db8fe1a174184845", 0x95}, {&(0x7f0000002940)="6d74ce1f14434cba86f87133e885ad6a27c7fd015db1f447d0fd43bf8d3ad1856f60af913d8581ebe31544e3c1134e25a9fa6e3351ef00acfb23646aa8b916414ab1bba969e1a14debb58ea70fdf689474a35e9b4871420d7f23cfcf47500866815f719a4889927cbd43eab51a6ed5b5662642467423561430ccf9c84abbed9341c767c5d5c2e5f9114ce6e0cd5362ea3faa6aca39fafb920c1bb14c8095741d3701b5736fd07f847c108ba298da9538ad3618c55ea0c2e614e8abe28b86c6a5db27005b9a5c98ec6e20e1bd587a357ab36b6ff31b7b1bf98a9dc0c3e8f5", 0xde}, {&(0x7f0000002a40)="e716b24fca3b8ce7c1b7e45ce6a13ba60b3d05b032dc6d9504", 0x19}, {&(0x7f0000002a80)="6bc2389a5c1f7308b09201b3db7a081b77c3d60c35e18a657caa081d4106845560bfecb079cad699f1e685a077364a9f9b20dfb6acabf37c10f57f724c937ad445786f8a24a00a2b8a43f64b38331ba137d15f48e9dc447a48c7325a79ca3701f61ef72a5fbac8075f403d3620c8a4258a66b0c1abc0a801c49eae31114ab40ba78bf5bd42ad1a2eb07a4dae1cb0c4d9bd574f59f3b89d391e484af7ddb8a3c2aa4ca69b61bacb53f374aeb7bc8fd9e407d619e832cb4bcd4e6aa3bfb81712c0658cfc449edb36de7736618d256f1f9ee78e2e15c46e9763bc", 0xd9}, {&(0x7f0000002b80)="9a1280d0b4b781cd70d3666c2bec7ab81903a0e9f1fbf99b109d08ff9c1487db2f659d8c33fb211544005ed952a38c0e4a9899689a9f2c22f9882015f11bd43a6e36af7b446fabea765f280837ced3a4c6a7a5f115a3efa2eca47bc4549d07c57dda5e857554f6b7e127606ee7345a654460a6d34ed51f84bd1e38e6ba6ce56b648079e149153fd41608f188c7034d2acbacb2bdae6045be28611779fca7103a79e056dff710d611713cfe2d83b082c476f50cc759cc35f02c76ff0a2e5c75711387587df0ffa201159c217edb6c34ff8685", 0xd2}, {&(0x7f0000002c80)="3ec14af9fd033d9501f4d2868bd629ec6e587859cd14d45fcb28e6a96d3280951af32287e5505a358c672d", 0x2b}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="e35491dbae561c8e659b9de9f387565a95f6f08befc03ed0d797a2129229f6ecb923b1c0b9ad0f6af4932a3907ff79985079ee86aca0c1a24a5413cd9ed59ce40cb4b6135829851b6f6bd82f5e2fcc2c67089ef667a4a17009e34b5bd6c3fb07ce4d36987d0bf1b2ab2be14064f94cb26d9dd9211f48432c1a794919c54b50bf82930102eedbc82a52521a8e8fb68c1e90f543a9269aa1ae238803", 0x9b}, {&(0x7f0000003d80)="baa3065439481cca1215193658ead6a3f1b505cbe9ae5c5b07942ec0781f6c7e9a2059206624eeb9acb14a7bdc12eeb9daf917e642b4af4afee837b14e2c5a5abc71a17c", 0x44}, {&(0x7f0000003e00)="d07ada86deb590ad428bb06602d97adfe3f6e4e06468c432dfaad42fb2c64467a4f9e25e4934d3f324cbbf16bb18148a507c35bf2c0fb006e0506e809e15631c4f99edb7bd9508408f182e8e94c58e8624aca4510e4e52d50d6a8277ada4c01e1333b230f313f73bd8b557c865cc276739a7cf33a71255960e48798fb3b3d207bd9c337450bac1e12539bbdd19d1a31924d108f02fc63b0cd951a44905f7a7e8f3642c6e0878d4dfcf", 0xa9}], 0xa}, 0x10000000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000003fc0)={r3, 0xf6, "0270d03918231fdeedeb21bdda0229eec4104d86d2fbdc732b59838b19467f76fcc74de3dfc94250b45fce759d6d1a2bc02470292669bada7d05016f07cde116caee4fb50963b371db0a45afbd0f26d830e9eff11cc541fcadfba67885ee439e776314ff36aa4553e15aa7417532f690feb1dcc790be3ff2ca73a0e06251d8aa51e0db8fd18e3e6c8200aec3083ce6c59c831d04345c173b7710c2e70fbf9d8beb6d7398ac59417a7e83c80d6ad19105dded68de707f3fa293468e73ca17634dead811f2df8fd98a51288ec69b1a68ce3b8672a11d378ca348aa95ae8082d616aa7bb38c47b860b1a884ae3707bd3cc26200763868a9"}, &(0x7f00000040c0)=0xfe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004100)) 1.904582695s ago: executing program 4 (id=5104): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) unshare(0x26020480) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0xa4001, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2df, 0x1, 0x2, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x5) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0, 0x6}, 0x0, 0x1, 0x8}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) write(r11, &(0x7f00000005c0)="eca3539bfc", 0x5) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1, 0x0, 0x6}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={0x0, 0x0, 0xb3}) 1.868441185s ago: executing program 0 (id=5105): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@any, 0xffffffff}, 0x1, 0x2, 0x10001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) r3 = syz_io_uring_setup(0x23d, &(0x7f00000000c0)={0x0, 0x1, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.633389135s ago: executing program 0 (id=5106): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x4, 0x0, @private=0xa010101, @loopback}}}}) (fail_nth: 7) 1.322537191s ago: executing program 0 (id=5107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r1, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x18}, {0x3}, {0x16}, {0x6c}, {0x36}, {0x30, 0x1}, {0x1b, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x30, 0x1}, {0xc, 0x1}, {0x6}, {0x6c, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0xb, 0x1}, {0x24}, {0xc}, {0x5, 0x1}, {0x1b}, {0x18}, {0x9, 0x1}, {0x21, 0x1}, {0xc}, {0xb}, {0x6c, 0x1}, {0x2, 0x1}, {0x6c}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001001}, 0x20000000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) splice(r4, &(0x7f00000002c0)=0x5, r3, &(0x7f0000000300)=0x9, 0x3, 0x8) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000340)={0xff, 0x10, 0xffff, 0x1, 0xdc, 0x2}) syz_open_dev$video(&(0x7f0000000380), 0x380000000, 0xca000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x400400, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f00000005c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000600)={@loopback, @initdev, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000680)={@mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7000, 0x8, 0x100, 0x5, 0x82000000, r7}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80023040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x104, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x1a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4084) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmmsg$alg(r6, &(0x7f00000069c0)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="10bcd1bb0f144856abcd111d731df28cf68dddfadba9efe9d23aea55791f0f18110bc620fdf60d65a4e540a1fe0a63e37446566e138c9f44a92bb42d1115ab04839fdafe643bb44a014b2a2d0f9228400502efad8e6f16ee0a3562a92fc0c83daf6a31ad625e8af06be519fc4261411b6d35b24a63299f4f520c041e4c230b33c11ddcbb34e4a379efa69098d013ead9fc73eb64361821a05fabfc9a8b8b1bf657c000722a55", 0xa6}], 0x1, &(0x7f0000000a40)=[@iv={0x90, 0x117, 0x2, 0x75, "ddfb9fc46d263e5e769eecdd6b5ba3b6eb0aeea117d9fc72a33d058b11674cca2f4cd56529c25f97228eee45ec229695e1321f79c50e058da8f56eb435500bdb9368aad51960ec8b59809c0b7a786be3cd131c09a2d595baa0465e796419f638c7e4ad2a1395f71f404116eb6615345af078278b42"}, @iv={0xe0, 0x117, 0x2, 0xc9, "765fa4446eb12b84ba4572ea2b71f7387490d9c16b35c4f058707ed17f26828658a8c915edc938e95a019a8999df7f51dba03b7d5176c5af2b38f3b26fb4df229d5fbc3788ffcd21c9c4041375bf51c641ae7416c770f94c9b9183c955b023b95f3986e0c45f96dae1c42138f8fcf38019af87a0673e691e47f2afbdb7fc86b3b65e9bd67994adfde05041665701b9f37b17810a7efab3faafc0743597451bd6bfcffeb7fd0c197da80a848610aeadeaa906241a695dd1e2118b9bda688ae633450fc4798bae79808a"}, @iv={0x78, 0x117, 0x2, 0x61, "e3b9c35536872b2bc59ad5ddb499358288b4458d3b94867e08fa0057fe6136a37d3672ca88ae1337e3a958edd5932bb6c0dc21db6099bd96ac18117247dfeef48d921bd5bc7404ba8c50484470554f7f50bade25ebd76c06bdc1c74e410b3dc730"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xe0, 0x117, 0x2, 0xc7, "643351a8aa466b9a8e6524f6e74a639439cd1dc4ea404cafbbcb8d498f7172554640d9dc151e3be04fbc4e1418fb0711f857ff74f70fab1f3646ff7d300b798da7f08cc9a4d7d2fb57bbcefa89ec916c78b16f32b5c0a6a91522cc4ca60cdb3edcbea98ef0d088af1b510507ecf097f7f55cf0dce16b4a8f7eff5f1e51c3012a65a0b33e45a4ec6ae1ce4c7f13c1faf6a2f5fc65974d53ef1c4c66b024258748050ba5722b22e32ceeab1dbcda8d9710b3d9535ea2a9c713bb2b2872f1d9abb0ec62ec034d7c7a"}, @op={0x18}, @iv={0x48, 0x117, 0x2, 0x30, "73873aabf954782073436a4fdea9b842aef3a46759b4039320c4ca2b293a0b982bdbad1a2a69e03d4637a688e2e77e28"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x370, 0x4000}, {0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000dc0)="bc3f3d8bdbd07c0f5cfc7ebd85b2f5a9070cd916261a70d1b7409cf7108bb3c40886167455df96107f4dc0f86a68d5d0f31e923277df0f146af94363e7a98a1563835623d7f7f74b4bffb14197b1a522a16aa0c94774de03d4a6d9fc08a0c3bd03b0224ef1c9c51bce5deae49386dfb931918e04efb88640e2b059db", 0x7c}, {&(0x7f0000000e40)="eb3642986d849156ede6522a193d94a5ba1d94d406a57ae83d29b8d28529554d0cca2ddbd6a8052c283ad54091bf734e89f6e8c59dd38b2adf6ffdf32958f6e67314fc2964521b2ca8a48270128513d58561df5e53b9532ec96a5732c2387079c93c6ec6e8564bf556eed5e076df75e29db31d25ca82cc2c06ebe17f80a3f6980092160e9005d8702de4b92ab3de2274973c996118ec748e12bc740ef10564a1ea379a28aed29b1f2b5e0789e16765db3214c2643c5f2c4c9ccd41140e3975a69d01", 0xc2}, {&(0x7f0000000f40)="c9ff89c8e43ac1a7973951345bce1ee589fceedf95ae94eb0fb5768f63ee195b95d4be6d7447fb203ce17dd8db3f90710b40dedd17d66ee33b92fbd7c9ddb1c54aee35b74b5c3e00cb97f366c3093eef29528bdfd978bfa3cbadc65b7ac43ee92871c68e4904f7ae44d3e43edc52dcf628ae0c1919d2cc36edaf502ff44178449d33a97ba3702858ca0c352c1701670b339f9b40699f78120881796dd3b5ce7ba01f0453eff2a037", 0xa8}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="c6d6d629dd69375a2776534207744ab858f5583ba35ed204c448a1d4dadd5d752d55c1afa74814d7433375cb5bae564dc6029e875224eb0c56130ec3eef03cf7f05591aac057234886c6dc7f0b9d4231957334a779a0f765cee5db9683ce9a17c2025e6dbc167ceb67f870639ba0fe1b478c074c93467d6ab174cee2b1e76c2c325fc7f175de1a41d8c90416efe444ab0faece8516168662c52eb48bca24a8c04b03ffe9fcf06e743ec6f6bfb22be2b38351396f2e5c28ca5192ad5a63f0851311beb3ebe9a8d39a7f9c5af514ef78c28d78567f0210c661ea", 0xd9}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="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", 0xfb}, {&(0x7f0000003200)="302ec9436b5050b28574f64d18bffd6d054e8328f34ea1954d54c1f42945d09516c2a80fc30062ba61ef563456467d0c5862e7665a669eb58e2cdf714d39cdb5", 0x40}, {&(0x7f0000003240)="ac0fd46925c47b6c6f07f26b75f7f035b99cfeada7420ed5a1d0767358a0568dc8df", 0x22}], 0x9, &(0x7f0000003340)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xca, "02fdd3c42692f2c4af879e6351d0481ea78a03a02a140b42366c7af401cf315b82a92f16d0af15431d76343b7161cc089d74a436aba1b496bcd9b90ae4839ca1fe3b119b6d780e252c45d5a00afa18516b4eee7d82ec2ced00b47cce7de3dfc76cfa9eb6941913ba7503a835339b05b9c53b5ea575952455f769a5ef1bfdd357c58bf6afdd2a81fce0cdc9ba057750067fba944c8d814dadb9794bb4628d1b3a50aebc5cbc724961beb2483779b9dddb4bd694398fce0b11659ee3158662b4bdd3d071b1110a1eefb3d8"}], 0xf8, 0x24004040}, {0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003440)="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", 0xfc}, {&(0x7f0000003540)="922298d85f7e890e57363d4524954bfe913d96a59beb40eecbeed5f3a1e7254a0f4090f5f38d3a1caf95f890c09eca123caf2494a48db073cbad2c284fb669cb653fbf5297ba7b91df7c7c09ee112e9e93a29d00036b90c2eba46ccc2e58b60ec6a286f6edf051afd117aff240efaff11345e3517a10717a98ec1f2b8d761fa82625cfe7c554ea6720129dcfb396eeb3e388ca77d451a7d429820fa803e17925bb592c4792645e2c9e65a5213a32b536bd1ba13b3b1f7e5b9a96ab4dc9d6dfabd971a36cb03de841e4ef2686aabe15194279949947ae9452e5670bd6c470", 0xde}, {&(0x7f0000003640)="48b02f", 0x3}, {0xfffffffffffffffc}, {&(0x7f0000003680)="326abc2e13b6456e5c33c7522ccd4ec689591a0fea9819b1bf311ac2eee53acb4e957aaf823f192f99a2526cac0b0a5c05f0b790d9f8d919cb8d4562f7a7b2372cad873bd860de28eb8c66892d1c0827c1fa96", 0x53}, {&(0x7f0000003700)="2cc6f983f405559fba92ba61047a195fd84d30f0d2050e96690a449b9ebf98342a050a7545", 0x25}], 0x6}, {0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000037c0)="d9b96b89986d", 0x6}, {&(0x7f0000003800)="bbfe505a0d165a920d5bc9ffe541623eed796445d2e5a13e125e520f16d42307f194b155fd213daf185cdc47cb6989f7c2d4267d7a44f856203ca7b4c0", 0x3d}, {&(0x7f0000003840)="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", 0xfc}, {&(0x7f0000003940)="f58785c0cbea4773510c2e034a3bb6fe524df159e5487410e3afa5e6e75d0a82f93e373afd41e95463525ed75f48aa2a871aed8c48ccfcb7f013403d0707a61e97bdddf5583bc9f3d9c93fb51820e93c631c0a63fc6a1f7194b639c0e4ea712e3b1867ac64e98863fbf4e100", 0x6c}, {&(0x7f00000039c0)="0f117dcca99f5b94cd729be7eee1d7133981f9254bec20551102be4101c1ce7fee4c99c18a5211ace09ec02aaf5f7f7c313f8c9197d9c3f23adfada9654cc96f89b0e1506b4005bb50ab7e37268a9c", 0x4f}, {&(0x7f0000003a40)="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", 0xfc}, {&(0x7f0000003b40)="14759085", 0x4}], 0x7, &(0x7f0000003c00)=[@assoc={0x18, 0x117, 0x4, 0x48}], 0x18, 0x10}, {0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c40)="97a601001f0707973ff770b791f27b7f09", 0x11}, {&(0x7f0000003c80)="45684e2f05e6ead79ad6fda15faa213b57bf1494db801934a09db49344a97910fdd3f2fc97628cd64189a4d140497058aa055bb79b8e0e80880ade1f31375ef0d5659f6b91ff849e04d19b643ed7f2c8440eaf37d1b8b6ee07163acf4587373e569f4a359e90f915917b598a873c6f6dd4dd8626662cb044b710852b4219ba2f2d28d5337045cfec5bdd41cfcc4d400f836ecd7d221726ca54803a0e78848da26e681c9a820afcc8d35ba5cc9a09222bc449b5e71e43278c35d0f16e6bb296558ca73059d6742cf0a8fb07641e636e5e5681d72fa4fdbfb85ad6e4fc5208f0cb", 0xe0}, {&(0x7f0000003d80)="82e11f2fe10d302bdc0646c752b3b5f1966eadcdcd4c5124ba539867d07f0d53a159c949826372913caab8b1a85c76a8dbc19cc0aec9d4b6aa4bc5f7ebaae06ff5e547c01feff04933ca6b34164873d04e9410541cd65b24d1b6f1da663bbc0e3380626d76f022d32dfb5d9db480c29a35eb916f6587157db9ee2568efe0c34a3ee0c5b82a647d63f14e707cbbdfc419bf212c48c2865824dd934336649876ea637afe56cb35d83d41c00a8b18", 0xad}, {&(0x7f0000003e40)="27d1bcabca8f62fc8148711868cfccdf41219e2408ac7ce7fdb4e772c10e21843866c59467d2802bf2bc221293bd632a21cc79b3c3c055e407de5e28c0d972261c437a5bf84ec8226ebdd1dc5a31956cb5582d68eb8e17f0912aaccc2f60184e2b36ddf6d397c58af8f72a64f26fddf73f65bf1aaae5f17c2139883bd39dbcd964d1df52d3f5115633c61d9d044473b3f936906f3397d145bdc0b40da187aff4e5866bc023d8300fa018450cb086e5bc322f4107943ed26dbb77b7f1fa6d42534d2af019ff696ca1dc7f243de21dcff19f1bd6680a3c85b7dd641061bfaef55726be", 0xe2}], 0x4, &(0x7f0000003f80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x60, 0x40}, {0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000004000)="dfd513f86e781ffa607df68c7427555ab09c2ac63a583b3a5d777e04b0fad78d2b1fe74b2c84ec25c960595623c85fdb26e22c0bb22f2c90e7704389904d7dbd6bd446812721988d55e8afa597611366b6d69097eebcfee160c9ff128ecd7ff8bc6bc9266916b84e3b987cb3d03533a6ca2e3d9125011a56293c24c51682", 0x7e}, {&(0x7f0000004080)="7bd75fe7d3cfdec87ace15afd9fdd0facffc767596347bf4861ca258f6f548ca0a7bce97c5b17fa65b3532d604b64ccd54040d15e6e097c066777c2ae0fd0f54e5628dc054df887007c1e3ad1774727d", 0x50}, {&(0x7f0000004100)="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", 0x1000}, {&(0x7f0000005100)="8ab03802eebe7ef49a61ed3b476e5239207a2beefa80e8fbf673a2821835a0307883d17f6ba97899b21d9ff05a40783b0acec3ee154f4d9564d920b7d5c1fbdc26c491aaed6516b5bd3bf6e3986636c84e9023b2160496350f9444e63fc16b2174aa46047248a8bfbc78aef706693aed5fd9d197ca24f1ba95a082b1c91093523d4e7d7ff958cf4c23714ff2c80b210b962ff65d86dd511cb234dab90a5fd17b1b6af4be6d0f92b8df1c8fbd3a1ddcb057ae9f51ec4f", 0xb6}, {&(0x7f00000051c0)}, {&(0x7f0000005200)="192ebc2adb3067bbcfa38c77036ae3624f4de5045a1b977558b63db4fb040d63f1f673ceada8cea0b5794d451cf7182d983f657966026d8abdc79e68c207eddbd67fa94b0b1e2bf8ab955ae4affdc93e6ca2bdc5083a1d7823f2f6ace58a0763ad23e236d88cb9142d5af173", 0x6c}, {&(0x7f0000005280)="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", 0x1000}, {&(0x7f0000006280)="dabcceae6982410fe95b2c893285a688112a354dac86805c08011ef9a6e021272cc39fa0a2ff7fa552e0a307019ed19560e8b9164a9ce452c6c210f94a6d54024ff04598b8e205cfba72efb6d1c1fdc86af5de", 0x53}], 0x8, &(0x7f0000006380)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18}, @iv={0xb8, 0x117, 0x2, 0xa2, "467339f3ec1af60da11f1ae505c0a153dd531c61c0ba5eed51356aadf1052c3d166ae402d0d897e89bee6ff65c16081373161bd448cd2720e37a7dc54cfc6281c457369bbae3299a273081f08b4f07c8dc0933625e6cdbcee876ef544c4cfb07649021c33565cbbafc0fcc27d743cc0f605ba6c0ce730fca1241e168e71df3c2d556733dea4ad99aff31a1663cf23662fbac4ba9447baedbe3f087c6e4f52150c423"}], 0xe8, 0x40}, {0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006480)="4cefb0148f50ae97a8ff51af89d56504384167c57f3c913b3a8522afff6b09c4da545da46880fe0e5327d287f8804d609e4d261d3d0ae07452ac46a2dcedefed4423e4b4aa5779eaba83ca771793294c764fa8d2dd7116269c9dac2ab82fefb8b2e69727f69fbff6d94c5d8e9c426539a55adf8f229efa4361672a7ef1338707406e268677ae5fec8feb85550883dfdf178008bef8cc5ede326274100a4b85b58e63c1bd197bb015", 0xa8}, {&(0x7f0000006540)="f84798cc857d9181aa7cd45c9b9dc480ceeed8f9340f24fc7e00115a82773a05c68b97159529efe22f227d62bf3b88422a6ce3156d449b68683fd334ad364aa96a0547e3d8998579a9c9fde0f3551ca98c504d69673dd0151b332459e438c21d40e8ca57d9374c9dd63bc10f1b6e4e1965", 0x71}, {&(0x7f00000065c0)="b81ac40ad37f733919e10089c38ef62859d83023b1a482df0ea5995e876a89d78849f47c72f434267235c2f368f6b7a9be9cada626c494b2a573ed09700029be5f9a22d6292ee672341f427ecd52e4f38f5955e616cd487f62fedbeb2e24fd2a", 0x60}, {&(0x7f0000006640)="f7c3e1e9610a3dacd47f814123cc9ff8512b5631214ea360ad821e7278bd86bae893e645b301f777d843f8e049937631aa35f60c67cb0bdae490122c9d8d27d16fd4c7dd9416fa8a15b6399bcaff604c3b676303e1321960d5f33582f42b9d3d63f94af6c530e65c6bbda8323011cfc560bf9fda8d18d6d071daebf6d232e0626183dd2b5c4cce23041f7ba499b6634535a63cf65abfaff2bf2d0d0fa19ba546acf97cfc90822a39615b46176d7eacdc996147bc5e83f37bffba65f4321a903a2ccffc4ec75bbc817c4f0e316ecdaa9ab89f80fe07ca272be1a8d57460f5ad4cc23576722b5ba4c59c9245652ef6a0", 0xef}], 0x4, &(0x7f0000006780)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @op={0x18}, @op={0x18}, @op={0x18}, @iv={0xe0, 0x117, 0x2, 0xc9, "6d770c34cec15db4b6834eb16c712f67ef84adfb82cf1bdbd16ed8c41648bfee0c2f8cc504fc6b509ea3a19073e799fb7a0d59a0d4b5034117686981d2786542e706609273c121f67d250907e9c0a20a6d87d3b215c2f0711d9eb6dd7614610baca5fc5cc5a9d5f7925a6d76082de7be759182793b50f05a5b48c9b872b87c4fc3610cdd5739c7f9114ff2f3f875d8a9da60c336b79678d2f9b4b84bc422a4cb8b8875ce76dfbbcb0b6c64ce3f5b85b11a1445d9357b6a94ce9de5050148cdcca009e4f6ccdd411c77"}, @iv={0xe0, 0x117, 0x2, 0xcc, "9c7798ac9dbfb5ecc4d9e33f8c456cc9732c4e97414b22fdf6868d9aa9be2a4b17a61e48baabd567c9a0da02ac4306807461b581fe06679ed276d9fc6ce759cd6d86faa7bde9e90069f4349377aaeb4569152fcb1595aa719035758fc8daded8eed4a75911e259bbac76308b921c71f3756677f250612426e95317021d02968e7ffd97b632dfca417bd5cb5ea251a48a490d8d4203beb229e4371093d2ca21d450efd1e7c69439e2a179aacc6f6b9e655751c15ef020c67985a31bfb3540d8dce41045a3203236d4bbec50c1"}], 0x238, 0x2404c081}], 0x7, 0x40080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006b80)) fallocate(r6, 0x42, 0x97ea, 0xdc2a) openat$cgroup_ro(r6, &(0x7f0000006bc0)='memory.events\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006c40), r6) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000006f00)={&(0x7f0000006c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006c80)={0x21c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x733}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe4ab85a7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x66cc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4aa}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9696}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x600}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006f80), r0) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000070c0)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000007080)={&(0x7f0000006fc0)={0xa4, r10, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x29c3, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "339375e5b610"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9836577c47"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4841) 1.060787363s ago: executing program 0 (id=5108): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0xcc, 0x6, 0x9, 0x1}, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r4 = getpid() syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7277, 0x800, 0x4, 0x171}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r3, 0x1ca5, 0x0, 0x49, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x100) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x418580, 0x0) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000000)=0x7, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 966.782968ms ago: executing program 4 (id=5109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000030071106600000000009500000098000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 890.421484ms ago: executing program 4 (id=5110): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000c40)="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", 0x586}, {&(0x7f00000000c0)="924c7c18e709b52c12046e7084278515c67c54facb0c69", 0x17}], 0x2, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x82, 0xe, "66581ddb34253c0556c78617"}, @timestamp_prespec={0x44, 0x4, 0x67}]}}}], 0x48}, 0x4) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x29, 0x0, 0x2}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001"], 0x0) (async) unshare(0x2040400) r1 = fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f00000002c0)=@multiplanar_overlay={0xde, 0x8, 0x4, 0x401, 0x3, {0x0, 0x2710}, {0x3, 0x17, 0x2, 0x8, 0x1, 0xe, "957deba0"}, 0x0, 0x3, {0x0}, 0xfffffbff}) (async) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r6 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r8, &(0x7f0000000000)='0\x00', 0x2) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') getdents64(r9, &(0x7f0000002440)=""/181, 0xb5) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (async) syz_usb_connect(0x0, 0x440, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x5b, 0x93, 0x5b, 0x10, 0x403, 0x6015, 0x95aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42e, 0x2, 0xe, 0x7, 0x10, 0x3, [{{0x9, 0x4, 0xc3, 0x1d, 0xb, 0x44, 0x0, 0x5a, 0x96, [@hid_hid={0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0x8cf}}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x1}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x9, 0x8], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x5, 0x1, 0x2}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x5, 0x5, "61d3fc3a9af5"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x6, 0x0, 0x5, 0x0, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x5, 0x0, 0xfff, 0x7, 0xd}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x4, 0x0, "02"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0xc9, 0x5}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x9, 0x8}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x6, 0x9, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x3, 0xe, [@generic={0x4a, 0x21, "2c2e9acd78e42498ce90c12c7a2ad0e3d758347d1fe6058918679c373db5c5299263df9adfb6dc200e32129e8609edfef8f4ed0bb8354a8107efbc52e209e2b8f394cbd764307b3f"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xc, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x3, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x10, 0x2, 0x2, [@generic={0x14, 0x23, "cceca3a79e444291e6faf31f4a3a0a061d12"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x3, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x2}, @generic={0xc, 0x7, "6f1b8f7cece41d282b30"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0xc8, 0x7f, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x29}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8a, 0x10}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0xfc, 0x1, [@generic={0xc2, 0x15, "e6ee238adc2d06fda46aedee54e5e315ee92cc295751cd37190ddb3ea6f911b84dd98546d124b79c22c559f6b99a3f336595729dd7785cd5640aa664510ae688e79c26b45494e00881bba9bd615b3569195dc4544fd26adf189338040f23a182ffc14a49cbddec91eb1e7fb487c39eb727c0761f52614634f28744b001cbb0c206fd273c209db55cf4d009b6f6bbf2d52e1de9d1a4396eded753e1475f50e8e5e88f189fe38583bc1debc11072beff6348cd361ede4c9836d33d6fd80097469d"}]}}]}}, {{0x9, 0x4, 0x6c, 0x4, 0x7, 0x78, 0x54, 0x96, 0xa6, [@uac_control={{0xa, 0x24, 0x1, 0x3ff, 0xfa}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x44, 0x1, 0xf7}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0x8, "a25c1541"}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x6, 0x5, "a23f0f"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6, 0x2, 0x86}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x96, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x4bb0}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x9, 0xba, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x5, 0x38, 0x18}}, {{0x9, 0x5, 0xd, 0x10, 0x238, 0x7, 0x5, 0x9, [@generic={0x6e, 0x0, "24fa5f4533d3e724e1a42e112a3439cf5c4828a01978285c4ea96d1aca5a64bd0100c4cfb844b6b8ca108c63461ebc06cc2d9951339b530adbe617686a35bfbfeb0f1647487cee97d3d30c88ff043efe240c656e703714be969f7aada5c25c2df5c70fd9b8e2151875d34336"}, @generic={0x87, 0x22, "6cdaa1733b1ce582c91ebb14a6c60a92143b4a2b01436422f5c73d615a8323af8b843f1704ccd7a0a02b545601789bbb767337949220bc3c91f3bcdb2bc683f64423a6b3c83a5ef27a194443f2146abb40ed1fc8e71042eefb5908a2ad836af4c86a63b8a8cd4a10e8a1e862bf548d5436ad70413810d1f23652c59c59b78db2f2c7f75aae"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x6, 0x21, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xf}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0x89, 0xa7, [@generic={0x96, 0xc, "513197dafe8c6e1304e3d696c3fe8a0a09d1d7f258ef654789ad8e4835686cf262c4f0c7ad43b24bb7f53c8dd8a96a0201a5eb732395678ba2b1164596897d7acd283c084ffa7fcb837672f1f2146837c590e23a0426c2dafacdf533faa211f82582581265b1e0fe2af767bc9a52b162634c0fb25423f9a470988f863b2ff0f80348cf8e64490761d14fb0ea0f80f5f80f58cd69"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x3a, 0x2, 0x20, 0x12}, 0x30, &(0x7f0000000040)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x7, 0xf0f, 0xf83, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "158dab2200f1abd0cb4b4e0195054496"}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xf9, &(0x7f0000000580)=@string={0xf9, 0x3, "4a21da0af6687413a2b65544bb95e3e83e6051c7e59af9792938ce1ee8db78117e73f7537af9061166abd62c52567edf915df985a0cdc581f41523d04119bbf4778759dd55675ec6655fcce796b314a88fcd0ea56815df02727a044011f891b486cc04fe777b5098d5f3179fd5e7c42dad9bfb4935cb9593cf55ee513ae256e515f8377d6d9630abbd6eccd74aa25f24c5c149f22896bad5fc5dfd02bdab98657159ef4f1f944823c3b32cd98369f06fc4b75eda3afb87499126c7862590f7951aeac02f0d455a482a256303028fba95f0f31006a3dd2f051335612701e4efdb37d5103aa2c02f4f73d8a7ee35f80a055df0c11f7e18d8"}}, {0xe9, &(0x7f0000000680)=@string={0xe9, 0x3, "a7207eb02175979faeb6e3861615d98a4fecd5137f0ef523799897ea262269f3328ee61580185edd35f89edd4fbffccda9f2e54ae870cbe7b9c182b3a0afe03f9945b842cf590b3d38eb85babd81eecc3b431a61e0ebaaee45e0090fddabf6566510803de5981c092534985674636d18a948be2196c1d02bc052761d8d09eeb9b1ce0c4786bf01ad2934f68dfb8cf041039c45a2f5c84c5a771106c93a43a9fbc843a6a8f4532592fa89680985e76c7ef7b6bbf032db3e4ae37bd8487e875e4d1abad169c45a24ef11db50c4f39f6e94724f6601adce70451dc9066f0b60c282f8328c107b2a72"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x200a}}, {0xc2, &(0x7f0000000780)=@string={0xc2, 0x3, "1f9c5b45bd94b1d34c90b6b1015851f3cafb6cdc7d20391915cb2f6094532290c7065dee8c56c91cfcb6065ae9ac13b15a26799df6aa11164cef94737278db480251bf404eab1311276d1c8a13c1cdf7cba75f761bede8aa6d537fecfde2d49e894ea3132c9368029fa6e5b8ceb285bc8c6482baf6a157b9f4acc632efb2ec48f8bf9d365f01a31eadc18f438255f4225a3c958e144a24c764dcc86436400f2fad9ea47f45a17beeb5eaa31f5d315abf91bd2a4ea5a1c2d5d86c28072a40aedc"}}, {0x34, &(0x7f0000000880)=@string={0x34, 0x3, "8ea8da8cda848a287e77886a41bc37d9b6c63313ae3c96263434dfe87f05c0a45abaa76f201ae1f1a876c8347cfae44bdddc"}}, {0x97, &(0x7f00000008c0)=@string={0x97, 0x3, "380d25585752d2c51d9a6f303eee4918b5f064ca7791f64a95dc28f9f71044e28a85c142628eb3cab7b71cc162a6f1f6e6bae31926e1f01e1d999b246427db695dec3bcd464b1989a39a88401b5f24f69a735dca243927d07bf16b42609b45c37949bad7fc299820959a06c0b85a1bf6b3a502524eaac43bb3da4a4b88b5bcbe431e9e5bcf0c7378de6f39eea41ace2f262240d35e"}}, {0x2d, &(0x7f0000000980)=@string={0x2d, 0x3, "fa41fcfd808b112b47da6c42ad6075cd0ca77a058ba9a3cf85c8727cf8afbd7d8d00a9726c91eb99747520"}}]}) 516.256729ms ago: executing program 4 (id=5111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000100000000000000840005"], 0x13c}}, 0x20040880) 422.341562ms ago: executing program 2 (id=5112): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83f, 0x800, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000006c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0) dup2(r6, r4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 346.718158ms ago: executing program 7 (id=5113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) (async) getuid() writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x44084) (async) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (async) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {0x4000, 0x7}, 0x28, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x233, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x41df1fd6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7fff, 0x7, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x72e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x36, 0x118, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000002c00)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x81, 0xa, 0x3d, 0x7, 0x80000000, 0x7f, 0xb, 0x9, 0x0, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x2, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x0, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x20000004, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x5, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x300, 0x2, 0x80000004, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x6, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7fff, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x5, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0xa, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x8, 0x2, 0xfd, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x89, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x2, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c) (async) munlockall() (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 310.58218ms ago: executing program 4 (id=5114): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x5, 0x0, 0x7ff, 0x9, 0xfffffffb, 0x3}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000340)=0x6) 232.341534ms ago: executing program 2 (id=5115): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000061626364656667686905532354e3a9b26f2cb318d06a6b6c6d6e6f70717273747541b1b7dd4cdf85f45d613141a9841da3b63a01d93cfde447587d8228883871859ab644f04063b310e905c7067aed7c0a0a494cd9fbeccfd918f7aa5ff3f616d8e34fe7783fcab6483bb8e251ad118f66a123ff57a7af47f0b7f24b341d427c29050052bd7cad1f15a34dde17cea9760f69a28f49730cfe8f814c46ddd263c3fbcbc2134d3b7b67f61d8221c4418f2e54cbf49ac83329098c0b8d96ae277ddc3b090a4bad91e854996b2275cafe2eebf9d3d7a983db6964245bd7ea02c2cb270a3cce5000808e565a99492a1584"], 0x29, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000000c0)='/$%{(\x00', &(0x7f0000000100)) r1 = io_uring_setup(0x45b8, &(0x7f0000000440)={0x0, 0x0, 0x40, 0x1, 0xd4}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, 0x16, 0xa01, 0x70bd2d, 0x3, {0xfd}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x40040) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1d, 0x20000038, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0xfffffffffffffffc, {0x0, 0x0, 0x3}}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x1, {0x2, 0x1, 0x4}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x3, {0x0, 0xff}, 0xfe}, 0x18) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x305e, &(0x7f00000005c0)={0x0, 0xbc23, 0x10000, 0x2, 0x403f, 0x0, r8}, &(0x7f0000000080), &(0x7f00000001c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r10, 0xad91aeae55e27525, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x10) socket$inet6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r13], 0x50}, 0x1, 0xba01}, 0x0) 30.396055ms ago: executing program 6 (id=5116): mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x6, 0x4, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000054d000/0x4000)=nil, 0x4000, &(0x7f0000000480)='/dev/video#\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x4, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x4) syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b5000040"]) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000200000000100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r8, &(0x7f0000000580)=[{&(0x7f0000000100)="cb", 0x1}, {&(0x7f00000004c0)="8871cf0a45da7250f85714a92ca960e482041f3e5b58cce68a4a6e", 0x1b}, {&(0x7f0000000500)="9e85b1ca1f68de152a8b8dc0b80f6b9f1d5d3f469f6dd07c618ae6787a7a13dea1d129b125990655dbae555a36fba1e477cc9eb87e0247da4fbc91ac184437e1a9af5f8404ab4a2ad4e91fa95fc85634ce1c9f1e2a83bfb7be6bc16c301244640b1ea188721ae196e6e41de7e75f2ceb9baa1a3bc4", 0x75}], 0x3, 0x5) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x500400, 0x10) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000000c0)=')\x00', &(0x7f0000000200)='./file0\x00', r9) fcntl$getownex(r0, 0x10, &(0x7f0000000440)) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) pread64(r6, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 0s ago: executing program 4 (id=5117): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x4c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x38, 0xde, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@loopback}, @generic="5f12252328746f48acb199ea679e8504731c3328f36c8170b197a1522e2ca616"]}]}, 0x4c}}, 0x20040040) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)="6bfa9f399d24e0b958bfe2bf4cd494bf85056c019d5a767dcb6d0490cee343029ca14b59a68286573b8cb0ce7e0b787b96bf257a6355dbb288f8a076001874588f061a127da3e0a3839c53e24160517f661d4f7a87150d8dd17772a9191cfe3ccf9680574004bda989890b598e036e68be4086173e9e80fc4a89418fc524bd7f263b78ebb1dad09ebf4f551aa9c154183fe49f4d8c199611047d9ec6106fa2d84ccfb7e9", 0xa4}], 0x1) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x10, 0x4, 0x0, 0x800000}}, &(0x7f0000000180), 0x1000) kernel console output (not intermixed with test programs): point 0x81 has invalid wMaxPacketSize 0 [ 1791.202790][ T978] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1791.212076][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.223722][ T978] usb 3-1: config 0 descriptor?? [ 1791.263276][T25763] input: syz1 as /devices/virtual/input/input160 [ 1791.277150][ T5939] usb 5-1: MIDIStreaming interface descriptor not found [ 1791.433220][T24814] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1791.466632][ T5939] usb 5-1: USB disconnect, device number 68 [ 1791.598375][T24814] usb 6-1: config 0 has no interfaces? [ 1791.639846][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 1791.663246][T24814] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1791.666545][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1791.678090][T24814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.705165][T24814] usb 6-1: Product: syz [ 1791.713236][T24814] usb 6-1: Manufacturer: syz [ 1791.729961][T24814] usb 6-1: SerialNumber: syz [ 1791.771939][ T978] usb 3-1: USB disconnect, device number 86 [ 1791.826619][T24814] usb 6-1: config 0 descriptor?? [ 1792.163131][ T5939] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1792.372902][T24814] usb 6-1: USB disconnect, device number 94 [ 1792.462546][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1792.554375][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1792.577427][ T5939] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1792.651620][ T5939] usb 5-1: config 0 has no interface number 0 [ 1792.680712][ T5939] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1792.723758][ T5939] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1792.760092][ T5939] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1792.790758][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4676'. [ 1792.826791][ T5939] usb 5-1: language id specifier not provided by device, defaulting to English [ 1792.865566][ T5939] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1792.911104][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1792.939142][ T5939] usb 5-1: Product: syz [ 1792.958459][ T5939] usb 5-1: SerialNumber: syz [ 1792.990947][ T5939] usb 5-1: config 0 descriptor?? [ 1793.081877][T25795] kAFS: unable to lookup cell '' [ 1793.202759][ T978] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1793.213480][T25795] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1793.226737][T25795] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1793.241356][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1793.257045][ T5939] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input161 [ 1793.266222][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1793.266243][ T30] audit: type=1800 audit(1751792356.230:7177): pid=25795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4680" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1793.319775][ T5939] usb 5-1: USB disconnect, device number 69 [ 1793.352725][ T978] usb 7-1: Using ep0 maxpacket: 8 [ 1793.375803][ T978] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1793.411135][ T978] usb 7-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 1793.449861][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.504417][ T978] usb 7-1: config 0 descriptor?? [ 1793.522814][ T978] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input162 [ 1793.763981][T25790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.787689][T25790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.817889][ T5939] usb 7-1: USB disconnect, device number 22 [ 1793.825761][ T5204] bcm5974 7-1:0.0: could not read from device [ 1793.879993][T23710] bcm5974 7-1:0.0: could not read from device [ 1794.022704][T23710] udevd[23710]: Error opening device "/dev/input/event4": No such device [ 1794.089503][T23710] udevd[23710]: Unable to EVIOCGABS device "/dev/input/event4" [ 1794.162777][T23710] udevd[23710]: Unable to EVIOCGABS device "/dev/input/event4" [ 1794.181556][T23710] udevd[23710]: Unable to EVIOCGABS device "/dev/input/event4" [ 1794.210830][T23710] udevd[23710]: Unable to EVIOCGABS device "/dev/input/event4" [ 1794.499178][T16255] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1794.652604][T16255] usb 5-1: Using ep0 maxpacket: 16 [ 1794.670827][T16255] usb 5-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1794.670867][T16255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.670890][T16255] usb 5-1: Product: syz [ 1794.670909][T16255] usb 5-1: Manufacturer: syz [ 1794.670925][T16255] usb 5-1: SerialNumber: syz [ 1794.676397][T16255] usb 5-1: config 0 descriptor?? [ 1795.098473][T16255] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1795.098701][T16255] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 1795.119956][T16255] usb 5-1: USB disconnect, device number 70 [ 1796.502901][ T978] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1796.666962][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 1796.689770][ T978] usb 5-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 1796.734330][ T978] usb 5-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.793711][ T978] usb 5-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.854973][ T978] usb 5-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1796.911698][ T978] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1796.932931][ T978] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1796.962525][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.045808][T24814] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1797.228243][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.248800][T24814] usb 3-1: Using ep0 maxpacket: 32 [ 1797.292832][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.293875][T24814] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1797.349885][T24814] usb 3-1: config 0 has no interface number 0 [ 1797.392798][T24814] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1797.428622][T24814] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1797.459095][ T978] usbhid 5-1:64.0: can't add hid device: -71 [ 1797.460968][T24814] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1797.490158][ T978] usbhid 5-1:64.0: probe with driver usbhid failed with error -71 [ 1797.508209][T24814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.530007][T24814] usb 3-1: Product: syz [ 1797.546987][T24814] usb 3-1: Manufacturer: syz [ 1797.551714][T24814] usb 3-1: SerialNumber: syz [ 1797.558881][ T978] usb 5-1: USB disconnect, device number 71 [ 1797.611530][T24814] usb 3-1: config 0 descriptor?? [ 1798.069055][T24814] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1798.069359][T24814] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1798.105881][T24814] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1798.145441][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1798.159431][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1798.160558][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1798.164744][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1798.166414][T24814] usb 3-1: USB disconnect, device number 87 [ 1798.172958][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1798.249561][T23765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1798.259000][T23765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1798.263964][T23765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1798.290663][T23765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1798.291403][T23765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1798.450706][T21758] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.463979][T21758] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1798.562064][T21758] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.575223][T21758] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1798.779380][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1798.786722][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.882000][T21758] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.899840][T21758] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1799.170009][T21758] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.190598][T21758] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1799.647147][T25867] chnl_net:caif_netlink_parms(): no params data found [ 1799.722635][T24814] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1799.875276][T24814] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1799.925626][T24814] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1799.962698][T16244] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1799.988409][T24814] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1800.052821][T24814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.073991][T24814] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1800.100141][T24814] usb 7-1: config 0 has no interface number 0 [ 1800.106778][T24814] usb 7-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1800.127209][T16244] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.150823][T16244] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.186134][T16244] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1800.199219][T24814] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1800.204567][T16244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.210408][T24814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.231842][T16244] usb 3-1: Product: syz [ 1800.243257][T16244] usb 3-1: Manufacturer: syz [ 1800.244247][T24814] usb 7-1: Product: syz [ 1800.249169][T16244] usb 3-1: SerialNumber: syz [ 1800.252091][T24814] usb 7-1: Manufacturer: syz [ 1800.268578][T24814] usb 7-1: SerialNumber: syz [ 1800.324919][T24814] usb 7-1: config 0 descriptor?? [ 1800.366011][ T5860] Bluetooth: hci1: command tx timeout [ 1800.477070][T16244] usb 3-1: 0:2 : does not exist [ 1800.487377][T16244] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1800.576609][T24814] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1800.577889][T16244] usb 3-1: USB disconnect, device number 88 [ 1800.614978][T24814] usb 7-1: MIDIStreaming interface descriptor not found [ 1800.757531][T24814] usb 7-1: USB disconnect, device number 23 [ 1800.817322][T23727] udevd[23727]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1800.930827][T25774] udevd[25774]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1801.136181][T21758] bond0 (unregistering): Released all slaves [ 1801.192050][T25906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1801.356896][ T30] audit: type=1326 audit(1751792364.330:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25905 comm="syz.6.4711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x0 [ 1801.464463][T21758] bond1 (unregistering): Released all slaves [ 1801.695718][T21758] bond2 (unregistering): Released all slaves [ 1801.886554][T25867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.886720][T25867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.886912][T25867] bridge_slave_0: entered allmulticast mode [ 1801.889577][T25867] bridge_slave_0: entered promiscuous mode [ 1801.918587][T21758] : left promiscuous mode [ 1801.945770][T25867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.945959][T25867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.946200][T25867] bridge_slave_1: entered allmulticast mode [ 1801.976145][T25867] bridge_slave_1: entered promiscuous mode [ 1802.137141][T21758] _Z`Ԁ@: left promiscuous mode [ 1802.194042][T25922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1802.237554][T25867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1802.307500][T25867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1802.367602][T21758] tipc: Left network mode [ 1802.443170][ T5860] Bluetooth: hci1: command tx timeout [ 1802.575581][T25867] team0: Port device team_slave_0 added [ 1802.676901][T25867] team0: Port device team_slave_1 added [ 1802.743595][T25946] netlink: 'syz.6.4718': attribute type 2 has an invalid length. [ 1802.755167][T25946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4718'. [ 1802.897504][T25867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1802.926658][T25867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.967323][T25867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1803.227467][T25867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1803.268827][T25867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1803.302608][T16255] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1803.408736][T25867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.528225][T16255] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1803.582525][T16255] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 1803.621510][T16255] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 1803.634391][T16255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.647062][T16255] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1803.647196][T21758] hsr_slave_0: left promiscuous mode [ 1803.656375][T16255] usb 5-1: config 0 has no interface number 0 [ 1803.656423][T16255] usb 5-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1803.691128][T16255] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1803.700705][T21758] hsr_slave_1: left promiscuous mode [ 1803.708886][T16255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.761436][T16255] usb 5-1: Product: syz [ 1803.768873][T16255] usb 5-1: Manufacturer: syz [ 1803.777733][T16255] usb 5-1: SerialNumber: syz [ 1803.798813][T21758] veth1_macvtap: left promiscuous mode [ 1803.799394][T16255] usb 5-1: config 0 descriptor?? [ 1803.804783][T21758] veth0_macvtap: left promiscuous mode [ 1803.817373][T21758] veth1_vlan: left promiscuous mode [ 1804.040831][T16255] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1804.061104][T16255] usb 5-1: MIDIStreaming interface descriptor not found [ 1804.179451][T16255] usb 5-1: USB disconnect, device number 72 [ 1804.523054][ T5860] Bluetooth: hci1: command tx timeout [ 1805.057240][T16255] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1805.217263][T16255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.240790][T16255] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1805.254410][T16255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1805.266249][T16255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1805.276562][T16255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1805.299735][T16255] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1805.309231][T16255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1805.317722][T16255] usb 5-1: Product: syz [ 1805.321990][T16255] usb 5-1: Manufacturer: syz [ 1805.326745][T16255] usb 5-1: SerialNumber: syz [ 1805.357215][T16255] usb 5-1: config 0 descriptor?? [ 1805.606631][T16255] radio-si470x 5-1:0.0: DeviceID=0xd318 ChipID=0x30a9 [ 1806.153079][T16255] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1806.162584][T16255] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1806.173074][T16255] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1806.537173][T25867] hsr_slave_0: entered promiscuous mode [ 1806.554591][T25867] hsr_slave_1: entered promiscuous mode [ 1806.612421][ T5860] Bluetooth: hci1: command tx timeout [ 1807.188300][T21758] IPVS: stop unused estimator thread 0... [ 1807.464188][T26005] FAULT_INJECTION: forcing a failure. [ 1807.464188][T26005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.494060][T26005] CPU: 1 UID: 0 PID: 26005 Comm: syz.2.4732 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1807.494089][T26005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1807.494101][T26005] Call Trace: [ 1807.494109][T26005] [ 1807.494118][T26005] dump_stack_lvl+0x189/0x250 [ 1807.494170][T26005] ? __pfx____ratelimit+0x10/0x10 [ 1807.494209][T26005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.494230][T26005] ? __pfx__printk+0x10/0x10 [ 1807.494267][T26005] should_fail_ex+0x414/0x560 [ 1807.494303][T26005] _copy_to_user+0x31/0xb0 [ 1807.494330][T26005] simple_read_from_buffer+0xe1/0x170 [ 1807.494431][T26005] proc_fail_nth_read+0x1df/0x250 [ 1807.494506][T26005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1807.494535][T26005] ? rw_verify_area+0x258/0x650 [ 1807.494561][T26005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1807.494589][T26005] vfs_read+0x200/0x980 [ 1807.494614][T26005] ? __pfx___mutex_lock+0x10/0x10 [ 1807.494660][T26005] ? __pfx_vfs_read+0x10/0x10 [ 1807.494682][T26005] ? __fget_files+0x2a/0x420 [ 1807.494711][T26005] ? __fget_files+0x3a0/0x420 [ 1807.494734][T26005] ? __fget_files+0x2a/0x420 [ 1807.494766][T26005] ksys_read+0x145/0x250 [ 1807.494789][T26005] ? __pfx_ksys_read+0x10/0x10 [ 1807.494807][T26005] ? rcu_is_watching+0x15/0xb0 [ 1807.494856][T26005] ? do_syscall_64+0xbe/0x3b0 [ 1807.494879][T26005] do_syscall_64+0xfa/0x3b0 [ 1807.494896][T26005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.494932][T26005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.494952][T26005] ? clear_bhb_loop+0x60/0xb0 [ 1807.494977][T26005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.494995][T26005] RIP: 0033:0x7f1844f8d33c [ 1807.495014][T26005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1807.495031][T26005] RSP: 002b:00007f1845e6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1807.495051][T26005] RAX: ffffffffffffffda RBX: 00007f18451b5fa0 RCX: 00007f1844f8d33c [ 1807.495065][T26005] RDX: 000000000000000f RSI: 00007f1845e6f0a0 RDI: 0000000000000004 [ 1807.495077][T26005] RBP: 00007f1845e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.495089][T26005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.495100][T26005] R13: 0000000000000000 R14: 00007f18451b5fa0 R15: 00007f18452dfa28 [ 1807.495129][T26005] [ 1807.733625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.828552][T16247] usb 5-1: USB disconnect, device number 73 [ 1808.203605][T16244] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1808.263604][T16255] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1808.424406][T16244] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1808.427282][T16255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.444350][T16244] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1808.452615][T16244] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1808.471724][T16244] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.475892][T16255] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1808.552884][T16244] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1808.552920][T16244] usb 7-1: config 0 has no interface number 0 [ 1808.552969][T16244] usb 7-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1808.609308][T16255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.632488][T16244] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1808.633845][T16255] usb 3-1: config 0 descriptor?? [ 1808.652338][T16244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.678142][T16255] pwc: Askey VC010 type 2 USB webcam detected. [ 1808.682557][T16244] usb 7-1: Product: syz [ 1808.693756][T16244] usb 7-1: Manufacturer: syz [ 1808.698432][T16244] usb 7-1: SerialNumber: syz [ 1808.725901][T16244] usb 7-1: config 0 descriptor?? [ 1808.869696][T25867] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1808.911495][T16255] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1808.925336][T25867] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1808.927536][T16255] pwc: recv_control_msg error -71 req 02 val 2700 [ 1808.969818][T16255] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1809.023746][T16244] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1809.038156][T16255] pwc: recv_control_msg error -71 req 04 val 1000 [ 1809.042118][T16244] usb 7-1: MIDIStreaming interface descriptor not found [ 1809.059288][T25867] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1809.070019][T16255] pwc: recv_control_msg error -71 req 04 val 1300 [ 1809.111889][T16255] pwc: recv_control_msg error -71 req 04 val 1400 [ 1809.119727][T16255] pwc: recv_control_msg error -71 req 02 val 2000 [ 1809.137107][T16255] pwc: recv_control_msg error -71 req 02 val 2100 [ 1809.242245][T16244] usb 7-1: USB disconnect, device number 24 [ 1809.248424][T25867] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1809.336105][T16255] pwc: recv_control_msg error -71 req 04 val 1500 [ 1809.351169][T25774] udevd[25774]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1809.355779][T16255] pwc: recv_control_msg error -71 req 02 val 2500 [ 1809.471583][T16255] pwc: recv_control_msg error -71 req 02 val 2400 [ 1809.490795][T16255] pwc: recv_control_msg error -71 req 02 val 2600 [ 1809.513760][T16255] pwc: recv_control_msg error -71 req 02 val 2900 [ 1809.537241][T16255] pwc: recv_control_msg error -71 req 02 val 2800 [ 1809.569638][T16255] pwc: recv_control_msg error -71 req 04 val 1100 [ 1809.607239][T16255] pwc: recv_control_msg error -71 req 04 val 1200 [ 1809.667180][T16255] pwc: Registered as video103. [ 1809.715443][T16255] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input164 [ 1809.832428][T25867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.879479][T16255] usb 3-1: USB disconnect, device number 89 [ 1809.974037][T25867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.020396][T16244] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1810.057895][T23364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.065171][T23364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.170096][T23364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.177424][T23364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.237342][T16244] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 1810.257167][T16244] usb 7-1: config 6 has no interface number 0 [ 1810.279831][T16244] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1810.354850][T16244] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1810.379336][T16244] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1810.434820][T16244] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1810.468801][T16244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.490805][T25867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1810.507396][T16244] usb 7-1: Product: syz [ 1810.513785][T16244] usb 7-1: Manufacturer: syz [ 1810.540323][T16244] usb 7-1: SerialNumber: syz [ 1810.555204][T16244] hso 7-1:6.2: Failed to find INT IN ep [ 1810.755624][ T978] usb 7-1: USB disconnect, device number 25 [ 1810.826885][T25867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.039595][T25867] veth0_vlan: entered promiscuous mode [ 1811.096215][T25867] veth1_vlan: entered promiscuous mode [ 1811.253028][ T978] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1811.340015][T25867] veth0_macvtap: entered promiscuous mode [ 1811.427617][T25867] veth1_macvtap: entered promiscuous mode [ 1811.442770][ T978] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1811.467858][T25867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.507427][ T978] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1811.511776][T25867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.552113][T25867] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.578387][ T978] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1811.589760][T25867] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.611539][T25867] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.622575][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.632513][T25867] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.673084][T26069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1811.693880][ T978] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1812.097397][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.136015][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.176639][ T978] usb 5-1: USB disconnect, device number 74 [ 1812.422898][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.482505][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.892993][T24814] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1813.003111][T26102] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1813.043392][T26101] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1813.108614][T24814] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1813.167849][T24814] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1813.220890][T24814] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1813.259904][T24814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.280441][T24814] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1813.328568][T24814] usb 7-1: config 0 has no interface number 0 [ 1813.351650][T24814] usb 7-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1813.423774][T24814] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1813.443177][T24814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.480752][T24814] usb 7-1: Product: syz [ 1813.487762][T24814] usb 7-1: Manufacturer: syz [ 1813.502599][T24814] usb 7-1: SerialNumber: syz [ 1813.605155][T24814] usb 7-1: config 0 descriptor?? [ 1813.714851][ T30] audit: type=1800 audit(1751792376.680:7179): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4750" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1813.845203][T24814] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1813.942319][T24814] usb 7-1: MIDIStreaming interface descriptor not found [ 1814.235045][T24814] usb 7-1: USB disconnect, device number 26 [ 1814.352606][ T5939] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1814.382000][T23730] udevd[23730]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1814.602595][ T5939] usb 3-1: Invalid ep0 maxpacket: 32 [ 1814.770141][ T5939] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 1814.968731][ T5939] usb 3-1: Invalid ep0 maxpacket: 32 [ 1814.997082][ T5939] usb usb3-port1: attempt power cycle [ 1815.029083][T26150] fuse: Bad value for 'group_id' [ 1815.090780][T26150] fuse: Bad value for 'group_id' [ 1815.382676][ T5939] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 1815.473245][ T5939] usb 3-1: Invalid ep0 maxpacket: 32 [ 1815.616302][ T5939] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 1815.671495][ T5939] usb 3-1: Invalid ep0 maxpacket: 32 [ 1815.698512][ T5939] usb usb3-port1: unable to enumerate USB device [ 1817.663068][T16244] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1817.812612][ T978] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1817.822594][T16244] usb 6-1: Using ep0 maxpacket: 32 [ 1817.831783][T16244] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1817.841030][T16244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.849216][T16244] usb 6-1: Product: syz [ 1817.853490][T16244] usb 6-1: Manufacturer: syz [ 1817.858098][T16244] usb 6-1: SerialNumber: syz [ 1817.866344][T16244] usb 6-1: config 0 descriptor?? [ 1817.872724][T23940] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1817.888484][T16244] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1817.975160][ T978] usb 5-1: config 0 has an invalid interface number: 44 but max is 1 [ 1817.983748][ T978] usb 5-1: config 0 has an invalid interface number: 92 but max is 1 [ 1817.991930][ T978] usb 5-1: config 0 has no interface number 0 [ 1817.998265][ T978] usb 5-1: config 0 has no interface number 1 [ 1818.004609][ T978] usb 5-1: config 0 interface 44 has no altsetting 0 [ 1818.011493][ T978] usb 5-1: config 0 interface 92 has no altsetting 0 [ 1818.020620][ T978] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 1818.029906][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.038459][ T978] usb 5-1: Product: syz [ 1818.042756][ T978] usb 5-1: Manufacturer: syz [ 1818.047443][ T978] usb 5-1: SerialNumber: syz [ 1818.055411][ T978] usb 5-1: config 0 descriptor?? [ 1818.060575][ T978] usb 5-1: Interface #92 referenced by multiple IADs [ 1818.072133][T23940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1818.083640][T23940] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 1818.093286][T23940] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1818.100914][T23940] usb 3-1: can't read configurations, error -61 [ 1818.232803][T23940] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1818.275167][ T978] ftdi_sio 5-1:0.44: FTDI USB Serial Device converter detected [ 1818.285346][ T978] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 1818.302328][ T978] ftdi_sio 5-1:0.92: FTDI USB Serial Device converter detected [ 1818.318126][ T978] ftdi_sio ttyUSB1: unknown device type: 0x8524 [ 1818.329303][ T978] usb 5-1: USB disconnect, device number 75 [ 1818.348088][ T978] ftdi_sio 5-1:0.44: device disconnected [ 1818.365999][ T978] ftdi_sio 5-1:0.92: device disconnected [ 1818.387160][T23940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1818.400933][T23940] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 1818.415014][T23940] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1818.424429][T23940] usb 3-1: can't read configurations, error -61 [ 1818.432234][T23940] usb usb3-port1: attempt power cycle [ 1818.782965][T23940] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1818.834349][T23940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1818.849407][T23940] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 1818.880955][T23940] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1818.894959][T26229] fuse: Bad value for 'fd' [ 1818.911306][T26228] fuse: Bad value for 'fd' [ 1818.917132][T23940] usb 3-1: can't read configurations, error -61 [ 1819.133531][T23940] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1819.176137][T23940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1819.196168][T23940] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 1819.232642][T23940] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1819.243690][T23940] usb 3-1: can't read configurations, error -61 [ 1819.271940][T23940] usb usb3-port1: unable to enumerate USB device [ 1819.305713][T16244] gspca_topro: Sensor cx0342 [ 1819.692767][T24814] usb 6-1: USB disconnect, device number 95 [ 1820.116643][T26245] netlink: 'syz.4.4781': attribute type 30 has an invalid length. [ 1820.129941][T26245] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4781'. [ 1820.660190][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.691768][T26261] xt_nat: multiple ranges no longer supported [ 1820.703440][T26261] ip6t_srh: unknown srh match flags 5040 [ 1820.841816][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.984533][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.096622][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.484887][ T36] bridge_slave_1: left allmulticast mode [ 1821.500908][ T36] bridge_slave_1: left promiscuous mode [ 1821.518013][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.544606][ T36] bridge_slave_0: left allmulticast mode [ 1821.554181][ T36] bridge_slave_0: left promiscuous mode [ 1821.567830][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.604196][T23940] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1821.787844][T23940] usb 3-1: Using ep0 maxpacket: 8 [ 1821.797146][T23765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1821.804447][T23940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1821.805186][T23940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1821.833967][T23765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1821.843235][T23765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1821.854015][T23765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1821.861680][T23765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1821.936353][T23940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1822.003400][T23940] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1822.018557][T23940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.027153][T23940] usb 3-1: Product: syz [ 1822.031548][T23940] usb 3-1: Manufacturer: syz [ 1822.076471][T23940] usb 3-1: SerialNumber: syz [ 1822.116605][T23940] usb 3-1: config 0 descriptor?? [ 1822.163227][T23940] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 1822.172828][T16255] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1822.389304][T16255] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1822.401920][T26267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.431485][T16255] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1822.449937][T26267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.475607][T26267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.489289][T26267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.507115][T16255] usb 7-1: config 0 has an invalid interface number: 2 but max is -1 [ 1822.519962][T23940] usb 3-1: USB disconnect, device number 98 [ 1822.570578][T16255] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.628386][T16255] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1822.647114][T16255] usb 7-1: config 0 has no interface number 0 [ 1822.659840][T16255] usb 7-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1822.713459][T16255] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1822.722989][T16255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.747954][T16255] usb 7-1: Product: syz [ 1822.766123][T16255] usb 7-1: Manufacturer: syz [ 1822.793117][ T30] audit: type=1326 audit(1751792385.760:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.0.4793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b2b78e929 code=0x0 [ 1822.816126][T16255] usb 7-1: SerialNumber: syz [ 1822.875255][T16255] usb 7-1: config 0 descriptor?? [ 1823.108255][T16255] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1823.135336][T16255] usb 7-1: MIDIStreaming interface descriptor not found [ 1823.252799][T16255] usb 7-1: USB disconnect, device number 27 [ 1823.254212][T26294] kernel read not supported for file /eth0 (pid: 26294 comm: syz.2.4794) [ 1823.336994][ T30] audit: type=1800 audit(1751792386.310:7181): pid=26294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4794" name="eth0" dev="mqueue" ino=98788 res=0 errno=0 [ 1823.551899][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.663673][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.698480][ T36] bond0 (unregistering): Released all slaves [ 1823.962857][ T5860] Bluetooth: hci1: command tx timeout [ 1824.181461][ T5939] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1824.365649][ T5939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1824.406106][ T5939] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.421417][ T5939] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1824.452599][T24814] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1824.474731][ T5939] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1824.492523][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.512830][ T5939] usb 7-1: Product: syz [ 1824.520049][ T5939] usb 7-1: Manufacturer: syz [ 1824.544353][ T5939] usb 7-1: SerialNumber: syz [ 1824.632370][T24814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.657148][T24814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1824.668528][T24814] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1824.681046][T24814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1824.701303][T24814] usb 3-1: SerialNumber: syz [ 1824.902378][ T36] hsr_slave_0: left promiscuous mode [ 1824.943471][ T36] hsr_slave_1: left promiscuous mode [ 1824.955211][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.970245][T26312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (10 ns). Using initial count to start timer. [ 1824.996349][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.096803][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.104931][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.175548][ T36] veth1_macvtap: left promiscuous mode [ 1825.182301][ T36] veth0_macvtap: left promiscuous mode [ 1825.191248][ T36] veth1_vlan: left promiscuous mode [ 1825.197062][ T36] veth0_vlan: left promiscuous mode [ 1826.042790][ T5860] Bluetooth: hci1: command tx timeout [ 1827.035781][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1827.204681][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1827.596871][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 1827.609413][T26357] netlink: 'syz.4.4808': attribute type 20 has an invalid length. [ 1827.618198][T26357] netlink: 'syz.4.4808': attribute type 21 has an invalid length. [ 1828.010620][T24814] usb 3-1: 0:2 : does not exist [ 1828.104315][T24814] usb 3-1: USB disconnect, device number 99 [ 1828.132737][ T5860] Bluetooth: hci1: command tx timeout [ 1828.196657][T23710] udevd[23710]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.423199][ T5939] usb 7-1: 0:2 : does not exist [ 1828.466610][ T5939] usb 7-1: USB disconnect, device number 28 [ 1828.523180][T16272] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1828.539673][T23727] udevd[23727]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.585752][T26275] chnl_net:caif_netlink_parms(): no params data found [ 1828.616505][T24814] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1828.743353][T16272] usb 5-1: Using ep0 maxpacket: 32 [ 1828.750823][T16272] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1828.750857][T16272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.756224][T16272] usb 5-1: config 0 descriptor?? [ 1828.770077][T16272] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1828.838055][T24814] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.838166][T24814] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1828.838196][T24814] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1828.838240][T24814] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1828.838264][T24814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.889622][T24814] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1828.890779][T24814] usb 3-1: invalid MIDI out EP 0 [ 1829.030719][T23730] udevd[23730]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1829.072088][T24814] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1829.095919][T26275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.119273][T26381] delete_channel: no stack [ 1829.128250][T16244] usb 3-1: USB disconnect, device number 100 [ 1829.161176][T26275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.161550][T26275] bridge_slave_0: entered allmulticast mode [ 1829.190982][T26275] bridge_slave_0: entered promiscuous mode [ 1829.196931][T26275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.197038][T26275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.197202][T26275] bridge_slave_1: entered allmulticast mode [ 1829.201727][T26275] bridge_slave_1: entered promiscuous mode [ 1829.331567][T26275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.337047][T26275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.593817][T26275] team0: Port device team_slave_0 added [ 1829.658053][T26387] FAULT_INJECTION: forcing a failure. [ 1829.658053][T26387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1829.658846][T26275] team0: Port device team_slave_1 added [ 1829.678819][T26387] CPU: 0 UID: 0 PID: 26387 Comm: syz.0.4812 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1829.678852][T26387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1829.678866][T26387] Call Trace: [ 1829.678876][T26387] [ 1829.678885][T26387] dump_stack_lvl+0x189/0x250 [ 1829.678922][T26387] ? __pfx____ratelimit+0x10/0x10 [ 1829.678958][T26387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1829.678984][T26387] ? __pfx__printk+0x10/0x10 [ 1829.679011][T26387] ? __might_fault+0xb0/0x130 [ 1829.679131][T26387] should_fail_ex+0x414/0x560 [ 1829.679170][T26387] _copy_from_user+0x2d/0xb0 [ 1829.679199][T26387] __sys_sendto+0x25c/0x520 [ 1829.679252][T26387] ? __pfx___sys_sendto+0x10/0x10 [ 1829.679275][T26387] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1829.679313][T26387] ? __fget_files+0x3a0/0x420 [ 1829.679356][T26387] ? ksys_write+0x22a/0x250 [ 1829.679391][T26387] ? __pfx_ksys_write+0x10/0x10 [ 1829.679414][T26387] ? rcu_is_watching+0x15/0xb0 [ 1829.679447][T26387] __x64_sys_sendto+0xde/0x100 [ 1829.679477][T26387] do_syscall_64+0xfa/0x3b0 [ 1829.679498][T26387] ? lockdep_hardirqs_on+0x9c/0x150 [ 1829.679518][T26387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.679540][T26387] ? clear_bhb_loop+0x60/0xb0 [ 1829.679566][T26387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.679587][T26387] RIP: 0033:0x7f6b2b78e929 [ 1829.679608][T26387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1829.679627][T26387] RSP: 002b:00007f6b2c670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1829.679650][T26387] RAX: ffffffffffffffda RBX: 00007f6b2b9b5fa0 RCX: 00007f6b2b78e929 [ 1829.679666][T26387] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000005 [ 1829.679679][T26387] RBP: 00007f6b2c670090 R08: 0000200000000140 R09: 0000000000000014 [ 1829.679693][T26387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.679706][T26387] R13: 0000000000000000 R14: 00007f6b2b9b5fa0 R15: 00007f6b2badfa28 [ 1829.679739][T26387] [ 1829.735433][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1829.960389][T26389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1830.213234][ T5860] Bluetooth: hci1: command tx timeout [ 1830.317142][T26275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.327876][T26275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.398932][T26275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.472761][ T978] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1830.489409][T26275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.511509][T26275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.544408][T26275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.588618][T16244] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1830.634329][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.690180][ T978] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1830.730992][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.762971][T16244] usb 7-1: Using ep0 maxpacket: 16 [ 1830.780467][ T978] usb 3-1: config 0 descriptor?? [ 1830.786804][T16244] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.805482][T26275] hsr_slave_0: entered promiscuous mode [ 1830.821688][T16244] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1830.833218][T26275] hsr_slave_1: entered promiscuous mode [ 1830.859120][T16244] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1830.888470][T16244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.928190][T16244] usb 7-1: config 0 descriptor?? [ 1830.952081][T16244] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1831.183881][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 1831.205183][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1831.245675][ T978] usb 3-1: USB disconnect, device number 101 [ 1831.393179][T16244] usb 5-1: USB disconnect, device number 76 [ 1831.539661][T26413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4815'. [ 1831.631538][T26413] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1831.651846][T26413] input: syz1 as /devices/virtual/input/input166 [ 1831.766333][T26413] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4815'. [ 1831.887994][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4815'. [ 1832.059661][T26275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1832.072804][T16244] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1832.154403][T26275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1832.224917][T26275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1832.259274][T16244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.296090][T26275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1832.302912][T16244] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1832.335428][T16244] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 1832.348008][T26431] syz_tun: entered allmulticast mode [ 1832.370036][T16244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.457114][T16244] usb 3-1: config 0 descriptor?? [ 1832.659742][T26275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.735357][T26275] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.759433][T26424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.769631][T26424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.800764][T23367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.808037][T23367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.829550][T23367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.836747][T23367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1832.998854][T26275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.124029][T26430] syz_tun: left allmulticast mode [ 1833.131250][T26275] veth0_vlan: entered promiscuous mode [ 1833.157890][T26275] veth1_vlan: entered promiscuous mode [ 1833.416284][T24814] usb 7-1: USB disconnect, device number 29 [ 1833.580510][T26424] nvme_fabrics: missing parameter 'transport=%s' [ 1833.593812][T26275] veth0_macvtap: entered promiscuous mode [ 1833.619283][T26275] veth1_macvtap: entered promiscuous mode [ 1833.641365][T26275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1833.676071][T26275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1833.757749][T26424] nvme_fabrics: missing parameter 'nqn=%s' [ 1833.774123][T26275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.805880][T26275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.850751][T26275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.142762][T26275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.731891][T21758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1834.770245][T21758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.976698][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.015829][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1835.651606][T16244] usb 3-1: USB disconnect, device number 102 [ 1836.345843][T26493] FAULT_INJECTION: forcing a failure. [ 1836.345843][T26493] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.412826][T26493] CPU: 0 UID: 0 PID: 26493 Comm: syz.2.4829 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1836.412859][T26493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1836.412869][T26493] Call Trace: [ 1836.412876][T26493] [ 1836.412883][T26493] dump_stack_lvl+0x189/0x250 [ 1836.412908][T26493] ? __pfx____ratelimit+0x10/0x10 [ 1836.412933][T26493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1836.412951][T26493] ? __pfx__printk+0x10/0x10 [ 1836.412976][T26493] ? __pfx___might_resched+0x10/0x10 [ 1836.413026][T26493] ? fs_reclaim_acquire+0x7d/0x100 [ 1836.413115][T26493] should_fail_ex+0x414/0x560 [ 1836.413142][T26493] should_failslab+0xa8/0x100 [ 1836.413173][T26493] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1836.413192][T26493] ? ipmr_mfc_add+0x3c1/0x2850 [ 1836.413285][T26493] ipmr_mfc_add+0x3c1/0x2850 [ 1836.413322][T26493] ? ipmr_mfc_add+0x11b/0x2850 [ 1836.413356][T26493] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 1836.413376][T26493] ? __might_fault+0xb0/0x130 [ 1836.413413][T26493] ip_mroute_setsockopt+0xcf1/0xf60 [ 1836.413440][T26493] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1836.413476][T26493] do_ip_setsockopt+0xf11/0x2d00 [ 1836.413541][T26493] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1836.413585][T26493] ? aa_sk_perm+0x81e/0x950 [ 1836.413621][T26493] ? __pfx_aa_sk_perm+0x10/0x10 [ 1836.413640][T26493] ? __lock_acquire+0xab9/0xd20 [ 1836.413689][T26493] ip_setsockopt+0x66/0x110 [ 1836.413705][T26493] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1836.413725][T26493] do_sock_setsockopt+0x25a/0x3e0 [ 1836.413746][T26493] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1836.413768][T26493] ? __fget_files+0x2a/0x420 [ 1836.413795][T26493] __x64_sys_setsockopt+0x18b/0x220 [ 1836.413818][T26493] do_syscall_64+0xfa/0x3b0 [ 1836.413833][T26493] ? lockdep_hardirqs_on+0x9c/0x150 [ 1836.413858][T26493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.413872][T26493] ? clear_bhb_loop+0x60/0xb0 [ 1836.413890][T26493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.413904][T26493] RIP: 0033:0x7f1844f8e929 [ 1836.413918][T26493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1836.413931][T26493] RSP: 002b:00007f1845e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1836.413947][T26493] RAX: ffffffffffffffda RBX: 00007f18451b5fa0 RCX: 00007f1844f8e929 [ 1836.413958][T26493] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000004 [ 1836.413967][T26493] RBP: 00007f1845e6f090 R08: 000000000000003c R09: 0000000000000000 [ 1836.413976][T26493] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1836.413985][T26493] R13: 0000000000000000 R14: 00007f18451b5fa0 R15: 00007f18452dfa28 [ 1836.414007][T26493] [ 1837.185672][ T30] audit: type=1800 audit(1751792400.160:7182): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4830" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1837.719851][T26508] overlayfs: missing 'lowerdir' [ 1838.105145][T26513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1839.102823][T24224] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1839.282507][T24224] usb 7-1: Using ep0 maxpacket: 16 [ 1839.311026][T24224] usb 7-1: config 4 has an invalid descriptor of length 127, skipping remainder of the config [ 1839.348916][T24224] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1839.390987][T24224] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1839.443473][T24224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.479417][T24224] usb 7-1: Product: syz [ 1839.486444][T24224] usb 7-1: Manufacturer: syz [ 1839.510529][T24224] usb 7-1: SerialNumber: syz [ 1839.762053][T26526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.803810][T26526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.886515][T26526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.910564][T26526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.956973][T24224] usb 7-1: USB disconnect, device number 30 [ 1840.031419][T26544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4836'. [ 1840.713217][ T978] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1840.988174][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 1841.110066][ T978] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1841.122745][ T978] usb 5-1: config 0 has no interface number 0 [ 1841.185238][ T978] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1841.223189][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.231551][ T978] usb 5-1: Product: syz [ 1841.238876][T26581] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1841.249337][ T978] usb 5-1: Manufacturer: syz [ 1841.252738][T24814] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1841.254043][ T978] usb 5-1: SerialNumber: syz [ 1841.295262][ T978] usb 5-1: config 0 descriptor?? [ 1841.316593][ T978] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1841.329056][ T978] usb 5-1: selecting invalid altsetting 1 [ 1841.349690][ T978] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1841.393477][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1841.426269][T24814] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1841.441142][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1841.450016][T24814] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1841.450071][T24814] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1841.450098][T24814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.457625][T26577] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1841.610444][T24814] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1841.762408][ T978] usb 5-1: media controller created [ 1841.869411][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1842.050088][ T978] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1842.078913][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1842.109554][ T978] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1842.379875][ T978] usb 5-1: USB disconnect, device number 77 [ 1842.581125][T26602] loop2: detected capacity change from 0 to 7 [ 1842.630217][T23727] Dev loop2: unable to read RDB block 7 [ 1842.683099][T23727] loop2: unable to read partition table [ 1842.699924][T23727] loop2: partition table beyond EOD, truncated [ 1842.810765][T26602] Dev loop2: unable to read RDB block 7 [ 1842.839904][T26602] loop2: unable to read partition table [ 1842.864016][T26602] loop2: partition table beyond EOD, truncated [ 1842.902340][T26602] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1843.489351][T16272] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1843.876921][T16272] usb 3-1: config 0 has no interfaces? [ 1843.983890][T16255] usb 7-1: USB disconnect, device number 31 [ 1844.085102][T26625] syz_tun: entered allmulticast mode [ 1844.136689][T16272] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1844.156229][T16272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.194401][T16272] usb 3-1: Product: syz [ 1844.256813][T16272] usb 3-1: Manufacturer: syz [ 1844.294639][T16272] usb 3-1: SerialNumber: syz [ 1844.320795][T16272] usb 3-1: config 0 descriptor?? [ 1844.613925][T26616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4853'. [ 1844.959685][T26622] syz_tun: left allmulticast mode [ 1845.104504][T26633] blktrace: Concurrent blktraces are not allowed on sg0 [ 1845.562722][T26627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4856'. [ 1845.611237][T26627] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1847.849760][T23940] usb 3-1: USB disconnect, device number 103 [ 1848.119685][T26676] loop2: detected capacity change from 0 to 7 [ 1848.145922][T26676] Dev loop2: unable to read RDB block 7 [ 1848.152688][T26676] loop2: unable to read partition table [ 1848.169770][T26676] loop2: partition table beyond EOD, truncated [ 1848.220943][T26676] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1848.653868][T16255] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1848.845791][T16255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.883900][T16255] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1848.913407][T26691] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4869'. [ 1848.943181][T16255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1848.956226][T16255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1848.966810][T16255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1848.992359][T16255] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1848.992901][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4869'. [ 1849.009307][T16255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1849.039436][T16255] usb 5-1: Product: syz [ 1849.054698][T16255] usb 5-1: Manufacturer: syz [ 1849.066227][T16255] usb 5-1: SerialNumber: syz [ 1849.093912][T16255] usb 5-1: config 0 descriptor?? [ 1849.642102][T16255] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1849.683085][T16255] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1851.042974][T23940] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1851.226788][T23940] usb 3-1: Using ep0 maxpacket: 8 [ 1851.254874][T23940] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1851.282254][T23940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.314988][T23940] usb 3-1: Product: syz [ 1851.352651][T23940] usb 3-1: Manufacturer: syz [ 1851.374253][T23940] usb 3-1: SerialNumber: syz [ 1851.430168][T23940] usb 3-1: config 0 descriptor?? [ 1851.673300][T23940] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1851.717981][T26726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.727289][T26726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.109441][T26731] binder: 26722:26731 ioctl c0306201 2000000003c0 returned -14 [ 1852.454452][T16247] usb 5-1: USB disconnect, device number 78 [ 1852.697253][T23940] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1853.619505][T16272] usb 3-1: USB disconnect, device number 104 [ 1853.934115][T16247] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1854.314518][T16247] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1854.332783][T16272] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1854.342488][T16247] usb 5-1: config 0 has no interface number 0 [ 1854.348713][T16247] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1854.457386][T16247] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1854.463145][T16272] usb 3-1: device descriptor read/64, error -71 [ 1854.502954][T16247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.558305][T16247] usb 5-1: Product: syz [ 1854.572636][T16247] usb 5-1: Manufacturer: syz [ 1854.578771][T16247] usb 5-1: SerialNumber: syz [ 1854.598725][T16247] usb 5-1: config 0 descriptor?? [ 1854.732926][T16272] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1854.813126][T16247] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 1854.820089][T16247] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1854.912688][T16272] usb 3-1: device descriptor read/64, error -71 [ 1855.053078][T16272] usb usb3-port1: attempt power cycle [ 1855.122821][T16247] usb 5-1: USB disconnect, device number 79 [ 1855.413123][T16272] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1855.483800][T16272] usb 3-1: device descriptor read/8, error -71 [ 1855.929584][T16272] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1855.992079][T16272] usb 3-1: device descriptor read/8, error -71 [ 1856.102958][T16272] usb usb3-port1: unable to enumerate USB device [ 1856.481777][T26795] IPVS: set_ctl: invalid protocol: 43 172.20.20.6:20000 [ 1857.085317][T26808] binder: BINDER_SET_CONTEXT_MGR already set [ 1857.131132][T26808] binder: 26806:26808 ioctl 4018620d 200000000040 returned -16 [ 1857.692756][T24224] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1857.852708][T24224] usb 3-1: Using ep0 maxpacket: 32 [ 1857.888807][T24224] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1857.947357][T24224] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 40 [ 1857.977137][T24224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1857.990782][T24224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.001970][T24224] usb 3-1: Product: с [ 1858.009963][T24224] usb 3-1: Manufacturer: 微羭䒊歖ఏ뉿歖頾茔ȓք플哋Ƥ⾊ﮑ䬒갣࡬ᾶ럢馅켍ዢⓆ蟑熡 [ 1858.055667][T24224] usb 3-1: SerialNumber: ࠌ [ 1858.250323][T26831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4892'. [ 1858.290315][T26831] ip_vti0: entered promiscuous mode [ 1858.489190][T26816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1858.501732][T26816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1859.056924][T16244] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1859.066157][ T30] audit: type=1326 audit(1751792421.650:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.127325][ T30] audit: type=1326 audit(1751792421.650:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.228570][ T30] audit: type=1326 audit(1751792421.650:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.255441][T16244] usb 5-1: Using ep0 maxpacket: 32 [ 1859.256853][ T30] audit: type=1326 audit(1751792421.650:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.283321][ T30] audit: type=1326 audit(1751792421.660:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.312709][T16244] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1859.383273][T16244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1859.407514][T16244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1859.419750][T24224] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1859.434590][T16244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1859.447581][T24224] cdc_ncm 3-1:1.0: bind() failure [ 1859.447821][ T30] audit: type=1326 audit(1751792421.660:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.602208][ T30] audit: type=1326 audit(1751792421.660:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.627226][ T30] audit: type=1326 audit(1751792421.660:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.685534][T16244] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1859.695096][T16244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.705617][T24224] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1859.712603][T16244] usb 5-1: Product: syz [ 1859.716824][T16244] usb 5-1: Manufacturer: syz [ 1859.721576][T24224] cdc_ncm 3-1:1.1: bind() failure [ 1859.731744][T16244] usb 5-1: SerialNumber: syz [ 1859.757469][ T30] audit: type=1326 audit(1751792421.660:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.779910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1859.788524][ T30] audit: type=1326 audit(1751792421.660:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1859.838712][T16244] usb 5-1: config 0 descriptor?? [ 1859.855123][T24224] usb 3-1: USB disconnect, device number 109 [ 1860.084387][T16244] usb 5-1: USB disconnect, device number 80 [ 1860.218886][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.233140][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.566690][T26896] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1864.692760][T23940] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1864.832580][T23940] usb 5-1: device descriptor read/64, error -71 [ 1865.142972][T23940] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1865.312584][T23940] usb 5-1: device descriptor read/64, error -71 [ 1865.543442][T23940] usb usb5-port1: attempt power cycle [ 1866.208818][T23940] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1866.295106][T23940] usb 5-1: device descriptor read/8, error -71 [ 1866.542595][T23940] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1866.589270][T23940] usb 5-1: device descriptor read/8, error -71 [ 1866.733395][T23940] usb usb5-port1: unable to enumerate USB device [ 1867.032636][T23940] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1867.111862][T26972] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709518847) [ 1867.124306][T26972] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1867.195848][T23940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1867.232588][T23940] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1867.252043][T23940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.301958][T23940] usb 7-1: config 0 descriptor?? [ 1867.803017][T16247] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1868.049560][T16247] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1868.058984][T16247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.080109][T16247] usb 5-1: Product: syz [ 1868.101818][T16247] usb 5-1: Manufacturer: syz [ 1868.116848][T16247] usb 5-1: SerialNumber: syz [ 1868.133276][T16247] usb 5-1: config 0 descriptor?? [ 1868.507201][T27001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1868.598970][T16247] usb 5-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 1868.650841][T27001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1868.813768][T16247] usb 5-1: failed to fetch extended address, random address set [ 1869.003010][T16247] usb 5-1: USB disconnect, device number 85 [ 1870.462759][T16247] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1870.503538][T23940] usbhid 7-1:0.0: can't add hid device: -71 [ 1870.509684][T23940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1870.610284][T23940] usb 7-1: USB disconnect, device number 32 [ 1870.712619][T16247] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 1870.757953][T16247] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1870.784042][T27036] FAULT_INJECTION: forcing a failure. [ 1870.784042][T27036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.802791][T16247] usb 3-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1870.871247][T16247] usb 3-1: config 0 has no interface number 0 [ 1870.907150][T16247] usb 3-1: config 0 interface 14 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1870.911863][T27036] CPU: 1 UID: 0 PID: 27036 Comm: syz.6.4933 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1870.911897][T27036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1870.911912][T27036] Call Trace: [ 1870.911924][T27036] [ 1870.911936][T27036] dump_stack_lvl+0x189/0x250 [ 1870.911975][T27036] ? __pfx____ratelimit+0x10/0x10 [ 1870.912016][T27036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1870.912044][T27036] ? __pfx__printk+0x10/0x10 [ 1870.912078][T27036] ? __might_fault+0xb0/0x130 [ 1870.912121][T27036] should_fail_ex+0x414/0x560 [ 1870.912166][T27036] _copy_from_user+0x2d/0xb0 [ 1870.912198][T27036] ptp_ioctl+0x3f4/0x2470 [ 1870.912376][T27036] ? kasan_quarantine_put+0xdd/0x220 [ 1870.912415][T27036] ? __pfx_ptp_ioctl+0x10/0x10 [ 1870.912457][T27036] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1870.912572][T27036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1870.912662][T27036] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 1870.912773][T27036] ? down_read+0x1ad/0x2e0 [ 1870.912799][T27036] ? __pfx_ptp_ioctl+0x10/0x10 [ 1870.912828][T27036] posix_clock_ioctl+0xd6/0x140 [ 1870.912861][T27036] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 1870.912895][T27036] __se_sys_ioctl+0xfc/0x170 [ 1870.912956][T27036] do_syscall_64+0xfa/0x3b0 [ 1870.912980][T27036] ? lockdep_hardirqs_on+0x9c/0x150 [ 1870.913002][T27036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.913025][T27036] ? clear_bhb_loop+0x60/0xb0 [ 1870.913054][T27036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.913076][T27036] RIP: 0033:0x7fdf9678e929 [ 1870.913098][T27036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1870.913119][T27036] RSP: 002b:00007fdf97564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.913144][T27036] RAX: ffffffffffffffda RBX: 00007fdf969b5fa0 RCX: 00007fdf9678e929 [ 1870.913180][T27036] RDX: 0000200000000040 RSI: 0000000040043d14 RDI: 0000000000000003 [ 1870.913194][T27036] RBP: 00007fdf97564090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.913210][T27036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.913225][T27036] R13: 0000000000000000 R14: 00007fdf969b5fa0 R15: 00007fdf96adfa28 [ 1870.913273][T27036] [ 1871.088752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.442496][T16247] usb 3-1: config 0 interface 14 has no altsetting 0 [ 1871.497261][T16247] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=af.52 [ 1871.527316][T16247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.571778][T16247] usb 3-1: config 0 descriptor?? [ 1871.831145][T16247] usb 3-1: string descriptor 0 read error: -71 [ 1871.874030][T16247] pegasus 3-1:0.14: probe with driver pegasus failed with error -71 [ 1871.942790][T16247] usb 3-1: USB disconnect, device number 110 [ 1873.032718][T16272] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1873.196883][T16272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.212074][T16272] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1873.229063][T16272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.253444][T16272] usb 3-1: config 0 descriptor?? [ 1873.549699][T16272] razer 0003:1532:010D.004F: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 1874.182809][T16272] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1874.244600][T24814] usb 3-1: USB disconnect, device number 111 [ 1874.357865][T16272] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1874.357902][T16272] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.357948][T16272] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1874.427271][T16272] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1874.440610][T16272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.449470][T16272] usb 7-1: Product: syz [ 1874.453837][T16272] usb 7-1: Manufacturer: syz [ 1874.458857][T16272] usb 7-1: SerialNumber: syz [ 1874.486120][T16272] usb 7-1: config 0 descriptor?? [ 1874.488817][T16272] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1874.507345][T16272] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1874.672885][T24224] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1874.735661][T23940] usb 7-1: USB disconnect, device number 33 [ 1874.826080][T16247] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1874.854503][T24224] usb 5-1: config 0 has no interfaces? [ 1874.859823][T24224] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1874.859860][T24224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.859881][T24224] usb 5-1: Product: syz [ 1874.859898][T24224] usb 5-1: Manufacturer: syz [ 1874.859913][T24224] usb 5-1: SerialNumber: syz [ 1874.874075][T27109] FAULT_INJECTION: forcing a failure. [ 1874.874075][T27109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.874150][T27109] CPU: 0 UID: 0 PID: 27109 Comm: syz.7.4944 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1874.874175][T27109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1874.874188][T27109] Call Trace: [ 1874.874196][T27109] [ 1874.874206][T27109] dump_stack_lvl+0x189/0x250 [ 1874.874238][T27109] ? __pfx____ratelimit+0x10/0x10 [ 1874.874272][T27109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1874.874296][T27109] ? __pfx__printk+0x10/0x10 [ 1874.874336][T27109] should_fail_ex+0x414/0x560 [ 1874.874373][T27109] _copy_to_user+0x31/0xb0 [ 1874.874411][T27109] simple_read_from_buffer+0xe1/0x170 [ 1874.874443][T27109] proc_fail_nth_read+0x1df/0x250 [ 1874.874478][T27109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1874.874511][T27109] ? rw_verify_area+0x258/0x650 [ 1874.874544][T27109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1874.874573][T27109] vfs_read+0x200/0x980 [ 1874.874601][T27109] ? __pfx___mutex_lock+0x10/0x10 [ 1874.874641][T27109] ? __pfx_vfs_read+0x10/0x10 [ 1874.874667][T27109] ? __fget_files+0x2a/0x420 [ 1874.874700][T27109] ? __fget_files+0x3a0/0x420 [ 1874.874726][T27109] ? __fget_files+0x2a/0x420 [ 1874.874763][T27109] ksys_read+0x145/0x250 [ 1874.874789][T27109] ? __pfx_ksys_read+0x10/0x10 [ 1874.874818][T27109] ? do_syscall_64+0xbe/0x3b0 [ 1874.874847][T27109] do_syscall_64+0xfa/0x3b0 [ 1874.874866][T27109] ? lockdep_hardirqs_on+0x9c/0x150 [ 1874.874886][T27109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.874906][T27109] ? clear_bhb_loop+0x60/0xb0 [ 1874.874931][T27109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.874968][T27109] RIP: 0033:0x7f380e98d33c [ 1874.874987][T27109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1874.875005][T27109] RSP: 002b:00007f380f75b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1874.875028][T27109] RAX: ffffffffffffffda RBX: 00007f380ebb5fa0 RCX: 00007f380e98d33c [ 1874.875043][T27109] RDX: 000000000000000f RSI: 00007f380f75b0a0 RDI: 0000000000000004 [ 1874.875057][T27109] RBP: 00007f380f75b090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.875069][T27109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.875081][T27109] R13: 0000000000000000 R14: 00007f380ebb5fa0 R15: 00007f380ecdfa28 [ 1874.875113][T27109] [ 1874.889117][T24224] usb 5-1: config 0 descriptor?? [ 1874.992591][T16247] usb 3-1: Using ep0 maxpacket: 16 [ 1874.995667][T16247] usb 3-1: config 205 has an invalid interface number: 240 but max is 2 [ 1874.995698][T16247] usb 3-1: config 205 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.995718][T16247] usb 3-1: config 205 has 1 interface, different from the descriptor's value: 3 [ 1874.995738][T16247] usb 3-1: config 205 has no interface number 0 [ 1874.995778][T16247] usb 3-1: config 205 interface 240 altsetting 248 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1874.995804][T16247] usb 3-1: config 205 interface 240 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1874.995830][T16247] usb 3-1: config 205 interface 240 has no altsetting 0 [ 1874.997935][T16247] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a43, bcdDevice=c4.35 [ 1874.997966][T16247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.997987][T16247] usb 3-1: Product: syz [ 1874.998003][T16247] usb 3-1: Manufacturer: ч [ 1874.998019][T16247] usb 3-1: SerialNumber: syz [ 1875.269979][T16247] usb 3-1: USB disconnect, device number 112 [ 1875.819492][T27126] all (unregistering): Released all slaves [ 1876.030939][T27126] all (unregistering): Released all slaves [ 1876.132699][T16247] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1876.192883][T23940] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1876.320971][T16247] usb 7-1: Using ep0 maxpacket: 32 [ 1876.384950][T16247] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1876.384975][T16247] usb 7-1: config 0 has no interface number 0 [ 1876.385004][T16247] usb 7-1: config 0 interface 2 has no altsetting 0 [ 1876.392782][T23940] usb 3-1: Using ep0 maxpacket: 8 [ 1876.395721][T16247] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1876.395752][T16247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.395773][T16247] usb 7-1: Product: syz [ 1876.395788][T16247] usb 7-1: Manufacturer: syz [ 1876.395804][T16247] usb 7-1: SerialNumber: syz [ 1876.401014][T16247] usb 7-1: config 0 descriptor?? [ 1876.417391][T23940] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1876.417450][T23940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.417474][T23940] usb 3-1: Product: syz [ 1876.417498][T23940] usb 3-1: Manufacturer: syz [ 1876.417515][T23940] usb 3-1: SerialNumber: syz [ 1876.420585][T27126] all (unregistering): Released all slaves [ 1876.434065][T23940] usb 3-1: config 0 descriptor?? [ 1876.443965][T23940] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1877.235593][T16244] usb 5-1: USB disconnect, device number 86 [ 1877.996568][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1877.996645][ T30] audit: type=1326 audit(1751792440.970:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1844f8e929 code=0x7ffc0000 [ 1878.107372][ T30] audit: type=1326 audit(1751792440.970:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f1844f8e929 code=0x7ffc0000 [ 1878.160704][ T30] audit: type=1326 audit(1751792440.970:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1844f8e929 code=0x7ffc0000 [ 1878.212650][ T30] audit: type=1326 audit(1751792440.970:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1844f8e52b code=0x7ffc0000 [ 1878.712924][ T30] audit: type=1326 audit(1751792441.680:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1844f858e7 code=0x7ffc0000 [ 1878.751383][ T30] audit: type=1326 audit(1751792441.680:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1844f2ab19 code=0x7ffc0000 [ 1878.782097][ T30] audit: type=1326 audit(1751792441.690:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1844f8e929 code=0x7ffc0000 [ 1878.812921][ T30] audit: type=1326 audit(1751792441.690:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.2.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1844f8e929 code=0x7ffc0000 [ 1879.029377][T24814] usb 3-1: USB disconnect, device number 113 [ 1879.267500][T27130] delete_channel: no stack [ 1879.277426][T16247] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1879.512958][T16247] usb 7-1: USB disconnect, device number 34 [ 1879.762684][T16272] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1879.943380][T16272] usb 3-1: Using ep0 maxpacket: 8 [ 1879.998340][T23730] udevd[23730]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1880.064693][T16272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.092815][T16272] usb 3-1: config 0 has no interfaces? [ 1880.197964][T16272] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1880.239025][T16272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.289427][T16272] usb 3-1: Product: syz [ 1880.294722][T16272] usb 3-1: Manufacturer: syz [ 1880.299487][T16272] usb 3-1: SerialNumber: syz [ 1880.311378][T16272] usb 3-1: config 0 descriptor?? [ 1880.600577][ T30] audit: type=1326 audit(1751792443.570:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27186 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2b78e929 code=0x7ffc0000 [ 1880.601793][T27192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1880.640251][ T30] audit: type=1326 audit(1751792443.570:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27186 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b2b78e929 code=0x7ffc0000 [ 1881.057303][T27195] input: syz1 as /devices/virtual/input/input168 [ 1881.337433][T16247] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1881.512617][T16247] usb 7-1: Using ep0 maxpacket: 16 [ 1881.522458][T16247] usb 7-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 1881.532033][T16247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.596732][T16247] usb 7-1: Product: syz [ 1881.608720][T16247] usb 7-1: Manufacturer: syz [ 1881.624474][T16247] usb 7-1: SerialNumber: syz [ 1881.639966][T16247] usb 7-1: config 0 descriptor?? [ 1881.669161][T16247] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input169 [ 1881.867760][T16247] usb 7-1: USB disconnect, device number 35 [ 1881.874116][ T5204] bcm5974 7-1:0.0: could not read from device [ 1882.432854][T16247] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1882.582559][T16247] usb 5-1: Using ep0 maxpacket: 32 [ 1882.594907][T16247] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1882.811228][T16247] usb 5-1: config 0 has no interface number 0 [ 1882.819038][T27216] netlink: 'syz.0.4965': attribute type 21 has an invalid length. [ 1882.843040][T27216] netlink: 'syz.0.4965': attribute type 6 has an invalid length. [ 1882.853561][T16247] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1882.862988][T27216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1882.965478][T16247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.974854][T16247] usb 5-1: Product: syz [ 1882.979486][T16247] usb 5-1: Manufacturer: syz [ 1882.989714][T16247] usb 5-1: SerialNumber: syz [ 1883.003520][T16247] usb 5-1: config 0 descriptor?? [ 1883.053724][T16247] smsc95xx v2.0.0 [ 1883.066989][T16244] usb 3-1: USB disconnect, device number 114 [ 1883.527195][T16247] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1883.541355][T27223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1883.586265][T16247] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1883.750891][T27230] IPv4: Oversized IP packet from 127.202.26.0 [ 1884.305557][T27204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.317002][T27204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.538761][T16247] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1884.591402][T16247] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1884.655711][T16247] usb 5-1: USB disconnect, device number 87 [ 1884.682804][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1884.682829][ T30] audit: type=1400 audit(1751792447.640:7225): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=27238 comm="syz.2.4972" [ 1884.992782][T24224] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1885.629590][T27270] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1885.773951][T16247] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1885.929588][T16244] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1886.007252][T16247] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1886.019217][T27272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1886.202631][T16247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.235479][T16247] usb 5-1: config 0 descriptor?? [ 1886.240533][T16244] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1886.255953][T16244] usb 7-1: config 0 has no interface number 0 [ 1886.282575][T16244] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.296112][T16247] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1886.324824][T16244] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1886.345830][T16244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.389890][T16244] usb 7-1: config 0 descriptor?? [ 1886.830372][T16244] uclogic 0003:256C:006D.0050: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1 [ 1887.027190][T16244] usb 7-1: USB disconnect, device number 36 [ 1887.509889][T16247] gspca_stv06xx: I2C: Read error writing address: -71 [ 1887.521605][T16247] usb 5-1: USB disconnect, device number 88 [ 1887.612065][T27290] sch_fq: defrate 2 ignored. [ 1887.787719][T27294] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1887.795222][T27294] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1887.895596][T27297] batman_adv: batadv0: Adding interface: dummy0 [ 1887.902654][T27297] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.944118][T27297] batman_adv: batadv0: Interface activated: dummy0 [ 1887.967156][T27298] batadv0: mtu less than device minimum [ 1887.996341][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.008665][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.020130][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.031543][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.043217][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.054547][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.066034][T27298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1888.638548][T27311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4996'. [ 1888.673564][T27311] tipc: Enabling of bearer rejected, failed to enable media [ 1888.999906][T16255] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1889.207125][T16255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.254206][T16255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.467589][T16255] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1889.513524][T16255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.666461][T16255] usb 3-1: config 0 descriptor?? [ 1889.883525][T16255] uclogic 0003:5543:0042.0051: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 1890.137707][T16247] usb 3-1: USB disconnect, device number 116 [ 1890.226205][T27330] fido_id[27330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1890.460816][T27338] xt_l2tp: v2 sid > 0xffff: 262144 [ 1890.714272][T16247] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1890.782691][T24224] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1890.902603][T16247] usb 3-1: Using ep0 maxpacket: 16 [ 1890.909816][T16247] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1890.957397][T16247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1890.971138][T24224] usb 7-1: Using ep0 maxpacket: 16 [ 1890.984441][T24224] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1890.999758][T24224] usb 7-1: config 0 has no interface number 0 [ 1891.010872][T16247] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1891.020700][T16247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.032153][T24224] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1891.044737][T16247] usb 3-1: Product: syz [ 1891.049101][T16247] usb 3-1: Manufacturer: syz [ 1891.056215][T16247] usb 3-1: SerialNumber: syz [ 1891.068904][T24224] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1891.078399][T24224] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1891.095466][T16247] usb 3-1: config 0 descriptor?? [ 1891.100567][T24224] usb 7-1: Manufacturer: syz [ 1891.106853][T24224] usb 7-1: SerialNumber: syz [ 1891.115075][T16247] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1891.125357][T16247] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1891.144010][T24224] usb 7-1: config 0 descriptor?? [ 1891.361394][T24224] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 1891.370804][T24224] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1891.404230][T24224] usb 7-1: USB disconnect, device number 37 [ 1891.730553][T16247] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1891.737627][T16247] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1892.003380][T27357] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5009'. [ 1892.014374][T27357] tipc: Enabling of bearer rejected, already enabled [ 1892.184132][T27359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5010'. [ 1892.196671][T27359] netlink: 'syz.6.5010': attribute type 10 has an invalid length. [ 1892.262054][T27359] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1892.551552][T16247] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1892.558896][T24224] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1892.567250][T16247] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1892.574661][T16247] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1892.581463][T16247] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1892.588331][T16247] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1892.595292][T16247] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1892.608729][T16247] usb 3-1: USB disconnect, device number 117 [ 1892.722560][T24224] usb 7-1: Using ep0 maxpacket: 16 [ 1892.734378][T24224] usb 7-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 1892.762183][T24224] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1892.784385][T24224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.800397][T24224] usb 7-1: Product: syz [ 1892.810676][T24224] usb 7-1: Manufacturer: syz [ 1892.819046][T24224] usb 7-1: SerialNumber: syz [ 1892.836329][T24224] usb 7-1: config 0 descriptor?? [ 1893.059072][T27359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.109943][T27359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.126091][T16255] usb 7-1: USB disconnect, device number 38 [ 1893.246589][T27370] tipc: Can't bind to reserved service type 2 [ 1893.442619][T24224] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1893.606693][T24224] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1893.617950][T24224] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1893.651628][T24224] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1893.666092][T24224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.722157][T27379] ksmbd: Unknown IPC event: 3, ignore. [ 1893.828737][T27380] usb usb8: usbfs: process 27380 (syz.4.5016) did not claim interface 0 before use [ 1894.106804][T24224] usb 3-1: usb_control_msg returned -32 [ 1894.125529][T24224] usbtmc 3-1:16.0: can't read capabilities [ 1894.466191][T27388] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 1895.671977][T27394] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5020'. [ 1895.685469][T27394] tipc: Enabling of bearer rejected, already enabled [ 1896.223256][T16272] usb 3-1: USB disconnect, device number 118 [ 1896.554176][T27404] bond0: entered promiscuous mode [ 1896.559299][T27404] bond_slave_0: entered promiscuous mode [ 1896.565656][T27404] bond_slave_1: entered promiscuous mode [ 1896.574961][T27404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1896.582902][T27404] Cannot create hsr debugfs directory [ 1896.588505][T27404] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 1896.598651][T27404] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1896.609090][T27404] hsr0: entered allmulticast mode [ 1896.614251][T27404] bridge0: entered allmulticast mode [ 1896.619630][T27404] bond0: entered allmulticast mode [ 1896.624873][T27404] bond_slave_0: entered allmulticast mode [ 1896.630696][T27404] bond_slave_1: entered allmulticast mode [ 1897.586491][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5029'. [ 1897.772917][T24224] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1897.913002][T24224] usb 7-1: device descriptor read/64, error -71 [ 1898.131165][T27426] xt_recent: Unsupported userspace flags (000000de) [ 1898.199659][T24224] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1898.342095][T27428] syz_tun: entered allmulticast mode [ 1898.348492][T24224] usb 7-1: device descriptor read/64, error -71 [ 1898.493172][T24224] usb usb7-port1: attempt power cycle [ 1898.579917][T27418] QAT: Stopping all acceleration devices. [ 1898.852579][T24224] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1898.877914][T24224] usb 7-1: device descriptor read/8, error -71 [ 1899.167689][T27427] syz_tun: left allmulticast mode [ 1899.192807][T24224] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1899.244454][T24224] usb 7-1: device descriptor read/8, error -71 [ 1899.355784][T24224] usb usb7-port1: unable to enumerate USB device [ 1899.792610][T16272] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1900.028495][T16272] usb 5-1: Using ep0 maxpacket: 16 [ 1900.061984][T16272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.091384][T16272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.102308][T16272] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1900.127946][T16272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.163486][T16272] usb 5-1: config 0 descriptor?? [ 1900.790716][T16272] usb 5-1: string descriptor 0 read error: -71 [ 1900.829830][T16272] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 1900.838127][T16272] letsketch 0003:6161:4D15.0052: probe with driver letsketch failed with error -32 [ 1900.893658][T16272] usb 5-1: USB disconnect, device number 89 [ 1900.974335][T24814] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1901.236042][T27463] xt_recent: Unsupported userspace flags (000000de) [ 1901.283121][T24814] usb 3-1: Using ep0 maxpacket: 8 [ 1901.292379][T24814] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1901.302024][T24814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.322192][T24814] usb 3-1: Product: syz [ 1901.336600][T24814] usb 3-1: Manufacturer: syz [ 1901.355528][T24814] usb 3-1: SerialNumber: syz [ 1901.420875][T24814] usb 3-1: config 0 descriptor?? [ 1901.777857][T24814] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1903.403417][T24814] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1903.781147][T27492] syz_tun: entered allmulticast mode [ 1903.816247][T24814] usb 3-1: USB disconnect, device number 119 [ 1903.841037][ T30] audit: type=1326 audit(1751792466.800:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1903.948004][ T30] audit: type=1326 audit(1751792466.850:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1903.991141][ T30] audit: type=1326 audit(1751792466.850:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.055755][ T30] audit: type=1326 audit(1751792466.850:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.127806][ T30] audit: type=1326 audit(1751792466.870:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.158417][ T30] audit: type=1326 audit(1751792466.870:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.202237][ T30] audit: type=1326 audit(1751792466.880:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.272530][T24814] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1904.293063][ T30] audit: type=1326 audit(1751792466.880:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.364913][T27501] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5052'. [ 1904.434097][ T30] audit: type=1326 audit(1751792466.880:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27493 comm="syz.6.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf9678e929 code=0x7ffc0000 [ 1904.492634][T24814] usb 3-1: Using ep0 maxpacket: 32 [ 1904.507908][T24814] usb 3-1: config 0 has no interfaces? [ 1904.574655][T24814] usb 3-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 1904.604231][T24814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.630203][T24814] usb 3-1: Product: syz [ 1904.640345][T24814] usb 3-1: Manufacturer: syz [ 1904.656739][T24814] usb 3-1: SerialNumber: syz [ 1904.675291][T27491] syz_tun: left allmulticast mode [ 1904.697745][T24814] usb 3-1: config 0 descriptor?? [ 1904.902795][T16255] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1905.043374][T16255] usb 7-1: device descriptor read/64, error -71 [ 1905.362662][T16255] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1905.562624][T16255] usb 7-1: device descriptor read/64, error -71 [ 1905.681211][T16255] usb usb7-port1: attempt power cycle [ 1906.034724][T16255] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1906.346395][T16255] usb 7-1: device descriptor read/8, error -71 [ 1906.603917][T16255] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1906.715489][T16255] usb 7-1: device descriptor read/8, error -71 [ 1906.867363][T16255] usb usb7-port1: unable to enumerate USB device [ 1907.265422][T16255] usb 3-1: USB disconnect, device number 120 [ 1908.205832][T16255] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1908.342588][T16255] usb 5-1: device descriptor read/64, error -71 [ 1908.586685][T16255] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1908.690095][T27544] IPv6: sit1: Disabled Multicast RS [ 1908.696984][T27544] sit1: entered allmulticast mode [ 1908.732938][T16255] usb 5-1: device descriptor read/64, error -71 [ 1908.854568][T16255] usb usb5-port1: attempt power cycle [ 1908.992791][T24224] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1909.022713][T16272] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1909.142759][T24224] usb 7-1: Using ep0 maxpacket: 32 [ 1909.156290][T27544] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581) [ 1909.166863][T27544] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1909.180969][T16272] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.190513][T16272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.198966][T16255] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1909.206607][T27544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.210754][T27544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.217208][T16272] usb 3-1: Product: syz [ 1909.230265][T16272] usb 3-1: Manufacturer: syz [ 1909.235162][T16272] usb 3-1: SerialNumber: syz [ 1909.236643][T27544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.250613][T27544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.259820][T16255] usb 5-1: device descriptor read/8, error -71 [ 1909.273734][T16272] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.277505][T24224] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1909.295776][T24224] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1909.301379][T24814] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1909.313464][T24224] usb 7-1: can't read configurations, error -71 [ 1909.552641][T16255] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1909.573436][T16255] usb 5-1: device descriptor read/8, error -71 [ 1909.649504][T27549] syz_tun: entered allmulticast mode [ 1909.687244][T16255] usb usb5-port1: unable to enumerate USB device [ 1909.929625][T16255] usb 3-1: USB disconnect, device number 121 [ 1910.362578][T24814] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1910.369950][T24814] ath9k_htc: Failed to initialize the device [ 1910.376923][T16255] usb 3-1: ath9k_htc: USB layer deinitialized [ 1910.476962][T27548] syz_tun: left allmulticast mode [ 1910.672631][T16255] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1910.862781][T16255] usb 3-1: Using ep0 maxpacket: 16 [ 1910.876440][T16255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.890476][T16255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.935761][T16255] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1911.201559][T16255] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1911.338105][T16255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.366592][T16255] usb 3-1: config 0 descriptor?? [ 1911.602680][ T5939] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1911.691433][T16255] usbhid 3-1:0.0: can't add hid device: -71 [ 1911.697808][T16255] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1911.798599][T16255] usb 3-1: USB disconnect, device number 122 [ 1911.820062][ T5939] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1911.835346][T16247] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1911.841237][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.864241][ T5939] usb 7-1: config 0 descriptor?? [ 1911.873281][ T5939] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1912.053716][T16247] usb 5-1: Using ep0 maxpacket: 8 [ 1912.071701][ T5939] gspca_spca508: reg_read err -32 [ 1912.081262][ T5939] gspca_spca508: reg_read err -32 [ 1912.087572][ T5939] gspca_spca508: reg_read err -32 [ 1912.095737][ T5939] gspca_spca508: reg_read err -32 [ 1912.109269][T16247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.130164][T16247] usb 5-1: config 0 has no interfaces? [ 1912.146904][T16247] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1912.161976][T16247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.185523][T16247] usb 5-1: Product: syz [ 1912.191304][T16247] usb 5-1: Manufacturer: syz [ 1912.199399][T16247] usb 5-1: SerialNumber: syz [ 1912.214143][T16247] usb 5-1: config 0 descriptor?? [ 1912.422623][T16255] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1912.572556][T16255] usb 3-1: Using ep0 maxpacket: 8 [ 1912.583519][T16255] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 1912.602668][ T5939] gspca_spca508: reg write: error -110 [ 1912.608255][ T5939] spca508 7-1:0.0: probe with driver spca508 failed with error -110 [ 1912.626951][T16255] usb 3-1: config 11 has no interface number 0 [ 1912.647394][T16255] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1912.666339][T16255] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1912.680805][T16255] usb 3-1: config 11 interface 95 has no altsetting 0 [ 1912.696431][T16255] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1912.705905][T16255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.731572][T16255] usb 3-1: Product: syz [ 1912.761929][T16255] usb 3-1: Manufacturer: syz [ 1912.768655][T16255] usb 3-1: SerialNumber: syz [ 1912.984918][T16247] usb 7-1: USB disconnect, device number 49 [ 1913.057629][T16255] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 1913.089646][T16255] usb 3-1: USB disconnect, device number 123 [ 1913.442521][T16247] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1913.592760][T16247] usb 7-1: Using ep0 maxpacket: 16 [ 1913.608561][T16247] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x82 has invalid maxpacket 1576, setting to 1024 [ 1913.630533][T16247] usb 7-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1913.643221][T16247] usb 7-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1913.661056][T16247] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1913.681018][T16247] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1913.699668][T16247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.727075][T16247] usb 7-1: Product: syz [ 1913.740871][T16247] usb 7-1: Manufacturer: syz [ 1913.766648][T16247] usb 7-1: SerialNumber: syz [ 1913.787739][T27588] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1913.815665][T27588] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1913.970482][T27596] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5079'. [ 1913.980841][T27596] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5079'. [ 1914.054810][T27588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.063939][T27588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.078491][T27588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.087592][T27588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.105183][T16247] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1914.124456][T16247] usb 7-1: USB disconnect, device number 50 [ 1914.162730][T16255] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1914.324551][T16255] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 1914.335936][T16255] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 1914.345334][T16255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.353478][T16255] usb 3-1: Product: syz [ 1914.357669][T16255] usb 3-1: Manufacturer: syz [ 1914.362293][T16255] usb 3-1: SerialNumber: syz [ 1914.370079][T16255] usb 3-1: config 0 descriptor?? [ 1914.500550][T16247] usb 5-1: USB disconnect, device number 94 [ 1914.566052][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 1914.828411][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1914.859693][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1914.870821][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1914.881968][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1914.903964][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1914.920975][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1914.936208][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1915.046041][T16255] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1915.056687][T16255] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1915.253774][T16255] usb 3-1: USB disconnect, device number 124 [ 1915.262700][T24224] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 1915.412663][T24224] usb 7-1: device descriptor read/64, error -71 [ 1915.655644][T24224] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 1915.692598][T24814] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1915.812647][T24224] usb 7-1: device descriptor read/64, error -71 [ 1915.882902][T24814] usb 5-1: Using ep0 maxpacket: 8 [ 1915.900314][T24814] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.922995][T24224] usb usb7-port1: attempt power cycle [ 1915.937726][T24814] usb 5-1: config 0 has no interfaces? [ 1915.974187][T24814] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1915.996537][T24814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.058337][T24814] usb 5-1: Product: syz [ 1916.076175][T24814] usb 5-1: Manufacturer: syz [ 1916.100337][T24814] usb 5-1: SerialNumber: syz [ 1916.133806][T24814] usb 5-1: config 0 descriptor?? [ 1916.272621][T24224] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 1916.298817][T27644] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3225710783 (206445490112 ns) > initial count (177449368832 ns). Using initial count to start timer. [ 1916.318633][T24224] usb 7-1: device descriptor read/8, error -71 [ 1916.345619][T27640] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3925589830 (7851179660 ns) > initial count (51638876 ns). Using initial count to start timer. [ 1916.572692][T24224] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 1916.615647][T24224] usb 7-1: device descriptor read/8, error -71 [ 1916.732867][T24224] usb usb7-port1: unable to enumerate USB device [ 1917.030995][T27647] libceph: resolve '400' (ret=-3): failed [ 1917.395735][T27653] net_ratelimit: 13 callbacks suppressed [ 1917.395775][T27653] netlink: zone id is out of range [ 1917.406998][T27653] netlink: zone id is out of range [ 1917.428887][T27653] netlink: zone id is out of range [ 1917.443356][T27653] netlink: zone id is out of range [ 1917.452095][T27653] netlink: zone id is out of range [ 1917.457699][T27653] netlink: zone id is out of range [ 1917.470244][T27653] netlink: zone id is out of range [ 1917.477364][T27653] netlink: zone id is out of range [ 1917.483912][T27653] netlink: zone id is out of range [ 1917.489545][T27653] netlink: zone id is out of range [ 1918.447172][T27659] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1918.462074][T27659] team0: Port device batadv1 added [ 1918.593929][T27668] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1918.816592][T16247] usb 5-1: USB disconnect, device number 95 [ 1918.855646][T27635] delete_channel: no stack [ 1919.072224][T27679] __nla_validate_parse: 59 callbacks suppressed [ 1919.072269][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5104'. [ 1919.153246][T24814] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1919.233290][T27681] FAULT_INJECTION: forcing a failure. [ 1919.233290][T27681] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.264810][T27681] CPU: 0 UID: 0 PID: 27681 Comm: syz.0.5106 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1919.264836][T27681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1919.264847][T27681] Call Trace: [ 1919.264854][T27681] [ 1919.264863][T27681] dump_stack_lvl+0x189/0x250 [ 1919.264894][T27681] ? __pfx____ratelimit+0x10/0x10 [ 1919.264920][T27681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1919.264949][T27681] ? __pfx__printk+0x10/0x10 [ 1919.264973][T27681] ? __pfx___might_resched+0x10/0x10 [ 1919.264994][T27681] should_fail_ex+0x414/0x560 [ 1919.265040][T27681] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1919.265156][T27681] should_failslab+0xa8/0x100 [ 1919.265201][T27681] __kvmalloc_node_noprof+0x161/0x5f0 [ 1919.265222][T27681] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1919.265248][T27681] alloc_netdev_mqs+0x8e5/0x11e0 [ 1919.265275][T27681] ipip6_tunnel_locate+0x4c4/0x770 [ 1919.265331][T27681] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 1919.265361][T27681] ipip6_tunnel_ctl+0x6b0/0x9e0 [ 1919.265386][T27681] ip_tunnel_siocdevprivate+0xf5/0x180 [ 1919.265406][T27681] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 1919.265434][T27681] ipip6_tunnel_siocdevprivate+0x24e/0x1580 [ 1919.265458][T27681] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1919.265505][T27681] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1919.265528][T27681] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 1919.265552][T27681] ? rcu_is_watching+0x15/0xb0 [ 1919.265575][T27681] ? __mutex_lock+0xa6d/0xe80 [ 1919.265591][T27681] ? __mutex_lock+0x51b/0xe80 [ 1919.265609][T27681] ? dev_ioctl+0x83c/0x1150 [ 1919.265656][T27681] ? full_name_hash+0x92/0xe0 [ 1919.265721][T27681] ? netdev_name_node_lookup+0xdf/0x120 [ 1919.265792][T27681] dev_ifsioc+0xb54/0xf00 [ 1919.265815][T27681] dev_ioctl+0x84c/0x1150 [ 1919.265834][T27681] sock_ioctl+0x719/0x790 [ 1919.265860][T27681] ? __pfx_sock_ioctl+0x10/0x10 [ 1919.265884][T27681] ? __fget_files+0x3a0/0x420 [ 1919.265905][T27681] ? __fget_files+0x2a/0x420 [ 1919.265928][T27681] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1919.265979][T27681] ? __pfx_sock_ioctl+0x10/0x10 [ 1919.266001][T27681] __se_sys_ioctl+0xfc/0x170 [ 1919.266020][T27681] do_syscall_64+0xfa/0x3b0 [ 1919.266035][T27681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1919.266049][T27681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.266064][T27681] ? clear_bhb_loop+0x60/0xb0 [ 1919.266081][T27681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.266096][T27681] RIP: 0033:0x7f6b2b78e929 [ 1919.266110][T27681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1919.266122][T27681] RSP: 002b:00007f6b2c670038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1919.266139][T27681] RAX: ffffffffffffffda RBX: 00007f6b2b9b5fa0 RCX: 00007f6b2b78e929 [ 1919.266150][T27681] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1919.266159][T27681] RBP: 00007f6b2c670090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.266169][T27681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.266177][T27681] R13: 0000000000000000 R14: 00007f6b2b9b5fa0 R15: 00007f6b2badfa28 [ 1919.266198][T27681] [ 1919.337364][T24814] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1919.592590][T24814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.600711][T24814] usb 7-1: Product: syz [ 1919.610782][T24814] usb 7-1: Manufacturer: syz [ 1919.615497][T24814] usb 7-1: SerialNumber: syz [ 1919.629885][T24814] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1919.666378][ T5939] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1920.143602][T16255] usb 7-1: USB disconnect, device number 55 [ 1920.222765][T24814] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1920.404582][T27702] fuse: Bad value for 'fd' [ 1920.616572][T27708] netlink: 'syz.2.5115': attribute type 2 has an invalid length. [ 1920.682656][ T5939] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1920.740254][ T5939] ath9k_htc: Failed to initialize the device [ 1920.801253][T27709] bridge_slave_0: left allmulticast mode [ 1920.847290][T16255] usb 7-1: ath9k_htc: USB layer deinitialized [ 1920.896886][T27709] bridge_slave_0: left promiscuous mode [ 1920.997075][T27709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.087529][T27716] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5117'. [ 1921.122982][T27709] bridge_slave_1: left allmulticast mode [ 1921.149243][T27709] bridge_slave_1: left promiscuous mode [ 1921.175849][T27709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.214580][T27709] bond0: (slave bond_slave_0): Releasing backup interface [ 1921.249235][T27721] ================================================================== [ 1921.257394][T27721] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.266065][T27721] Write of size 2560 at addr ffffc9000b85e620 by task vivid-000-vid-c/27721 [ 1921.274738][T27721] [ 1921.277065][T27721] CPU: 1 UID: 0 PID: 27721 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1921.277084][T27721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1921.277098][T27721] Call Trace: [ 1921.277108][T27721] [ 1921.277117][T27721] dump_stack_lvl+0x189/0x250 [ 1921.277150][T27721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1921.277174][T27721] ? __pfx__printk+0x10/0x10 [ 1921.277194][T27721] ? __pfx__printk+0x10/0x10 [ 1921.277211][T27721] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1921.277327][T27721] ? __virt_addr_valid+0xdc/0x5c0 [ 1921.277416][T27721] print_report+0xd2/0x2b0 [ 1921.277456][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.277473][T27721] kasan_report+0x118/0x150 [ 1921.277518][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.277542][T27721] kasan_check_range+0x2b0/0x2c0 [ 1921.277562][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.277578][T27721] __asan_memcpy+0x40/0x70 [ 1921.277594][T27721] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.277670][T27721] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1921.277714][T27721] ? vivid_thread_vid_cap_tick+0xda1/0x5fd0 [ 1921.277740][T27721] ? ktime_get+0x3e/0x1f0 [ 1921.277796][T27721] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1921.277819][T27721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1921.277836][T27721] vivid_thread_vid_cap+0x8da/0x10d0 [ 1921.277863][T27721] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1921.277878][T27721] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1921.277901][T27721] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1921.277926][T27721] ? __kthread_parkme+0x7b/0x200 [ 1921.278000][T27721] ? __kthread_parkme+0x1a1/0x200 [ 1921.278020][T27721] kthread+0x70e/0x8a0 [ 1921.278041][T27721] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1921.278056][T27721] ? __pfx_kthread+0x10/0x10 [ 1921.278076][T27721] ? _raw_spin_unlock_irq+0x23/0x50 [ 1921.278098][T27721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1921.278110][T27721] ? __pfx_kthread+0x10/0x10 [ 1921.278130][T27721] ret_from_fork+0x3fc/0x770 [ 1921.278168][T27721] ? __pfx_ret_from_fork+0x10/0x10 [ 1921.278185][T27721] ? __switch_to_asm+0x39/0x70 [ 1921.278237][T27721] ? __switch_to_asm+0x33/0x70 [ 1921.278266][T27721] ? __pfx_kthread+0x10/0x10 [ 1921.278316][T27721] ret_from_fork_asm+0x1a/0x30 [ 1921.278349][T27721] [ 1921.278357][T27721] [ 1921.501008][T27721] The buggy address belongs to the virtual mapping at [ 1921.501008][T27721] [ffffc9000b859000, ffffc9000b860000) created by: [ 1921.501008][T27721] vb2_vmalloc_alloc+0xef/0x340 [ 1921.519025][T27721] [ 1921.521367][T27721] The buggy address belongs to the physical page: [ 1921.527850][T27721] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807dfcd000 pfn:0x7dfcd [ 1921.537959][T27721] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1921.545128][T27721] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1921.553722][T27721] raw: ffff88807dfcd000 0000000000000000 00000001ffffffff 0000000000000000 [ 1921.562363][T27721] page dumped because: kasan: bad access detected [ 1921.568846][T27721] page_owner tracks the page as allocated [ 1921.574563][T27721] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 27719, tgid 27717 (syz.6.5116), ts 1921196820797, free_ts 1920855049583 [ 1921.593239][T27721] post_alloc_hook+0x240/0x2a0 [ 1921.598028][T27721] get_page_from_freelist+0x21e4/0x22c0 [ 1921.603591][T27721] __alloc_frozen_pages_noprof+0x181/0x370 [ 1921.609415][T27721] alloc_pages_mpol+0x232/0x4a0 [ 1921.614333][T27721] alloc_pages_noprof+0xa9/0x190 [ 1921.619290][T27721] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1921.625233][T27721] vmalloc_user_noprof+0xad/0xf0 [ 1921.630197][T27721] vb2_vmalloc_alloc+0xef/0x340 [ 1921.635057][T27721] __vb2_queue_alloc+0x9bf/0x15a0 [ 1921.640100][T27721] vb2_core_reqbufs+0xc31/0x1420 [ 1921.645048][T27721] __vb2_init_fileio+0x318/0xff0 [ 1921.649988][T27721] __vb2_perform_fileio+0x284/0x1600 [ 1921.655294][T27721] vb2_fop_read+0x273/0x360 [ 1921.659830][T27721] v4l2_read+0x19c/0x2c0 [ 1921.664174][T27721] vfs_read+0x200/0x980 [ 1921.668352][T27721] __x64_sys_pread64+0x193/0x220 [ 1921.673297][T27721] page last free pid 23364 tgid 23364 stack trace: [ 1921.679888][T27721] __free_frozen_pages+0xc71/0xe70 [ 1921.685011][T27721] rcu_core+0xca5/0x1710 [ 1921.689310][T27721] handle_softirqs+0x286/0x870 [ 1921.694130][T27721] do_softirq+0xec/0x180 [ 1921.698374][T27721] __local_bh_enable_ip+0x17d/0x1c0 [ 1921.703580][T27721] batadv_nc_purge_paths+0x318/0x3b0 [ 1921.708958][T27721] batadv_nc_worker+0x328/0x610 [ 1921.713822][T27721] process_scheduled_works+0xade/0x17b0 [ 1921.719379][T27721] worker_thread+0x8a0/0xda0 [ 1921.723971][T27721] kthread+0x70e/0x8a0 [ 1921.728075][T27721] ret_from_fork+0x3fc/0x770 [ 1921.732699][T27721] ret_from_fork_asm+0x1a/0x30 [ 1921.737477][T27721] [ 1921.739807][T27721] Memory state around the buggy address: [ 1921.745436][T27721] ffffc9000b85ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1921.753501][T27721] ffffc9000b85ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1921.761570][T27721] >ffffc9000b85f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1921.769631][T27721] ^ [ 1921.773708][T27721] ffffc9000b85f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1921.781770][T27721] ffffc9000b85f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1921.789832][T27721] ================================================================== [ 1921.797984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.866702][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.873158][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.879342][T27709] bond0: (slave bond_slave_1): Releasing backup interface [ 1921.893279][T27721] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1921.900542][T27721] CPU: 1 UID: 0 PID: 27721 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 1921.913040][T27721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1921.923102][T27721] Call Trace: [ 1921.926393][T27721] [ 1921.929325][T27721] dump_stack_lvl+0x99/0x250 [ 1921.933939][T27721] ? __asan_memcpy+0x40/0x70 [ 1921.938532][T27721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1921.943742][T27721] ? __pfx__printk+0x10/0x10 [ 1921.948348][T27721] panic+0x2db/0x790 [ 1921.952255][T27721] ? __pfx_panic+0x10/0x10 [ 1921.956716][T27721] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1921.962629][T27721] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1921.968973][T27721] ? print_memory_metadata+0x314/0x400 [ 1921.974436][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.980079][T27721] check_panic_on_warn+0x89/0xb0 [ 1921.985150][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1921.990803][T27721] end_report+0x78/0x160 [ 1921.995064][T27721] kasan_report+0x129/0x150 [ 1921.999588][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1922.005270][T27721] kasan_check_range+0x2b0/0x2c0 [ 1922.010230][T27721] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1922.015877][T27721] __asan_memcpy+0x40/0x70 [ 1922.020305][T27721] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1922.025809][T27721] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1922.031552][T27721] ? vivid_thread_vid_cap_tick+0xda1/0x5fd0 [ 1922.037478][T27721] ? ktime_get+0x3e/0x1f0 [ 1922.041824][T27721] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1922.048012][T27721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1922.053237][T27721] vivid_thread_vid_cap+0x8da/0x10d0 [ 1922.058550][T27721] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1922.064286][T27721] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1922.070211][T27721] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1922.076565][T27721] ? __kthread_parkme+0x7b/0x200 [ 1922.081542][T27721] ? __kthread_parkme+0x1a1/0x200 [ 1922.086584][T27721] kthread+0x70e/0x8a0 [ 1922.090673][T27721] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1922.096405][T27721] ? __pfx_kthread+0x10/0x10 [ 1922.101015][T27721] ? _raw_spin_unlock_irq+0x23/0x50 [ 1922.106240][T27721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1922.111456][T27721] ? __pfx_kthread+0x10/0x10 [ 1922.116072][T27721] ret_from_fork+0x3fc/0x770 [ 1922.120675][T27721] ? __pfx_ret_from_fork+0x10/0x10 [ 1922.125798][T27721] ? __switch_to_asm+0x39/0x70 [ 1922.130584][T27721] ? __switch_to_asm+0x33/0x70 [ 1922.135355][T27721] ? __pfx_kthread+0x10/0x10 [ 1922.139981][T27721] ret_from_fork_asm+0x1a/0x30 [ 1922.144763][T27721] [ 1922.148402][T27721] Kernel Offset: disabled [ 1922.152812][T27721] Rebooting in 86400 seconds..