last executing test programs: 43.656710377s ago: executing program 1 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x100000001, 0x8, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000007c0)={r1, 0xa, 0x7fffffffffffffff, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_RTT={0x8, 0x7, 0x63a}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r7], 0x7c}}, 0x20018001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 43.402583574s ago: executing program 1 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x14) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="fd21", 0x2}], 0x1, 0x1, 0x8a60) preadv(r0, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xfffffffffffffc8b, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x0, 0x1, 'sctp\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) 42.277133342s ago: executing program 1 (id=892): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000c58000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000d62000/0x3000)=nil) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0xf8a, 0x0, 0x0, @local, @local, {[@routing={0x84}], "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"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0x9}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c001}, 0x2000400c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 41.597620761s ago: executing program 1 (id=898): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x20000004) 41.433793214s ago: executing program 1 (id=901): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="b3ff6f3dfaff9250095f3540f21c0d8cefad37e91a45f11a146a565fad0137f4b0c44440d86bfd28db509c68869975300d7e5889277969a4feea4a1e63f5e28d0b25840fafe76786dcdb210320aae68b38ecf4eef3000f0fc820edc5ec7a71a646ff8216596d4025d186b776f82907f3980fcf0f00bc384586af173269c888c57040efdcfac6e4c40e4a9863b9e09f620f054ef21d5fd2a65af0851cf89638a469684b2acb9d4f6b6f939e9e190a9cbe14d02bc9b46bcc16", &(0x7f00000001c0)="e70839c856f023144516b3a6291a162a3ec4afe8219104d7f8daf662eb631a105849e241f6c76154766b15d3bd0559d1b746db8163053c8a7b8079e62997730901ea32a888936b3c77748dd58cf8391d4be1c282ccbd9a"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd21d2000) r1 = open(&(0x7f0000000240)='.\x00', 0x28500, 0x18f) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x1947, 0x0, 0x9}) 41.266594442s ago: executing program 1 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x14) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="fd21", 0x2}], 0x1, 0x1, 0x8a60) preadv(r0, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xfffffffffffffc8b, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x0, 0x1, 'sctp\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) 26.000947661s ago: executing program 32 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x14) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="fd21", 0x2}], 0x1, 0x1, 0x8a60) preadv(r0, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xfffffffffffffc8b, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x0, 0x1, 'sctp\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) 10.288847286s ago: executing program 4 (id=1060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0xc001) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {&(0x7f00000001c0)="f16827f8710e2b21cdd3e87fca0cf15f", 0x10}, {&(0x7f0000000440)="ec1637fd34257bda093d350974f285cf3e0beb054fc0b19160129dd3d921b87bbbea00000100000000000a82e2ce78c5b09872983c406572a971bd42a05b0b74d6cc91f1a23eba1990ebb471775d49a1e2cc8ad84b07ebef18d1fdf8482759c7907b0a2dab6184f9f18e1aba09439fabb43a2bbdb6e8b6c121fdf9d04b53e8b889e3bf1e09ebacf560c7523c4609e0980ffe16a40617b54f67eba7af3f0bb89d32ac84a9ba978187629a0b86b3e4b697adcc22657ea94bcac47e1eed5666f9b5bd82ee485c17fc9800982a9b858630b201e40dd6abfad8a8cc3c27c4a9cc712f246cb0b5429906bf163208", 0xeb}, {0x0}], 0x4, 0xffffff01, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="30e3ff03100001082dbd", @ANYRES32=r6, @ANYBLOB="000000000000000008001615bae555f2ed1cbcf6c00072e168a0131b1eab72613a6134f0227e8090f7824bd428a28f9093acae95ac41fc0c0c97d6eb8b918f2a63e39eaf23559d6dc7546b8ccbccbc3674d1eff806cc21c69d3e1a8141f401200d704aab8f0da26b04000000c0bd69e19829657cde5f2f9d30ccf273", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) r7 = socket(0x15, 0x5, 0x0) getpid() r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fsopen(0x0, 0x1) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 10.042396283s ago: executing program 4 (id=1061): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) close(r0) fgetxattr(r0, &(0x7f0000001500)=ANY=[@ANYBLOB='sy'], 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x200000000000000, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x5, 0x4, 0x7a, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x9, 0x6, '\x00', 0x1}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x80, 0x1, 0x2, '\x00', 0x77}, {0x5, 0xa, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x44}, {0xe, 0x5, 0x4}, {0x8, 0x42, 0x7, '\x00', 0x8}, {0x6, 0x0, 0x2, '\x00', 0x42}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0xb, '\x00', 0x23}, {0x8, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x4, 0x3, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) accept4$unix(r1, 0x0, 0x0, 0x80800) syz_usb_connect(0x0, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402"], 0x0) 8.276827544s ago: executing program 4 (id=1067): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x4000ff, &(0x7f00000000c0)) unshare(0x100000) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2, 0x4c1c, 0xc, 0x3}, 0x30, 0x0) landlock_restrict_self(r4, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = eventfd(0x8000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r8, 0x7, 0x2, r1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000440)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x3, {0x3, 0xa, "94"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x14, 0x1e, "0e1042a4d8fc22c8808b84f4259126ad0fec0ffa4c330c0d7fa19ceb5722"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000180)={0x20, 0x81, 0x1, "b0"}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "5084b3"}, &(0x7f0000000300)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000000340)={0x20, 0x84, 0x1, "d9"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "4e4cf8"}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x54b701, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x0, 0x34a30b42, 0x0, 0x1000, 0x4008000, 0x1002, 0xfffffffffffffffb, 0x80005, 0xa, 0x6, 0x5, 0x8bda, 0xfffffffffffffefe, 0x4, 0x6], 0x25000, 0x316353}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 4.734341836s ago: executing program 4 (id=1078): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000010000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200050028000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000080024"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r1, 0x800a6f2f, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x3, 0x800, 0x9) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) 4.734095661s ago: executing program 0 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.661816575s ago: executing program 0 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x13}, 0x1, 0x0, 0x0, 0x20009805}, 0x4040084) io_uring_setup(0x1d4c, &(0x7f0000000580)={0x0, 0x64b13e, 0x1000, 0x1, 0x58}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000540)={0x40000000}) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r11 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_ifreq(r12, 0x8994, &(0x7f0000000100)={'bond0\x00', @ifru_data=0x0}) fcntl$dupfd(r9, 0x0, r11) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000001c0)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x5, 0x0, 0x0, 0xfffffff8, 0x0, 0xd2, 0xff, 0x1, '\x00', 0xfc}) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa004d0000480000000000069078ac06000000141411830775e000000244100523000000000000000000000000865c0000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, 0x0, 0x0) 4.652945895s ago: executing program 2 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xf3ff}, 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 4.530361372s ago: executing program 2 (id=1084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x30}}, 0xc004) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file1', [], 0xa, "9d7aae09afa59900d1f0595c1a231b26487f2efcb96396d98e2d301a5811f83c926f581df8a5c918da4a7d16ea6fac006ddcb3abea51ba61e43bb0793688a857f63fa923e8d3fd96823f9b55785ed56b1b7460adebc5"}, 0x61) mmap(&(0x7f000053a000/0x4000)=nil, 0x4000, 0x200000b, 0x40010, 0xffffffffffffffff, 0x442f6000) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000800) r2 = io_uring_setup(0x674c, &(0x7f0000000040)={0x0, 0xdc5c, 0x40, 0x2, 0x31b}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010426bd7000fcdbdf251c08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00.'], 0x1c}, 0x1, 0x0, 0x0, 0xcc93f1266b7750fe}, 0x8040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r6 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x3, 0xdd9f83, 0x5, 0x9, 0x100f3, 0xfffffffe, 0x7, 0x722, 0x4, 0x7, 0x5, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socket(0x10, 0x803, 0x0) mq_unlink(&(0x7f0000000140)='/:-\x00') ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r5], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) 4.16769905s ago: executing program 0 (id=1085): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x0, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a", 0x47}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000007c0)=""/82, 0x52}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x2, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001040)={0x6, 0x16f, 0x1, 0x7fff, 0x1, [0x8, 0x8, 0x2, 0x4]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001080), 0x4e2000, 0x0) write$P9_RCREATE(r5, &(0x7f00000010c0)={0x18, 0x73, 0x1, {{0x40, 0x0, 0x4}, 0x10000}}, 0x18) 4.004164949s ago: executing program 3 (id=1086): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3545, 0xa, 0x2, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e32, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x7}) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x14, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x75375000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000040)) r5 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc}}}}}}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@alg={0xe0, 0x10, 0xb83, 0x4070bd25, 0x25dfdbfc, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0x3400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000030) 3.832180858s ago: executing program 3 (id=1087): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x74b, 0x7, 0x6, 0x14210, r0, 0x6, '\x00', 0x0, r1, 0x0, 0x2, 0x2, 0x0, @void, @value, @value=r1}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000140)={0x0, 0xb}) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) getpeername$packet(r1, 0x0, 0x0) 3.322230774s ago: executing program 2 (id=1088): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f89ff00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.247305936s ago: executing program 2 (id=1089): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000009c0)={0x2, 0x1, &(0x7f0000000740)=""/212, &(0x7f0000000840)=""/139, &(0x7f0000000900)=""/137, 0x6000}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000009c0)={0x2, 0x1, &(0x7f0000000740)=""/212, &(0x7f0000000840)=""/139, &(0x7f0000000900)=""/137, 0x6000}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) (async) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) write$dsp(r3, 0x0, 0xffda) (async) write$dsp(r3, 0x0, 0xffda) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) r7 = socket(0x2, 0xa, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000080)={r9, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000080)={r9, 0x2}, 0x8) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x48, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004045) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x4, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015002000000108616dd0040000102030109028e000301004000080b00020103208e090400000001012000092401ffff011500030c2403020404fc02030700ff0904010000010220000904010101010220000924020104f9eb040710240102f1010000000003e20700000409050109000206ff0f08"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 2.910046226s ago: executing program 0 (id=1091): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = accept(r1, 0x0, 0x0) (async) syz_open_dev$ublk_chdev(0x0, 0x0, 0x1030c0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000005800)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000001a00)={0x470, 0x1b, 0x259a5cacebc2a6f7, 0x70bd26, 0x25dfdbff, "", [@nested={0x45d, 0x80, 0x0, 0x1, [@generic="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"]}]}, 0x470}, {&(0x7f0000002e40)=ANY=[@ANYBLOB="10000000290000012dbd70002036df25"], 0x10}], 0x2}, 0x44) 2.862086738s ago: executing program 0 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.829082056s ago: executing program 3 (id=1093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x1, 0x0}) getdents64(r2, &(0x7f00000000c0)=""/21, 0x15) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000080)={0x1, r5}) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x8c) 2.642566517s ago: executing program 0 (id=1096): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 2.5704183s ago: executing program 3 (id=1097): syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_io_uring_setup(0x6a12, &(0x7f0000000180)={0x0, 0xbb0, 0x10003, 0x0, 0x32c}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') pread64(r5, &(0x7f0000000300)=""/246, 0xf6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000100)={{0x2c, @broadcast, 0x4e24, 0x3, 'none\x00', 0xc, 0xff, 0x1}, {@loopback, 0x4e24, 0x1, 0x7ff, 0x0, 0x101}}, 0x44) r7 = eventfd2(0x1, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r7, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="61be49ce73e51b80b03b968574ad760d3a9295f5d7593193c54e6223a9146f1677c4927c174b7ba2372227fdc241322133122da8e2d1a52fb02662b6ef96983ac335a61383c910788616c076df5e9646a771da2579b4586eec5c636aaed49fe5ff92", 0x62}], 0x1, 0x0, 0x0, 0x800300}, 0x2404885d) 2.465817569s ago: executing program 3 (id=1098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000780)={0x1a0003, 0x0, {[0x2683, 0x9, 0x9, 0x8, 0x7, 0x3, 0x8, 0x1]}}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)=@arm64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x1e, 0x4) remap_file_pages(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x7, 0x8000) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000240)={0x0, 0x0, 0x800, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a66, 0xc4, '\x00', @p_u8=&(0x7f0000000100)=0xb}}) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}}, 0x8000) 2.390438769s ago: executing program 4 (id=1099): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0x1d}], 0x1) r2 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0xfb, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYBLOB="c5bdb48371f6c90e7c1b37ea082058d9523e132ae414a596d1473e828d257f9999df32a048a353a0a60275573f", @ANYBLOB="9e7e377c6385a2dd6c42731c5f6eeebcb6951b8356221aa8d4d7997e7576f0c6c5ebd37103b465a22ab29692cb0b11f146d8cf794fb72fa9df5a6fc7fee66334004aff6099a79d08f9bcbf852d4ec4effd8a978ff23f3f203c4c31d0b27f6278a2c7690c093c7fba12e098afcf0ca2f271eb3268ed52357b67f050a2281ea479e4cb2068bde68fd6ec3a3edbf99f27212887a6c6122e7e1a0b8d0d9f2e7b16ae3edf9987239b335907e3d2fedcbd7f0536c46736b3e9b1fae92cd3b2528c8f7fb3eb72a8fb4aab62c8fb3ad9b8642116a47fe84860fbe014e6", @ANYBLOB="02e89900c762d9203312f2e2fe2b3a421969b4b4b32379034625349eca2f5e88162dacd08c443f53e4aece1ce8b27573c21a6c01f4b94949c52ea335233ac7a0c24a842c674659ac7f85ecde496f4ae426532a1f4c71e8016bf027eda092a4962ea2c40d7d450be43440be6177e6aa87efaac0138c866b0e29faaa3b2e1102afef34bc0af5f226c8e8281b1be05905c03c518f7678e29e5d863462e1ff033ddff89f9030762c04e6a73fb47ed762ff9627d87c4d8c2fbbbe1764e77f2b7cdc8703f1942234fe7201deb4a95bd5c7e9b750943b83c3"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200001b96231b06e53f87010000002a900683749e821d87266c9d2099244900106b5eab8b92156399e1960de2e7642bca65aa"], 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000c4000/0x3000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x41, 0x1e}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005800000000002f90eb000000000000000000000010000800000086dd080088be00000000000000000000000000000000080022eb00000001200000000200000000000000fffd00000800657100000000"], 0x0) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000500000005000600000000000500060009000000440001800800030001000000080003000200000014000200626f6e645f736c6176655f30800000001c00020074756e6c30000000000000000000000008000100", @ANYRES32, @ANYBLOB="08000900010000000500070005"], 0x78}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20a01, 0x0) 2.222887585s ago: executing program 3 (id=1100): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000002340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3, {0xa, 0x4e20, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}}}, 0x80) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 2.137956707s ago: executing program 5 (id=1101): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r2 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="6e2d5172e84818eb3a49e7368f7c6ab0c827696572005b5f19f9f8016a3a3b398cbe6d54e8336cfd71c48513d59b44b314c8ee44c283f3a54dd283dcb3a2a39fa26b912fde0822c9edf885b4a3cbc9042bd41785d2e0c3553b673e72e03fab762259c9c824e34eb100677e70c773365c96e22c2e7898de3f1ec2450394e7714b7b030a2ae82979116cec5cf9aef30ae5d83e64989aa509a02eb77e02f01c1692f4388d92bc4e7f18f7d10e3a44fc91bbc6c217d881ef", 0xb6, r0}, 0x68) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 1.332441059s ago: executing program 4 (id=1102): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@loopback, 0x6e, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="44eb5214594078e70229a0a8caa6ced3216da5eb3c19c93af9d3f015c999799d63a2427df738ebcb65dff571e93796d1a5e962f1d96febfeec5664d9c1207f13bdf371671743f1f254f5761db5cde4b76300d1326d6584aadf9bf56692866031fc885bbb8a", 0x65, 0xfffffffffffffff9) r7 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "6dfd4bbcb147273497881a7b605cdf2e07711f6d5c7f16f32366dba931f5e0a2333c6c71285f48fbfcb771f0477ca7cdbc67a772b72f9cfa991e5d3068c42dde", 0x1e}, 0x48, 0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc00) r11 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x68, 0xba, 0x20, 0x2040, 0xb210, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x9, 0x20, 0xd2, "", [{{0x9, 0x4, 0xe0, 0x1, 0x0, 0x37, 0xcc, 0xf2}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r11, &(0x7f00000021c0)={0x14, 0x0, &(0x7f0000002180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000005080)={0x44, &(0x7f0000004d80)={0x0, 0xf, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r10) r12 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r12, 0x1) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.246275371s ago: executing program 5 (id=1103): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000001340)={[&(0x7f0000001180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000001280)='^\\@\x00', &(0x7f00000012c0)='net/nf_conntrack_expect\x00', &(0x7f0000001300)='/dev/rfkill\x00']}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/nf_conntrack_expect\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.078199349s ago: executing program 5 (id=1104): r0 = socket$inet6(0xa, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x70bd29, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000440)=0x1000, 0x4) rseq(&(0x7f0000002340)={0x0, 0x0, &(0x7f0000002200)={0x0, 0x2, 0x8, 0x1000, 0x2}}, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d7c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x3, 0x0, 0x0, {0x0, 0x80000000, 0x0, 0x2, 0x0, 0x3, 0x400, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002400)=@mmap={0x6, 0x6, 0x4, 0x1, 0x1c94, {0x0, 0xea60}, {0x3, 0x2, 0x7, 0xdb, 0x5, 0x2, "fe690b70"}, 0x0, 0x1, {}, 0x1}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0xb0000018}) open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000020"], 0xff3c, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x2, 0x3, 0x2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 971.06566ms ago: executing program 5 (id=1105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04f424544c3f8f00000000ffff0000003a0000000800030000", @ANYRES32, @ANYBLOB="04005b00"], 0x20}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 813.540466ms ago: executing program 5 (id=1106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 774.807192ms ago: executing program 5 (id=1107): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x10140) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0xffffffee, 0xe3, 0x300f, 0x0, 0x0, 0x8, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0xa) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) 94.161044ms ago: executing program 2 (id=1108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04f424544c3f8f00000000ffff0000003a0000000800030000", @ANYRES32, @ANYBLOB="04005b00"], 0x20}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 0s ago: executing program 2 (id=1109): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000007, 0x40, 0x800000002, 0x71b, 0x408, 0x8, 0x80, 0x11, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x3, 0x2, 0x4, 0xffffffffffffffff], 0x0, 0x194d42}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@local, @empty}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103afffe8000000000000000000000000000bbff02000000020000000000000000000186009078010002000000000000000000"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010003704fdffffff0900000000f90347", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): device number 59 using dummy_hcd [ 203.968565][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.007135][ T5690] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.016307][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.038111][ T5690] usb 5-1: config 0 descriptor?? [ 204.045862][ T5690] hub 5-1:0.0: USB hub found [ 204.086883][ T5623] Bluetooth: hci2: command tx timeout [ 204.140565][ T5356] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 204.150104][ T5356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.168048][ T5356] usb 4-1: Product: syz [ 204.177044][ T5356] usb 4-1: Manufacturer: syz [ 204.186083][ T5356] usb 4-1: SerialNumber: syz [ 204.451452][ T5690] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 204.470366][ T5690] usbhid 5-1:0.0: can't add hid device: -71 [ 204.483545][ T5690] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.537440][ T5690] usb 5-1: USB disconnect, device number 48 [ 204.849331][ T5356] rtl8150 4-1:1.0: couldn't reset the device [ 204.855845][ T5356] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 204.871345][ T5356] usb 4-1: USB disconnect, device number 59 [ 204.966957][ T5690] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 204.974619][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 205.137552][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 205.142798][ T5690] usb 5-1: Using ep0 maxpacket: 32 [ 205.151582][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.163439][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.173774][ T10] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 205.183198][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.193042][ T5690] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.203719][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.213816][ T10] usb 2-1: config 0 descriptor?? [ 205.223491][ T10] as10x_usb: device has been detected [ 205.230699][ T5690] usb 5-1: config 0 descriptor?? [ 205.236611][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 205.249079][ T5690] hub 5-1:0.0: USB hub found [ 205.266049][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 205.289961][ T10] as10x_usb: error during firmware upload part1 [ 205.298869][ T10] Registered device nBox DVB-T Dongle [ 205.429474][ T10] usb 2-1: USB disconnect, device number 53 [ 205.453194][ T5690] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 205.498270][ T10] Unregistered device nBox DVB-T Dongle [ 205.502318][ T10] as10x_usb: device has been disconnected [ 205.656555][ T5690] usbhid 5-1:0.0: can't add hid device: -71 [ 205.676502][ T5690] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.731998][ T5690] usb 5-1: USB disconnect, device number 49 [ 205.872297][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 205.988584][T12255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.206770][ T5690] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 206.223106][T12320] netlink: 'syz.0.790': attribute type 13 has an invalid length. [ 206.387284][ T5690] usb 5-1: Using ep0 maxpacket: 32 [ 206.406449][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.444194][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.481851][ T5690] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.511427][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.539532][ T5690] usb 5-1: config 0 descriptor?? [ 206.552728][ T5690] hub 5-1:0.0: USB hub found [ 206.691711][ T519] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.753837][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.780888][ T519] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.787292][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.839077][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.881468][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.895775][ T519] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.997215][ T519] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.183744][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.191817][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.199458][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.207996][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.216889][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.289870][ T519] bridge_slave_1: left allmulticast mode [ 207.306734][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.315987][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.355271][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.387071][ T519] bridge_slave_0: left allmulticast mode [ 207.400586][ T5690] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 207.419916][ T519] bridge_slave_0: left promiscuous mode [ 207.442078][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.453227][ T5690] usbhid 5-1:0.0: can't add hid device: -71 [ 207.470115][ T5690] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 207.487967][ T519] team0: left allmulticast mode [ 207.506594][ T519] team_slave_0: left allmulticast mode [ 207.518210][ T5690] usb 5-1: USB disconnect, device number 50 [ 207.536153][ T519] team_slave_1: left allmulticast mode [ 207.877909][ T519] bond1 (unregistering): (slave geneve2): Releasing active interface [ 207.938631][ T519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.977539][ T519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.998511][ T519] bond0 (unregistering): Released all slaves [ 208.014319][ T519] bond1 (unregistering): Released all slaves [ 208.030807][ T519] bond2 (unregistering): Released all slaves [ 208.100354][ T519] tipc: Left network mode [ 208.278672][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 208.401232][ T519] hsr_slave_0: left promiscuous mode [ 208.411883][ T519] hsr_slave_1: left promiscuous mode [ 208.417826][ T519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.425327][ T519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.441653][ T519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.464195][ T519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.494969][ T519] veth1_macvtap: left promiscuous mode [ 208.507930][ T519] veth0_macvtap: left promiscuous mode [ 208.519087][ T519] veth1_vlan: left promiscuous mode [ 208.553841][ T519] veth0_vlan: left promiscuous mode [ 208.577042][ T5752] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 208.783490][ T5752] usb 5-1: Using ep0 maxpacket: 16 [ 208.795009][ T5752] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 208.811149][ T5752] usb 5-1: config 0 has no interface number 0 [ 208.836953][ T5752] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 208.866895][ T5675] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 208.877233][ T5752] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 208.904656][ T5752] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 208.919685][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.937137][ T5752] usb 5-1: Product: syz [ 208.945946][ T5752] usb 5-1: Manufacturer: syz [ 208.950677][ T5711] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 208.965199][ T5752] usb 5-1: SerialNumber: syz [ 209.003661][ T5752] usb 5-1: config 0 descriptor?? [ 209.018422][T12464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.035184][T12464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.051868][ T5675] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 209.090089][ T5675] usb 1-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 209.106836][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 209.122983][ T519] team0 (unregistering): Port device team_slave_1 removed [ 209.129787][ T5711] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 209.131506][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.151953][ T5675] usb 1-1: Product: 䨳ì…﷡巃ᖴힾ䶦æ¸â¯ƒî©’ï¢¥ïªšé‡ [ 209.160960][ T519] team0 (unregistering): Port device team_slave_0 removed [ 209.168287][ T5711] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 209.177845][ T5675] usb 1-1: Manufacturer: Ї [ 209.183776][ T5675] usb 1-1: SerialNumber: syz [ 209.199013][ T5711] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 209.223342][ T5711] usb 2-1: config 0 has no interface number 1 [ 209.235478][ T5711] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 209.262795][ T5711] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 209.276896][T12464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.286773][ T5623] Bluetooth: hci0: command tx timeout [ 209.297600][T12464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.306837][ T5711] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.339609][ T5711] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.388610][ T5711] usb 2-1: config 0 interface 125 has no altsetting 0 [ 209.417315][ T5711] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 209.427997][ T5675] usb 1-1: 1:1 : bogus bTerminalLink 16 [ 209.438996][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.469157][ T5711] usb 2-1: Product: syz [ 209.483797][ T5711] usb 2-1: Manufacturer: syz [ 209.490775][ T5711] usb 2-1: SerialNumber: syz [ 209.508601][ T5711] usb 2-1: config 0 descriptor?? [ 209.538551][ T5752] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 209.739268][T12464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.779492][T12464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.815053][ T5752] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 115 [ 209.910942][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.937923][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.954248][T12391] bridge_slave_0: entered allmulticast mode [ 209.964517][T12391] bridge_slave_0: entered promiscuous mode [ 209.988840][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.014300][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.040425][T12391] bridge_slave_1: entered allmulticast mode [ 210.059991][T12391] bridge_slave_1: entered promiscuous mode [ 210.145192][T12391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.179830][T12391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.264771][T12391] team0: Port device team_slave_0 added [ 210.286566][T12391] team0: Port device team_slave_1 added [ 210.349912][T12391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.367639][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.436261][ T5675] usb 1-1: unit 1: unexpected type 0x0d [ 210.443787][T12391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.457636][ T5675] usb 1-1: unit 0 not found! [ 210.465815][ T5356] usb 5-1: USB disconnect, device number 51 [ 210.507935][T12391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.541453][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.598257][ T5675] usb 1-1: USB disconnect, device number 51 [ 210.630239][T12391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.652687][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.692311][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 210.808952][T12391] hsr_slave_0: entered promiscuous mode [ 210.830503][T12391] hsr_slave_1: entered promiscuous mode [ 211.242783][T12781] usb usb7: usbfs: process 12781 (syz.4.803) did not claim interface 0 before use [ 211.367368][ T5623] Bluetooth: hci0: command tx timeout [ 211.529981][T12391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.558211][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.580608][T12391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.602399][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.626072][T12391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.648986][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.669961][T12391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.694200][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.826246][T12824] netlink: 'syz.0.804': attribute type 7 has an invalid length. [ 211.835612][T12825] usb usb1: usbfs: process 12825 (syz.0.804) did not claim interface 63 before use [ 211.871252][T12391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.886982][T12824] netlink: 'syz.0.804': attribute type 8 has an invalid length. [ 211.912304][T12391] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.935893][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.943103][ T9809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.004232][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.011399][ T9809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.055375][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 212.084822][T12832] netlink: 3 bytes leftover after parsing attributes in process `syz.0.805'. [ 212.213117][T12391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.295801][T12391] veth0_vlan: entered promiscuous mode [ 212.324954][T12391] veth1_vlan: entered promiscuous mode [ 212.399784][T12391] veth0_macvtap: entered promiscuous mode [ 212.424399][T12391] veth1_macvtap: entered promiscuous mode [ 212.449077][ T5356] usb 2-1: USB disconnect, device number 54 [ 212.490377][T12391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.544118][T12391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.570451][T12858] FAULT_INJECTION: forcing a failure. [ 212.570451][T12858] name failslab, interval 1, probability 0, space 0, times 0 [ 212.596648][ T519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.613877][T12858] CPU: 0 UID: 0 PID: 12858 Comm: syz.1.807 Not tainted syzkaller #0 PREEMPT(full) [ 212.613907][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.613921][T12858] Call Trace: [ 212.613929][T12858] [ 212.613937][T12858] dump_stack_lvl+0xe8/0x150 [ 212.613975][T12858] should_fail_ex+0x40c/0x560 [ 212.614001][T12858] should_failslab+0xa8/0x100 [ 212.614023][T12858] __kmalloc_cache_noprof+0x88/0x660 [ 212.614052][T12858] ? ip_set_pernet+0x23/0x240 [ 212.614082][T12858] ? ip_set_create+0x38f/0x1a40 [ 212.614102][T12858] ip_set_create+0x38f/0x1a40 [ 212.614122][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.614148][T12858] ? __pfx_ip_set_create+0x10/0x10 [ 212.614183][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.614205][T12858] ? lock_release+0x4b/0x3c0 [ 212.614223][T12858] ? __nla_parse+0x40/0x60 [ 212.614251][T12858] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 212.614270][T12858] ? unwind_get_return_address+0x4d/0x90 [ 212.614295][T12858] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 212.614321][T12858] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.614352][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.614375][T12858] ? __schedule+0x17ef/0x56c0 [ 212.614406][T12858] netlink_rcv_skb+0x226/0x4a0 [ 212.614428][T12858] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.614448][T12858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.614473][T12858] ? bpf_lsm_capable+0x9/0x20 [ 212.614490][T12858] ? security_capable+0x7e/0x2c0 [ 212.614511][T12858] nfnetlink_rcv+0x2b9/0x28c0 [ 212.614530][T12858] ? preempt_schedule_common+0x82/0xd0 [ 212.614557][T12858] ? __dev_queue_xmit+0x29b/0x37f0 [ 212.614580][T12858] ? preempt_schedule_thunk+0x16/0x40 [ 212.614609][T12858] ? __local_bh_enable_ip+0xd0/0x130 [ 212.614635][T12858] ? __local_bh_enable_ip+0xe1/0x130 [ 212.614680][T12858] ? __dev_queue_xmit+0x29b/0x37f0 [ 212.614703][T12858] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 212.614726][T12858] ? sock_sendmsg_nosec+0x13a/0x180 [ 212.614752][T12858] ? ____sys_sendmsg+0x54e/0x850 [ 212.614778][T12858] ? __dev_queue_xmit+0x29b/0x37f0 [ 212.614802][T12858] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 212.614824][T12858] ? __pfx___dev_queue_xmit+0x10/0x10 [ 212.614851][T12858] ? ref_tracker_free+0x689/0x830 [ 212.614878][T12858] ? __pfx_ref_tracker_free+0x10/0x10 [ 212.614909][T12858] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.614937][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.614960][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.614982][T12858] ? trace_irq_enable+0x3b/0x140 [ 212.615013][T12858] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 212.615041][T12858] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 212.615081][T12858] netlink_unicast+0x7bb/0x940 [ 212.615105][T12858] netlink_sendmsg+0x813/0xb40 [ 212.615132][T12858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.615154][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.615182][T12858] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 212.615208][T12858] ? lock_release+0x4b/0x3c0 [ 212.615227][T12858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.615250][T12858] sock_sendmsg_nosec+0x13a/0x180 [ 212.615278][T12858] ____sys_sendmsg+0x54e/0x850 [ 212.615302][T12858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.615324][T12858] ? lock_release+0x4b/0x3c0 [ 212.615344][T12858] ? import_iovec+0x73/0xa0 [ 212.615375][T12858] ___sys_sendmsg+0x2a5/0x360 [ 212.615395][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.615417][T12858] ? get_pid_task+0x20/0x1f0 [ 212.615437][T12858] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.615461][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.615496][T12858] ? __fget_files+0x2a/0x420 [ 212.615525][T12858] ? __fget_files+0x3a2/0x420 [ 212.615560][T12858] __x64_sys_sendmsg+0x1b1/0x290 [ 212.615583][T12858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.615612][T12858] ? rcu_is_watching+0x15/0xb0 [ 212.615634][T12858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.615655][T12858] do_syscall_64+0x174/0x580 [ 212.615674][T12858] ? trace_irq_disable+0x3b/0x140 [ 212.615704][T12858] ? clear_bhb_loop+0x40/0x90 [ 212.615727][T12858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.615747][T12858] RIP: 0033:0x7fb58e59ce59 [ 212.615765][T12858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.615783][T12858] RSP: 002b:00007fb58f40c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.615806][T12858] RAX: ffffffffffffffda RBX: 00007fb58e815fa0 RCX: 00007fb58e59ce59 [ 212.615822][T12858] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 212.615835][T12858] RBP: 00007fb58f40c090 R08: 0000000000000000 R09: 0000000000000000 [ 212.615848][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.615861][T12858] R13: 00007fb58e816038 R14: 00007fb58e815fa0 R15: 00007fb58e93fa48 [ 212.615884][T12858] [ 213.225010][ T6248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.234325][ T6248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.284884][ T6248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.397990][ T6255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.411969][ T6255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.447954][ T5623] Bluetooth: hci0: command tx timeout [ 213.466398][T12892] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.502020][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.520143][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.528257][ T5711] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.698180][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 213.713738][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 140 [ 213.751601][ T5711] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.761949][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.771486][ T5711] usb 3-1: Product: syz [ 213.775783][ T5711] usb 3-1: Manufacturer: syz [ 213.780858][ T5711] usb 3-1: SerialNumber: syz [ 213.789657][ T5711] usb 3-1: config 0 descriptor?? [ 213.799052][T12872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.022495][T12872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.154591][T12878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.167494][T12878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.187227][T12878] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.218978][T12878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.226926][T12878] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.266644][T12878] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.281106][T12872] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 214.320711][ T5675] usb 3-1: USB disconnect, device number 26 [ 214.410203][T12955] netlink: 'syz.3.818': attribute type 8 has an invalid length. [ 214.422814][T12878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.441545][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.461543][T12878] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.474811][T12878] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.736758][ T5356] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 214.795382][T12988] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 214.926300][T12988] syzkaller0: left promiscuous mode [ 214.941573][ T5356] usb 5-1: Using ep0 maxpacket: 32 [ 214.984864][ T5356] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 215.019657][ T5356] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 215.032805][ T5356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.056517][ T5356] usb 5-1: Product: syz [ 215.073885][ T5356] usb 5-1: Manufacturer: syz [ 215.086915][ T5356] usb 5-1: SerialNumber: syz [ 215.105584][ T5356] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 215.182806][T13006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 215.341775][T13006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.446765][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.550489][T13006] loop8: detected capacity change from 0 to 7 [ 215.673748][T13006] Dev loop8: unable to read RDB block 7 [ 215.688380][T13006] loop8: unable to read partition table [ 215.732388][T13006] loop8: partition table beyond EOD, truncated [ 215.744423][T13006] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 215.840334][T13009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.051328][T12948] tap0: tun_chr_ioctl cmd 1074025677 [ 216.061643][T12948] tap0: linktype set to 774 [ 216.068999][T12948] tap0: tun_chr_ioctl cmd 1074025677 [ 216.074594][T12948] tap0: linktype set to 804 [ 216.246800][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.248293][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.259185][ T4941] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.487013][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.913690][ T5356] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 217.070664][ T5356] usb 5-1: USB disconnect, device number 52 [ 217.183891][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.546757][ T5356] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 217.656874][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 217.706762][ T5356] usb 5-1: Using ep0 maxpacket: 16 [ 217.715860][ T5356] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.730607][ T5356] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 217.751409][ T5356] usb 5-1: string descriptor 0 read error: -22 [ 217.760387][ T5356] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 217.771307][ T5356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.840585][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.856376][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.868121][ T10] usb 2-1: Product: syz [ 217.872444][ T10] usb 2-1: Manufacturer: syz [ 217.883298][ T10] usb 2-1: SerialNumber: syz [ 217.903215][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.938489][ T5752] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.072509][T13172] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 218.096539][T13172] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 218.180463][ T10] usb 5-1: USB disconnect, device number 53 [ 218.336882][ T4941] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.356872][ T5675] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 218.521253][ T5675] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 218.544945][ T5675] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.568699][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.580870][ T5675] usb 3-1: config 2 interface 0 has no altsetting 0 [ 218.594104][ T5675] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 218.605562][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.613774][ T5675] usb 3-1: Product: syz [ 218.618806][ T5675] usb 3-1: Manufacturer: syz [ 218.623680][ T5675] usb 3-1: SerialNumber: syz [ 218.677205][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 218.836824][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 218.848136][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 218.873358][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.889788][ T5675] usb 3-1: USB disconnect, device number 27 [ 218.938771][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 218.979820][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.996231][ T10] usb 4-1: config 0 descriptor?? [ 219.037052][ T5711] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 219.048398][ T5752] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 219.058383][ T5752] ath9k_htc: Failed to initialize the device [ 219.088985][ T5752] usb 2-1: ath9k_htc: USB layer deinitialized [ 219.207225][ T5711] usb 5-1: Invalid ep0 maxpacket: 64 [ 219.221821][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.237216][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.252896][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.266646][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.281756][T13193] tc_dump_action: action bad kind [ 219.367380][ T5711] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 219.526862][ T5711] usb 5-1: Invalid ep0 maxpacket: 64 [ 219.550557][ T5711] usb usb5-port1: attempt power cycle [ 219.850655][ T10] hid_parser_main: 2 callbacks suppressed [ 219.850710][ T10] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 219.900111][ T10] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x4 [ 219.927197][ T5711] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 219.945771][ T10] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x2 [ 219.975012][ T10] corsair-cpro 0003:1B1C:0C10.0012: item fetching failed at offset 4/5 [ 219.985750][ T5711] usb 5-1: Invalid ep0 maxpacket: 64 [ 220.018474][ T10] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -22 [ 220.136822][ T5711] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 220.187433][ T5711] usb 5-1: Invalid ep0 maxpacket: 64 [ 220.193868][ T5711] usb usb5-port1: unable to enumerate USB device [ 220.407222][ T4941] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.646820][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 221.036816][ T5711] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 221.210561][ T5711] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 221.218887][ T5711] usb 1-1: config 0 has no interface number 0 [ 221.225218][ T5711] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.237884][ T5711] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 221.248672][ T5711] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 221.260443][ T5711] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 221.271926][ T5711] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 221.283399][ T5711] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.296636][ T5711] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 221.305958][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.324674][ T5711] usb 1-1: config 0 descriptor?? [ 221.337739][T13287] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 221.348270][T13287] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 221.364307][ T5711] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 221.436162][ T5675] usb 4-1: USB disconnect, device number 60 [ 221.458521][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 221.512000][T13321] vlan2: entered promiscuous mode [ 221.517489][T13321] bridge0: entered promiscuous mode [ 221.566006][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.583920][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.623100][ T5711] usb 1-1: USB disconnect, device number 52 [ 221.636946][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 221.651883][ T5711] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 221.678400][ T10] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 221.699900][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.716878][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 221.740816][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 221.751675][ T10] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 221.766458][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.783396][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 221.824460][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 221.850788][ T10] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 221.887988][ T5675] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 221.897743][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.911166][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 221.937056][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 221.954989][ T10] usb 3-1: string descriptor 0 read error: -22 [ 221.964280][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.982882][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.016217][ T10] adutux 3-1:168.0: interrupt endpoints not found [ 222.037451][ T5711] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 222.076789][ T5675] usb 4-1: Using ep0 maxpacket: 8 [ 222.090989][ T5675] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.100403][T13363] netlink: 32 bytes leftover after parsing attributes in process `syz.4.859'. [ 222.109496][ T5675] usb 4-1: config 179 has no interface number 0 [ 222.109543][ T5675] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 222.109573][ T5675] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 222.109603][ T5675] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.109630][ T5675] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 222.109684][ T5675] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 222.109735][ T5675] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 222.109759][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.197862][T13329] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 222.228053][T13294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.250275][T13294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.260502][ T5711] usb 1-1: device descriptor read/64, error -71 [ 222.276343][ T808] usb 3-1: USB disconnect, device number 28 [ 222.374083][T13380] FAULT_INJECTION: forcing a failure. [ 222.374083][T13380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.406319][T13380] CPU: 1 UID: 0 PID: 13380 Comm: syz.4.860 Not tainted syzkaller #0 PREEMPT(full) [ 222.406373][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.406386][T13380] Call Trace: [ 222.406394][T13380] [ 222.406403][T13380] dump_stack_lvl+0xe8/0x150 [ 222.406439][T13380] should_fail_ex+0x40c/0x560 [ 222.406459][T13380] _copy_from_iter+0x1d3/0x1660 [ 222.406481][T13380] ? rcu_is_watching+0x15/0xb0 [ 222.406522][T13380] ? __pfx__copy_from_iter+0x10/0x10 [ 222.406548][T13380] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 222.406587][T13380] ? netlink_sendmsg+0x650/0xb40 [ 222.406605][T13380] ? skb_put+0x112/0x210 [ 222.406619][T13380] netlink_sendmsg+0x6c0/0xb40 [ 222.406638][T13380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.406673][T13380] ? rcu_is_watching+0x15/0xb0 [ 222.406697][T13380] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 222.406723][T13380] ? lock_release+0x4b/0x3c0 [ 222.406742][T13380] ? arch_stack_walk+0xfb/0x150 [ 222.406767][T13380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.406792][T13380] sock_sendmsg_nosec+0x13a/0x180 [ 222.406836][T13380] ____sys_sendmsg+0x54e/0x850 [ 222.406863][T13380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.406885][T13380] ? lock_release+0x4b/0x3c0 [ 222.406905][T13380] ? import_iovec+0x73/0xa0 [ 222.406937][T13380] ___sys_sendmsg+0x2a5/0x360 [ 222.406952][T13380] ? rcu_is_watching+0x15/0xb0 [ 222.406967][T13380] ? get_pid_task+0x20/0x1f0 [ 222.407003][T13380] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.407027][T13380] ? rcu_is_watching+0x15/0xb0 [ 222.407062][T13380] ? __fget_files+0x2a/0x420 [ 222.407091][T13380] ? __fget_files+0x3a2/0x420 [ 222.407125][T13380] __x64_sys_sendmsg+0x1b1/0x290 [ 222.407148][T13380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.407176][T13380] ? rcu_is_watching+0x15/0xb0 [ 222.407200][T13380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.407222][T13380] do_syscall_64+0x174/0x580 [ 222.407242][T13380] ? trace_irq_disable+0x3b/0x140 [ 222.407295][T13380] ? clear_bhb_loop+0x40/0x90 [ 222.407318][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.407337][T13380] RIP: 0033:0x7fa0e979ce59 [ 222.407355][T13380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.407372][T13380] RSP: 002b:00007fa0ea5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.407394][T13380] RAX: ffffffffffffffda RBX: 00007fa0e9a15fa0 RCX: 00007fa0e979ce59 [ 222.407410][T13380] RDX: 0000000000008000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 222.407423][T13380] RBP: 00007fa0ea5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 222.407435][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.407446][T13380] R13: 00007fa0e9a16038 R14: 00007fa0e9a15fa0 R15: 00007fa0e9b3fa48 [ 222.407470][T13380] [ 222.737902][ T5711] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 222.887259][ T5711] usb 1-1: device descriptor read/64, error -71 [ 222.898191][T13374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.936196][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.950485][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.997519][ T5711] usb usb1-port1: attempt power cycle [ 223.346942][ T5711] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 223.367458][ T5711] usb 1-1: device descriptor read/8, error -71 [ 223.396858][ T5675] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 223.556806][ T5675] usb 3-1: Using ep0 maxpacket: 8 [ 223.565595][ T5675] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 223.575177][ T5675] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.601605][ T5675] usb 3-1: config 0 has no interface number 0 [ 223.616761][ T5711] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 223.620183][ T5675] usb 3-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.667543][ T5675] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 223.677603][ T5711] usb 1-1: device descriptor read/8, error -71 [ 223.685453][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.705669][ T5675] usb 3-1: Product: syz [ 223.719689][ T5675] usb 3-1: Manufacturer: syz [ 223.733399][ T5675] usb 3-1: SerialNumber: syz [ 223.747754][ T5675] usb 3-1: config 0 descriptor?? [ 223.817230][ T5711] usb usb1-port1: unable to enumerate USB device [ 224.023610][T13411] netlink: 'syz.2.862': attribute type 2 has an invalid length. [ 224.109173][ T5675] ath6kl: Failed to submit usb control message: -71 [ 224.126313][ T5675] ath6kl: unable to send the bmi data to the device: -71 [ 224.138239][ T5675] ath6kl: Unable to send get target info: -71 [ 224.148127][ T5675] ath6kl: Failed to init ath6kl core: -71 [ 224.157331][ T5675] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 224.190483][ T5675] usb 3-1: USB disconnect, device number 29 [ 224.416875][ T5356] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 224.566769][ T5356] usb 5-1: Using ep0 maxpacket: 16 [ 224.574618][ T5356] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.588201][ T5356] usb 5-1: config 1 has an invalid interface number: 237 but max is 0 [ 224.596750][ T5356] usb 5-1: config 1 has no interface number 0 [ 224.603283][ T5356] usb 5-1: config 1 interface 237 has no altsetting 0 [ 224.617181][ T5356] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 224.627503][ T5356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.635845][ T5356] usb 5-1: Product: syz [ 224.641624][ T5356] usb 5-1: Manufacturer: syz [ 224.646369][ T5356] usb 5-1: SerialNumber: syz [ 224.656515][ T5752] usb 4-1: USB disconnect, device number 61 [ 224.656690][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 224.670784][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.773387][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.788952][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.793366][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 224.887376][T13490] batadv_slave_0: Caught tx_queue_len zero misconfig [ 224.908978][ T5356] ipaq 5-1:1.237: PocketPC PDA converter detected [ 224.922439][ T5356] ipaq 5-1:1.237: probe with driver ipaq failed with error -71 [ 224.939258][ T5356] usb 5-1: USB disconnect, device number 58 [ 225.034312][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.870'. [ 225.049983][T13509] FAULT_INJECTION: forcing a failure. [ 225.049983][T13509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.084156][T13509] CPU: 0 UID: 0 PID: 13509 Comm: syz.2.871 Not tainted syzkaller #0 PREEMPT(full) [ 225.084190][T13509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.084200][T13509] Call Trace: [ 225.084206][T13509] [ 225.084212][T13509] dump_stack_lvl+0xe8/0x150 [ 225.084233][T13509] should_fail_ex+0x40c/0x560 [ 225.084252][T13509] _copy_from_iter+0x1d3/0x1660 [ 225.084274][T13509] ? rcu_is_watching+0x15/0xb0 [ 225.084293][T13509] ? __pfx__copy_from_iter+0x10/0x10 [ 225.084310][T13509] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 225.084335][T13509] ? netlink_sendmsg+0x650/0xb40 [ 225.084352][T13509] ? skb_put+0x112/0x210 [ 225.084366][T13509] netlink_sendmsg+0x6c0/0xb40 [ 225.084391][T13509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.084407][T13509] ? rcu_is_watching+0x15/0xb0 [ 225.084423][T13509] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 225.084442][T13509] ? lock_release+0x4b/0x3c0 [ 225.084455][T13509] ? arch_stack_walk+0xfb/0x150 [ 225.084474][T13509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.084491][T13509] sock_sendmsg_nosec+0x13a/0x180 [ 225.084525][T13509] ____sys_sendmsg+0x54e/0x850 [ 225.084541][T13509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.084569][T13509] ? lock_release+0x4b/0x3c0 [ 225.084583][T13509] ? import_iovec+0x73/0xa0 [ 225.084603][T13509] ___sys_sendmsg+0x2a5/0x360 [ 225.084617][T13509] ? rcu_is_watching+0x15/0xb0 [ 225.084631][T13509] ? get_pid_task+0x20/0x1f0 [ 225.084645][T13509] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.084661][T13509] ? rcu_is_watching+0x15/0xb0 [ 225.084684][T13509] ? __fget_files+0x2a/0x420 [ 225.084704][T13509] ? __fget_files+0x3a2/0x420 [ 225.084727][T13509] __x64_sys_sendmsg+0x1b1/0x290 [ 225.084742][T13509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.084761][T13509] ? rcu_is_watching+0x15/0xb0 [ 225.084776][T13509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.084790][T13509] do_syscall_64+0x174/0x580 [ 225.084802][T13509] ? trace_irq_disable+0x3b/0x140 [ 225.084823][T13509] ? clear_bhb_loop+0x40/0x90 [ 225.084850][T13509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.084863][T13509] RIP: 0033:0x7f956959ce59 [ 225.084876][T13509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.084889][T13509] RSP: 002b:00007f956a36e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.084905][T13509] RAX: ffffffffffffffda RBX: 00007f9569815fa0 RCX: 00007f956959ce59 [ 225.084915][T13509] RDX: 0000000000008000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 225.084924][T13509] RBP: 00007f956a36e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.084951][T13509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.084960][T13509] R13: 00007f9569816038 R14: 00007f9569815fa0 R15: 00007f956993fa48 [ 225.084977][T13509] [ 225.427003][ T809] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 225.527485][T13518] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 225.611587][ T809] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 225.623737][T13519] bond2: (slave bridge2): making interface the new active one [ 225.631839][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.693027][T13519] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 225.706220][ T809] usb 4-1: config 0 descriptor?? [ 226.055267][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.076454][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.953220][T13600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.882'. [ 227.103782][T13611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.884'. [ 227.299946][ T5675] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 227.374231][T13621] binder: 13620:13621 ioctl 400c620e 200000000000 returned -22 [ 227.476813][ T5675] usb 1-1: Using ep0 maxpacket: 16 [ 227.495232][T13622] binder: 13620:13622 ioctl c0306201 2000000004c0 returned -14 [ 227.499107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.536770][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.548418][ T5675] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 227.571975][ T5675] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 227.582423][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.612980][ T5675] usb 1-1: Product: syz [ 227.624186][ T5675] usb 1-1: Manufacturer: syz [ 227.646567][ T5675] usb 1-1: SerialNumber: syz [ 227.850461][ T5711] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 228.014834][ T5675] gspca_main: 093a:260e too many config [ 228.024087][ T5711] usb 5-1: device descriptor read/64, error -71 [ 228.077046][ T5675] usb 1-1: USB disconnect, device number 57 [ 228.125483][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 228.125503][ T30] audit: type=1804 audit(1782052709.165:508): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.890" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=977 res=1 errno=0 [ 228.210332][ T30] audit: type=1800 audit(1782052709.165:509): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.890" name="cgroup.controllers" dev="tmpfs" ino=977 res=0 errno=0 [ 228.272871][ T30] audit: type=1800 audit(1782052709.165:510): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.890" name="cgroup.controllers" dev="tmpfs" ino=977 res=0 errno=0 [ 228.297031][ T5711] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 228.486970][ T5711] usb 5-1: device descriptor read/64, error -71 [ 228.506783][ T5675] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 228.607015][ T5711] usb usb5-port1: attempt power cycle [ 228.629474][ T809] usb 4-1: Cannot read MAC address [ 228.666766][ T5675] usb 1-1: Using ep0 maxpacket: 16 [ 228.672345][ T809] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 228.696245][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.726385][ T809] usb 4-1: USB disconnect, device number 62 [ 228.736825][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.766737][ T5675] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 228.787185][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.825444][ T5675] usb 1-1: config 0 descriptor?? [ 228.902252][T13665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.916859][T13665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.936636][T13665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.956381][T13665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.006870][ T5711] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 229.037148][ T5711] usb 5-1: device descriptor read/8, error -71 [ 229.126553][T13678] tipc: Started in network mode [ 229.143537][T13678] tipc: Node identity , cluster identity 4711 [ 229.158484][T13678] tipc: Failed to obtain node identity [ 229.170290][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 229.200726][T13688] syzkaller0: entered promiscuous mode [ 229.223573][T13688] syzkaller0: entered allmulticast mode [ 229.242523][ T5675] hid-multitouch 0003:1FD2:6007.0013: reserved main item tag 0xe [ 229.293996][ T5675] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 229.311451][ T5711] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 229.372492][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 229.389238][ T5711] usb 5-1: device descriptor read/8, error -71 [ 229.397010][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 229.461431][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.493204][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.518037][ T5711] usb usb5-port1: unable to enumerate USB device [ 229.671245][T13621] syz.4.887 (13621): drop_caches: 2 [ 229.829019][T13722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.839400][T13722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.946814][ T5711] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 230.088235][ T5711] usb 3-1: device descriptor read/64, error -71 [ 230.340329][ T5711] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 230.506880][ T5711] usb 3-1: device descriptor read/64, error -71 [ 230.626992][ T5711] usb usb3-port1: attempt power cycle [ 230.876785][ T5752] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 230.977242][ T5711] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 231.007447][ T5711] usb 3-1: device descriptor read/8, error -71 [ 231.028786][ T5752] usb 5-1: Using ep0 maxpacket: 8 [ 231.035343][ T5752] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 231.043670][ T5752] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.053811][ T5752] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.063960][ T5752] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.074045][ T5752] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.087737][ T5752] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.097033][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.123386][ T809] usb 1-1: USB disconnect, device number 58 [ 231.266857][ T5711] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 231.287746][ T5711] usb 3-1: device descriptor read/8, error -71 [ 231.315428][T13750] netlink: 92 bytes leftover after parsing attributes in process `syz.4.904'. [ 231.326001][ T5752] usb 5-1: usb_control_msg returned -71 [ 231.335480][ T5752] usbtmc 5-1:16.0: can't read capabilities [ 231.348532][ T5752] usb 5-1: USB disconnect, device number 63 [ 231.418524][ T5711] usb usb3-port1: unable to enumerate USB device [ 231.583607][T13800] all: renamed from bridge_slave_1 (while UP) [ 231.670147][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 231.679256][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 231.686885][ T5752] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 231.739715][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 231.826838][ T5752] usb 5-1: device descriptor read/64, error -71 [ 232.076847][ T5752] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 232.216795][ T5752] usb 5-1: device descriptor read/64, error -71 [ 232.326986][ T5752] usb usb5-port1: attempt power cycle [ 232.349202][T13829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.359806][T13829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.576790][ T5704] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 232.676822][ T5752] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 232.697411][ T5752] usb 5-1: device descriptor read/8, error -71 [ 232.728371][ T5704] usb 1-1: Using ep0 maxpacket: 8 [ 232.745946][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.756508][ T5704] usb 1-1: config 0 has no interfaces? [ 232.764572][ T5704] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 232.777353][ T30] audit: type=1326 audit(1782052713.825:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13843 comm="syz.2.913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 232.807219][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.817009][ T5704] usb 1-1: Product: syz [ 232.821237][ T5704] usb 1-1: Manufacturer: syz [ 232.825865][ T5704] usb 1-1: SerialNumber: syz [ 232.835063][ T5704] usb 1-1: config 0 descriptor?? [ 232.957591][ T5752] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 232.977313][ T5752] usb 5-1: device descriptor read/8, error -71 [ 233.087016][ T5752] usb usb5-port1: unable to enumerate USB device [ 233.126795][ T5711] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 233.136747][ T5704] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 233.278323][ T5711] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 233.292167][ T5704] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.300148][ T5711] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 233.301140][ T5704] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 233.311566][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.320324][ T5704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.329477][ T5711] usb 4-1: Product: syz [ 233.337698][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.342564][ T5711] usb 4-1: Manufacturer: syz [ 233.359102][ T5704] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.359132][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.368183][ T5711] usb 4-1: SerialNumber: syz [ 233.381187][ T5704] usb 3-1: Product: syz [ 233.385440][ T5704] usb 3-1: Manufacturer: syz [ 233.395890][ T5704] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 233.601606][ T5711] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 233.609673][ T5711] usb 4-1: cannot request logical cluster ID: 3 (err: -71) [ 233.618375][ T5752] usb 3-1: USB disconnect, device number 34 [ 233.624427][ T5711] usb 4-1: unit 80 not found! [ 233.678886][ T5711] usb 4-1: USB disconnect, device number 63 [ 233.716514][T13394] udevd[13394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.794282][T13906] dvmrp0: entered allmulticast mode [ 234.106876][ T5704] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 234.137843][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 234.146912][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 234.260272][ T5704] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 234.270372][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 234.278973][ T5704] usb 5-1: Product: syz [ 234.283350][ T5704] usb 5-1: SerialNumber: syz [ 234.292188][ T5704] usb 5-1: config 0 descriptor?? [ 234.301054][ T5704] hso 5-1:0.0: Not our interface [ 234.374858][T13947] netlink: 63 bytes leftover after parsing attributes in process `syz.2.924'. [ 234.562971][ T5704] usb 5-1: USB disconnect, device number 68 [ 234.576775][ T5752] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 234.727076][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 234.733571][ T5752] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 234.742540][ T5752] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 234.753996][ T5752] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.763863][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.144521][ T5752] usb 1-1: USB disconnect, device number 59 [ 235.326773][ T5704] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 235.472708][ T30] audit: type=1326 audit(1782052716.515:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.497466][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 235.506834][ T5752] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 235.524686][ T30] audit: type=1326 audit(1782052716.515:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.549923][ T30] audit: type=1326 audit(1782052716.545:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.590518][ T5704] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 235.598852][ T5704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.616737][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.626558][ T30] audit: type=1326 audit(1782052716.545:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.653253][ T5704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 235.664797][ T30] audit: type=1326 audit(1782052716.545:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.697083][ T5752] usb 1-1: Using ep0 maxpacket: 8 [ 235.698615][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 235.705328][ T5752] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 235.723572][ T30] audit: type=1326 audit(1782052716.545:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.749686][ T5752] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.759777][ T5752] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.766936][ T5704] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.770358][ T30] audit: type=1326 audit(1782052716.545:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.806996][ T5752] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.820172][ T5704] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.826808][ T5752] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.842323][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.856145][ T5752] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.876754][ T30] audit: type=1326 audit(1782052716.545:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.886328][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.945506][ T30] audit: type=1326 audit(1782052716.545:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 235.998049][ T30] audit: type=1326 audit(1782052716.545:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13992 comm="syz.2.929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 236.136258][T14003] syzkaller0: entered promiscuous mode [ 236.144922][T14003] syzkaller0: entered allmulticast mode [ 236.158336][ T5752] usb 1-1: usb_control_msg returned -32 [ 236.169575][ T5752] usbtmc 1-1:16.0: can't read capabilities [ 236.178878][ T5704] usb 5-1: GET_CAPABILITIES returned 0 [ 236.185951][ T5704] usbtmc 5-1:16.0: can't read capabilities [ 236.387151][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.396297][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.405386][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.414438][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.423525][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.432599][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.442139][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.451243][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.460327][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.469375][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.478425][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.487487][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.499506][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.508592][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.517644][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.526696][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.626789][ T5704] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 236.742926][ T809] usb 1-1: USB disconnect, device number 60 [ 236.776759][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 236.783451][ T5704] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.796516][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.803242][ T5704] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.812469][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.822454][ T5704] usb 3-1: config 0 descriptor?? [ 237.237238][ T5704] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 237.358540][ T5704] usb 4-1: USB disconnect, device number 64 [ 237.434121][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.461952][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.507754][ T5752] usb 3-1: USB disconnect, device number 35 [ 237.736785][ T809] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 237.786755][ T5704] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 237.858803][T14089] batadv_slave_0: entered promiscuous mode [ 237.888337][ T809] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.897258][ T809] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 237.907698][ T809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.916750][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.931771][ T809] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.941039][ T809] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.949297][ T809] usb 1-1: Product: syz [ 237.953569][ T809] usb 1-1: Manufacturer: syz [ 237.959266][ T5704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.971510][ T5704] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.985846][ T809] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 237.995239][ T5704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.005716][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.013860][ T5704] usb 4-1: Product: syz [ 238.018079][ T5704] usb 4-1: Manufacturer: syz [ 238.022700][ T5704] usb 4-1: SerialNumber: syz [ 238.097169][ T5752] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 238.169683][ T809] usb 5-1: USB disconnect, device number 69 [ 238.199512][ T10] usb 1-1: USB disconnect, device number 61 [ 238.247082][ T5752] usb 3-1: Using ep0 maxpacket: 16 [ 238.256338][ T5752] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 238.268418][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.279423][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.289403][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 238.302484][ T5752] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 238.311989][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.321599][ T5752] usb 3-1: config 0 descriptor?? [ 238.546778][ T809] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 238.696781][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 238.705790][ T809] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 238.715914][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.726376][ T809] usb 5-1: Product: syz [ 238.730850][ T809] usb 5-1: Manufacturer: syz [ 238.735644][ T809] usb 5-1: SerialNumber: syz [ 238.743055][ T809] usb 5-1: config 0 descriptor?? [ 238.953804][T14118] binder: BINDER_SET_CONTEXT_MGR already set [ 238.961187][T14088] batadv_slave_0: left promiscuous mode [ 238.968731][ T5752] usbhid 3-1:0.0: can't add hid device: -71 [ 238.980485][T14118] binder: 14108:14118 ioctl 4018620d 200000000240 returned -16 [ 238.989385][ T5752] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 239.010961][ T5752] usb 3-1: USB disconnect, device number 36 [ 239.029163][T14116] binder: BINDER_SET_CONTEXT_MGR already set [ 239.042724][T14116] binder: 14108:14116 ioctl 4018620d 200000000040 returned -16 [ 239.094899][ T809] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 239.112362][ T809] usb 5-1: USB disconnect, device number 70 [ 239.416825][ T808] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 239.576883][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 239.583640][ T808] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 239.593919][ T808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.604556][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.624009][ T808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.653047][ T808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.667255][ T808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.687492][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.759900][T14167] netlink: 200 bytes leftover after parsing attributes in process `syz.4.944'. [ 239.774943][T14167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.915366][ T808] usb 1-1: usb_control_msg returned -32 [ 239.924285][ T808] usbtmc 1-1:16.0: can't read capabilities [ 240.526522][ T5704] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 240.533494][ T5704] cdc_ncm 4-1:1.0: bind() failure [ 240.554447][ T5704] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 240.568049][ T5704] cdc_ncm 4-1:1.1: bind() failure [ 240.603923][ T5704] usb 4-1: USB disconnect, device number 65 [ 240.683712][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 240.872385][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 241.066747][ T808] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 241.186820][ T5704] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 241.228124][ T808] usb 4-1: config 8 has an invalid interface number: 235 but max is 0 [ 241.236471][ T808] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 241.246624][ T808] usb 4-1: config 8 has no interface number 0 [ 241.252891][ T808] usb 4-1: config 8 interface 235 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.266770][ T808] usb 4-1: config 8 interface 235 has no altsetting 0 [ 241.273638][ T808] usb 4-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 241.282825][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.294404][ T808] hub 4-1:8.235: bad descriptor, ignoring hub [ 241.301062][ T808] hub 4-1:8.235: probe with driver hub failed with error -5 [ 241.310520][ T808] keyspan 4-1:8.235: Keyspan - (without firmware) converter detected [ 241.348259][ T5704] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.357573][ T5704] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 241.368404][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.378643][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.393336][ T5704] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.402800][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.411141][ T5704] usb 5-1: Product: syz [ 241.415413][ T5704] usb 5-1: Manufacturer: syz [ 241.424559][ T5704] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 241.503947][T14198] netlink: 264 bytes leftover after parsing attributes in process `syz.3.947'. [ 241.513388][T14198] netlink: 264 bytes leftover after parsing attributes in process `syz.3.947'. [ 241.628562][ T5749] usb 5-1: USB disconnect, device number 71 [ 241.667477][ T5704] usb 4-1: USB disconnect, device number 66 [ 241.673859][ T5704] keyspan 4-1:8.235: device disconnected [ 242.206410][ T808] usb 1-1: USB disconnect, device number 62 [ 242.305214][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 242.315912][T14239] netlink: 67 bytes leftover after parsing attributes in process `syz.3.950'. [ 242.405099][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 242.405114][ T30] audit: type=1400 audit(1782052723.445:648): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=14253 comm="syz.0.952" [ 242.431768][T14256] netlink: 'syz.0.952': attribute type 13 has an invalid length. [ 242.462792][T14256] netlink: 'syz.0.952': attribute type 17 has an invalid length. [ 242.704707][T14256] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 243.189527][ T5711] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 243.367163][ T5711] usb 1-1: Using ep0 maxpacket: 16 [ 243.382945][ T5711] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 243.412472][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 243.444233][ T5711] usb 1-1: Product: syz [ 243.455713][ T5711] usb 1-1: SerialNumber: syz [ 243.472406][ T5711] usb 1-1: config 0 descriptor?? [ 243.496368][ T5711] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.514631][ T5711] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 243.539849][ T5711] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.554912][ T5711] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 243.653732][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 243.739501][ T5711] usb 1-1: USB disconnect, device number 63 [ 244.054148][T14323] xt_hashlimit: size too large, truncated to 1048576 [ 244.236749][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 244.417058][ T10] usb 5-1: device descriptor read/64, error -71 [ 244.596758][ T809] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 244.666818][ T5711] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 244.674558][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 244.748320][ T809] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.759400][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.766084][ T809] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 244.775272][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.785559][ T809] usb 1-1: config 0 descriptor?? [ 244.808682][ T10] usb 5-1: device descriptor read/64, error -71 [ 244.826798][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 244.833410][ T5711] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 244.841626][ T5711] usb 4-1: config 4 has no interface number 0 [ 244.847872][ T5711] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 244.858074][ T5711] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 244.868069][ T5711] usb 4-1: config 4 interface 51 has no altsetting 0 [ 244.877972][ T5711] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 244.887234][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.895274][ T5711] usb 4-1: Product: syz [ 244.899588][ T5711] usb 4-1: Manufacturer: syz [ 244.904215][ T5711] usb 4-1: SerialNumber: syz [ 244.911772][T14338] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 244.919566][ T10] usb usb5-port1: attempt power cycle [ 244.925163][T14338] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 245.135764][T14338] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 245.151873][T14338] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 245.185150][ T5711] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, be:45:49:48:6b:78 [ 245.198502][T14332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.236061][T14332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.286908][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 245.297142][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.304277][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.313766][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.323480][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.331349][ T10] usb 5-1: device descriptor read/8, error -71 [ 245.339397][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x4 [ 245.350137][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.357758][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.367523][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.380341][T14338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.388926][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.396958][T14338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.404877][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.414319][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x2 [ 245.421614][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.429336][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.436577][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.443845][ T809] semitek 0003:1EA7:0907.0015: unknown main item tag 0x0 [ 245.451984][ T809] semitek 0003:1EA7:0907.0015: item fetching failed at offset 40/41 [ 245.460975][ T809] semitek 0003:1EA7:0907.0015: probe with driver semitek failed with error -22 [ 245.473197][ T808] usb 4-1: USB disconnect, device number 67 [ 245.485003][ T809] usb 1-1: USB disconnect, device number 64 [ 245.509775][ T808] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device [ 245.596839][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 245.640208][ T10] usb 5-1: device descriptor read/8, error -71 [ 245.749129][T14397] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 245.779340][ T10] usb usb5-port1: unable to enumerate USB device [ 245.898408][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 246.003735][T14370] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.021919][T14370] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.033414][T14370] bridge_slave_0: entered allmulticast mode [ 246.040787][T14370] bridge_slave_0: entered promiscuous mode [ 246.051033][T14370] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.058458][T14370] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.065672][T14370] bridge_slave_1: entered allmulticast mode [ 246.073879][ T10] usb 2-1: USB disconnect, device number 55 [ 246.094264][T14370] bridge_slave_1: entered promiscuous mode [ 246.193161][T14370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.215782][T14370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.247459][T14370] team0: Port device team_slave_0 added [ 246.255458][T14370] team0: Port device team_slave_1 added [ 246.290590][T14370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.298177][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.324714][T14370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.338299][T14370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.345495][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.371728][T14370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.396930][ T5704] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 246.451577][T14370] hsr_slave_0: entered promiscuous mode [ 246.469954][T14370] hsr_slave_1: entered promiscuous mode [ 246.487360][T14370] debugfs: 'hsr0' already exists in 'hsr' [ 246.494605][T14370] Cannot create hsr debugfs directory [ 246.569338][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.592476][ T5704] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.627935][ T5704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 246.654373][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 246.681661][ T5704] usb 4-1: Product: syz [ 246.693636][ T5704] usb 4-1: Manufacturer: syz [ 246.707144][ T5704] usb 4-1: SerialNumber: syz [ 246.822119][T14370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.859933][T14370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.888066][T14370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.912289][T14370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.927210][T14370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.945975][T14370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.964148][T14370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.014932][T14370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.164435][T14370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.200106][T14724] syzkaller0: entered promiscuous mode [ 247.208641][T14724] syzkaller0: entered allmulticast mode [ 247.230316][T14370] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.259726][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.266874][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.284151][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.291359][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.363160][T14370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.424312][T14370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.456896][ T50] Bluetooth: hci5: command tx timeout [ 247.488715][ T5675] usb 4-1: USB disconnect, device number 68 [ 247.525555][T14370] veth0_vlan: entered promiscuous mode [ 247.547329][ T5749] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 247.568511][T14370] veth1_vlan: entered promiscuous mode [ 247.668744][T14370] veth0_macvtap: entered promiscuous mode [ 247.692934][T14370] veth1_macvtap: entered promiscuous mode [ 247.718904][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.745096][T14370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.753792][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 247.776102][T14370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.785255][ T5749] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.812785][ T6255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.843765][ T5749] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 247.854019][ T6255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.882019][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.900715][ T6255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.927491][ T6255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.937302][ T5749] usb 5-1: config 0 descriptor?? [ 247.953039][T14724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.146850][ T6255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.195634][ T6255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.335093][ T6255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.372438][ T6255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.385204][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.397916][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.469468][ T5749] hid (null): unknown global tag 0xa3 [ 248.485148][ T5749] hid (null): unknown global tag 0xc [ 248.512281][ T5749] hid (null): unknown global tag 0xd [ 248.556575][ T5749] uclogic 0003:28BD:0074.0016: interface is invalid, ignoring [ 248.724500][ T5749] usb 5-1: USB disconnect, device number 76 [ 249.107055][T14803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.979'. [ 249.162840][T14803] vlan2: entered allmulticast mode [ 249.168662][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 249.184966][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 249.230333][T14803] erspan0: entered allmulticast mode [ 249.476760][ T5675] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.526912][ T50] Bluetooth: hci5: command tx timeout [ 249.553200][ T10] IPVS: starting estimator thread 0... [ 249.636783][ T5675] usb 6-1: Using ep0 maxpacket: 32 [ 249.646956][T14815] IPVS: using max 38 ests per chain, 91200 per kthread [ 249.672062][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.693734][ T5675] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.713581][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.737675][ T5675] usb 6-1: config 0 descriptor?? [ 249.755016][ T5675] hub 6-1:0.0: USB hub found [ 250.173175][ T5675] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 250.432374][ T5675] usbhid 6-1:0.0: can't add hid device: -71 [ 250.468325][ T5675] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 250.540702][ T5675] usb 6-1: USB disconnect, device number 2 [ 250.998359][ T5675] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 251.176725][ T5675] usb 6-1: Using ep0 maxpacket: 32 [ 251.201076][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.234405][ T5675] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.271052][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.309698][ T5675] usb 6-1: config 0 descriptor?? [ 251.332148][ T5675] hub 6-1:0.0: USB hub found [ 251.535230][ T5675] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 251.569992][ T5675] usbhid 6-1:0.0: can't add hid device: -71 [ 251.591760][ T5675] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 251.607005][ T50] Bluetooth: hci5: command tx timeout [ 251.654074][ T5675] usb 6-1: USB disconnect, device number 3 [ 251.952819][T14913] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 252.002425][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 252.296465][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 252.351857][T14937] macvlan2: entered promiscuous mode [ 252.366700][T14937] bond0: entered promiscuous mode [ 252.411751][T14937] bond_slave_0: entered promiscuous mode [ 252.426297][T14937] bond_slave_1: entered promiscuous mode [ 252.459665][T14937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.276803][ T5749] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 253.405694][T14977] kvm: kvm [14976]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 253.427161][T14977] kvm: kvm [14976]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 253.476761][ T5749] usb 6-1: Using ep0 maxpacket: 16 [ 253.484364][T14977] kvm: kvm [14976]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 253.500847][T14977] kvm: kvm [14976]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 253.512533][T14977] kvm: kvm [14976]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 253.528643][ T5749] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 253.556480][ T5749] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 253.605839][ T5749] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 253.654570][ T5749] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 253.680954][ T5749] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 253.698608][ T50] Bluetooth: hci5: command tx timeout [ 253.714448][ T5749] usb 6-1: config 0 has no interface number 0 [ 253.741456][ T5749] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 253.806796][ T5749] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 253.856544][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 253.881721][ T5749] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.932286][ T5749] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.996466][ T5749] usb 6-1: config 0 interface 125 has no altsetting 0 [ 254.017708][ T5749] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 254.033221][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.050683][ T5749] usb 6-1: Product: syz [ 254.060526][ T5749] usb 6-1: Manufacturer: syz [ 254.079838][ T5749] usb 6-1: SerialNumber: syz [ 254.110409][ T5749] usb 6-1: config 0 descriptor?? [ 254.226782][ T5675] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 254.373904][T15039] kvm: pic: non byte write [ 254.398147][ T5675] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 254.409364][ T5675] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.423009][ T5675] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.431190][ T5675] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 254.442847][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.455904][ T5675] usb 3-1: config 0 descriptor?? [ 254.468064][T15030] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.550785][ T809] usb 6-1: USB disconnect, device number 4 [ 254.722854][T15062] SET target dimension over the limit! [ 254.880387][ T5675] samsung 0003:0419:0001.0017: unexpected long global item [ 254.896262][ T5675] samsung 0003:0419:0001.0017: parse failed [ 254.913387][ T5675] samsung 0003:0419:0001.0017: probe with driver samsung failed with error -22 [ 255.056905][ T808] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 255.106825][ T5752] usb 3-1: USB disconnect, device number 37 [ 255.212638][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1028'. [ 255.287323][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 255.302972][ T808] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 255.327683][ T808] usb 5-1: config 179 has no interface number 0 [ 255.359034][ T808] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 255.411822][ T808] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 255.450566][ T808] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.473787][ T808] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 255.491060][ T808] usb 5-1: config 179 interface 65 has no altsetting 0 [ 255.512992][ T808] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 255.522737][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.535598][T15111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.562680][ T808] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input32 [ 255.627452][ T4975] input input32: unable to receive magic message: -110 [ 255.688087][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694767][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.702197][ T4975] input input32: unable to receive magic message: -32 [ 255.740205][ T4975] input input32: unable to receive magic message: -32 [ 255.784456][ T4975] input input32: unable to receive magic message: -32 [ 255.822249][ T4975] input input32: unable to receive magic message: -32 [ 255.970896][ T5749] usb 5-1: USB disconnect, device number 77 [ 255.971087][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 256.567537][ T30] audit: type=1400 audit(1782052737.605:649): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 257.210832][T15217] netlink: 'syz.3.1042': attribute type 29 has an invalid length. [ 257.401904][T15223] xt_hashlimit: size too large, truncated to 1048576 [ 257.440697][T15222] xt_hashlimit: size too large, truncated to 1048576 [ 257.598630][ T808] usb 3-1: device descriptor read/64, error -71 [ 257.887065][ T808] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 258.026744][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 258.096769][ T808] usb 3-1: device descriptor read/64, error -71 [ 258.200734][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 258.223536][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 258.234597][ T808] usb usb3-port1: attempt power cycle [ 258.249414][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.270943][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.307598][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.319946][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.340090][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.351107][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.590811][T15238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.600512][ T10] usb 6-1: usb_control_msg returned -32 [ 258.614182][ T10] usbtmc 6-1:16.0: can't read capabilities [ 258.620254][ T808] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 258.630631][T15238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.677355][ T5749] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 258.688765][ T808] usb 3-1: device descriptor read/8, error -71 [ 258.840022][ T5749] usb 5-1: device descriptor read/64, error -71 [ 258.938894][ T808] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 258.987149][ T808] usb 3-1: device descriptor read/8, error -71 [ 259.013939][T15276] usbtmc 6-1:16.0: control status returned 0 [ 259.066823][ T10] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 259.096737][ T5749] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 259.118038][ T808] usb usb3-port1: unable to enumerate USB device [ 259.126587][ T5711] hid_parser_main: 2 callbacks suppressed [ 259.126606][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.155607][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.179771][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.194128][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.206553][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.220685][ T24] usb 6-1: USB disconnect, device number 5 [ 259.222684][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.236073][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.250558][ T10] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 259.259709][ T10] usb 1-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 259.280095][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.295509][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.298233][ T5749] usb 5-1: device descriptor read/64, error -71 [ 259.305465][ T10] usb 1-1: config 53 has no interfaces? [ 259.324587][ T5711] hid-generic 0006:0008:0001.0018: unknown main item tag 0x0 [ 259.334341][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 259.367761][ T5711] hid-generic 0006:0008:0001.0018: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 259.383350][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.464457][T15287] fido_id[15287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.528246][ T5749] usb usb5-port1: attempt power cycle [ 259.886912][ T5749] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 259.927428][ T5749] usb 5-1: device descriptor read/8, error -71 [ 260.039985][T15299] loop5: detected capacity change from 0 to 7 [ 260.059567][T15299] Dev loop5: unable to read RDB block 7 [ 260.073011][T15299] loop5: AHDI p1 p2 p3 [ 260.087055][T15299] loop5: partition table partially beyond EOD, truncated [ 260.106974][T15299] loop5: p1 start 1818582900 is beyond EOD, truncated [ 260.120793][T15299] loop5: p3 start 335544320 is beyond EOD, truncated [ 260.176792][ T5749] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 260.217875][ T5749] usb 5-1: device descriptor read/8, error -71 [ 260.336994][ T5749] usb usb5-port1: unable to enumerate USB device [ 260.405264][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 260.416303][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1056'. [ 260.566757][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 260.730686][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 260.755642][ T24] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 260.773996][ T30] audit: type=1326 audit(1782052741.815:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 260.807796][ T24] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 260.826032][ T24] usb 6-1: config 63 has no interface number 0 [ 260.844673][ T24] usb 6-1: config 63 interface 66 has no altsetting 0 [ 260.863343][ T30] audit: type=1326 audit(1782052741.845:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 260.910856][ T24] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 260.926024][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.954157][ T24] usb 6-1: Product: syz [ 260.958554][ T30] audit: type=1326 audit(1782052741.845:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 260.989693][ T24] usb 6-1: Manufacturer: syz [ 261.006234][ T24] usb 6-1: SerialNumber: syz [ 261.053060][ T30] audit: type=1326 audit(1782052741.845:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.130973][ T30] audit: type=1326 audit(1782052741.895:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.206873][ T30] audit: type=1326 audit(1782052741.895:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.252063][ T24] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 261.268842][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 261.322237][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 261.333160][ T30] audit: type=1326 audit(1782052741.895:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.380549][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 261.400054][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 261.418341][ T30] audit: type=1326 audit(1782052741.895:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.458111][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 261.490801][ T24] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 261.509183][ T30] audit: type=1326 audit(1782052741.895:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.537684][ T24] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 261.566825][ T808] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 261.578499][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 261.578520][ T30] audit: type=1326 audit(1782052742.615:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.615647][ T24] usb 6-1: USB disconnect, device number 6 [ 261.623570][ T30] audit: type=1326 audit(1782052742.615:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.655579][ T30] audit: type=1326 audit(1782052742.615:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.682029][ T30] audit: type=1326 audit(1782052742.615:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.733298][ T30] audit: type=1326 audit(1782052742.615:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.760208][ T30] audit: type=1326 audit(1782052742.615:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.785837][ T30] audit: type=1326 audit(1782052742.625:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 261.789164][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 261.887923][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.904562][ T808] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 261.915154][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.923486][ T808] usb 5-1: Product: syz [ 261.936195][ T808] usb 5-1: Manufacturer: syz [ 261.976787][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 261.981850][ T808] usb 5-1: SerialNumber: syz [ 261.995149][ T30] audit: type=1326 audit(1782052742.625:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 262.021797][ T808] usb 5-1: config 0 descriptor?? [ 262.051885][ T808] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 262.065990][ T808] uvcvideo 5-1:0.0: No valid video chain found. [ 262.101111][ T30] audit: type=1326 audit(1782052742.625:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 262.128653][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.138896][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 262.156055][ T30] audit: type=1326 audit(1782052742.625:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.3.1059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ab9ce59 code=0x7ffc0000 [ 262.182931][ T24] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 262.196972][ T5752] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 262.204782][ T24] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 262.215662][ T24] usb 6-1: config 63 has no interface number 0 [ 262.224064][ T24] usb 6-1: config 63 interface 66 has no altsetting 0 [ 262.236495][ T24] usb 6-1: string descriptor 0 read error: -22 [ 262.243474][ T24] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 262.254687][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.268208][ T5704] usb 5-1: USB disconnect, device number 82 [ 262.301017][ T24] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 262.401133][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.416850][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.427002][ T5752] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 262.436868][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.449837][ T5752] usb 3-1: config 0 descriptor?? [ 262.504515][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 262.512490][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: -32 (exp. 1). [ 262.529982][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 262.545256][ T10] usb 1-1: string descriptor 0 read error: -71 [ 262.560740][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 262.571756][ T10] usb 1-1: USB disconnect, device number 65 [ 262.585170][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 262.599841][ T24] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 262.620047][ T24] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 262.637171][ T24] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 262.653990][ T24] usb 6-1: USB disconnect, device number 7 [ 262.695451][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 262.743280][T15425] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 262.751914][T15425] tipc: Enabled bearer , priority 10 [ 262.810467][T15461] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1066'. [ 262.870649][ T5752] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0019/input/input33 [ 262.884390][T15462] syzkaller0: create flow: hash 1109622090 index 2 [ 262.897170][ T24] syzkaller0: tun_net_xmit 76 [ 262.905019][ T5752] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 262.936153][T15480] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1066'. [ 262.982491][T15462] syzkaller0: delete flow: hash 1109622090 index 2 [ 263.004199][ T24] syzkaller0: tun_net_xmit 76 [ 263.074645][T15378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.090774][T15378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.113757][ T24] usb 3-1: USB disconnect, device number 42 [ 263.166863][ T10] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 263.339930][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 263.359831][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.395226][ T10] usb 5-1: Product: syz [ 263.407412][ T10] usb 5-1: Manufacturer: syz [ 263.418218][ T10] usb 5-1: SerialNumber: syz [ 263.441568][ T10] usb 5-1: config 0 descriptor?? [ 263.457235][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 263.756784][ T5752] tipc: Node number set to 3889435967 [ 264.084951][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 264.456965][ T10] gspca_stk1135: reg_w 0x3 err -110 [ 264.464691][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.472777][ T10] gspca_stk1135: Sensor write failed [ 264.480188][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.487189][ T10] gspca_stk1135: Sensor write failed [ 264.498659][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.509194][ T10] gspca_stk1135: Sensor read failed [ 264.515835][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.522659][ T10] gspca_stk1135: Sensor read failed [ 264.533431][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 264.546735][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.559818][ T10] gspca_stk1135: Sensor read failed [ 264.568928][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.578673][ T10] gspca_stk1135: Sensor read failed [ 264.589533][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.601987][ T10] gspca_stk1135: Sensor write failed [ 264.614886][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 264.624330][ T10] gspca_stk1135: Sensor write failed [ 264.641605][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 265.366758][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 265.366762][T15522] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 266.270248][T15522] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.276463][T15522] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.282975][T15522] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.289148][T15522] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 266.295272][T15522] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 266.303236][T15522] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 266.344167][ T5704] usb 5-1: USB disconnect, device number 83 [ 266.558329][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 266.636734][ T5752] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 266.639393][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 266.660002][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1078'. [ 266.690431][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 266.690445][ T30] audit: type=1326 audit(1782052747.735:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 266.721475][ T30] audit: type=1326 audit(1782052747.735:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 266.757738][ T30] audit: type=1326 audit(1782052747.735:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 266.780452][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 266.798524][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 266.817155][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 266.827672][ T5752] usb 6-1: Using ep0 maxpacket: 8 [ 266.837992][ T30] audit: type=1326 audit(1782052747.735:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 266.862134][ T5752] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 266.880907][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.891258][ T5752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 266.920937][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.935140][ T30] audit: type=1326 audit(1782052747.735:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 266.938964][ T5752] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 266.971882][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.995319][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.007730][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.015939][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.036741][ T5752] usb 6-1: Product: syz [ 267.046954][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 267.056084][ T30] audit: type=1326 audit(1782052747.735:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 267.060593][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 267.091361][ T5752] usb 6-1: Manufacturer: syz [ 267.101829][ T5752] usb 6-1: SerialNumber: syz [ 267.122475][ T10] usb 4-1: USB disconnect, device number 69 [ 267.133843][T15669] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 267.148433][ T5752] usb 6-1: config 0 descriptor?? [ 267.165351][ T30] audit: type=1326 audit(1782052747.735:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 267.176899][ T5752] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 267.265877][ T30] audit: type=1326 audit(1782052747.765:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 267.405452][ T30] audit: type=1326 audit(1782052747.795:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956959ce59 code=0x7ffc0000 [ 267.457391][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.506309][ T30] audit: type=1326 audit(1782052747.795:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.2.1084" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f956959cbc2 code=0x7ffc0000 [ 267.534075][ T10] usb 6-1: USB disconnect, device number 8 [ 267.962207][ T24] IPVS: starting estimator thread 0... [ 267.983982][T15746] overlay: Unknown parameter '\-' [ 268.066981][T15750] IPVS: using max 39 ests per chain, 93600 per kthread [ 268.208295][T15757] : entered promiscuous mode [ 268.266807][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 268.325905][ T9809] IPVS: stop unused estimator thread 0... [ 268.333324][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.340285][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.346395][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 268.417259][ T10] usb 3-1: device descriptor read/64, error -71 [ 268.574858][T15783] use of bytesused == 0 is deprecated and will be removed in the future, [ 268.596812][T15783] use the actual size instead. [ 268.617326][T15785] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 268.667342][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 268.796072][T15801] fuse: Unknown parameter 'group_id00000000000000000000' [ 268.808010][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 268.817546][ T10] usb 3-1: device descriptor read/64, error -71 [ 268.939989][ T10] usb usb3-port1: attempt power cycle [ 268.977031][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 268.992066][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 269.007566][ T24] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 269.018045][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.028280][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.038624][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 269.051746][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.066520][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.083194][ T24] usbtmc 1-1:16.0: bulk endpoints not found [ 269.216752][ T5704] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 269.286890][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 269.307595][ T10] usb 3-1: device descriptor read/8, error -71 [ 269.356748][ T5704] usb 4-1: device descriptor read/64, error -71 [ 269.546791][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 269.567420][ T10] usb 3-1: device descriptor read/8, error -71 [ 269.596771][ T5704] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 269.677039][ T10] usb usb3-port1: unable to enumerate USB device [ 269.736796][ T5704] usb 4-1: device descriptor read/64, error -71 [ 269.837117][T15828] dvmrp8: entered allmulticast mode [ 269.850140][ T5704] usb usb4-port1: attempt power cycle [ 270.076837][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 270.186760][ T5704] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 270.207737][ T5704] usb 4-1: device descriptor read/8, error -71 [ 270.226856][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 270.233743][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.242316][ T24] usb 5-1: config 4 has an invalid interface number: 224 but max is 0 [ 270.251105][ T24] usb 5-1: config 4 has no interface number 0 [ 270.257546][ T24] usb 5-1: config 4 interface 224 has no altsetting 0 [ 270.267453][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 270.276551][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.284629][ T24] usb 5-1: Product: syz [ 270.288850][ T24] usb 5-1: Manufacturer: syz [ 270.293478][ T24] usb 5-1: SerialNumber: syz [ 270.406893][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 270.467574][ T5704] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 270.487436][ T5704] usb 4-1: device descriptor read/8, error -71 [ 270.606813][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 270.607255][ T5704] usb usb4-port1: unable to enumerate USB device [ 270.708590][ T24] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in warm state. [ 270.718564][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.728782][ T24] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B210)) [ 270.737323][ T24] usb 5-1: media controller created [ 270.749030][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.768942][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.779249][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.788382][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 270.797625][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.807583][ T10] usb 6-1: config 0 descriptor?? [ 270.816973][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 270.823633][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 270.836993][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 270.846526][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 270.853753][ T10] usb 6-1: media controller created [ 270.860627][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.873560][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 270.883819][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 270.893349][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 270.907566][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 270.921930][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 271.076822][ T5752] dvb-usb: bulk message failed: -22 (1/0) [ 271.082929][ T5752] dvb-usb: error while querying for an remote control event. [ 271.225212][T15865] ------------[ cut here ]------------ [ 271.230921][T15865] usb 5-1: BOGUS control dir, pipe 80005480 doesn't match bRequestType c0 [ 271.239705][T15865] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.5.1107/15865 [ 271.250117][T15865] Modules linked in: [ 271.254262][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.5.1107 Not tainted syzkaller #0 PREEMPT(full) [ 271.264032][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.274191][T15865] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 271.279947][T15865] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 271.299947][T15865] RSP: 0018:ffffc90003e7f958 EFLAGS: 00010246 [ 271.306076][T15865] RAX: 0000000000000000 RBX: ffff888031ea4c00 RCX: 0000000080005480 [ 271.314258][T15865] RDX: ffff88802c9892c0 RSI: ffffffff8c81afc0 RDI: ffffffff903f6830 [ 271.322440][T15865] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 271.330534][T15865] R10: ffffc90003e7fa40 R11: fffff520007cff54 R12: 1ffff1100e9139c0 [ 271.338620][T15865] R13: ffff88807489ce00 R14: ffff88802c9892c0 R15: 0000000080005480 [ 271.346717][T15865] FS: 00007ff9cea476c0(0000) GS:ffff888125253000(0000) knlGS:0000000000000000 [ 271.355969][T15865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.362918][T15865] CR2: 0000200000001840 CR3: 000000002a3b6000 CR4: 00000000003526f0 [ 271.371016][T15865] Call Trace: [ 271.374332][T15865] [ 271.377398][T15865] usb_start_wait_urb+0x13f/0x5b0 [ 271.382506][T15865] ? rcu_is_watching+0x15/0xb0 [ 271.387411][T15865] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 271.393005][T15865] ? trace_kmalloc+0x2a/0xf0 [ 271.397732][T15865] usb_control_msg+0x234/0x3e0 [ 271.402556][T15865] dib0700_i2c_xfer+0x502/0xf80 [ 271.407542][T15865] __i2c_transfer+0x7be/0x1fe0 [ 271.412386][T15865] ? trace_irq_enable+0x3b/0x140 [ 271.417458][T15865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.423339][T15865] ? rt_mutex_lock_nested+0x156/0x1c0 [ 271.428815][T15865] ? i2c_transfer+0xc8/0x2d0 [ 271.430661][ T24] DVB: Unable to find symbol lgdt3305_attach() [ 271.433561][T15865] i2c_transfer+0x1cc/0x2d0 [ 271.433601][T15865] i2cdev_ioctl_rdwr+0x460/0x740 [ 271.447451][ T24] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B210)' [ 271.449436][T15865] i2cdev_ioctl+0x6a5/0x880 [ 271.462636][ T24] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully initialized and connected. [ 271.472113][T15865] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 271.477269][T15865] ? __fget_files+0x3a2/0x420 [ 271.481334][ T24] usb 5-1: USB disconnect, device number 84 [ 271.482015][T15865] ? __fget_files+0x2a/0x420 [ 271.492620][T15865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 271.497698][T15865] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 271.502805][T15865] __se_sys_ioctl+0xfc/0x170 [ 271.507513][T15865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.513664][T15865] do_syscall_64+0x174/0x580 [ 271.518348][T15865] ? trace_irq_disable+0x3b/0x140 [ 271.523436][T15865] ? clear_bhb_loop+0x40/0x90 [ 271.528324][T15865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.534286][T15865] RIP: 0033:0x7ff9cdb9ce59 [ 271.538816][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.558616][T15865] RSP: 002b:00007ff9cea47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.567430][T15865] RAX: ffffffffffffffda RBX: 00007ff9cde15fa0 RCX: 00007ff9cdb9ce59 [ 271.575446][T15865] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 271.583714][T15865] RBP: 00007ff9cdc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 271.591772][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.599853][T15865] R13: 00007ff9cde16038 R14: 00007ff9cde15fa0 R15: 00007ff9cdf3fa48 [ 271.607946][T15865] [ 271.611007][T15865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.618345][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.5.1107 Not tainted syzkaller #0 PREEMPT(full) [ 271.627762][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.637873][T15865] Call Trace: [ 271.641197][T15865] [ 271.644167][T15865] vpanic+0x56c/0xa60 [ 271.648203][T15865] ? __pfx__printk+0x10/0x10 [ 271.652849][T15865] ? __pfx_vpanic+0x10/0x10 [ 271.657418][T15865] ? is_bpf_text_address+0x292/0x2b0 [ 271.662749][T15865] ? is_bpf_text_address+0x26/0x2b0 [ 271.668007][T15865] panic+0xc5/0xd0 [ 271.671821][T15865] ? __pfx_panic+0x10/0x10 [ 271.676298][T15865] __warn+0x315/0x4c0 [ 271.680334][T15865] ? usb_submit_urb+0x1057/0x18b0 [ 271.685414][T15865] ? usb_submit_urb+0x1057/0x18b0 [ 271.690481][T15865] __report_bug+0x331/0x530 [ 271.695025][T15865] ? stack_depot_save_flags+0x250/0x800 [ 271.700618][T15865] ? usb_submit_urb+0x1057/0x18b0 [ 271.705693][T15865] ? __pfx___report_bug+0x10/0x10 [ 271.710779][T15865] ? rcu_is_watching+0x15/0xb0 [ 271.715586][T15865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.721447][T15865] ? stack_depot_save_flags+0x3ec/0x800 [ 271.727031][T15865] report_bug_entry+0x19a/0x290 [ 271.731906][T15865] ? usb_submit_urb+0x1100/0x18b0 [ 271.736962][T15865] ? usb_submit_urb+0x1105/0x18b0 [ 271.742011][T15865] handle_bug+0xce/0x200 [ 271.746284][T15865] exc_invalid_op+0x1a/0x50 [ 271.750813][T15865] asm_exc_invalid_op+0x1a/0x20 [ 271.755686][T15865] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 271.761348][T15865] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 271.780981][T15865] RSP: 0018:ffffc90003e7f958 EFLAGS: 00010246 [ 271.787098][T15865] RAX: 0000000000000000 RBX: ffff888031ea4c00 RCX: 0000000080005480 [ 271.795120][T15865] RDX: ffff88802c9892c0 RSI: ffffffff8c81afc0 RDI: ffffffff903f6830 [ 271.803126][T15865] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 271.811169][T15865] R10: ffffc90003e7fa40 R11: fffff520007cff54 R12: 1ffff1100e9139c0 [ 271.819169][T15865] R13: ffff88807489ce00 R14: ffff88802c9892c0 R15: 0000000080005480 [ 271.827176][T15865] ? usb_submit_urb+0x1091/0x18b0 [ 271.832245][T15865] usb_start_wait_urb+0x13f/0x5b0 [ 271.837302][T15865] ? rcu_is_watching+0x15/0xb0 [ 271.842095][T15865] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 271.847668][T15865] ? trace_kmalloc+0x2a/0xf0 [ 271.852301][T15865] usb_control_msg+0x234/0x3e0 [ 271.857097][T15865] dib0700_i2c_xfer+0x502/0xf80 [ 271.861979][T15865] __i2c_transfer+0x7be/0x1fe0 [ 271.866782][T15865] ? trace_irq_enable+0x3b/0x140 [ 271.871772][T15865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.877637][T15865] ? rt_mutex_lock_nested+0x156/0x1c0 [ 271.883036][T15865] ? i2c_transfer+0xc8/0x2d0 [ 271.887659][T15865] i2c_transfer+0x1cc/0x2d0 [ 271.892202][T15865] i2cdev_ioctl_rdwr+0x460/0x740 [ 271.897173][T15865] i2cdev_ioctl+0x6a5/0x880 [ 271.901716][T15865] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 271.906779][T15865] ? __fget_files+0x3a2/0x420 [ 271.911489][T15865] ? __fget_files+0x2a/0x420 [ 271.916113][T15865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 271.921082][T15865] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 271.926143][T15865] __se_sys_ioctl+0xfc/0x170 [ 271.930765][T15865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.936855][T15865] do_syscall_64+0x174/0x580 [ 271.941470][T15865] ? trace_irq_disable+0x3b/0x140 [ 271.946534][T15865] ? clear_bhb_loop+0x40/0x90 [ 271.951238][T15865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.957150][T15865] RIP: 0033:0x7ff9cdb9ce59 [ 271.961590][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.981217][T15865] RSP: 002b:00007ff9cea47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.989680][T15865] RAX: ffffffffffffffda RBX: 00007ff9cde15fa0 RCX: 00007ff9cdb9ce59 [ 271.997681][T15865] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 272.005687][T15865] RBP: 00007ff9cdc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 272.013679][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.021679][T15865] R13: 00007ff9cde16038 R14: 00007ff9cde15fa0 R15: 00007ff9cdf3fa48 [ 272.029689][T15865] [ 272.033347][T15865] Kernel Offset: disabled [ 272.037680][T15865] Rebooting in 86400 seconds..