last executing test programs: 24.758391222s ago: executing program 3 (id=765): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003180)=@newtaction={0x3bc, 0x30, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{0x3a8, 0x1, [@m_skbedit={0x174, 0x19, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x125, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x1bc, 0x11, 0x0, 0x0, {{0x7}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81b8}, @TCA_IPT_TARG={0x101, 0x6, {0x5, 'security\x00', 0xc4, 0x8, "1f942b9ba4fb32fb064c7b6fc8f1ea210154617ce7920733fa4a7e9ffa7a0dc3af0ca98e555baf4900477d683d3e38a36f95401c2ffc41a66813ae1f4bdde69632e8fb6dfaa21e85b637baae4e3403012ee9446e5fd11d6e9e080ea82c35ef1eba15e961a789cbc035173f479adb3d824bbd0ef5a3385a47a0d5cf906131fab362b1b0be1882547c0fdede2a2341f0d5159b8b22d95cb1ef9caed44dd5aea690312320f087e17b680597a97f64d5f1990578f042789690c01e03798e8c450d1d0e8ffa17393339f8289dbb28bd18981d2409265afbdbf8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x2a, 0x6, {0xa5b, 'security\x00', 0xfd, 0x404}}]}, {0x9, 0x6, "51eb4b8bb0"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x74, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "3c10199eaf7e9bffa3d4c138b263c174b56b21760a82fd0293bd1a0779e5f0087d0a38633503cca88e04fa90d299304e68c5611edd91f6c9f1cc3c7e2a5abd7c88"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x212400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0}) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8ab542700028dbd1950c70f022dc6", 0xe9}, {&(0x7f0000000180)="224a1f4b1161baddab286f59366916998e7ac05aef5807ab52a488c02ae9987c1b", 0x21}, {&(0x7f0000003940)="cb5310a368be4d9d608d0206477400a213bbe0bafb5428a2e705df7610ddf6c9d8853dd82e9f92b2022646e9edef08adc089bb18c83e97cc5d3387a1eb4bc1f452de715a25151a300e07d3d4e08a98476c293ed51deac36299fbb9e4f4f865e0b151ac2ea08c217dabbe43633d175e543b6e709c547673c15c6a05a6c60a4445650976a83303407a7722350f4eb490166551444632b9d843cac8223a1392010bc308998f52ad97d1341c2fcf51bdd0591c8b4a71fee93e", 0xb7}], 0x3}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001e40)=""/4101, 0x1005}], 0x1}, 0xaf6}], 0x2, 0x10000, 0x0) preadv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/110, 0x6e}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000a00)=""/70, 0x46}, {&(0x7f0000000780)=""/16, 0x10}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/156, 0x9c}], 0x8, 0x1d3f, 0x9) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, 0x4, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000340)=""/191, 0xbf}, 0x4}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 23.584284554s ago: executing program 3 (id=769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) r5 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x216f, 0x0, 0x1, 0x1c1}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) (async) syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x216f, 0x0, 0x1, 0x1c1}, &(0x7f00000001c0), &(0x7f0000000240)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)}) (async) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r9, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22.775606869s ago: executing program 3 (id=771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000023c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002380)={&(0x7f0000002280)={0x100, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2024) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x1, 0x5, {{0x38, 0x4, 0x0, 0x12, 0xe0, 0x68, 0x0, 0x8, 0x29, 0x0, @broadcast, @loopback, {[@generic={0x7, 0x10, "29ff443cdeb925d7fadac9a0c5dc"}, @generic={0x86, 0x5, "54b9c7"}, @timestamp_prespec={0x44, 0x1c, 0xa1, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x7}, {@loopback, 0xff}]}, @generic={0x89, 0x10, "4e7add81df8f8b79d8d5ff0a0017"}, @rr={0x7, 0x13, 0xb4, [@broadcast, @private=0xa010100, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xdd, [@loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}, @lsrr={0x83, 0xf, 0xec, [@local, @rand_addr=0x64010101, @private=0xa010101]}, @generic={0x94, 0x3, "b0"}, @cipso={0x86, 0x54, 0xfffffffffffffffd, [{0x1, 0x12, "44f851f80183686af7c556acd0aeda27"}, {0x0, 0xd, "15efa5e19d4ee9160e6042"}, {0x7, 0x6, "da490ff4"}, {0x1, 0x10, "f1e6d5c2a6b41aa03d1a87624a50"}, {0x7, 0xa, "f38faf846d47fd7b"}, {0x1, 0x6, "edd0a525"}, {0x5, 0x9, "f73d06b5d54cd2"}]}]}}}}}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, &(0x7f0000000040)=0xd) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x15c, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x4, 0xf}, 0x3d, [0x280, 0xc95a, 0xfffffff3, 0x8, 0x7d, 0x6, 0x1, 0x3ff, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0xffffffff, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x0, 0x80000000, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x10008001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x5000007, 0x103, 0x3, 0x5, 0x3d, 0x8f, 0x7, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x32, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0x7, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x1297, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x4, 0x7, 0x8000, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1004, 0x7ff, 0x5f31, 0x5, 0xefffffff, 0x8, 0x5, 0x9, 0x4, 0x9, 0x8, 0x9, 0x4, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x7, 0xe, 0x2009, 0x6, 0x0, 0x4, 0x81, 0x7, 0x7, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0xa, 0x5, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x8, 0x4, 0x1, 0x800003, 0x10000009, 0x3e7, 0xd, 0x6, 0x2, 0x40002, 0xf, 0x5, 0xf0, 0xfffffff2, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8804, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0x80, 0x5, 0x5, 0x13e8, 0xfffffff9, 0x0, 0x2, 0x4, 0x0, 0x10006, 0xfffffffb, 0x120000, 0x3, 0x6, 0x0, 0x4, 0x3], [0x3, 0xbb31, 0xffffffff, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x10000000, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x401, 0x104, 0x80000000, 0x5, 0x7fff, 0x1, 0xa620, 0x2, 0x5, 0x1, 0x20000002, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x4, 0x9, 0xffffffff, 0x3, 0x3, 0xffff, 0x1000, 0x8, 0x100, 0x4, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0xfc, 0x9, 0x1, 0x6c0b, 0x0, 0x239c5cd3, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070800000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001e0a01030000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="7686dd48ff45af7d19e0400a30470593a47179003bd50393d4e1b1aed24ae06f13322b7e935603f604e56b730a7a5738e4dc4fbbbb4782c4625926abee274ec4f51088f319beccaacdc9e9321da214203562fcd71115ca22e506d546f3a7c7059c9d043236ab2ca3260486f606521f406f7c63b11bf3f6dc84e824c3ceb0de527f102f611c851931a925e172212c3e285daf6dd9f9650907fed6a2de86b54b0112353807a11a", 0xa6}], 0x1, 0x2, 0x8, 0x3) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404355810700000000000109022400010000000009040600010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r13, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000), 0x40c0) 19.556328646s ago: executing program 3 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x6402}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r6, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r5, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000300)=0x2, 0x5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="23002dbd7000000000002200000018000180140102007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) 19.181830283s ago: executing program 3 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0xc, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_PEAKRATE={0x420, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x9, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7dffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0x90, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x2, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x6, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x3, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x5, 0x4, 0xffffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 18.710413722s ago: executing program 3 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x200000000000000}, 0x404c840) 18.097708546s ago: executing program 32 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x200000000000000}, 0x404c840) 10.887849194s ago: executing program 4 (id=820): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000ac0)={0x8, 0xc, 0x2, 0x3, 0x9, 0x0, [{0x6, 0x9, 0x9}, {0x0, 0x0, 0x84b6, '\x00', 0x1800}, {0x84, 0x2, 0x7, '\x00', 0x2}, {0x9, 0x3, 0x9799, '\x00', 0x1}, {0x5, 0x40, 0x8, '\x00', 0x101}, {0x1, 0x1, 0x100, '\x00', 0x409}, {0x8, 0xfffffffffffffffe, 0x800000000ff, '\x00', 0x280}, {0x5, 0x2, 0x6, '\x00', 0x4007}, {0x10, 0xd6, 0x9}]}) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x20) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) (async) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f00000001c0)={0x0, 0x82d2, 0x2, 0x39, 0x389, 0x0, r0}, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) (async) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/110, 0x6e}, 0x40000102) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f1c) (async) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000240)="163270f046b3fa14005481101836c5b9730e4361bde60af2df2bf91c6076a3e513e363190509735efc7e99339cedede4292544ea501758f86690c99a04a76cd34fe9b28eb983f0685bcae9a5d12f8232139a5f95c5faa4359a5940845f48e7404583120e4aa5005c321c0b1563", 0x6d, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fd/3\x00') r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) (async) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500", @ANYRES16=r6], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x44090) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)=0x7) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000040)={0xc}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0xe, 0x7, 0x3c5a, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x40008, 0x4c74, 0x80000000, 0x242, 0x0, 0x29, 0x0, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2, 0x5, 0xfffffff3, 0x129432e6, 0x6, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x2, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x200000, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1000, 0xff, 0x5, 0x5, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4008, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368e, 0x42, 0x92700000], [0x7, 0x408, 0x4, 0x869, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x6, 0x5, 0x40000, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x0, 0x200, 0x40000080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x0, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x7, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0xc446, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x102, 0x9602, 0x47, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xdb, 0x200, 0xffff3441, 0xfff]}, 0x45c) 10.590647446s ago: executing program 4 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x383002, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x8906}, @val={0x2, 0x5, 0x8, 0x1, 0x7, 0x9}, @eth={@empty, @remote, @void, {@arp={0x806, @generic={0x102, 0x1, 0x6, 0x4, 0x2, @multicast, "5ddb22b5", @local, "134b247dae6c6e4c36a03204adfd3169"}}}}}, 0x44) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000f3ff00000000040000c6328b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000005cc96b5600000008000400000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808002100000000000000080001fe9300100000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20040820) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) 10.268362712s ago: executing program 4 (id=824): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x399, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='nv\x00', 0x3) shutdown(r2, 0x1) syz_emit_vhci(0x0, 0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f00000005c0)={0xb40, 0x400, 0xa00, 0x960, 0xfffffff8, 0x1000000f, 0x4, 0x2, {0x115559cb, 0x6, 0x1}, {0x8, 0x9}, {0x9, 0xabd0, 0x1}, {0x0, 0x203, 0x2}, 0x1, 0x1, 0xfffffff9, 0x5, 0x1, 0x1, 0x4, 0x3, 0x2, 0x3, 0x3d, 0x41, 0x18, 0x100, 0x3, 0x2}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xad) socket$netlink(0x10, 0x3, 0x0) 8.692565694s ago: executing program 2 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x2c, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) ptrace(0x10, 0x0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000140)=""/145, 0x91}, {0x0}], 0x2) writev(r3, &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x2c, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) (async) ptrace(0x10, 0x0) (async) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000140)=""/145, 0x91}, {0x0}], 0x2) (async) writev(r3, &(0x7f00000000c0), 0x0) (async) 8.349096983s ago: executing program 2 (id=834): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x59e2, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x4000000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 8.274059658s ago: executing program 4 (id=835): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c000090400000207010100090501020002"], 0x0) socket$netlink(0x10, 0x3, 0x14) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0xfd}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) r3 = dup(r1) r4 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r4) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x10) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)="93", 0x1}], 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1d, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x20}}, 0x0) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) 8.148635729s ago: executing program 1 (id=836): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x300}) (async) listen(r0, 0x9) (async) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.796205476s ago: executing program 1 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000003c0)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000080)={0x18}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf0, 0x42, 0xa4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x3}}]}}]}}]}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) 7.038080054s ago: executing program 2 (id=840): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x2}, &(0x7f0000000100), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f00000000c0)="21f73e", 0x3, 0x7fffffffffffffff, 0x0, 0x0, r3}]) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r1, 0x24, {0x8001, 0x1}, 0x6}, 0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000001c0)=']/\'}\x88\x00', &(0x7f0000000200)='./file0\x00', r3) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x24f8, &(0x7f0000000400)={0x0, 0x2008b1f, 0x4000, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40012000}) io_uring_enter(r5, 0x1066, 0x0, 0x0, 0x0, 0x0) 5.663592808s ago: executing program 5 (id=789): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d39bce7d"}, 0x0, 0x2, {0x0}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 5.344594476s ago: executing program 5 (id=841): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={r1, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x288}]}) r6 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x400) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x9, 0x3b, "e34a9bfe81ae5d618f2ec670889e5044000055997eba35a6d668f0cb3a7cb838533d355e19e2855de17dab269a4d1e158a2bf082b6789567c79c17"}}) mmap(&(0x7f0000634000/0x2000)=nil, 0x2000, 0x2, 0x80012, r2, 0x80000000) 5.009628989s ago: executing program 4 (id=842): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x5, 0x19575c, 0x3029fa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x500, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000180)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x3, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) pread64(r8, &(0x7f0000000080)=""/196, 0xc4, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x240841, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2384, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.384583852s ago: executing program 2 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x190, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x130}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xffffffffffff7a09}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}}, 0x0) 4.266253803s ago: executing program 0 (id=845): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b3d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r2, &(0x7f0000000580)="5ca7bb8fde0ce88fa02d07eec0fa3052b3b19477a8440b3167a4cd48bed723681afe25e1ee1d5875477d31cc830ebc626b5f3b365ce4bbef89520e9868956159a16ec33605", 0x45, 0x40000d5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='rseq_update\x00', r3}, 0x18) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000000)=ANY=[]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0}) io_uring_setup(0x1b6b, &(0x7f0000000380)={0x0, 0x997c, 0x2, 0x2, 0x1de}) unshare(0x24020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfefa}, 0x1d, [0x208000, 0xc95a, 0xfffffff3, 0x9, 0x2, 0x2, 0x3, 0x7f, 0x7, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x7f, 0xffff2d37, 0xffffff01, 0x0, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xfffff7b5, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7ffb, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x3, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0xcc, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e8, 0xcb, 0xf9, 0xd, 0x2bf, 0x4, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x89, 0x8, 0x9, 0x6, 0xbe5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x2b, 0x0, 0x5, 0xfffffffe, 0x100, 0x1, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x6, 0x3, 0xffffffff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0x9, 0x1ff, 0x4, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x10000005, 0x1, 0x2, 0x0, 0x60a7, 0x5, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xd, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f0000000180), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r5}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x0, 0x7, 0x6, "889a70e69ff3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x2, "be1a"}, 0x0, 0x0, 0x0, 0x0}) 3.722803775s ago: executing program 2 (id=846): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}, 0x31}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000042fb07f725392900000034000000010000000000000018"], 0x30}}], 0x2, 0x4004000) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000c02da867100"], 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2000000, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x20000000004, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/190, 0xbe}], 0x2, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000480), 0xd21, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xb44}, 0x38) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) close_range(r5, r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) 3.247553196s ago: executing program 1 (id=847): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) close(r0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) (async) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 2.952563661s ago: executing program 1 (id=848): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_deladdr={0x6c, 0x15, 0x800, 0xf0bd29, 0x25dfdbfb, {0x2, 0x8, 0x2, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'veth0_macvtap\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0x807, 0x6, 0x8}}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_LABEL={0x14, 0x3, 'erspan0\x00'}]}, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570363a44a74379e54bdaf92f9b6fac17c85f69643d", @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000040)=0x2eb4, 0x2000007ff) unshare(0x22020600) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = io_uring_setup(0x3c56, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x4000, 0x1e4}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94da", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r8, &(0x7f0000000580)={0x0, 0x2000000, 0x0}, 0x10002) 1.609589951s ago: executing program 4 (id=849): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @private2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000aa00000066f0ffffff00000016000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @multicast1, @empty}, 0xff7e) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_SET_GS(0x1e, r4, &(0x7f0000000000), 0x1001) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff1, 0x7}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x7, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r10, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000380)=0x800) poll(&(0x7f0000000200)=[{r11, 0x25}], 0x1, 0xe8) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4001c00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$binfmt_script(r12, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "6467f7da5f306578634280b2d2beea702750482ee52e037b517fa8ac2702b9ad0c906f1a4d6c17f5eb2276245c595655144bb0bedea040b6d659dfb6ffe2115a9bcb0865d6babf9ef0de13dc25bf77ec5805321e0b329f4f9cc9afa8ddf2763b37bea6ea95e19bca78069af4dea0cb343ef212bcbf3e0a965623e57bb5237dcc384a5bfc6f353b0ed29b21c48929c05df7fd29ec9b044f1b2adfc0863e0cdaebbd88cda66ccfbcdfe30518f568247fb0a79722347237e94a04a197480926e33cd2e5068d2ad82804d9097d33c3d63f292b962a0af8ed79ceacbd9baa8d49a802929f75f13d45190d"}, 0xf3) 1.400740294s ago: executing program 1 (id=850): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000040)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0xffffffc1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB="1bf7ff000a00", @ANYRES32], 0x64}}, 0x0) 1.242135588s ago: executing program 5 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e21, 0x4, 'lc\x00', 0x2, 0x3, 0x6a}, {@multicast2, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5d}}, 0x44) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x7, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001800090327bd7000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="0600150007000000140016"], 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x80, 0x5, 0xf, {{0x31, 0x4, 0x1, 0x3, 0xc4, 0x68, 0x0, 0xf4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, {[@cipso={0x86, 0x38, 0x1, [{0x5, 0x3, '^'}, {0x2, 0xc, "32db0367f2a0c1f237ba"}, {0x1, 0x12, "5c22840e87346b458d770b8993c83329"}, {0x6, 0x2}, {0x5, 0xc, "515b365c54bcf13192c6"}, {0x2, 0x3, "bb"}]}, @lsrr={0x83, 0x2b, 0x49, [@rand_addr=0x64010100, @broadcast, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101, @loopback, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback]}, @noop, @end, @timestamp={0x44, 0x8, 0x90, 0x0, 0x3, [0x6]}, @end, @ssrr={0x89, 0x2b, 0xe, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0x40020}, [@IFLA_LINK={0x8, 0x5, r12}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004850) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0xffa8, 0x4, 0x3, {{0x8, 0x4, 0x2, 0x3f, 0x20, 0x68, 0x0, 0xa, 0x41e79b6d1d369752, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0x7, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7, 0x26, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0x7, 0x1000}}) r17 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r17, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78, r18}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x1a4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xc810}, 0x4000) 917.087032ms ago: executing program 1 (id=852): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000780)=ANY=[], 0x0) 855.437743ms ago: executing program 5 (id=853): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x200, 0x2, 0x8, 0x6]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x137f}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r3 = pidfd_getfd(r0, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008}, 0x800) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0x2000c804) write$P9_RSTATFS(r3, &(0x7f0000000400)={0x43, 0x9, 0x2, {0x7ff, 0x800, 0xda03, 0x4, 0x8, 0x2518, 0x9, 0x8, 0x800}}, 0x43) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000480)={0x8, 0xffffffffffffffff, 0x3, 0x0, 0x0, [{{r5}, 0x2}, {{r5}, 0x113}, {{r3}, 0x6b}]}) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x3, 0x0, [{}, {}, {}]}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) (async) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) (async) r9 = fsmount(r1, 0x1, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x8, r6, &(0x7f0000000580)="e4bbb2fab6d2d9ca08ffce5290012a", 0xf, 0xa, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000600)="7991a0cb2901fcdcf3341cc04ba388a3afbe6c98fd70d9f56da1874d89aae456dfd0438f435936cf076b98702e36388cfaa5e715a2933095932b36", 0x3b, 0x3ff, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xc, 0x0, r1, &(0x7f0000000680)="5654622e82d80f0217439ba418c1f2f7937e5cc0c379f4a086449678fc4b34cb9e1cdcbb4f64f68dbcda037ebec25d1be2027f88387bd61e84a03c7d68d17ad5a8e38319f0ba2e41d4e8099e16e8fa1886cff73cb143", 0x56, 0xfffffffffffffffd, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x3, r6, &(0x7f0000000740)="fa49e0ac19f686d1f7d3afe7727947138a02ed61c724712b73406872b120a7c238173ce601907663a69db809c6b8903789c6892f41a91ed10a1615a06517a8df1cc0ead6ccf4867924aeb1359123370baee5b59d39d7ae639818ef37074adea3156f2c798852078dd551483c7d8d9ea44f6c134c92", 0x75, 0xfffffffffffffff7, 0x0, 0x1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x10, r7, &(0x7f0000000800)="dac4e659beee5b515007569132b2d9a3ae2a5c1dd9b7272664dc787f77809e1ce36c41b08e3d39cfc099bc3c0b5774e1add2696adcd30ef8224c0debde68b894b7c8a1c8ff45d08ab69ed30d86f168678e6a2adcca265de2ae04b7aee6ad2cb25559e62a29f5db19025597b841163024b176c241a3879379a25bf7b2a0e48dd3ebfdef5c8a41a297d457550ff2ddb4192e71b1cc8d9f708f02df198b826e7ccd9a92eb01ac9dc479b347096391922e0ffcaed235696839595ffb1e57769bdef68a5fb44e5a0c554f5f1d3df4f0121afdcf4729ef1f48b22f4fb57c2baaa50b281e318ed22d", 0xe5, 0x6, 0x0, 0x2, r0}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x1, r8, &(0x7f0000000980)="ee511992828a8a314a1033f54fae8d9136cfbbd79161", 0x16, 0x8, 0x0, 0x3, r9}]) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000a40)) (async) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) (async) syz_io_uring_setup(0x7cc8, &(0x7f0000000a80)={0x0, 0x5518, 0x10000, 0x3, 0x2e3, 0x0, r1}, &(0x7f0000000b00), &(0x7f0000000b40)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000bc0)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, r9, 0x0, &(0x7f0000000b80)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r12}}) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000c00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000c40)=0x1c, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000dc0)={'tunl0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x7, 0x8, 0xa4f, 0xa, {{0x3d, 0x4, 0x1, 0x0, 0xf4, 0x7, 0x0, 0x6, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x8f, [@loopback, @broadcast, @remote, @empty, @private=0xa010101]}, @noop, @cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "356068d7a2755047cd"}]}, @end, @timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x4, [{@broadcast, 0x7}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x7fffffff}, {@multicast2}, {@multicast1, 0x1}, {@loopback, 0x10}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@local, 0x8}]}, @ssrr={0x89, 0x7, 0xc2, [@broadcast]}, @cipso={0x86, 0x11, 0x4cdce5b21ebe3162, [{0x5, 0x7, "125aa6103c"}, {0x7, 0x4, 'Qh'}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4e, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9607}, {@local, 0xd}, {@multicast2, 0x5}, {@multicast2, 0x8}, {@multicast2, 0x7fff}, {@multicast2, 0x6ac2c4cc}]}, @timestamp={0x44, 0x1c, 0xb8, 0x0, 0x8, [0x2, 0x0, 0x7fff, 0x2, 0xc8, 0x8]}]}}}}}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000e00)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000f00)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@broadcast, @in=@multicast1, 0x4e22, 0x1, 0x4e23, 0x6, 0x0, 0x80, 0x20, 0x18, r13, r15}, {0x4, 0x2, 0x6, 0x80000001, 0x0, 0x9, 0x8, 0x2}, {0x38, 0x7, 0x4, 0xa58}, 0x3, 0x6e6bb6, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d3, 0xff}, 0x2, @in6=@empty, 0x34ff, 0x3, 0x1, 0xc0, 0x7, 0x7, 0x3}}, 0xe8) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001040)={@private2, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0xd0000000, 0x57, 0x5, 0x0, 0x518, 0x8, r14}) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000002540)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000002500)={&(0x7f0000001100)={0x1414, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x36, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x0, @broadcast, 0x2, @value=@device_b, 0x8, 0x7, @device_a, 0x5f95}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x163, 0x2a, [@supported_rates={0x1, 0x8, [{0x12, 0x1}, {0x36, 0x1}, {0x1b}, {0x36, 0x1}, {0x30}, {0x30}, {0x1}, {0x9}]}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @val=0x6, @void, @val="ddc818eff8e9d8394420cd84f2e76b34"}}, @supported_rates={0x1, 0x8, [{0xb, 0x1}, {0x1b}, {0x6, 0x1}, {0x48, 0x1}, {0x36}, {0x48}, {0x1b, 0x1}, {0x16}]}, @perr={0x84, 0x4e, {0x1, 0x4, [{{0x0, 0x1}, @device_a, 0x100, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x8}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x32}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x36}]}}, @random_vendor={0xdd, 0x1d, "e58fae294935a7ac28fe8b7d436b0cf4e4354604c693e2b831455c1dda"}, @tim={0x5, 0xbf, {0x2, 0xe5, 0x3, "8bcf959f5a8c98b14588e05bf9f38183c15ac1f3bb9d190cf18052c36ec92b581a258e33449c35664f1f1411289ee383dfd3f9004c3e07871fd5d44989b6fc9d0eac250cb97bdde7c1c26265368245031620a6baab972b5424752d75e7dfda3c0287f8f9f1b5a50a84eb7839c7d240e869774c75fb42002391248590ef4cd51613dfe309199257cf2492ffc1722e8d719753992320016e7c95e59c0991aa13343e0a9eade64e01bd6d6f5b013efcc0e287df939806bb7dc9a6b10aa4"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6d}, @NL80211_ATTR_IE={0x149, 0x2a, [@mic={0x8c, 0x18, {0x1f1, "e696f53bb029", @long="7517cd5a1e5bb345f4dda61d8f4d2d64"}}, @mesh_chsw={0x76, 0x6, {0x7a, 0x9, 0x28, 0xb}}, @rann={0x7e, 0x15, {{0x0, 0x2d}, 0x1, 0x4, @device_b, 0xf, 0x5, 0x40}}, @dsss={0x3, 0x1, 0xb9}, @measure_req={0x26, 0xff, {0x10, 0x3, 0x40, "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"}}, @mesh_chsw={0x76, 0x6, {0x40, 0x8, 0x23, 0x1}}]}, @NL80211_ATTR_IE={0xc6, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0xa8, {0x4, 0x3, "c4d9002451fc6e50aaf6268d3dd43537", "db723889ebe76d75e5e441a17318a8c8a4e2e204725121a154947259bfcf14f2", "4d69a754beff33fb95116678029c77b9199a4b71af3741f780350505d964f32e", [{0x3, 0x1b, "0d970b5f09d21482831a541973c895d1abf87d65cf462b0dc6bcb6"}, {0x2, 0x21, "62b06546da2ca9175a6eb69b76609ca045c9d51cc5f7189b6186fccf6013ab316a"}, {0x4, 0x14, "e90283bc5d3f3b6ed3363a762885cd1b0c280560"}]}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x1009, 0x2a, [@measure_req={0x26, 0x1003, {0x10, 0x2, 0x31, "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"}}]}, @NL80211_ATTR_IE={0x2b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x3, 0x0, {0x12f, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2}, 0x6, 0x7, 0xb0}}]}]}, 0x1414}, 0x1, 0x0, 0x0, 0x10880}, 0x0) write$char_usb(r8, &(0x7f0000002580)="8782bee66d59e2673e3c3814e86b8792102087dcea15408cdc6481e07fc97faf967594b5c2e47afe9bf458e0d0b611767590fe7fb36f8ef9f50165abd88a51e6b130054cebf7316809a3979f6002c3973e3b0428d7585f9cfa7947549ae575aa3a84987241571da7934390759f51b59a7ec71dae2cef16fe8f0c5c6f5e31442068e99d4ffd228dd85740c280ff3b145e70c2cf", 0x93) (async) mkdirat(r0, &(0x7f0000002640)='./file0\x00', 0x8) 848.111204ms ago: executing program 0 (id=854): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0xb1}]}) semop(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x9ada, 0x305000) 680.457318ms ago: executing program 0 (id=855): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)="087c2a82d534631aec492417400815d6bfcde47a7c56b2fb661c3f2a556e13893941835958a4121c5a714574f81e705890589a2db39c0522b73128c87678183adb75923776d7a1c5e666cd1f6cee02bbc04b28fa4fc952cca256863eb566f340d8fb2f6b2ee5a59e57390ad1a3c69182c4caaf0eddb685d63664ac395a6acf2aec5557ed500d3616dbde51fe537b1db28298a39e936b38f6fa934c4786c8bf502770831e9e571a051560436626f48b072f787613733636bfc1cabd53fa2e6aa4c95a2f0ae3c1a57411652da5748c4f81cd7a89028a2c695605f222ef98", 0xdd}, {&(0x7f0000000200)="c083a91eabbd7bc39dc1e44724185497875c4e71941acc32d5c7f5571729fdd1899b81297f13d9947d0326e74b07acc8281f6eccdfba4edf107b8223d336dcce7e2bb0b2f686e9047b5a0f4b2da158670aad68ba44d0e144ec2f67c3f9972aee56453acb4175bea74e146b2dbea94cae913971a49da164ba810ee7dd964b7b68e51f8126eeb49a9af3a635a36587d581febf25af0580bf20100f4f60bd9cf64aaec30b69146f1abc969cb870636472197d1bfa056e0cb840fbe24ecd7116b41716d612c2bb917a451fd3621919bda6f376a25761ccd17bf5560151497ec80db847980af0970d66ecbf1d65ec9d40c44f94212bc29b33b494aa3484a7", 0xfc}, {&(0x7f00000004c0)="df560fc7a2b9304aee8fd471734224283f65e4e948a8ac44c34010aa24497356ee69ed1fa63de0c1826c06c0ba690b3ad486c0b6b475da7ff6e445e99b308fd23fed8275b1ad86bf2b64f846ab46203d560eab5751fe0879376abc11d43c6e2eaf01d0941eae976d5d108814882e11c410fef423286b855868a5adf22fb2a986552abcbb46d801bc5004", 0x8a}, {&(0x7f00000003c0)="e6ab223a35ca9afe7ca0af01b632d18b1179100ec382197d53179c19915584487e2df486a249f0", 0x27}, {&(0x7f0000000580)="91d1eebe652fe97c9e4d8f105271dd10d29fa7c901bbbb74d1", 0x19}, {&(0x7f00000005c0)="d0628b0e5e1c9ba61217800dfe7eefa50d86467170d22e61d3f5100f4bd182f6a7e7a71de49d506b56c0576d6ab1a4eb0f7bd0d24a8f73fb32d8221dd10d77", 0x3f}], 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x220}}], 0x1, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0002000000000000010000fc00000000000000005098acc3907086b5e1fff4a013a7aaff424ead2e06f6125d70d2c995", @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000002730576d8949b686372b785c286ae64ba03561ae62919e738d2123c9e64fa4bdd2f2a97d4b61a4a0a91ce7f02e1fd9fbaaaecc4c981006b29045dfaa56d6b5ea274efd8570ccadf1154836e4a7e9dad158da58b9822895c9799af44015c046f66515955eeaa2874c720f25312c788265c0feb671f189347572f2649b5d9242c6d16397322317bffc3e0e01ed76dc48b5d19d5c56c1cc144fbdc9d8f8fdc0674904f183"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000400000000000000000000b7080000000000007baa00fe00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 571.866969ms ago: executing program 5 (id=856): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0x61, 0x6a, 0x8, 0xc98, 0x1140, 0xf021, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x3, 0x9a, 0x3e, 0xc}}]}}]}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000200000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1184010004060000000012800b0001006d616373656300000400028008002000090000000a000200aaaaaaaaaa1e0000"], 0x48}}, 0x404c884) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32=r5], 0x0) 476.676906ms ago: executing program 2 (id=857): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000f00)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 472.682287ms ago: executing program 0 (id=858): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 190.299401ms ago: executing program 0 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) getsockopt$inet_int(r2, 0x0, 0x16, 0x0, &(0x7f0000003f80)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000005000000000000030000005800018044000400200001000a00000000000000000000000000000000000000000c000100000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 0s ago: executing program 0 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xe, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0x11}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x24040084) socket$rxrpc(0x21, 0x2, 0x2) r9 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): dget_register_driver returned -16 [ 218.861819][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.049285][ T5901] usb 1-1: USB disconnect, device number 34 [ 219.119914][ T24] usb 4-1: string descriptor 0 read error: -71 [ 219.177434][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 219.277237][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 219.389133][ T24] usb 4-1: USB disconnect, device number 37 [ 219.694300][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 219.718999][ T7795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.726634][ T7795] IPv6: NLM_F_CREATE should be set when creating new route [ 219.733972][ T7795] IPv6: NLM_F_CREATE should be set when creating new route [ 219.755415][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 220.036332][ T5901] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 220.223230][ T5901] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 220.247538][ T5901] usb 5-1: config 0 has no interface number 0 [ 220.259114][ T5901] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.288184][ T5901] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 220.311067][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.336761][ T5901] usb 5-1: config 0 descriptor?? [ 220.491673][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 220.519901][ T977] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 220.529618][ T7810] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 220.649913][ T24] usb 2-1: USB disconnect, device number 29 [ 220.690296][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 220.700625][ T977] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 220.712438][ T977] usb 1-1: config 0 has no interface number 0 [ 220.722517][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 220.739652][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.751483][ T977] usb 1-1: Product: syz [ 220.755774][ T977] usb 1-1: Manufacturer: syz [ 220.761037][ T977] usb 1-1: SerialNumber: syz [ 220.776516][ T5901] usbhid 5-1:0.6: can't add hid device: -71 [ 220.778068][ T977] usb 1-1: config 0 descriptor?? [ 220.796075][ T977] gspca_main: spca500-2.14.0 probing 046d:0900 [ 220.798191][ T5901] usbhid 5-1:0.6: probe with driver usbhid failed with error -71 [ 220.855103][ T5901] usb 5-1: USB disconnect, device number 41 [ 220.995911][ T977] gspca_spca500: reg write: error -71 [ 221.009502][ T977] gspca_spca500: reg write: error -71 [ 221.020768][ T977] gspca_spca500: reg write: error -71 [ 221.027176][ T977] gspca_spca500: reg write: error -71 [ 221.039039][ T977] gspca_spca500: reg write: error -71 [ 221.045430][ T977] gspca_spca500: reg write: error -71 [ 221.056302][ T977] gspca_spca500: reg write: error -71 [ 221.062858][ T977] gspca_spca500: reg write: error -71 [ 221.069257][ T977] gspca_spca500: reg write: error -71 [ 221.081939][ T977] gspca_spca500: reg write: error -71 [ 221.088085][ T977] gspca_spca500: reg write: error -71 [ 221.098824][ T977] gspca_spca500: reg write: error -71 [ 221.106070][ T977] gspca_spca500: reg write: error -71 [ 221.112803][ T977] gspca_spca500: reg write: error -71 [ 221.127761][ T977] usb 1-1: USB disconnect, device number 35 [ 221.419123][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 221.432140][ T7828] CUSE: info not properly terminated [ 221.510071][ T5900] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 221.571420][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.582074][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.671827][ T5900] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.682091][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.688750][ T5900] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 221.697864][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.705991][ T5901] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 221.716499][ T5900] usb 2-1: config 0 descriptor?? [ 221.799838][ T5902] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 221.869927][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 221.877165][ T5901] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 221.885942][ T5901] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 221.894723][ T5901] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 221.905246][ T5901] usb 5-1: config 250 has no interface number 0 [ 221.911734][ T5901] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 221.923708][ T5901] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 221.934524][ T5901] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.945229][ T5901] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 221.955780][ T5901] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 221.959922][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 221.970014][ T5901] usb 5-1: config 250 interface 228 has no altsetting 0 [ 221.987208][ T5902] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.990921][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 221.997264][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.011362][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 222.014300][ T5902] usb 1-1: Product: syz [ 222.022487][ T5901] usb 5-1: Product: syz [ 222.029056][ T5902] usb 1-1: Manufacturer: syz [ 222.035989][ T5902] usb 1-1: SerialNumber: syz [ 222.045784][ T5902] usb 1-1: config 0 descriptor?? [ 222.052289][ T5901] usb 5-1: SerialNumber: syz [ 222.085715][ T5901] hub 5-1:250.228: bad descriptor, ignoring hub [ 222.106112][ T5901] hub 5-1:250.228: probe with driver hub failed with error -5 [ 222.154760][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.165190][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.183497][ T5900] kye 0003:0458:5013.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 222.208981][ T5900] kye 0003:0458:5013.0007: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 222.221330][ T5900] kye 0003:0458:5013.0007: tablet-enabling feature report not found [ 222.229520][ T5900] kye 0003:0458:5013.0007: tablet enabling failed [ 222.257915][ T5902] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 222.272634][ T5902] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.281079][ T5901] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 42 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 222.303740][ T5902] usb 1-1: USB disconnect, device number 36 [ 222.379863][ T977] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 222.407136][ T5901] usb 2-1: USB disconnect, device number 30 [ 222.559785][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 222.577920][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.596348][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.609231][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.623283][ T977] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 222.632980][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.664285][ T977] usb 4-1: config 0 descriptor?? [ 223.030738][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 223.079002][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 223.217882][ T7828] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 223.360493][ T7839] random: crng reseeded on system resumption [ 223.792131][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 223.808524][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 223.836688][ T977] usb 4-1: USB disconnect, device number 38 [ 224.052750][ T5900] usb 5-1: USB disconnect, device number 42 [ 224.100679][ T5900] usblp0: removed [ 224.452325][ T7902] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 224.521222][ T5900] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 224.730647][ T5900] usb 3-1: Invalid ep0 maxpacket: 16 [ 224.885591][ T977] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 224.959976][ T5900] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 225.079848][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 225.199969][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 225.218481][ T977] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 225.219922][ T5900] usb 3-1: Invalid ep0 maxpacket: 16 [ 225.227929][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.255268][ T5900] usb usb3-port1: attempt power cycle [ 225.261079][ T977] usb 1-1: Product: syz [ 225.269986][ T5959] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 225.279230][ T977] usb 1-1: Manufacturer: syz [ 225.347002][ T977] usb 1-1: SerialNumber: syz [ 225.380798][ T977] usb 1-1: config 0 descriptor?? [ 225.385858][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 225.458923][ T977] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 225.468262][ T977] usb 1-1: Detected FT-X [ 225.475167][ T24] usb 5-1: config 6 has an invalid interface number: 66 but max is 0 [ 225.496417][ T24] usb 5-1: config 6 has no interface number 0 [ 225.502747][ T24] usb 5-1: config 6 interface 66 has no altsetting 0 [ 225.509940][ T5959] usb 2-1: device descriptor read/64, error -71 [ 225.523743][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 225.534504][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.542702][ T24] usb 5-1: Product: syz [ 225.547053][ T24] usb 5-1: Manufacturer: syz [ 225.552054][ T24] usb 5-1: SerialNumber: syz [ 225.589851][ T5902] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 225.629950][ T5900] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 225.661221][ T5900] usb 3-1: Invalid ep0 maxpacket: 16 [ 225.691947][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.705893][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.717073][ T7905] trusted_key: syz.0.549 sent an empty control message without MSG_MORE. [ 225.760062][ T5959] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 225.774267][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.792144][ T7912] fuse: Bad value for 'fd' [ 225.804187][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.804921][ T5900] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 225.839378][ T5902] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 225.849438][ T5900] usb 3-1: Invalid ep0 maxpacket: 16 [ 225.855189][ T5900] usb usb3-port1: unable to enumerate USB device [ 225.904397][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.960427][ T5959] usb 2-1: device descriptor read/64, error -71 [ 225.983531][ T5902] usb 4-1: config 0 descriptor?? [ 226.090296][ T5959] usb usb2-port1: attempt power cycle [ 226.499853][ T5959] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 226.545167][ T5902] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 226.656048][ T5959] usb 2-1: device descriptor read/8, error -71 [ 226.674169][ T5902] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 226.921924][ T5959] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 226.997369][ T5959] usb 2-1: device descriptor read/8, error -71 [ 227.120574][ T5959] usb usb2-port1: unable to enumerate USB device [ 227.592308][ T977] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 227.603508][ T977] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 227.809987][ T5900] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 227.833621][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.849376][ T977] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 227.898730][ T977] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 228.010629][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 228.020967][ T24] snd-usb-audio 5-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 228.031828][ T5900] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 228.040293][ T977] usb 1-1: USB disconnect, device number 37 [ 228.087931][ T977] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 228.101460][ T24] usb 5-1: USB disconnect, device number 43 [ 228.115281][ T977] ftdi_sio 1-1:0.0: device disconnected [ 228.132080][ T5900] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 228.148587][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 228.167379][ T5900] usb 3-1: Product: syz [ 228.173659][ T5900] usb 3-1: Manufacturer: syz [ 228.183762][ T5900] usb 3-1: SerialNumber: syz [ 228.197172][ T5900] usb 3-1: config 0 descriptor?? [ 228.380917][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.885760][ T5900] usb 4-1: USB disconnect, device number 39 [ 228.900764][ T7943] xt_bpf: check failed: parse error [ 228.970009][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 229.160561][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 229.195929][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.205612][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 229.215138][ T24] usb 2-1: config 1 has no interface number 1 [ 229.221369][ T24] usb 2-1: too many endpoints for config 1 interface 2 altsetting 6: 223, using maximum allowed: 30 [ 229.232510][ T24] usb 2-1: config 1 interface 2 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 229.246422][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 99, changing to 7 [ 229.282314][ T24] usb 2-1: config 1 interface 2 has no altsetting 2 [ 229.365860][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.379947][ T9] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 229.398114][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.450077][ T24] usb 2-1: Product: syz [ 229.466176][ T24] usb 2-1: Manufacturer: syz [ 229.490078][ T24] usb 2-1: SerialNumber: syz [ 229.751246][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.791231][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.926830][ T24] usb 2-1: USB disconnect, device number 35 [ 229.982293][ T9] usb 5-1: device descriptor read/64, error -71 [ 230.176149][ T977] usb 3-1: USB disconnect, device number 34 [ 230.194424][ T7960] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x31384142, 8, 0, 0, 0) [ 230.225191][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.225934][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 230.293395][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.565'. [ 230.380131][ T9] usb 5-1: device descriptor read/64, error -71 [ 230.494205][ T9] usb usb5-port1: attempt power cycle [ 230.987684][ T7983] netlink: 'syz.3.570': attribute type 12 has an invalid length. [ 231.000773][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 231.014261][ T7983] netlink: 'syz.3.570': attribute type 29 has an invalid length. [ 231.024368][ T9] usb 5-1: device descriptor read/8, error -71 [ 231.119401][ T7983] netlink: 148 bytes leftover after parsing attributes in process `syz.3.570'. [ 231.137778][ T7983] netlink: 'syz.3.570': attribute type 2 has an invalid length. [ 231.183168][ T7983] netlink: 43 bytes leftover after parsing attributes in process `syz.3.570'. [ 231.349893][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 231.403111][ T9] usb 5-1: device descriptor read/8, error -71 [ 231.629152][ T8000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.670375][ T9] usb usb5-port1: unable to enumerate USB device [ 231.909817][ T5900] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 232.229825][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 232.479855][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 232.500017][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.526527][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 232.597464][ T8010] netlink: 76 bytes leftover after parsing attributes in process `syz.4.574'. [ 232.753821][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 232.834966][ T5900] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 232.906735][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.969125][ T5900] usb 2-1: Product: syz [ 232.993539][ T5900] usb 2-1: Manufacturer: syz [ 233.019902][ T5902] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 233.054894][ T5900] usb 2-1: SerialNumber: syz [ 233.126692][ T5900] usb 2-1: config 0 descriptor?? [ 233.179812][ T5902] usb 4-1: device descriptor read/64, error -71 [ 233.192681][ T5900] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 233.208915][ T5900] cyphidcom ttyUSB0: required endpoint is missing [ 233.359827][ T5901] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 233.443728][ T5902] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 233.571094][ T5901] usb 3-1: device descriptor read/64, error -71 [ 233.609956][ T5902] usb 4-1: device descriptor read/64, error -71 [ 233.721889][ T5902] usb usb4-port1: attempt power cycle [ 233.839039][ T5901] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 233.980822][ T5901] usb 3-1: device descriptor read/64, error -71 [ 234.090750][ T5901] usb usb3-port1: attempt power cycle [ 234.130854][ T5902] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 234.176047][ T5902] usb 4-1: device descriptor read/8, error -71 [ 234.275466][ T8033] could not allocate digest TFM handle sha3-512-ce [ 234.439828][ T5901] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 234.441783][ T5902] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 234.463999][ T5901] usb 3-1: device descriptor read/8, error -71 [ 234.486031][ T5902] usb 4-1: device descriptor read/8, error -71 [ 234.509840][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 234.582162][ T977] usb 2-1: USB disconnect, device number 36 [ 234.590617][ T977] cypress_m8 2-1:0.0: device disconnected [ 234.601300][ T5902] usb usb4-port1: unable to enumerate USB device [ 234.619841][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 234.670686][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 234.677558][ T9] usb 1-1: config 162 has an invalid interface number: 45 but max is 1 [ 234.687486][ T9] usb 1-1: config 162 has an invalid interface number: 87 but max is 1 [ 234.697886][ T9] usb 1-1: config 162 has no interface number 0 [ 234.704643][ T9] usb 1-1: config 162 has no interface number 1 [ 234.711457][ T5901] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 234.719199][ T9] usb 1-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.732957][ T9] usb 1-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 234.744479][ T9] usb 1-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 234.757087][ T5901] usb 3-1: device descriptor read/8, error -71 [ 234.763696][ T9] usb 1-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 234.775519][ T9] usb 1-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 234.786135][ T9] usb 1-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.799688][ T9] usb 1-1: config 162 interface 45 has no altsetting 0 [ 234.803586][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.806887][ T9] usb 1-1: config 162 interface 87 has no altsetting 0 [ 234.810450][ T9] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 234.822039][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.825512][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.852238][ T9] usb 1-1: Product: syz [ 234.852335][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.856516][ T9] usb 1-1: Manufacturer: syz [ 234.869792][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.870969][ T5901] usb usb3-port1: unable to enumerate USB device [ 234.886622][ T24] usb 5-1: config 0 descriptor?? [ 234.887274][ T9] usb 1-1: SerialNumber: syz [ 235.019972][ T977] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 235.107304][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.117751][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.170063][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 235.184198][ T977] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 235.184462][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.194549][ T977] usb 2-1: config 0 has no interface number 0 [ 235.210901][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.220612][ T977] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 235.230445][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.238741][ T977] usb 2-1: Product: syz [ 235.249576][ T977] usb 2-1: Manufacturer: syz [ 235.266620][ T977] usb 2-1: SerialNumber: syz [ 235.276109][ T977] usb 2-1: config 0 descriptor?? [ 235.293510][ T977] usb-storage 2-1:0.236: USB Mass Storage device detected [ 235.315990][ T977] usb-storage 2-1:0.236: device ignored [ 235.504455][ T8048] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 235.516150][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 235.545328][ T8048] syz_tun: entered promiscuous mode [ 235.567399][ T8048] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.634288][ T5901] usb 2-1: USB disconnect, device number 37 [ 236.140093][ T5901] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 236.302874][ T5901] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.310860][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 236.325790][ T5901] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 236.335646][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 236.345038][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.357549][ T5901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 236.378356][ T24] usb 5-1: USB disconnect, device number 48 [ 236.383252][ T5901] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 236.451047][ T5901] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.460658][ T5900] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 236.486649][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.505050][ T5901] usb 2-1: Product: syz [ 236.512569][ T5901] usb 2-1: Manufacturer: syz [ 236.528278][ T5901] cdc_wdm 2-1:1.0: skipping garbage [ 236.535543][ T5901] cdc_wdm 2-1:1.0: skipping garbage [ 236.544987][ T5901] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 236.555583][ T5901] cdc_wdm 2-1:1.0: Unknown control protocol [ 236.574301][ T8074] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.629361][ T5900] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 236.645197][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.653502][ T5900] usb 3-1: Product: syz [ 236.658051][ T5900] usb 3-1: Manufacturer: syz [ 236.668932][ T5900] usb 3-1: SerialNumber: syz [ 236.759229][ T8078] 8021q: VLANs not supported on sit0 [ 236.781002][ T8078] netlink: 6 bytes leftover after parsing attributes in process `syz.3.595'. [ 236.805144][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.924048][ T5900] pwc: Visionite VCS-UC300 USB webcam detected. [ 236.933029][ T5900] pwc: Failed to set LED on/off time (-71) [ 236.959947][ T5900] pwc: send_video_command error -71 [ 236.971608][ T5900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 236.982265][ T5900] Philips webcam 3-1:5.0: probe with driver Philips webcam failed with error -71 [ 237.005930][ T8083] netlink: 'syz.3.596': attribute type 322 has an invalid length. [ 237.022806][ T5900] usb 3-1: USB disconnect, device number 39 [ 237.279898][ T5901] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 237.429869][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 237.438083][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 237.452021][ T5901] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 237.473263][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.488011][ T5901] usb 5-1: Product: syz [ 237.495075][ T5901] usb 5-1: Manufacturer: syz [ 237.500646][ T5901] usb 5-1: SerialNumber: syz [ 237.522105][ T5901] usb 5-1: config 0 descriptor?? [ 237.527964][ T8086] tipc: Started in network mode [ 237.533520][ T8086] tipc: Node identity 3669fd9915a2, cluster identity 4711 [ 237.542891][ T5901] hub 5-1:0.0: bad descriptor, ignoring hub [ 237.548854][ T5901] hub 5-1:0.0: probe with driver hub failed with error -5 [ 237.556658][ T8086] tipc: Enabled bearer , priority 10 [ 237.566743][ T5901] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 237.828939][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 237.839118][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.597'. [ 237.896735][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 237.896757][ T30] audit: type=1326 audit(1744093451.607:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 237.898575][ T8091] ptrace attach of "./syz-executor exec"[5867] was attempted by " ÿ À ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   ûüÿÿÿÿ  ÿÿÿÿ       ./file0 [ 237.903253][ T30] audit: type=1326 audit(1744093451.607:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 237.925312][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 238.047933][ T30] audit: type=1326 audit(1744093451.607:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.070530][ T30] audit: type=1326 audit(1744093451.727:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.092986][ T30] audit: type=1326 audit(1744093451.727:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.156918][ T30] audit: type=1326 audit(1744093451.727:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.185294][ T30] audit: type=1326 audit(1744093451.737:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.217119][ T30] audit: type=1326 audit(1744093451.737:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.219973][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 238.249639][ T30] audit: type=1326 audit(1744093451.737:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.276426][ T24] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 238.284555][ T30] audit: type=1326 audit(1744093451.737:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7ffc0000 [ 238.319148][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 238.329011][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.337781][ T24] usb 3-1: Product: syz [ 238.342355][ T24] usb 3-1: Manufacturer: syz [ 238.346998][ T24] usb 3-1: SerialNumber: syz [ 238.410597][ T24] usb 3-1: config 0 descriptor?? [ 238.591880][ T5901] tipc: Node number set to 600571289 [ 238.818009][ T5901] usb 2-1: USB disconnect, device number 38 [ 239.090479][ T8102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.603'. [ 239.099608][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 239.114192][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 239.481119][ T5959] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 239.621189][ T5902] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 239.646874][ T5959] usb 4-1: config 0 has no interfaces? [ 239.657829][ T5959] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.669899][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.678041][ T5959] usb 4-1: Product: syz [ 239.682426][ T5959] usb 4-1: Manufacturer: syz [ 239.687078][ T5959] usb 4-1: SerialNumber: syz [ 239.699188][ T5959] usb 4-1: config 0 descriptor?? [ 239.779873][ T5902] usb 2-1: Invalid ep0 maxpacket: 32 [ 239.910050][ T5902] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 239.939945][ T5199] usb 5-1: reset high-speed USB device number 49 using dummy_hcd [ 239.962170][ T5199] usb 5-1: device reset changed ep0 maxpacket size! [ 239.993184][ T9] pl2303 1-1:162.45: required endpoints missing [ 239.998546][ T977] usb 5-1: USB disconnect, device number 49 [ 240.018261][ T9] pl2303 1-1:162.87: required interrupt-in endpoint missing [ 240.141817][ T5902] usb 2-1: Invalid ep0 maxpacket: 32 [ 240.176243][ T5902] usb usb2-port1: attempt power cycle [ 240.220164][ T977] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 240.299140][ T5901] usb 1-1: USB disconnect, device number 38 [ 240.429250][ T977] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 240.439771][ T977] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.477487][ T977] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.526538][ T977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.589896][ T5902] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 240.659565][ T24] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 240.690212][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.715056][ T24] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 240.723459][ T5902] usb 2-1: Invalid ep0 maxpacket: 32 [ 240.775262][ T8124] Cannot find add_set index 0 as target [ 240.898485][ T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.908426][ T24] usb 3-1: USB disconnect, device number 40 [ 241.001026][ T5902] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 241.023902][ T977] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 241.173526][ T5902] usb 2-1: Invalid ep0 maxpacket: 32 [ 241.192491][ T5902] usb usb2-port1: unable to enumerate USB device [ 241.368527][ T8135] fuse: Unknown parameter 'group_id00000000000000000000' [ 241.372946][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.453730][ T8152] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.616'. [ 242.620841][ T5900] usb 4-1: USB disconnect, device number 44 [ 243.144710][ T5900] usb 5-1: USB disconnect, device number 50 [ 243.329962][ T977] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 243.468459][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802573ec00: rx timeout, send abort [ 243.479516][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802573ec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.513831][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.579436][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.614515][ T977] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 243.629892][ T5900] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 243.654478][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.673997][ T977] usb 2-1: config 0 descriptor?? [ 243.789991][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 243.804353][ T5900] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 243.825805][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.839907][ T5900] usb 5-1: Product: syz [ 243.846881][ T5900] usb 5-1: Manufacturer: syz [ 243.856821][ T5900] usb 5-1: SerialNumber: syz [ 243.878369][ T5900] usb 5-1: config 0 descriptor?? [ 243.932286][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 244.069877][ T5902] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 244.095431][ T977] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 244.126503][ T977] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 244.148406][ T977] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 244.169292][ T977] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 244.189573][ T977] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 244.219907][ T5902] usb 3-1: device descriptor read/64, error -71 [ 244.238032][ T977] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 244.311589][ T977] playstation 0003:054C:0DF2.0009: Invalid byte count transferred, expected 20 got 0 [ 244.362747][ T977] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 244.370631][ T8169] netlink: 'syz.4.622': attribute type 5 has an invalid length. [ 244.372619][ T977] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 244.391449][ T977] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 244.395397][ T8169] ip6erspan0: entered promiscuous mode [ 244.403734][ T977] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 244.409939][ T5901] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 244.489853][ T5902] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 244.543386][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 244.549097][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.559953][ T5901] usb 1-1: device descriptor read/64, error -71 [ 244.560321][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.582310][ T9] usb 2-1: USB disconnect, device number 43 [ 244.629839][ T5902] usb 3-1: device descriptor read/64, error -71 [ 244.702508][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.715846][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 244.724965][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.736323][ T24] usb 4-1: config 0 descriptor?? [ 244.743088][ T5902] usb usb3-port1: attempt power cycle [ 244.752778][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 244.799875][ T5901] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 244.930021][ T5901] usb 1-1: device descriptor read/64, error -71 [ 244.954520][ T24] pwc: send_video_command error -71 [ 244.963692][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 244.972764][ T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 244.987660][ T24] usb 4-1: USB disconnect, device number 45 [ 245.043419][ T5901] usb usb1-port1: attempt power cycle [ 245.048981][ T5900] gspca_sonixj: reg_w1 err -71 [ 245.091236][ T5902] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 245.110455][ T5902] usb 3-1: device descriptor read/8, error -71 [ 245.150061][ T5900] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 245.164879][ T5900] usb 5-1: USB disconnect, device number 51 [ 245.350026][ T5902] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 245.371486][ T5902] usb 3-1: device descriptor read/8, error -71 [ 245.400168][ T5901] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 245.419994][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 245.431419][ T5901] usb 1-1: device descriptor read/8, error -71 [ 245.489870][ T5902] usb usb3-port1: unable to enumerate USB device [ 245.572086][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.595163][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.609807][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.630789][ T24] usb 4-1: config 0 descriptor?? [ 245.650862][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 245.690022][ T5901] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 245.730689][ T5901] usb 1-1: device descriptor read/8, error -71 [ 245.850249][ T5901] usb usb1-port1: unable to enumerate USB device [ 246.042974][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 246.050771][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 246.058294][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 246.065554][ T5902] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 246.074474][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 246.082216][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 246.092351][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 246.100134][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 246.107581][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 246.118356][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 246.126161][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 246.133854][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 246.148804][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 246.239964][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 246.255493][ T5902] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 246.265619][ T5902] usb 5-1: config 0 has no interface number 0 [ 246.277998][ T5902] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.290304][ T5902] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 246.299592][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 246.308063][ T5902] usb 5-1: Product: syz [ 246.312859][ T5902] usb 5-1: SerialNumber: syz [ 246.320276][ T5902] usb 5-1: config 0 descriptor?? [ 246.330541][ T5902] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 246.358876][ T8186] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 246.399577][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 246.407578][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.426029][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.436985][ T24] pwc: Registered as video103. [ 246.446375][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 246.466766][ T24] usb 4-1: USB disconnect, device number 46 [ 246.536207][ T5900] usb 5-1: USB disconnect, device number 52 [ 246.632374][ T8210] 8021q: VLANs not supported on nlmon0 [ 247.191847][ T5900] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 247.282215][ T5901] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 247.372057][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 247.401730][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.450647][ T5901] usb 4-1: device descriptor read/64, error -71 [ 247.469662][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.490257][ T5900] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 247.507961][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.530608][ T5900] usb 3-1: config 0 descriptor?? [ 247.580160][ T9] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 247.657058][ T8234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 247.689856][ T5901] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 247.739881][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 247.839851][ T5901] usb 4-1: device descriptor read/64, error -71 [ 247.880567][ T9] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 247.911075][ T5925] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 247.950204][ T5901] usb usb4-port1: attempt power cycle [ 247.984926][ T5900] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 247.996801][ T8226] delete_channel: no stack [ 248.003788][ T8226] delete_channel: no stack [ 248.061259][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 248.072929][ T9] usb usb5-port1: attempt power cycle [ 248.101891][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 248.113293][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.143933][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.157100][ T8214] netlink: 104 bytes leftover after parsing attributes in process `syz.2.637'. [ 248.166894][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.176788][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.185384][ T5900] corsair 0003:1B1C:1B02.000A: Read invalid backlight brightness: ad. [ 248.206454][ T5925] usb 2-1: config 0 descriptor?? [ 248.229414][ T5925] hub 2-1:0.0: USB hub found [ 248.267372][ T8241] dvmrp5: entered allmulticast mode [ 248.365205][ T5901] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 248.392244][ T24] usb 3-1: USB disconnect, device number 45 [ 248.400359][ T5901] usb 4-1: device descriptor read/8, error -71 [ 248.422342][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 248.431427][ T9] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 248.442535][ T5925] hub 2-1:0.0: 1 port detected [ 248.447991][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 248.461215][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 248.600299][ T9] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 248.620800][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 248.626857][ T9] usb usb5-port1: unable to enumerate USB device [ 248.649840][ T5901] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 248.670528][ T5901] usb 4-1: device descriptor read/8, error -71 [ 248.790199][ T5901] usb usb4-port1: unable to enumerate USB device [ 248.842601][ T8254] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 249.025939][ T8264] netlink: 'syz.2.654': attribute type 32 has an invalid length. [ 249.034958][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 249.045543][ T8264] (unnamed net_device) (uninitialized): option coupled_control: invalid value (47) [ 249.074334][ T5925] hub 2-1:0.0: activate --> -90 [ 249.369816][ T5902] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 249.539793][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 249.554894][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 249.572793][ T5902] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 249.592356][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.608834][ T5902] usb 1-1: Product: syz [ 249.616772][ T5902] usb 1-1: Manufacturer: syz [ 249.626009][ T5902] usb 1-1: SerialNumber: syz [ 249.639510][ T5902] usb 1-1: config 0 descriptor?? [ 249.655968][ T8269] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.672993][ T5902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.882114][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.892904][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.903028][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.914909][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.932128][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.945792][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.041138][ T5902] usb 1-1: USB disconnect, device number 43 [ 250.282019][ T5925] usb 2-1-port1: cannot reset (err = -110) [ 250.288772][ T5925] usb 2-1-port1: cannot reset (err = -32) [ 250.299482][ T5925] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 250.307565][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.340359][ T5925] usb 2-1-port1: cannot disable (err = -32) [ 250.360241][ T5925] usb 2-1-port1: cannot reset (err = -32) [ 250.380618][ T5925] usb 2-1-port1: cannot reset (err = -32) [ 250.411190][ T5925] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 250.452921][ T5925] usb 2-1-port1: cannot disable (err = -32) [ 250.458942][ T5925] usb 2-1-port1: attempt power cycle [ 250.489895][ T5928] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 250.640711][ T5902] usb 2-1: USB disconnect, device number 44 [ 250.659917][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 250.703377][ T5928] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.749828][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.790329][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.814777][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.825873][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.845379][ T5928] usb 3-1: Product: syz [ 250.849612][ T5928] usb 3-1: Manufacturer: syz [ 250.857155][ T5928] usb 3-1: SerialNumber: syz [ 250.930075][ T5901] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 251.092073][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.119230][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.144901][ T5901] usb 4-1: New USB device found, idVendor=23b8, idProduct=01ed, bcdDevice= 0.00 [ 251.163359][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.186975][ T5901] usb 4-1: config 0 descriptor?? [ 251.310984][ T5928] usb 3-1: 0:2 : does not exist [ 251.349879][ T5902] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 251.512599][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.540229][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 251.544539][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.558065][ T5902] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 251.575590][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 251.585724][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.613764][ T5902] usb 5-1: config 0 descriptor?? [ 251.619833][ T5901] usb 4-1: USB disconnect, device number 51 [ 252.090603][ T5925] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 252.192195][ T5928] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 252.325289][ T5928] usb 3-1: USB disconnect, device number 46 [ 252.353774][ T5925] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 252.370529][ T5925] usb 2-1: config 160 has no interface number 0 [ 252.396677][ T5925] usb 2-1: config 160 interface 200 has no altsetting 0 [ 252.427974][ T5925] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 252.438823][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.447372][ T5925] usb 2-1: Product: syz [ 252.451854][ T5925] usb 2-1: Manufacturer: syz [ 252.456681][ T5925] usb 2-1: SerialNumber: syz [ 252.764409][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.771833][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.796351][ T5925] usb 2-1: MIDIStreaming interface descriptor not found [ 252.918278][ T5925] usb 2-1: USB disconnect, device number 49 [ 253.749968][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 253.866677][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.909841][ T9] usb 1-1: device descriptor read/64, error -71 [ 254.149806][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 254.315745][ T9] usb 1-1: device descriptor read/64, error -71 [ 254.440953][ T9] usb usb1-port1: attempt power cycle [ 254.829804][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 254.861073][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 254.867156][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.893198][ T9] usb 1-1: device descriptor read/8, error -71 [ 254.914966][ T5902] usb 5-1: USB disconnect, device number 57 [ 255.078220][ T8364] program syz.3.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.149961][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 255.163432][ T8366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.291812][ T9] usb 1-1: device descriptor read/8, error -71 [ 255.332027][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 255.413053][ T9] usb usb1-port1: unable to enumerate USB device [ 255.509871][ T5902] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 255.879342][ T8374] capability: warning: `syz.1.684' uses 32-bit capabilities (legacy support in use) [ 255.946183][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.960547][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 255.979492][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 256.002397][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.020177][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.035737][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 256.077069][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 256.104731][ T5902] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 256.124673][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.139860][ T24] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 256.150414][ T5902] usb 5-1: Product: syz [ 256.154625][ T5902] usb 5-1: Manufacturer: syz [ 256.159267][ T5902] usb 5-1: SerialNumber: syz [ 256.179828][ T977] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 256.188618][ T5902] usb 5-1: config 0 descriptor?? [ 256.205402][ T5902] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 256.226140][ T5902] cyphidcom ttyUSB0: required endpoint is missing [ 256.310562][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 256.320254][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.331443][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 256.338544][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.352043][ T977] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 256.361097][ T977] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 256.378761][ T24] usb 2-1: New USB device found, idVendor=0c4f, idProduct=b65d, bcdDevice= 0.00 [ 256.388403][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.398665][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.407448][ T977] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.426237][ T977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.436896][ T24] usb 2-1: config 0 descriptor?? [ 256.456775][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.480385][ T977] usb 3-1: Product: syz [ 256.492558][ T977] usb 3-1: Manufacturer: syz [ 256.502899][ T977] usb 3-1: SerialNumber: syz [ 256.523420][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.551754][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.610418][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.636675][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.671533][ T8381] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 256.694857][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.736906][ T977] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 256.760842][ T977] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 256.781539][ T977] cdc_ncm 3-1:1.0: bind() failure [ 256.871774][ T977] usb 3-1: USB disconnect, device number 47 [ 256.952092][ T5902] usb 4-1: USB disconnect, device number 52 [ 257.038888][ T9] usb 2-1: USB disconnect, device number 50 [ 257.650727][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 257.822230][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.851252][ T977] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 257.859655][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.875628][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 257.898024][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.050598][ T5925] usb 5-1: USB disconnect, device number 58 [ 258.059614][ T5925] cypress_m8 5-1:0.0: device disconnected [ 258.090092][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 258.105671][ T9] usb 3-1: config 0 descriptor?? [ 258.111765][ T977] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 258.160150][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.196603][ T977] usb 2-1: config 0 descriptor?? [ 258.215068][ T8410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 258.571478][ T977] usbhid 2-1:0.0: can't add hid device: -71 [ 258.577556][ T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 258.704537][ T5925] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 258.876230][ T5925] usb 5-1: device descriptor read/64, error -71 [ 258.948134][ T977] usb 2-1: USB disconnect, device number 51 [ 258.987476][ T8440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.699'. [ 259.144591][ T5925] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 259.232425][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 259.232447][ T30] audit: type=1326 audit(1744093472.947:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 259.384655][ T5925] usb 5-1: device descriptor read/64, error -71 [ 259.495970][ T30] audit: type=1326 audit(1744093472.947:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 259.519238][ T5925] usb usb5-port1: attempt power cycle [ 259.669871][ T977] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 259.728601][ T30] audit: type=1326 audit(1744093472.967:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 259.853440][ T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.864884][ T977] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 259.883862][ T30] audit: type=1326 audit(1744093472.967:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 259.909842][ T5925] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 259.944560][ T977] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 259.986287][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.018689][ T30] audit: type=1326 audit(1744093472.967:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 260.046877][ T977] usb 4-1: Product: syz [ 260.067310][ T977] usb 4-1: Manufacturer: syz [ 260.098614][ T977] usb 4-1: SerialNumber: syz [ 260.103778][ T30] audit: type=1326 audit(1744093472.987:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 260.128400][ T5925] usb 5-1: device descriptor read/8, error -71 [ 260.154658][ T30] audit: type=1326 audit(1744093472.987:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 260.181709][ T30] audit: type=1326 audit(1744093472.987:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 260.326370][ T30] audit: type=1326 audit(1744093472.987:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 260.361376][ T8447] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 260.377187][ T30] audit: type=1326 audit(1744093473.097:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 260.468210][ T5902] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 260.482172][ T5925] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 260.554758][ T5925] usb 5-1: device descriptor read/8, error -71 [ 260.639895][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 260.723688][ T5925] usb usb5-port1: unable to enumerate USB device [ 260.737750][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.759042][ T5902] usb 1-1: config 0 has no interfaces? [ 260.769139][ T5902] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 260.790061][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.853676][ T5902] usb 1-1: config 0 descriptor?? [ 261.100503][ T8447] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 261.118774][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 261.155500][ T5902] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 261.161669][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 261.268871][ T8449] fuse: Bad value for 'group_id' [ 261.287792][ T8449] fuse: Bad value for 'group_id' [ 261.311481][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.330315][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.336801][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.367349][ T9] usb 3-1: USB disconnect, device number 48 [ 261.383320][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.408923][ T977] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 261.425735][ T977] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 261.453133][ T5902] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.473141][ T977] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 261.479194][ T5902] usb 2-1: config 1 interface 0 has no altsetting 0 [ 261.495534][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.508746][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.524411][ T5902] usb 2-1: Product: 䮕艶尦åšÜšï‘ºãŸ³ç›¤áŸµï£‘튮鈅銢쮹猀ïŸæšºêµ˜ç¬·ä³¯ã”¦èŸë¥¸í‡‡ç­†â‘¨í‹ºä½°Æ‘瑹ì„鈣倾逄켠౳å“ᠣ࿿畔⻧ꔃ㞷푭%澣놘駧︯矽ⲱ⩖äªéƒ„â²¼í„カ岃ꀀ떅⎣ⓗ弪혡佶피⊼竌㕺篑즽ῖ䵑员ﲩ뙺麈â¼é ¢î°·è£´â•í†–犦âŸï¬— [ 261.556027][ T5902] usb 2-1: Manufacturer: ⃠[ 261.566499][ T5902] usb 2-1: SerialNumber: ï“¿ [ 261.644206][ T977] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 261.669405][ T977] usb 4-1: USB disconnect, device number 53 [ 261.703039][ T977] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 261.786267][ T8469] fuse: Bad value for 'fd' [ 262.090012][ T974] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 262.109967][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 262.262270][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.275497][ T24] usb 5-1: config 0 has no interfaces? [ 262.284860][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.294857][ T974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.295748][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.310352][ T24] usb 5-1: Product: syz [ 262.314910][ T24] usb 5-1: Manufacturer: syz [ 262.321339][ T24] usb 5-1: SerialNumber: syz [ 262.326508][ T974] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 262.338017][ T24] usb 5-1: config 0 descriptor?? [ 262.359343][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.380638][ T974] usb 3-1: Product: syz [ 262.384881][ T974] usb 3-1: Manufacturer: syz [ 262.389508][ T974] usb 3-1: SerialNumber: syz [ 262.426632][ T974] usb 3-1: config 0 descriptor?? [ 262.443606][ T974] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 262.470810][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.494539][ T974] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 262.507517][ T974] usb 3-1: media controller created [ 262.546732][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.650134][ T974] DVB: Unable to find symbol tda10046_attach() [ 262.666265][ T974] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 262.676650][ T974] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 263.267613][ T5928] usb 1-1: USB disconnect, device number 48 [ 264.239988][ T5925] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 264.441053][ T5925] usb 1-1: config 0 has no interfaces? [ 264.459111][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 264.472574][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.512489][ T5902] usb 2-1: USB disconnect, device number 52 [ 264.515044][ T5925] usb 1-1: Product: syz [ 264.597201][ T5925] usb 1-1: Manufacturer: syz [ 264.641341][ T5925] usb 1-1: SerialNumber: syz [ 264.718833][ T5925] usb 1-1: config 0 descriptor?? [ 264.868478][ T5928] usb 5-1: USB disconnect, device number 63 [ 264.891930][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 264.891950][ T30] audit: type=1800 audit(1744093478.607:517): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.711" name="bus" dev="ramfs" ino=20336 res=0 errno=0 [ 265.035783][ T974] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 265.072843][ T974] usb 3-1: USB disconnect, device number 49 [ 265.510091][ T5925] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 265.539884][ T974] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 265.752197][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 265.798473][ T974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.808286][ T5925] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 265.817697][ T5925] usb 4-1: config 0 has no interface number 0 [ 265.825917][ T5902] usb 1-1: USB disconnect, device number 49 [ 265.825932][ T974] usb 3-1: not running at top speed; connect to a high speed hub [ 265.844262][ T974] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 265.859658][ T5925] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 265.908057][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.916394][ T974] usb 3-1: config 12 has no interface number 0 [ 265.930109][ T974] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 265.950330][ T5925] usb 4-1: Product: syz [ 265.959867][ T5925] usb 4-1: Manufacturer: syz [ 265.964892][ T5925] usb 4-1: SerialNumber: syz [ 265.974107][ T974] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 265.993259][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.002861][ T5925] usb 4-1: config 0 descriptor?? [ 266.014442][ T5925] kobil_sct 4-1:0.148: required endpoints missing [ 266.040000][ T974] usb 3-1: Product: syz [ 266.056631][ T974] usb 3-1: Manufacturer: syz [ 266.069342][ T974] usb 3-1: SerialNumber: syz [ 266.358305][ T5902] IPVS: starting estimator thread 0... [ 266.383540][ T974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.440017][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.460641][ T8525] IPVS: using max 25 ests per chain, 60000 per kthread [ 266.521400][ T974] usb 3-1: USB disconnect, device number 50 [ 266.794364][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.854046][ T8533] overlayfs: missing 'lowerdir' [ 266.883004][ T8532] ======================================================= [ 266.883004][ T8532] WARNING: The mand mount option has been deprecated and [ 266.883004][ T8532] and is ignored by this kernel. Remove the mand [ 266.883004][ T8532] option from the mount to silence this warning. [ 266.883004][ T8532] ======================================================= [ 266.917972][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.170593][ T974] usb 4-1: USB disconnect, device number 54 [ 267.370082][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 267.422977][ T8540] macsec0: entered promiscuous mode [ 267.539959][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 267.551116][ T8540] macsec0: left promiscuous mode [ 267.652676][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 267.716612][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.774726][ T24] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.783882][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 267.919764][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.976301][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 267.995427][ T6431] IPVS: stop unused estimator thread 0... [ 268.002349][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.034970][ T24] usb 5-1: config 0 descriptor?? [ 268.264648][ T24] mcp2200 0003:04D8:00DF.000B: item 0 4 0 9 parsing failed [ 268.274030][ T24] mcp2200 0003:04D8:00DF.000B: can't parse reports [ 268.285498][ T24] mcp2200 0003:04D8:00DF.000B: probe with driver mcp2200 failed with error -22 [ 268.464800][ T24] usb 5-1: USB disconnect, device number 64 [ 268.943335][ T974] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 269.268837][ T974] usb 4-1: config 0 has no interfaces? [ 269.288169][ T974] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 269.316315][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 269.325696][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.344886][ T974] usb 4-1: Product: syz [ 269.363814][ T974] usb 4-1: Manufacturer: syz [ 269.374708][ T974] usb 4-1: SerialNumber: syz [ 269.399215][ T974] usb 4-1: config 0 descriptor?? [ 269.653982][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.667536][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.831452][ T974] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 269.899806][ T5901] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 270.026563][ T974] usb 2-1: device descriptor read/64, error -71 [ 270.104719][ T5901] usb 5-1: config 0 has no interfaces? [ 270.123462][ T5901] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.190738][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.288162][ T5901] usb 5-1: Product: syz [ 270.293816][ T974] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 270.306331][ T5901] usb 5-1: Manufacturer: syz [ 270.319311][ T5901] usb 5-1: SerialNumber: syz [ 270.350607][ T5901] usb 5-1: config 0 descriptor?? [ 270.430288][ T974] usb 2-1: device descriptor read/64, error -71 [ 270.450123][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 270.540204][ T974] usb usb2-port1: attempt power cycle [ 270.618208][ T24] usb 1-1: device descriptor read/64, error -71 [ 270.889120][ T974] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 270.897048][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 270.930694][ T974] usb 2-1: device descriptor read/8, error -71 [ 271.049990][ T24] usb 1-1: device descriptor read/64, error -71 [ 271.162939][ T24] usb usb1-port1: attempt power cycle [ 271.209839][ T974] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 271.229824][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 271.244831][ T974] usb 2-1: device descriptor read/8, error -71 [ 271.393017][ T974] usb usb2-port1: unable to enumerate USB device [ 271.404861][ T9] usb 3-1: device descriptor read/64, error -71 [ 271.495521][ T974] usb 4-1: USB disconnect, device number 55 [ 271.510670][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 271.591664][ T24] usb 1-1: device descriptor read/8, error -71 [ 271.634565][ T8582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.650253][ T9] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 271.673897][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'. [ 271.789933][ T9] usb 3-1: device descriptor read/64, error -71 [ 271.829955][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 271.850745][ T24] usb 1-1: device descriptor read/8, error -71 [ 271.886580][ T30] audit: type=1326 audit(1744093485.597:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x0 [ 271.912932][ T9] usb usb3-port1: attempt power cycle [ 271.980282][ T24] usb usb1-port1: unable to enumerate USB device [ 271.998852][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 272.126775][ T8587] loop6: detected capacity change from 0 to 524287999 [ 272.269882][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 272.290544][ T9] usb 3-1: device descriptor read/8, error -71 [ 272.533612][ T9] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 272.572691][ T9] usb 3-1: device descriptor read/8, error -71 [ 272.681207][ T9] usb usb3-port1: unable to enumerate USB device [ 272.699596][ T30] audit: type=1326 audit(1744093486.407:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f40f8d169 code=0x7fc00000 [ 272.786685][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 272.807792][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.817876][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 273.082941][ T24] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 273.252581][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 273.275117][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 273.303489][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 273.315784][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.336142][ T5901] usb 5-1: USB disconnect, device number 65 [ 273.342203][ T24] usb 4-1: config 0 descriptor?? [ 273.398509][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 273.410386][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 273.419764][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 273.495147][ T8601] bridge0: entered promiscuous mode [ 273.528280][ T8601] macvlan2: entered promiscuous mode [ 273.545794][ T8604] macvlan3: entered promiscuous mode [ 273.559173][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.568174][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.583500][ T24] ath6kl: Failed to submit usb control message: -71 [ 273.590032][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 273.596981][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 273.605941][ T9] usb 1-1: config 0 has no interface number 0 [ 273.628183][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 273.636064][ T24] ath6kl: Unable to send get target info: -71 [ 273.656645][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 273.667165][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 273.681245][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 273.695387][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 273.762930][ T24] ath6kl: Failed to init ath6kl core: -71 [ 273.772636][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 273.786382][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.794804][ T24] usb 4-1: USB disconnect, device number 56 [ 273.827214][ T9] usb 1-1: Product: syz [ 273.833622][ T9] usb 1-1: Manufacturer: syz [ 273.838269][ T9] usb 1-1: SerialNumber: syz [ 273.971474][ T9] usb 1-1: config 0 descriptor?? [ 274.005080][ T8596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 274.013319][ T8596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 274.284326][ T8596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 274.309387][ T8596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 275.219783][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 275.285391][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 275.299828][ T5900] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 275.322162][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 275.358288][ T9] asix 1-1:0.251: probe with driver asix failed with error -71 [ 275.582981][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 275.598653][ T9] usb 1-1: USB disconnect, device number 54 [ 275.623566][ T8625] netlink: 'syz.1.749': attribute type 28 has an invalid length. [ 275.634199][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 275.642299][ T5900] usb 5-1: config 0 has no interfaces? [ 275.644123][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.653344][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.658536][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.694282][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.704910][ T5900] usb 5-1: Product: syz [ 275.705141][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.720471][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.720643][ T5900] usb 5-1: Manufacturer: syz [ 275.739938][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.759458][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.774385][ T5900] usb 5-1: SerialNumber: syz [ 275.821584][ T5900] usb 5-1: config 0 descriptor?? [ 275.869995][ T974] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 275.996454][ T24] usb 4-1: usb_control_msg returned -32 [ 276.015715][ T24] usbtmc 4-1:16.0: can't read capabilities [ 276.020127][ T974] usb 3-1: device descriptor read/64, error -71 [ 276.103288][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 276.122054][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 276.233041][ T8643] No such timeout policy "syz0" [ 276.348183][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.360932][ T974] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 276.368986][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.509810][ T974] usb 3-1: device descriptor read/64, error -71 [ 276.613700][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.622046][ T974] usb usb3-port1: attempt power cycle [ 276.630629][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.658758][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.698674][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.765702][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.817953][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.878449][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.895068][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.979892][ T974] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 277.202006][ T974] usb 3-1: device descriptor read/8, error -71 [ 277.235979][ T9] usb 4-1: USB disconnect, device number 57 [ 277.469842][ T974] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 277.829946][ T974] usb 3-1: device descriptor read/8, error -71 [ 277.945176][ T974] usb usb3-port1: unable to enumerate USB device [ 278.110075][ T5900] usb 5-1: USB disconnect, device number 66 [ 278.590168][ T974] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 278.770391][ T30] audit: type=1326 audit(1744093492.457:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 278.799988][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.822978][ T8669] xt_hashlimit: size too large, truncated to 1048576 [ 278.847543][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.873284][ T974] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.889823][ T30] audit: type=1326 audit(1744093492.457:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 278.912498][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.920868][ T8666] netlink: 'syz.0.760': attribute type 30 has an invalid length. [ 278.949864][ T974] usb 4-1: SerialNumber: syz [ 278.961573][ T8672] FAULT_INJECTION: forcing a failure. [ 278.961573][ T8672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.982568][ T8672] CPU: 1 UID: 0 PID: 8672 Comm: syz.4.762 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 278.982601][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.982615][ T8672] Call Trace: [ 278.982623][ T8672] [ 278.982632][ T8672] dump_stack_lvl+0x241/0x360 [ 278.982674][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.982705][ T8672] ? __pfx__printk+0x10/0x10 [ 278.982750][ T8672] should_fail_ex+0x424/0x570 [ 278.982778][ T8672] _copy_from_user+0x2d/0xb0 [ 278.982811][ T8672] iommufd_fops_ioctl+0x4ae/0x610 [ 278.982846][ T8672] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 278.982888][ T8672] ? __fget_files+0x2a/0x420 [ 278.982914][ T8672] ? __fget_files+0x2a/0x420 [ 278.982939][ T8672] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 278.982971][ T8672] __se_sys_ioctl+0xf1/0x160 [ 278.982999][ T8672] do_syscall_64+0xf3/0x230 [ 278.983027][ T8672] ? clear_bhb_loop+0x45/0xa0 [ 278.983053][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.983074][ T8672] RIP: 0033:0x7f9c15f8d169 [ 278.983094][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.983112][ T8672] RSP: 002b:00007f9c16dc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.983136][ T8672] RAX: ffffffffffffffda RBX: 00007f9c161a5fa0 RCX: 00007f9c15f8d169 [ 278.983152][ T8672] RDX: 0000200000000080 RSI: 0000000000003b85 RDI: 0000000000000003 [ 278.983166][ T8672] RBP: 00007f9c16dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.983180][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.983192][ T8672] R13: 0000000000000000 R14: 00007f9c161a5fa0 R15: 00007f9c162cfa28 [ 278.983225][ T8672] [ 278.999829][ T30] audit: type=1326 audit(1744093492.457:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 279.095517][ T8666] xt_HMARK: proto mask must be zero with L3 mode [ 279.278675][ T30] audit: type=1326 audit(1744093492.457:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 279.282459][ T974] usb 4-1: 0:2 : does not exist [ 279.309671][ T30] audit: type=1326 audit(1744093492.457:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 279.332174][ T30] audit: type=1326 audit(1744093492.457:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 279.356669][ T974] usb 4-1: unit 5 not found! [ 279.393207][ T974] usb 4-1: USB disconnect, device number 58 [ 279.873079][ T30] audit: type=1326 audit(1744093492.457:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 280.150354][ T30] audit: type=1326 audit(1744093492.457:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 280.233557][ T30] audit: type=1326 audit(1744093492.747:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 280.588828][ T30] audit: type=1326 audit(1744093492.747:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7ffc0000 [ 280.614385][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.030032][ T974] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 281.194592][ T974] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.220121][ T974] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.887961][ T974] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.906061][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.007153][ T8693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 282.048356][ T974] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.116016][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.124441][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.228200][ T5959] usb 5-1: USB disconnect, device number 67 [ 282.393574][ T5902] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 282.569918][ T5902] usb 4-1: device descriptor read/64, error -71 [ 282.621787][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.765506][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.829836][ T5902] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 282.899499][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.989809][ T5902] usb 4-1: device descriptor read/64, error -71 [ 283.085336][ T8698] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.102411][ T8698] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.112605][ T5902] usb usb4-port1: attempt power cycle [ 283.121598][ T8698] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.134294][ T8698] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.145392][ T8698] geneve2: left promiscuous mode [ 283.370306][ T8719] netlink: 'syz.4.775': attribute type 12 has an invalid length. [ 283.378366][ T8719] netlink: 'syz.4.775': attribute type 29 has an invalid length. [ 283.393245][ T8719] netlink: 148 bytes leftover after parsing attributes in process `syz.4.775'. [ 283.409887][ T8719] netlink: 51 bytes leftover after parsing attributes in process `syz.4.775'. [ 283.460934][ T5902] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 283.504199][ T5902] usb 4-1: device descriptor read/8, error -71 [ 283.699325][ T8724] kvm: kvm [8723]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x859 [ 284.073165][ T5902] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 284.120159][ T5902] usb 4-1: device descriptor read/8, error -71 [ 284.240393][ T5902] usb usb4-port1: unable to enumerate USB device [ 284.350615][ T8731] vivid-000: ================= START STATUS ================= [ 284.358767][ T8731] vivid-000: Radio HW Seek Mode: Bounded [ 284.379222][ T8731] vivid-000: Radio Programmable HW Seek: false [ 284.414994][ T8731] vivid-000: RDS Rx I/O Mode: Block I/O [ 284.448359][ T8731] vivid-000: Generate RBDS Instead of RDS: false [ 284.512296][ T8731] vivid-000: RDS Reception: true [ 284.517323][ T8731] vivid-000: RDS Program Type: 0 inactive [ 284.567959][ T8731] vivid-000: RDS PS Name: inactive [ 284.574321][ T8731] vivid-000: RDS Radio Text: inactive [ 284.580012][ T8731] vivid-000: RDS Traffic Announcement: false inactive [ 284.588345][ T8731] vivid-000: RDS Traffic Program: false inactive [ 284.597523][ T8731] vivid-000: RDS Music: false inactive [ 284.603258][ T8731] vivid-000: ================== END STATUS ================== [ 284.669808][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 284.865781][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 284.875793][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.919340][ T9] usb 2-1: config 0 descriptor?? [ 284.946014][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 284.985798][ T8738] bridge1: entered promiscuous mode [ 285.448839][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.781'. [ 285.520275][ T5900] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 285.622287][ T974] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 285.680917][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 285.741653][ T5900] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 285.768167][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.796022][ T5900] usb 5-1: config 0 descriptor?? [ 285.816025][ T974] usb 1-1: config 0 has no interfaces? [ 285.824045][ T5900] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 285.833119][ T974] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 285.844287][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 285.858464][ T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 240) [ 285.866380][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.896833][ T9] usb 2-1: USB disconnect, device number 57 [ 285.911419][ T974] usb 1-1: config 0 descriptor?? [ 285.966870][ T8759] fuse: Invalid rootmode [ 286.077453][ T6431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.127948][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.146547][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.168075][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.183380][ T6431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.196241][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.223837][ T5902] usb 1-1: USB disconnect, device number 55 [ 286.251209][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.782'. [ 286.303782][ T6431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.434902][ T6431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.689819][ T5902] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 286.831004][ T6431] bridge_slave_1: left allmulticast mode [ 286.847959][ T5902] usb 1-1: device descriptor read/64, error -71 [ 286.855029][ T6431] bridge_slave_1: left promiscuous mode [ 286.880801][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.909841][ T5900] usb 5-1: USB disconnect, device number 68 [ 286.988621][ T6431] bridge_slave_0: left allmulticast mode [ 287.015931][ T6431] bridge_slave_0: left promiscuous mode [ 287.034328][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.119849][ T5902] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 287.269833][ T5928] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 287.277796][ T5902] usb 1-1: device descriptor read/64, error -71 [ 287.423113][ T5902] usb usb1-port1: attempt power cycle [ 287.448418][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 287.462186][ T5928] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 287.489901][ T5928] usb 3-1: config 0 has no interface number 0 [ 287.519789][ T5928] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 287.550896][ T5928] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 287.599764][ T5928] usb 3-1: config 0 interface 41 has no altsetting 0 [ 287.619007][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.631050][ T5928] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 287.631351][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.658797][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.667539][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.679330][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.701472][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.717980][ T5928] usb 3-1: Product: syz [ 287.763070][ T5928] usb 3-1: Manufacturer: syz [ 287.768954][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.780104][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.790477][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.799890][ T5902] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 287.808023][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.820936][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.845172][ T5928] usb 3-1: SerialNumber: syz [ 287.860248][ T5928] usb 3-1: config 0 descriptor?? [ 287.866101][ T8767] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.874356][ T5902] usb 1-1: device descriptor read/8, error -71 [ 287.883874][ T8767] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.944697][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.004358][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.061462][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.077815][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.101002][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.111033][ T8767] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.120642][ T8767] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.129304][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.137334][ T5902] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 288.160029][ T977] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 288.180722][ T5902] usb 1-1: device descriptor read/8, error -71 [ 288.191029][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.243741][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.295078][ T5902] usb usb1-port1: unable to enumerate USB device [ 288.329791][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 288.371854][ T8767] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.792'. [ 288.499482][ T977] usb 2-1: device descriptor read/all, error -71 [ 288.861590][ T5928] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 288.937524][ T8814] ip6t_srh: unknown srh invflags 7863 [ 289.022703][ T6431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.041168][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.057373][ T6431] bond0 (unregistering): Released all slaves [ 289.088896][ T6431] bond1 (unregistering): Released all slaves [ 289.099085][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 289.167371][ T8767] 0ªX¹¦Dö»: renamed from gretap0 [ 289.175697][ T8767] 0ªX¹¦Dö»: entered allmulticast mode [ 289.233616][ T5928] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 289.274666][ T5928] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 289.285238][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 289.285256][ T30] audit: type=1326 audit(1744093502.997:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7fc00000 [ 289.321228][ T6431] tipc: Left network mode [ 289.327380][ T30] audit: type=1326 audit(1744093503.037:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58dd98d169 code=0x7fc00000 [ 289.368728][ T5928] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 289.377415][ T977] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 289.410013][ T5928] usb 3-1: USB disconnect, device number 59 [ 289.437406][ T30] audit: type=1326 audit(1744093503.137:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7fc00000 [ 289.539837][ T977] usb 2-1: device descriptor read/64, error -71 [ 289.660167][ T977] usb usb2-port1: attempt power cycle [ 289.750035][ T5900] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 289.805833][ T8832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.890319][ T5855] Bluetooth: hci1: command tx timeout [ 289.906109][ T5900] usb 5-1: device descriptor read/64, error -71 [ 289.931552][ T6431] hsr_slave_0: left promiscuous mode [ 289.948024][ T6431] hsr_slave_1: left promiscuous mode [ 289.961881][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.970302][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.988904][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.000022][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.030227][ T977] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 290.034985][ T6431] veth1_macvtap: left promiscuous mode [ 290.043997][ T6431] veth0_macvtap: left promiscuous mode [ 290.060097][ T6431] veth1_vlan: left promiscuous mode [ 290.065662][ T6431] veth0_vlan: left promiscuous mode [ 290.086452][ T977] usb 2-1: device descriptor read/8, error -71 [ 290.094306][ T5928] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 290.181823][ T5900] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 290.261180][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 290.289959][ T5928] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 290.298198][ T5928] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 290.313697][ T5928] usb 1-1: config 0 has no interface number 0 [ 290.320749][ T5928] usb 1-1: too many endpoints for config 0 interface 217 altsetting 197: 42, using maximum allowed: 30 [ 290.333569][ T5928] usb 1-1: config 0 interface 217 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 290.348513][ T5928] usb 1-1: config 0 interface 217 has no altsetting 0 [ 290.350619][ T5900] usb 5-1: device descriptor read/64, error -71 [ 290.360499][ T5928] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 290.371356][ T977] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 290.386710][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.399450][ T5928] usb 1-1: config 0 descriptor?? [ 290.409351][ T977] usb 2-1: device descriptor read/8, error -71 [ 290.500426][ T5900] usb usb5-port1: attempt power cycle [ 290.531934][ T977] usb usb2-port1: unable to enumerate USB device [ 290.627949][ T5928] usb 1-1: string descriptor 0 read error: -71 [ 290.652911][ T5928] pxrc 1-1:0.217: Could not find endpoint [ 290.672750][ T5928] usb 1-1: USB disconnect, device number 60 [ 290.850103][ T5900] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 290.880738][ T5900] usb 5-1: device descriptor read/8, error -71 [ 290.945747][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 290.994187][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 291.129975][ T5900] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 291.170815][ T5900] usb 5-1: device descriptor read/8, error -71 [ 291.281559][ T5900] usb usb5-port1: unable to enumerate USB device [ 291.398474][ T8791] chnl_net:caif_netlink_parms(): no params data found [ 291.713261][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.721747][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.729184][ T8791] bridge_slave_0: entered allmulticast mode [ 291.771247][ T8791] bridge_slave_0: entered promiscuous mode [ 291.944139][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.960827][ T5855] Bluetooth: hci1: command tx timeout [ 291.965088][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.060110][ T8791] bridge_slave_1: entered allmulticast mode [ 292.104305][ T8791] bridge_slave_1: entered promiscuous mode [ 292.265298][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.285974][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.588977][ T8791] team0: Port device team_slave_0 added [ 292.625471][ T8791] team0: Port device team_slave_1 added [ 292.811172][ T977] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 292.908041][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.928292][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.949812][ T977] usb 2-1: device descriptor read/64, error -71 [ 292.954953][ T5900] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 292.976875][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.005482][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.015863][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.063744][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.096192][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.131849][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.157781][ T5900] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 293.167253][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.187361][ T5900] usb 5-1: Product: syz [ 293.192713][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.203483][ T5900] usb 5-1: Manufacturer: syz [ 293.210966][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.228559][ T5900] usb 5-1: SerialNumber: syz [ 293.245108][ T5900] usb 5-1: config 0 descriptor?? [ 293.249901][ T977] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 293.307119][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.330052][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 293.361593][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.383320][ T8791] hsr_slave_0: entered promiscuous mode [ 293.390321][ T977] usb 2-1: device descriptor read/64, error -71 [ 293.406069][ T8791] hsr_slave_1: entered promiscuous mode [ 293.417204][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.425990][ T8791] Cannot create hsr debugfs directory [ 293.439906][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.456980][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.467775][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.483652][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.505535][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.521765][ T977] usb usb2-port1: attempt power cycle [ 293.550061][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.563683][ T5900] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 293.572047][ T5900] airspy 5-1:0.0: Could not detect board [ 293.578452][ T5900] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 293.608055][ T5900] usb 5-1: USB disconnect, device number 73 [ 293.619295][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.638348][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.655727][ T9] usb 3-1: Product: syz [ 293.671165][ T9] usb 3-1: Manufacturer: syz [ 293.671699][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.816'. [ 293.675811][ T9] usb 3-1: SerialNumber: syz [ 293.704212][ T9] cdc_ncm 3-1:1.0: skipping garbage [ 293.870005][ T977] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 293.908927][ T977] usb 2-1: device descriptor read/8, error -71 [ 293.916430][ T9] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 293.927020][ T9] cdc_ncm 3-1:1.0: bind() failure [ 293.948338][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 293.979857][ T9] cdc_ncm 3-1:1.1: bind() failure [ 294.040125][ T5855] Bluetooth: hci1: command tx timeout [ 294.117746][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.145895][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.159848][ T977] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 294.181262][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.201331][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.213074][ T8791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.230701][ T977] usb 2-1: device descriptor read/8, error -71 [ 294.255185][ T8791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.277755][ T5900] usb 3-1: USB disconnect, device number 60 [ 294.324563][ T8791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.371046][ T977] usb usb2-port1: unable to enumerate USB device [ 294.388572][ T8791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.395496][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 294.590261][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 294.613453][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 294.632932][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.715514][ T9] usb 1-1: Product: syz [ 294.723977][ T9] usb 1-1: Manufacturer: syz [ 294.749953][ T9] usb 1-1: SerialNumber: syz [ 294.767205][ T8946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.780395][ T9] usb 1-1: config 0 descriptor?? [ 294.807925][ T9] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 294.845738][ T8948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.891903][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.030445][ T8791] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.077001][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.084263][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.167173][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.174504][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.228507][ T8953] ALSA: seq fatal error: cannot create timer (-19) [ 295.244526][ T9] gspca_sonixj: reg_r err -71 [ 295.252456][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 295.283334][ T9] usb 1-1: USB disconnect, device number 61 [ 295.657977][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.752875][ T8970] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 295.875486][ T8970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.899911][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 295.905959][ T8791] veth0_vlan: entered promiscuous mode [ 295.965968][ T8972] bond1: (slave ip6gretap1): making interface the new active one [ 295.974546][ T8972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.983295][ T8972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.997940][ T8972] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 296.091860][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 296.101658][ T9] usb 1-1: config 5 has an invalid interface number: 52 but max is 1 [ 296.119834][ T5855] Bluetooth: hci1: command tx timeout [ 296.143590][ T8791] veth1_vlan: entered promiscuous mode [ 296.151930][ T9] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 296.187598][ T9] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 296.201218][ T9] usb 1-1: config 5 has no interface number 0 [ 296.207346][ T9] usb 1-1: config 5 has no interface number 1 [ 296.215846][ T5901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.224207][ T9] usb 1-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.238748][ T9] usb 1-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.250097][ T9] usb 1-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 296.278112][ T9] usb 1-1: config 5 interface 52 has no altsetting 0 [ 296.286943][ T3007] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.297391][ T9] usb 1-1: config 5 interface 4 has no altsetting 0 [ 296.334753][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 296.389795][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.409526][ T8791] veth0_macvtap: entered promiscuous mode [ 296.416469][ T9] usb 1-1: Product: syz [ 296.427587][ T9] usb 1-1: Manufacturer: syz [ 296.433932][ T9] usb 1-1: SerialNumber: syz [ 296.467768][ T8791] veth1_macvtap: entered promiscuous mode [ 296.574108][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.613462][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.663102][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.750866][ T5901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.803554][ T9] cytherm 1-1:5.52: Cypress thermometer device now attached [ 296.821260][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.823859][ T9] cytherm 1-1:5.4: Cypress thermometer device now attached [ 296.832040][ T5928] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 296.879805][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.890149][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.901843][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.910451][ T9] usb 1-1: USB disconnect, device number 62 [ 296.914138][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.926052][ T9] cytherm 1-1:5.52: Cypress thermometer now disconnected [ 296.989961][ T9] cytherm 1-1:5.4: Cypress thermometer now disconnected [ 297.010697][ T6429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.067865][ T8791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.081977][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.113086][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 297.129395][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.155451][ T5928] usb 5-1: Product: syz [ 297.163863][ T8791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.196743][ T8791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.208548][ T8791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.305501][ T9005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.338783][ T5928] usb 5-1: Manufacturer: syz [ 297.346402][ T5928] usb 5-1: SerialNumber: syz [ 297.411322][ T6423] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.582956][ T5928] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 297.639156][ T5901] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 297.850152][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 297.929099][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 297.973076][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 297.983252][ T6423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.010923][ T9015] __nla_validate_parse: 24 callbacks suppressed [ 298.010941][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 298.033866][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 298.060464][ T9015] netlink: 9 bytes leftover after parsing attributes in process `syz.4.835'. [ 298.065539][ T6423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.146083][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 298.209577][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.242597][ T992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.251452][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.299839][ T5904] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 298.464520][ T2958] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.484556][ T2958] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.595028][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 298.609371][ T5904] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 298.626038][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.675983][ T5904] usb 3-1: config 0 descriptor?? [ 298.717394][ T5904] gspca_main: sunplus-2.14.0 probing 041e:400b [ 298.766917][ T5901] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 298.860362][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.918326][ T5901] usb 2-1: Product: syz [ 298.929961][ T5901] usb 2-1: Manufacturer: syz [ 298.958443][ T5901] usb 2-1: SerialNumber: syz [ 299.091676][ T5901] usb 2-1: config 0 descriptor?? [ 299.185359][ T5901] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 299.231333][ T5901] cyphidcom ttyUSB0: required endpoint is missing [ 299.534728][ T5904] gspca_sunplus: reg_w_riv err -71 [ 299.553285][ T5904] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 299.617086][ T5904] usb 3-1: USB disconnect, device number 61 [ 299.698150][ T5928] usb 5-1: USB disconnect, device number 74 [ 299.772993][ T5928] usblp0: removed [ 300.435027][ T9046] tipc: Enabling of bearer rejected, failed to enable media [ 301.025562][ T2958] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 301.025582][ T2958] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.229783][ T5928] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 301.394605][ T5901] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 301.429623][ T977] usb 2-1: USB disconnect, device number 66 [ 301.442874][ T5928] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 301.474659][ T977] cypress_m8 2-1:0.0: device disconnected [ 301.493609][ T5928] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 301.519753][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.558022][ T5928] usb 1-1: Product: syz [ 301.568381][ T5928] usb 1-1: Manufacturer: syz [ 301.576454][ T5928] usb 1-1: SerialNumber: syz [ 301.587215][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.620670][ T5901] usb 3-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.637733][ T5928] usb 1-1: config 0 descriptor?? [ 301.757265][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.787842][ T5901] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 301.818656][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.845719][ T5901] usb 3-1: Product: syz [ 301.869352][ T5901] usb 3-1: Manufacturer: syz [ 301.879482][ T5901] usb 3-1: SerialNumber: syz [ 301.924470][ T9072] fuse: Bad value for 'fd' [ 301.960829][ T5901] usb 3-1: config 0 descriptor?? [ 302.769935][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.036231][ T5928] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 303.111211][ T3007] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.459791][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 303.504412][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'. [ 303.574718][ T9081] vlan3: entered promiscuous mode [ 303.583963][ T9081] bond0: entered promiscuous mode [ 303.596083][ T5900] IPVS: starting estimator thread 0... [ 303.605794][ T9081] bond_slave_0: entered promiscuous mode [ 303.614026][ T9081] bond_slave_1: entered promiscuous mode [ 303.622347][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 303.633247][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.648829][ T10] usb 5-1: config 179 has no interface number 0 [ 303.656134][ T9089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.851'. [ 303.677221][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 303.699883][ T9088] IPVS: using max 26 ests per chain, 62400 per kthread [ 303.723520][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 303.743214][ T30] audit: type=1326 audit(1744093517.447:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dd98d169 code=0x7fc00000 [ 303.786590][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.792622][ T5928] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 303.845855][ T5928] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 303.873690][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 303.898455][ T5928] asix 1-1:0.0: probe with driver asix failed with error -71 [ 303.937059][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.965091][ T5928] usb 1-1: USB disconnect, device number 63 [ 303.995835][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 304.039233][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.091260][ T9078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.178327][ T24] usb 3-1: USB disconnect, device number 62 [ 304.199965][ T5904] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 304.281006][ T992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.360709][ T5904] usb 2-1: device descriptor read/64, error -71 [ 304.611892][ T5904] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 304.626770][ T9120] tipc: Started in network mode [ 304.637604][ T9120] tipc: Node identity 000000000000000000000000000c0001, cluster identity 4711 [ 304.647256][ T9120] tipc: Enabling of bearer rejected, failed to enable media [ 304.659869][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 304.690438][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 304.757728][ T977] usb 5-1: USB disconnect, device number 75 [ 304.757801][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 304.765598][ T5904] usb 2-1: device descriptor read/64, error -71 [ 304.772110][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 304.787391][ C0] ================================================================== [ 304.795490][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x29d/0x370 [ 304.803346][ C0] Read of size 4 at addr ffff88807b8c985c by task syz-executor/9123 [ 304.811360][ C0] [ 304.813719][ C0] CPU: 0 UID: 0 PID: 9123 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 304.813749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.813764][ C0] Call Trace: [ 304.813773][ C0] [ 304.813781][ C0] dump_stack_lvl+0x241/0x360 [ 304.813820][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.813849][ C0] ? __virt_addr_valid+0x183/0x530 [ 304.813878][ C0] ? rcu_is_watching+0x15/0xb0 [ 304.813906][ C0] ? __virt_addr_valid+0x183/0x530 [ 304.813933][ C0] ? lock_release+0x4e/0x3e0 [ 304.813956][ C0] ? __virt_addr_valid+0x183/0x530 [ 304.813982][ C0] ? __virt_addr_valid+0x183/0x530 [ 304.814012][ C0] print_report+0x16e/0x5b0 [ 304.814039][ C0] ? __virt_addr_valid+0x183/0x530 [ 304.814074][ C0] ? __virt_addr_valid+0x183/0x530 [ 304.814101][ C0] ? __virt_addr_valid+0x45f/0x530 [ 304.814129][ C0] ? __phys_addr+0xba/0x170 [ 304.814157][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 304.814187][ C0] kasan_report+0x143/0x180 [ 304.814215][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 304.814249][ C0] do_raw_spin_lock+0x29d/0x370 [ 304.814282][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 304.814312][ C0] ? do_raw_spin_lock+0x151/0x370 [ 304.814345][ C0] _raw_spin_lock_irqsave+0xe4/0x130 [ 304.814368][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 304.814390][ C0] ? kcov_remote_stop+0x78/0x6f0 [ 304.814414][ C0] __wake_up_common_lock+0x25/0x1e0 [ 304.814451][ C0] __usb_hcd_giveback_urb+0x501/0x6e0 [ 304.814480][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 304.814509][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 304.814543][ C0] dummy_timer+0x84b/0x4670 [ 304.814568][ C0] ? __lock_acquire+0xad5/0xd80 [ 304.814603][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.814626][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 304.814663][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 304.814688][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 304.814711][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 304.814733][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 304.814754][ C0] __hrtimer_run_queues+0x5a6/0xd40 [ 304.814791][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 304.814816][ C0] ? read_tsc+0x9/0x20 [ 304.814833][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 304.814857][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 304.814884][ C0] handle_softirqs+0x2d6/0x9b0 [ 304.814911][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 304.814933][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 304.814976][ C0] __irq_exit_rcu+0xfb/0x220 [ 304.814997][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 304.815023][ C0] irq_exit_rcu+0x9/0x30 [ 304.815042][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 304.815080][ C0] [ 304.815087][ C0] [ 304.815095][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.815119][ C0] RIP: 0010:exc_page_fault+0x4de/0x920 [ 304.815143][ C0] Code: 81 fd 01 00 00 40 7f 19 81 e5 00 00 00 40 74 11 48 8b 7c 24 20 48 81 c7 18 02 00 00 e8 4b e6 52 f5 41 f7 c6 00 04 00 00 75 54 <41> f7 c6 73 08 00 00 0f 84 d5 00 00 00 4c 89 e7 e8 2d 99 3e f5 85 [ 304.815162][ C0] RSP: 0000:ffffc9000acefee8 EFLAGS: 00000246 [ 304.815181][ C0] RAX: ffff888030fed140 RBX: ffff88807c67ee00 RCX: ffffffff8c307c05 [ 304.815197][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888030fed1c0 [ 304.815210][ C0] RBP: 0000000000000000 R08: ffff888030fed1c3 R09: 1ffff110061fda38 [ 304.815225][ C0] R10: dffffc0000000000 R11: ffffed10061fda39 R12: ffff888027ab5a00 [ 304.815241][ C0] R13: 0000000000000354 R14: 0000000000000100 R15: 0000000000000014 [ 304.815259][ C0] ? exc_page_fault+0x495/0x920 [ 304.815283][ C0] ? exc_page_fault+0x495/0x920 [ 304.815310][ C0] asm_exc_page_fault+0x26/0x30 [ 304.815328][ C0] RIP: 0033:0x7f58dd94bd90 [ 304.815345][ C0] Code: ff ff eb d0 66 0f 1f 44 00 00 c3 0f 1f 80 00 00 00 00 5b 48 8d 3d 9c 0a d9 00 5d 41 5c e9 a8 7b ff ff 0f 1f 84 00 00 00 00 00 <80> 3d 81 0a d9 00 00 0f 84 84 00 00 00 48 c7 c0 d8 ff ff ff c7 05 [ 304.815363][ C0] RSP: 002b:00007f58ddccfca8 EFLAGS: 00010206 [ 304.815380][ C0] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00007f58dd983a0d [ 304.815395][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 000055558e54a7e0 [ 304.815409][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 304.815422][ C0] R10: 000055558e54a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 304.815436][ C0] R13: 00000000000927c0 R14: 000000000004a5df R15: 00007f58ddccfe40 [ 304.815459][ C0] [ 304.815467][ C0] [ 304.825452][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 304.825878][ C0] Allocated by task 10: [ 304.855991][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 304.857030][ C0] kasan_save_track+0x3f/0x80 [ 304.857067][ C0] __kasan_kmalloc+0x9d/0xb0 [ 304.870094][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 304.871509][ C0] __kmalloc_cache_noprof+0x236/0x370 [ 304.877733][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.881708][ C0] xpad_probe+0x3f3/0x1d80 [ 304.881740][ C0] usb_probe_interface+0x650/0xbc0 [ 304.881764][ C0] really_probe+0x2b9/0xad0 [ 304.881788][ C0] __driver_probe_device+0x1a2/0x390 [ 304.881812][ C0] driver_probe_device+0x50/0x430 [ 304.881838][ C0] __device_attach_driver+0x2d6/0x530 [ 304.881864][ C0] bus_for_each_drv+0x258/0x2e0 [ 304.881883][ C0] __device_attach+0x341/0x530 [ 304.881906][ C0] bus_probe_device+0x189/0x260 [ 304.881923][ C0] device_add+0x856/0xbf0 [ 304.881944][ C0] usb_set_configuration+0x1999/0x1fe0 [ 304.902021][ T5904] usb usb2-port1: attempt power cycle [ 304.906292][ C0] usb_generic_driver_probe+0x88/0x140 [ 304.906334][ C0] usb_probe_device+0x1b8/0x380 [ 304.913090][ T24] usb 3-1: Product: syz [ 304.915984][ C0] really_probe+0x2b9/0xad0 [ 304.933194][ T5928] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 304.936318][ C0] __driver_probe_device+0x1a2/0x390 [ 304.948146][ T24] usb 3-1: Manufacturer: syz [ 304.952404][ C0] driver_probe_device+0x50/0x430 [ 304.952439][ C0] __device_attach_driver+0x2d6/0x530 [ 304.952465][ C0] bus_for_each_drv+0x258/0x2e0 [ 304.952483][ C0] __device_attach+0x341/0x530 [ 304.952506][ C0] bus_probe_device+0x189/0x260 [ 304.952523][ C0] device_add+0x856/0xbf0 [ 304.952543][ C0] usb_new_device+0x1052/0x19a0 [ 304.966784][ T5928] usb 6-1: config 0 has no interface number 0 [ 304.968982][ C0] hub_event+0x2bfd/0x50f0 [ 304.969010][ C0] process_scheduled_works+0xac3/0x18e0 [ 304.969033][ C0] worker_thread+0x870/0xd50 [ 304.986683][ T24] usb 3-1: SerialNumber: syz [ 304.989889][ C0] kthread+0x7b7/0x940 [ 304.989923][ C0] ret_from_fork+0x4b/0x80 [ 304.989945][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.989963][ C0] [ 304.989969][ C0] Freed by task 977: [ 304.989980][ C0] kasan_save_track+0x3f/0x80 [ 304.990001][ C0] kasan_save_free_info+0x40/0x50 [ 304.990018][ C0] __kasan_slab_free+0x59/0x70 [ 304.990046][ C0] kfree+0x198/0x430 [ 304.990072][ C0] xpad_disconnect+0x359/0x490 [ 305.000261][ T5928] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 305.001144][ C0] usb_unbind_interface+0x25b/0x940 [ 305.010092][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.010995][ C0] device_release_driver_internal+0x503/0x7c0 [ 305.015956][ T5928] usb 6-1: Product: syz [ 305.021103][ C0] bus_remove_device+0x34f/0x420 [ 305.021126][ C0] device_del+0x57c/0x9b0 [ 305.021148][ C0] usb_disable_device+0x3c5/0x860 [ 305.021167][ C0] usb_disconnect+0x340/0x960 [ 305.021193][ C0] hub_event+0x1d2a/0x50f0 [ 305.021213][ C0] process_scheduled_works+0xac3/0x18e0 [ 305.021234][ C0] worker_thread+0x870/0xd50 [ 305.021256][ C0] kthread+0x7b7/0x940 [ 305.021282][ C0] ret_from_fork+0x4b/0x80 [ 305.021304][ C0] ret_from_fork_asm+0x1a/0x30 [ 305.021323][ C0] [ 305.021330][ C0] The buggy address belongs to the object at ffff88807b8c9800 [ 305.021330][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 305.021348][ C0] The buggy address is located 92 bytes inside of [ 305.021348][ C0] freed 1024-byte region [ffff88807b8c9800, ffff88807b8c9c00) [ 305.021369][ C0] [ 305.021377][ C0] The buggy address belongs to the physical page: [ 305.021397][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b8c8 [ 305.021417][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 305.021435][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 305.021460][ C0] page_type: f5(slab) [ 305.021479][ C0] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 305.021498][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 305.021518][ C0] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 305.021537][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 305.021557][ C0] head: 00fff00000000003 ffffea0001ee3201 00000000ffffffff 00000000ffffffff [ 305.021575][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 305.021587][ C0] page dumped because: kasan: bad access detected [ 305.021604][ C0] page_owner tracks the page as allocated [ 305.021612][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 992, tgid 992 (kworker/u8:5), ts 106775673379, free_ts 106738767249 [ 305.021649][ C0] post_alloc_hook+0x1f4/0x240 [ 305.021679][ C0] get_page_from_freelist+0x352b/0x36c0 [ 305.048777][ T24] usb 3-1: config 0 descriptor?? [ 305.052153][ C0] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 305.052184][ C0] alloc_pages_mpol+0x339/0x690 [ 305.052210][ C0] allocate_slab+0x8f/0x3a0 [ 305.052230][ C0] ___slab_alloc+0xc3b/0x1500 [ 305.052246][ C0] __slab_alloc+0x58/0xa0 [ 305.052262][ C0] __kmalloc_noprof+0x2ea/0x4d0 [ 305.052289][ C0] ieee802_11_parse_elems_full+0x16d/0x2f10 [ 305.052314][ C0] ieee80211_inform_bss+0x166/0x10e0 [ 305.052335][ C0] cfg80211_inform_single_bss_data+0xf5f/0x1ed0 [ 305.052360][ C0] cfg80211_inform_bss_data+0x3c5/0x5860 [ 305.052382][ C0] cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 305.052406][ C0] ieee80211_bss_info_update+0x8ac/0xbc0 [ 305.052427][ C0] ieee80211_ibss_rx_queued_mgmt+0x19ce/0x2e20 [ 305.052450][ C0] ieee80211_iface_work+0x933/0x1100 [ 305.066003][ T5928] usb 6-1: Manufacturer: syz [ 305.067496][ C0] page last free pid 5214 tgid 5214 stack trace: [ 305.076550][ T5928] usb 6-1: SerialNumber: syz [ 305.077520][ C0] __free_frozen_pages+0xde8/0x10a0 [ 305.077559][ C0] __put_partials+0x160/0x1c0 [ 305.077578][ C0] put_cpu_partial+0x17e/0x250 [ 305.077600][ C0] __slab_free+0x294/0x390 [ 305.087363][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 305.089429][ C0] qlist_free_all+0x9a/0x140 [ 305.123488][ T5928] usb 6-1: config 0 descriptor?? [ 305.128514][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 305.128547][ C0] __kasan_slab_alloc+0x23/0x80 [ 305.128571][ C0] __kvmalloc_node_noprof+0x2ca/0x5a0 [ 305.299837][ T5904] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 305.300777][ C0] seq_read_iter+0x20b/0xda0 [ 305.300809][ C0] vfs_read+0x9a0/0xb90 [ 305.300830][ C0] ksys_read+0x19d/0x2d0 [ 305.324934][ T5904] usb 2-1: device descriptor read/8, error -71 [ 305.326108][ C0] do_syscall_64+0xf3/0x230 [ 305.357086][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.361286][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.361318][ C0] [ 305.361325][ C0] Memory state around the buggy address: [ 305.361337][ C0] ffff88807b8c9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 305.361352][ C0] ffff88807b8c9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 305.361366][ C0] >ffff88807b8c9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 305.361376][ C0] ^ [ 305.361389][ C0] ffff88807b8c9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 305.361403][ C0] ffff88807b8c9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 305.361415][ C0] ================================================================== [ 305.361442][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 305.361460][ C0] CPU: 0 UID: 0 PID: 9123 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 305.361486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.361500][ C0] Call Trace: [ 305.361508][ C0] [ 305.361516][ C0] dump_stack_lvl+0x241/0x360 [ 305.361550][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.361582][ C0] ? __pfx__printk+0x10/0x10 [ 305.361613][ C0] ? vscnprintf+0x5d/0x90 [ 305.361650][ C0] panic+0x349/0x880 [ 305.361681][ C0] ? check_panic_on_warn+0x21/0xb0 [ 305.361713][ C0] ? __pfx_panic+0x10/0x10 [ 305.361739][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 305.361777][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 305.361801][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.361824][ C0] ? print_report+0x519/0x5b0 [ 305.361857][ C0] check_panic_on_warn+0x86/0xb0 [ 305.361887][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 305.361918][ C0] end_report+0x77/0x160 [ 305.361946][ C0] kasan_report+0x154/0x180 [ 305.361975][ C0] ? do_raw_spin_lock+0x29d/0x370 [ 305.362012][ C0] do_raw_spin_lock+0x29d/0x370 [ 305.362047][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.362079][ C0] ? do_raw_spin_lock+0x151/0x370 [ 305.362114][ C0] _raw_spin_lock_irqsave+0xe4/0x130 [ 305.362138][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 305.362161][ C0] ? kcov_remote_stop+0x78/0x6f0 [ 305.362188][ C0] __wake_up_common_lock+0x25/0x1e0 [ 305.362234][ C0] __usb_hcd_giveback_urb+0x501/0x6e0 [ 305.362266][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 305.362297][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 305.362332][ C0] dummy_timer+0x84b/0x4670 [ 305.362359][ C0] ? __lock_acquire+0xad5/0xd80 [ 305.362397][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.362423][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 305.362462][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 305.362489][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 305.362514][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 305.362537][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 305.362560][ C0] __hrtimer_run_queues+0x5a6/0xd40 [ 305.362599][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 305.362627][ C0] ? read_tsc+0x9/0x20 [ 305.362646][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 305.362674][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 305.362706][ C0] handle_softirqs+0x2d6/0x9b0 [ 305.362735][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 305.362758][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 305.362787][ C0] __irq_exit_rcu+0xfb/0x220 [ 305.362809][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 305.362839][ C0] irq_exit_rcu+0x9/0x30 [ 305.362860][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 305.362885][ C0] [ 305.362894][ C0] [ 305.362904][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.362929][ C0] RIP: 0010:exc_page_fault+0x4de/0x920 [ 305.362957][ C0] Code: 81 fd 01 00 00 40 7f 19 81 e5 00 00 00 40 74 11 48 8b 7c 24 20 48 81 c7 18 02 00 00 e8 4b e6 52 f5 41 f7 c6 00 04 00 00 75 54 <41> f7 c6 73 08 00 00 0f 84 d5 00 00 00 4c 89 e7 e8 2d 99 3e f5 85 [ 305.362977][ C0] RSP: 0000:ffffc9000acefee8 EFLAGS: 00000246 [ 305.363001][ C0] RAX: ffff888030fed140 RBX: ffff88807c67ee00 RCX: ffffffff8c307c05 [ 305.363021][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888030fed1c0 [ 305.363037][ C0] RBP: 0000000000000000 R08: ffff888030fed1c3 R09: 1ffff110061fda38 [ 305.363055][ C0] R10: dffffc0000000000 R11: ffffed10061fda39 R12: ffff888027ab5a00 [ 305.363074][ C0] R13: 0000000000000354 R14: 0000000000000100 R15: 0000000000000014 [ 305.363096][ C0] ? exc_page_fault+0x495/0x920 [ 305.363125][ C0] ? exc_page_fault+0x495/0x920 [ 305.363154][ C0] asm_exc_page_fault+0x26/0x30 [ 305.363176][ C0] RIP: 0033:0x7f58dd94bd90 [ 305.363197][ C0] Code: ff ff eb d0 66 0f 1f 44 00 00 c3 0f 1f 80 00 00 00 00 5b 48 8d 3d 9c 0a d9 00 5d 41 5c e9 a8 7b ff ff 0f 1f 84 00 00 00 00 00 <80> 3d 81 0a d9 00 00 0f 84 84 00 00 00 48 c7 c0 d8 ff ff ff c7 05 [ 305.363215][ C0] RSP: 002b:00007f58ddccfca8 EFLAGS: 00010206 [ 305.363242][ C0] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00007f58dd983a0d [ 305.363258][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 000055558e54a7e0 [ 305.363273][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 305.363287][ C0] R10: 000055558e54a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 305.363303][ C0] R13: 00000000000927c0 R14: 000000000004a5df R15: 00007f58ddccfe40 [ 305.363329][ C0] [ 305.366790][ C0] Kernel Offset: disabled