last executing test programs: 36m19.856075841s ago: executing program 0 (id=322): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x5}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x4bea, &(0x7f0000000000)={0x0, 0x829b, 0x800, 0x0, 0x2f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/189, 0xbd}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x8d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x7, 0x0, 0x8, 0x0, 0x6, 0xfffffffffffffff8, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000200)='syzkaller\x00', 0x180, 0xf3, &(0x7f0000000600)=""/243, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x3, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000880)=r5, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x0, 0x2}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x52, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050000000000000200000000bfff7f00000108001500b9c20a000400120005001699942495b1"], 0x60}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000007100010000000001"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c0002801800028008"], 0xec}}, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 36m17.733889555s ago: executing program 0 (id=329): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 36m17.521274545s ago: executing program 0 (id=330): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x7203, 0x148, 0x130, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x0, 0x6, 0x0, 0x5]}, {0x0, [], 0x4}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x0, 0x0, [0x400, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000200)={0x1, "94a246be445c947bccfb632ec629e361f43a16d680ec57dcceaa2e5ad4b41542", 0x0, 0x0, 0x0, 0x100, 0x0, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x8c0, 0x30, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{0x8ac, 0x1, [@m_ife={0x44, 0x8, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="02cb811471d9"}]}, {0xd, 0x6, "7a80e1d0a5306efdca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x174, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x7, 0x6, 0xd3a}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xa7c, 0x6, 0x4, 0x400}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xe, 0x6, 0x3, 0x5}, 0x1}}]}, {0xef, 0x6, "5d1566725ec4e7b50c43c7cec23ea79a073e3ded8597abb37949aa0d5f240a2f65fb11133f4638d3c7acbc2be753cb717c2c681d8e0924d4df0fffa3eff11c39f1c887919d29c292ef1bcf5b7c5557ecc4133266832024a557bdfa6aa92b51177f67b9520ebcfe89deec71dbf409457c260dc1dffc3a0a3bbc573c2e4af53bba16745bb963bb541316367710aa28b3a2b4162a6ede4016d8e26b50bf4762d8acaae5e42422e3ea36ce11c74accbd04450706b042d016b86b7b23e3b3018aa86397f4e51708c2c7199a37a71000000000000000759c14047f73e88a4c8f15195dd4e8f2429426aaf004f839"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xac, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x8, 0xc, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xed}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x1, 0x5, 0x6a0, 0x2a}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x240b5e5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffff}]}, {0x1f, 0x6, "2745f659a1958f1e38dfdd2e23b39359d4cd058e6f4fc95919ff0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x1fc, 0x13, 0x0, 0x0, {{0x7}, {0x1a4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x10f, 0x6, {0x63, 'filter\x00', 0x1, 0x800, "3bdbb72d8a08d6a981ce973f83c2d6f8d7503b3d49ecb7759e15f2c2d73bbaa836e22669c0f508417cdb302c8789d5c3ac566252dbcb72186e302f24a1b5546b784ca2f2a6eaf62490f16bfa7d8a8420bec1f381c99b8a3f04e0fda738d373153fbc3039d2dc645d2c9d4f9dab62d7db499c95e725007a0c036a870a0415e4364d388118719ad9314a910323e734a51b63d1fb8a304b1e2467f67a3f16ffb55959e1cbf6c1368d1719a43082d48445bbc74d677d596df826c6c46024c81156dabdea9baaea39665e06b62b0f1c9ed242d5bf25a056f89eeafece21e4ebd5bb143d4d27d07b"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x51, 0x6, {0x8, 'raw\x00', 0x0, 0x6, "bbdf91a53cf5857899b47e082f6199dc83680abab82fa20d3c164a3957fd64acc1b6013050b48b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x31, 0x6, "2d3fa70a96f03475a1e4ed27b83dd1c97d898594f15b8680025f2ea0ca653da68bf80b8dc7ca826be6a2d94df8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x15c, 0x11, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0xf6, 0x6, "68de832a02ceb26c5bc934fe3e40baf67937e3d6c11ec5a666f81c8db4a4b7eb4683288c83ed1ed8ee66aca72d99b699dd742e074c83be9ae3aae36f73c034bf46d046ebf1931f756885e394460f34f02533781423440e72c96841658046a4e55663683252518ed6be5e0314c0b8acb29b9a3fb0b12676f297e5e0021b266eca79297325c205daf59efcb325b6d3c7f9bcd7342a87d949ba21e53e3cbe0e6ff8aec05b08a6a69312629fa75914443dd0703e276e049561f2c7731197f7251f2a4b6435db70c282bb5a72da888132f614ad8c172798050e9500edba0718beec69f1a30dc7602b7d38901077e39fc88e34eea9"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x140, 0x1e, 0x0, 0x0, {{0x7}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe4, 0x6, {0x4, 'security\x00', 0x81, 0x8, "7124e180fcd17735a61ebcc93ed0cf36234b090a6c70ad7fa276a50588e923246cacd224fd6dfe2386c72fbaab86bc519182293b212f300b38a77852c686ab6858ccf9c385b73bef4571c1987749aca8709df30a7742906e25e77620cf37fbd9cdba51934ad229d4a66c19c63b2216190e6a39fa2e2d76a93c8410f0a3247710b95eccc240fab42c919dd2181ed7d18408d55f18a8ef50bbfdbb7b879ab9228c1b481cd38e5035d0ed6d5e1ef6a3f185e5f9c77b5f069d7730b3"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xe, 0x6, "57c0bca32d699c6818fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x98, 0x11, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}]}, {0x5a, 0x6, "4d8af0ec425fb5956653b356082b609e69287cb4c9d28a233635fa6b9c1812c90971a9ce0fbad9467c0c8fbbdc60c326828b65d47c97b1df6135b8417db210b4fb7d257b627d2b78c94fe2cec6c106d33adedf9d1f2f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x95cdbeba1499c877}}}}, @m_skbmod={0x114, 0x5, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x9d, 0x7, 0x42, 0x5}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x7, 0x7, 0x400, 0x31}, 0x7}}]}, {0x96, 0x6, "f98114a4202b8a5ca30e86b2238bbb6239dfa80e7e8bfc6ad877730d48489f7ff267713d0f41c80f48da3f81bafe176c1c53295fd8d2587af12942899b49a61d52e8f8da95a9851852fc6b8f7d990f9b80a74fedcb8417174b42b307e66b3097300b084b229c39c9855a24ed4fd70e22faa1ab429237d7fe86a17450effd27026aea18449882e17c7c0d986b77475dad7156"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000100)={0x0, @vbi={0x9, 0xfff, 0xffff8001, 0xb5315241, [0x0, 0x10], [0x8, 0xff], 0x1}}) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x9, 0x9, 0xd5}, 0x14) 36m17.252252423s ago: executing program 0 (id=332): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="a41faf3f9ddedd3a3ad7d2c1127358314496c0047a9cd062c2bed657ed93cf3adb4c8efd69256d2adb0b69ce3eb6554cae1568c26a67d8372aff5b173348fa33b4888a4f24e73a8834444067627a2db05e9c3466a10ae49f705ab83c274579bd4090259b6e38fc2e808876c53d632372df6aa1bf85784da72eb1d5e06554a3025ffe3f585d8abf63f7860551fb9abe29e90d4aeda024ca3ae5a2537b962b27b7c9ec4a1bfe661d98"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="4a09ea8546da3c4911f3d4cebf287098fb46add601ebd62241be8a53a3127a64529ea8a9eaf1aca8e7e82e56eee428f53483f1fd95d3a9a2fcfe6307aff5fa246faa4938832996b3807c83021b0da9278b293119b4acf43d33ec0bead25173fb395b5c36fcf02576607dbba0aff08fae907a138dd3db60185542177de7d8ee845da6dbca67908e49028872232c8f19aa61d64aaae21a9ab0bbbff37148412e937ac5c69edc23a535c959b6bcf4d17fd6d7cadc7f7244675985a69398c97a8dab61d5b75088ba39208a0ea194a6f169034765408893d15410eceff2"], 0x0, 0x0, 0x0, 0x0, 0x0}) 36m14.040165981s ago: executing program 0 (id=339): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="728fdf83c184f59a9b2d00000700000001000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) unshare(0x2a020400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) close(r4) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) fsopen(&(0x7f00000000c0)='hfs\x00', 0x1) 36m11.642333378s ago: executing program 0 (id=349): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = syz_open_dev$vbi(&(0x7f00000051c0), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000005240)=@fd={0xffffffff, 0x2, 0x4, 0x20, 0x800, {}, {0x4, 0xc, 0x81, 0x8, 0x7f, 0xd, "cee7c6c5"}, 0x5, 0x4, {}, 0x7}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074"], 0xbc}}, 0x0) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x100}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={r4, 0x16a3, 0x101}, 0x8) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100101) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x2, 0x4000032f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000180)={0x2, 0xfe}, 0x2) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000180)={r4, 0x8, 0xff}, 0x8) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000000000008bc7e964f959d457"], 0x48}, 0x1, 0x0, 0x0, 0x48045}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 35m56.325585254s ago: executing program 32 (id=349): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = syz_open_dev$vbi(&(0x7f00000051c0), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000005240)=@fd={0xffffffff, 0x2, 0x4, 0x20, 0x800, {}, {0x4, 0xc, 0x81, 0x8, 0x7f, 0xd, "cee7c6c5"}, 0x5, 0x4, {}, 0x7}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074"], 0xbc}}, 0x0) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x100}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={r4, 0x16a3, 0x101}, 0x8) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100101) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x2, 0x4000032f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000180)={0x2, 0xfe}, 0x2) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000180)={r4, 0x8, 0xff}, 0x8) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000000000008bc7e964f959d457"], 0x48}, 0x1, 0x0, 0x0, 0x48045}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 33m10.567063787s ago: executing program 2 (id=881): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x80800) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000680)={0x4, 0x7ff, 0x2, {0xb, @vbi={0x400, 0x8, 0xb0e00000, 0x30385056, [0x9, 0x9], [0x8, 0x4ba], 0x108}}, 0x71}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x7, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 33m10.098791493s ago: executing program 2 (id=884): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 33m9.874365274s ago: executing program 2 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x404c000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000012000000000000aaff020000000000000000000000000001"], 0xffe) 33m7.684120179s ago: executing program 2 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r3, 0x80000) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x29, 0x85, 0x72}, 0x2c) 33m6.09087317s ago: executing program 2 (id=895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x0) accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xe8) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x8005, r5, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x4, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4800) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) 33m5.3868877s ago: executing program 2 (id=899): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004280)={0x2020}, 0x2020) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0xffff030c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ppoll(&(0x7f0000000200)=[{r5, 0x20c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) (async) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='bfs\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x5, 0x8001, [0x0, 0xfd9]}}) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000140)=0x2) (async) dup(r7) 33m4.618655983s ago: executing program 33 (id=899): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004280)={0x2020}, 0x2020) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0xffff030c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ppoll(&(0x7f0000000200)=[{r5, 0x20c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) (async) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='bfs\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x5, 0x8001, [0x0, 0xfd9]}}) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000140)=0x2) (async) dup(r7) 22m52.292513497s ago: executing program 1 (id=2911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@local}, {@in, 0xfffffffc, 0x32}, @in6=@remote, {0x0, 0x0, 0x4000000000, 0x2}, {}, {}, 0x0, 0x2000000, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ctr-aes-ce\x00'}}}]}, 0x138}}, 0x0) 22m52.054498219s ago: executing program 1 (id=2912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) (async) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05895d3e", 0x4}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="4190225615", 0x5}, {0x0}, {&(0x7f0000000dc0)}], 0x3}}], 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r7}, 0x20) (async) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000540), 0x10000000000002be, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e25, @local}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c34060100c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e5e7111238865d27b4e82dcc94700ddd1878b088736009d15f9fa"}, 0xd8) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8880) (async) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r11}], 0x1, 0x0) ioctl$TCFLSH(r10, 0x5608, 0x0) (async) io_uring_enter(r2, 0x6343, 0x903e, 0x0, &(0x7f0000000e80)={[0x2]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (async) r12 = syz_usb_connect$uac1(0x4, 0xdf, &(0x7f0000000ec0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x4, 0x30, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x3, 0x4, [0x9, 0x8, 0x4, 0x9], 0xc}, @feature_unit={0x7, 0x24, 0x6, 0x3, 0x3, 0x0, [], 0x47}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x3, 0x1, 0xc1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0x2, 0x3}, @as_header={0x7, 0x24, 0x1, 0x1, 0x8f, 0x1002}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x107, 0xfffb, 0x0, "e9f03a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x4, 0x8, "47c4a0", '+'}, @as_header={0x7, 0x24, 0x1, 0x4, 0xe0, 0x1002}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xe1, 0x3, 0x1, 0x1, "00000200000020"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x8, 0x5, {0x7, 0x25, 0x1, 0x80, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xe0fd, 0x8, 0x58, "6a1d28e3db"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x8, {0x7, 0x25, 0x1, 0x1, 0x2, 0xb}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x78, 0x8, 0x40, 0x8, 0x8}, 0x3d, &(0x7f0000001080)=ANY=[@ANYBLOB="f50f3d688374d2c1f2b8c57810931ec857a8ef1500040b100108222467bf0500d014ece28a9076e753134dd5921004e10f40a1c89d3aeb5f0000000000006590b6d1c055b8c86d2423ed62a8da7b73ebd9da606269a8767849a3c1f5719e8bf326ab7501630093fcb75064b704058d86e975c9c639c798e44881629a3990c4d7a14a2abd207fcafff2f13362a81b9600ce5868666504b9201582f6c572bc4676bf2e29d424ae6a82fd2d5c0139c8d643b36a14fa21ebf7d40d27a69758d2c821497595874ee82a39b524e8d28df0288b0c0ba7"], 0x6, [{0xc7, &(0x7f0000000280)=@string={0xc7, 0x3, "c6a86e817db4d54f7164db74a2f6e099331e3340c49b58703d0a6dc90ffc6d9c95616a75630aadb2e85622e07bc8a6c1fb40959f36dbaf976091e41bd3bcf0bf913aa584136fe251cf147190bd7693a2b290511179cf2a675a5b143680d8d86f82e27b3bcdb95a93e12201aa74e2485501edf384f4054f591883220032860ed3934b67f77ef7c6518e37b5ad3045187e82a2756f52bf074bef0122e7367b4e1d866e17cf751869a6df8863e4e4871b63ee4aa083a2936dff4f2254547a427248693ee2d030"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}, {0xa5, &(0x7f0000000fc0)=@string={0xc5, 0x3, "3981b72d06a303d6206f43f8db609f307f07d68b5b9671a425c1a7ced9486075f0dd5d0ada7e68a2f9cd9334dcd1ebc06cdfb847617439bcbb89e485cde2e798b54c9f8628061f24ed7b2f96964fda8920f5ec66843c1cb6490e3c2e1457820da82fa2cfef12ac72caaa549004e7d2df25326aae71e8d878071afc2dd9dadd6b2c0b83a8d565b9c29fe82ac417294cc5a2bb5eb77d9d6df70000000000000000000000497471159f"}}, {0x95, &(0x7f0000000480)=@string={0x95, 0x3, "f0ba32b0265ef72e368acb2b5f90ba04db18fa3e9bc433b4b40ddc2f039a8e5732d1d6a4dd8fc27146901e638fe7300ec5fa9b9836afde8a55907fd5ec98fe2de2c012dcf8f3800cc762351a5d26129171fe263a62260fbb9002aa49014fa017b9d6b5b902524f998e71f46e4f230809ba14e611aa4d98743afbbbb80d2eb4a7dffbf23bad8dc9121f146a129358616f0c2b6c"}}, {0x45, &(0x7f0000000540)=@string={0x45, 0x3, "73b9533f7dae07fb837f12236991ed96d04f28f408667710411aeff7ee595bdec281bdaa0c741bc44c190b7342497483bce3d93d43c1253bfc7be2efd01ce8d16a6c2a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io(r12, &(0x7f0000000940)={0x2c, &(0x7f00000003c0)={0x20, 0x3e, 0xaa, {0xaa, 0x21, "6f8ebea2a389d206d9c0d4f8860bc0ffc795b372798b22b698f0a4749e17d487adfd3a83a1ea156e4c3905e842aeb5a06000382d55f6ad6c2fb763c51262512765b88876a234dda36763551d64230de11a18e0cb16aa5d635996c96495f6b1f9ce97dd0b64ed6fb08394b20cf496e3be76c8100604e834918414c357812ad0dda4cc1085db7a9f9271502d8302b4b317faf4dd0c7b8ff134bd7fe601bd7d5f7f371c71afce1fbd98"}}, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x1, 0xf00, 0x65, [0xff3f00, 0x3f, 0xf, 0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf, 0x2, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x0, 0x0, 0x7}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x3, 0x8, "d18d2422", "e2b0ec50"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x1, 0x0, 0x8, 0x9, 0x4, 0x101}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x20, 0xa, 0x5f, "cf6c94a696742c09c27b5d9969a9662c680681bd8242be68213d3c8c840a9dc5b1c96a26b2687f2524df14066918a34da8c7c9809eb6a57e95298793fd2f573f77d583f4561786ab41f6de883709aea3410f98b9b31787fbb89b9774fd5614"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000a80)={0x20, 0x0, 0x3, {0x3, 0x2}}, &(0x7f0000001300)=ANY=[@ANYBLOB="2000040000000000220060e8c6deb206b1a2fb65c645e2668665e892c9aa9fc19ed1aa7137465403fd2171918c6e8d10170bab23c7effcabe01001ed26f134105210670eeaa91a8d3a94e258d112467caecf7a4bf41249884dbecdc982af05ca5c953bf08c5c94646db29f29a6d497ca9b70dbf733d88b3b747f2b5bc6fdd5ae956db47810229ac1442067ee84e5a9d937ae37cf041fb5e6f6ab37b1025d15942fd50bfe6bd35f9972dd3774"], &(0x7f0000000b00)={0x40, 0x7, 0x2, 0xe}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x7e}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "ed5d"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "ca89"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x2}}) 22m51.828281601s ago: executing program 1 (id=2913): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22m51.664523282s ago: executing program 1 (id=2914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) syz_usb_connect$cdc_ncm(0x2, 0x88, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2, 0x8, 0x4, 0x28, 0x4e}, 0x7f, &(0x7f0000000280)={0x5, 0xf, 0x7f, 0x2, [@generic={0x66, 0x10, 0x2, "1fd691740515ed43cab43bf6e1e7720e4563be3b5eb102ae869ba22a95d63c46c864bde6c863f9667146c242daa125a09630cecea6db2abe71698288cfedb2625dfa63c501fb39c1a052d720e6808ef43dec1189a50e56dd4c6795dc01babd5c183637"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f45aaa6954012ec4641e0813c1299a98"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c09}}, {0x24, &(0x7f0000000400)=@string={0x24, 0x3, "4f8d8e65461d3e31d232eacac33e618f3b213419ba920ef81229ae47500d1e6d5588"}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "83c64c1f6edf03e0082df5206e1ce3f850cb18d7b72f1194587824a6e48e7247fb03bb85148f815e7f418669e82e158cd8d3b235e6c95ffbbc2d7d6dac09c1b8a9ee65e0b9521e2b6b6a1068f9898fd1430a776fdcab135fb02965d6d1e84fa8a4bb058cc6aae77f6d5fc5833ed5d67cce45127036"}}]}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r4 = open_tree(r2, &(0x7f0000000540)='./file0/../file0/../file0/../file0/../file0/file0\x00', 0x9800) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1860000008fcffffff0000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x9, "d378f684"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 22m48.453379367s ago: executing program 1 (id=2924): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22m47.630686045s ago: executing program 1 (id=2927): creat(&(0x7f0000000040)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40004854) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0xd4}}, 0x4000010) 22m46.70163602s ago: executing program 34 (id=2927): creat(&(0x7f0000000040)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40004854) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0xd4}}, 0x4000010) 17m27.974996964s ago: executing program 3 (id=3424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x9f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) 17m26.13148278s ago: executing program 3 (id=3431): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6167141cdce0139937701510388dfc460594cca30f61f9cdd919f7e36336d198e9bc6fa65cbfa9cdd9e8527330c465c0b8eedded7e1802be17e4a62d4cfd3d03fcfe379ef686b1428ae81b914b0b9039952345457072af82f25568aba8947b055dd6e8997d6a49f0d5bae0bf4e7a6cb2e7fddc7aa307768acaf1f5180043475b4badf30b0f880faba1da00563baa11dd12dd6848e423a1798d6818b9b454f427c73f0a0199f8b0b91bb8917553303aaa1870e580a3714feee8f754e8d50679f56dcbda1348cd827244cb299bbc966dec4998eaef7b91c99b8382def05c5557db49e1b3f00e55213ac7ad9cbfdb4db908", 0xf0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="08000300286cdb290000010000080000", 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) 17m25.640808483s ago: executing program 3 (id=3432): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) unshare(0x24020400) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r4, 0x0, 0x0, 0x9000f3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=""/63, 0x3f}, 0x4}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 17m21.091596945s ago: executing program 3 (id=3440): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001ff83bd9ee7e1ee070000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x812) epoll_create1(0xc247a82949ce9376) r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000f561223853406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="3e4babf19a4223f24219cd6a260a4b6923dd6ca8cc939afa700520fcd79f84917a5d2d90352861e615290c4c7e6bbdc8e2f66cd4165a5de46f87126fb8c86f4526392e28f87319d67579fecc882c79d704c039b4ca935d90acb64fd87dbc8b758fd917b481158a2c1ba04a1702854ca18aa944b73728f06e0542aa72e1a3a5401cf2a6a0c74e6375bf569b17f80577cda487cd9632edf631fd361508015e36f0dbe122f0401e24ceed07633768fba98c7b4f5a4c2f039dd430d47cdfb7c19b3fbbd5bc3c9bca4f00884585a05de2600274695d8aae5e0eb52061c987427ed62cd74b50bf7f49185262d23ffd70c8360ceab9"], 0x0}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000102000000021c"], 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) r5 = syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20", @ANYBLOB="a2ee318701c8c641d834a3291ad911d969e8047ac2e146768466ad25c651922ec54a1d87315145ad08962f87b18be5e399b2dca15f01362cf68fbac9dc4e9b6d1f136adca3db2c8efdf7cecc88ea62bb4a69f41c64eb53881cf57e187846", @ANYRES16=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_proto_private(r6, 0x89e1, &(0x7f0000000040)) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/7, 0x7}, 0x8e}, {{&(0x7f0000000300)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000001240)=""/194, 0xc2}, {&(0x7f0000000880)=""/245, 0xf5}], 0x5, &(0x7f0000000980)=""/97, 0x61}, 0x81}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000c00)=""/239, 0xef}, {&(0x7f0000000d00)=""/170, 0xaa}, {&(0x7f0000000dc0)=""/93, 0x5d}, {&(0x7f0000000e40)=""/244, 0xf4}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000f40)=""/246, 0xf6}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001040)=""/76, 0x4c}], 0xa, &(0x7f00000004c0)}, 0x49}], 0x3, 0x60010002, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x72b}}, 0x30) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 17m16.847971637s ago: executing program 3 (id=3448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x2000, 0x1, 0x0, 0x0, r2}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x718, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r8, r4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x400454a4) socket$inet(0x2, 0x0, 0x800) (async) socket$inet(0x2, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000440)=""/128, &(0x7f00000004c0)=0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x2b0, 0x2b0, 0x2b0, 0x1c8, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x3f}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfc}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x0, 'ECN\x00', 0x0, {0x11, 0x9, 0x1}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98, 0x0, {}, [@common=@socket0, @common=@ah={{}, {[0x8001, 0x6]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3693684a637247b4) 16m58.404035214s ago: executing program 35 (id=3456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) socket$inet(0x2, 0x3, 0x2) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x4, 0x316}) (async) r3 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x4, 0x316}) io_uring_enter(r3, 0x0, 0xcbffffff, 0xf, &(0x7f0000000000), 0x18) (async) io_uring_enter(r3, 0x0, 0xcbffffff, 0xf, &(0x7f0000000000), 0x18) syz_usb_connect(0x0, 0x44, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xbf, 0xbb, 0x15, 0x40, 0x15e8, 0x9110, 0xa30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x1, 0x2, 0xb0, 0x1, [{{0x9, 0x4, 0x8a, 0x9, 0x2, 0x73, 0xaf, 0xeb, 0x80, [], [{{0x9, 0x5, 0xf, 0x1, 0x0, 0x2, 0x0, 0x7f}}, {{0x9, 0x5, 0xf, 0x4, 0x240, 0x8c, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xf001}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x4, 0x6, 0x1, 0x20, 0x10}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x42}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xfa, 0x3, 0x3}]}, 0x2, [{0x0, 0x0}, {0x18, &(0x7f0000000300)=@string={0x18, 0x3, "a7a6691d2ac9b5e8ea117de5e305cd82373ce9f5dfe1"}}]}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r8, r4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x400454a4) socket$inet(0x2, 0x0, 0x800) (async) socket$inet(0x2, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000440)=""/128, &(0x7f00000004c0)=0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x2b0, 0x2b0, 0x2b0, 0x1c8, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x3f}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfc}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x0, 'ECN\x00', 0x0, {0x11, 0x9, 0x1}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98, 0x0, {}, [@common=@socket0, @common=@ah={{}, {[0x8001, 0x6]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3693684a637247b4) 11m23.381486183s ago: executing program 6 (id=4505): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x40, 0x8100) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000180)=[{r5, 0x10}, {r1, 0x4490}], 0x2, &(0x7f00000001c0), &(0x7f0000000200)={[0x6]}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) read(r8, 0x0, 0x0) readv(r8, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r10, 0x0, 0x0, 0x20048050, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x6d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 11m21.860307036s ago: executing program 6 (id=4514): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000180)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r1, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000180)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r1, 0x0) (async) 11m21.415530932s ago: executing program 6 (id=4516): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x455, 0x121600) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) (async, rerun: 64) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x81}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffd}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x42}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1768}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xb68}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x20000091) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x59, 0x4, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8000, 0x80, 0x5df, 0x7}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={r4, 0x1, 0x6, @remote}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ed, 0x0, 0x0, 0x0, 0x40}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x100, 0xb9, &(0x7f00000003c0)=""/185, 0x40f00, 0x7, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0xffffff35}, 0x10, 0x0, r0, 0x0, &(0x7f00000005c0)=[r5, r1, r0, r0, r0, r1], 0x0, 0x10, 0xe27, @void, @value}, 0x94) (async) syz_usb_connect$cdc_ncm(0x0, 0x95, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0xc5, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "dd5cb8fa4c8c"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xad, 0x3ff, 0x3, 0x74}, {0x6, 0x24, 0x1a, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0xff, 0xc}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x13, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0xa, 0xa}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x8, 0x7, 0x0, 0x40, 0x7}, 0x2d, &(0x7f00000007c0)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x46, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x7, 0xcd8a}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "7f197e0dffe74307884f57271dfa897f"}]}, 0x3, [{0x39, &(0x7f0000000800)=@string={0x39, 0x3, "28d890a73b5e4d509c62ed49dbafd124a3acd7a179d5aa4e0283781d5cd097e0d77ff0c32d39c8d3dd41df1af6fca038fd875bd543155e"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x243}}]}) epoll_create1(0x80000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = accept$inet(r1, &(0x7f0000000900), &(0x7f0000000940)=0x10) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000009c0)=@req={0x28, &(0x7f0000000980)={'dvmrp1\x00', @ifru_hwaddr=@remote}}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async) umount2(&(0x7f0000000a40)='./file0\x00', 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r7, 0x29, 0x7, 0x7, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x40, 0x10, 0x4b65, 0x6}}) bind$inet6(r0, &(0x7f0000000b80)={0xa, 0x4e24, 0x3ff, @remote, 0x4}, 0x1c) r8 = socket(0x2c, 0x80000, 0x200) (async, rerun: 32) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000bc0)={'syz_tun\x00', 0x3}) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00'}) syz_io_uring_setup(0x2378, &(0x7f0000000c40)={0x0, 0xdc2f, 0xa07b15d23f23acc, 0x2, 0x51}, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x0) write$P9_RSTATFS(r0, &(0x7f0000000d40)={0x43, 0x9, 0x2, {0x8, 0xe2e2, 0x2, 0x5, 0x7, 0xd, 0xad0, 0x0, 0x5}}, 0x43) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000dc0)={0x1, 0x0, {0x13, 0xf, 0x12, 0xe, 0xb, 0x7, 0x2, 0xae, 0xffffffffffffffff}}) (async, rerun: 64) bind$inet6(r8, &(0x7f0000000e00)={0xa, 0x4e22, 0x80000000, @local, 0x4}, 0x1c) (async, rerun: 64) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000e40)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0xa, 0xc29, 0x0, 0x6, 0x3, 0x0, {0x0, r11}}) (async) waitid(0x0, 0x0, &(0x7f0000000ec0), 0x40000000, 0x0) 11m20.091680883s ago: executing program 6 (id=4518): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000003020500"/28], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b81923001800fefe8000000000000000000000000000aafe80000000000000000000000000aa000100000000000001"], 0x0) 11m19.569826891s ago: executing program 6 (id=4519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000013240001800a000100726564697200000014000280080001400000001708000340000000000900010073797a30000000000900020073797a32000000001400000011"], 0xa4}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r2, 0x0, 0x0, 0x20048050, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x6d) 11m18.555158442s ago: executing program 6 (id=4523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x0) accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x62, 0x0) read$alg(r4, &(0x7f0000000000)=""/2, 0x2) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000003c0)={0x8005, r3, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') 11m17.680833246s ago: executing program 36 (id=4523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x0) accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x62, 0x0) read$alg(r4, &(0x7f0000000000)=""/2, 0x2) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000003c0)={0x8005, r3, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') 9.256004669s ago: executing program 9 (id=7145): rt_sigaction(0xa, &(0x7f0000000540)={0x0, 0x98000001, 0x0}, 0x0, 0x8, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') lseek(r4, 0x9, 0x0) r5 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="74836a608a879c0f4933e2980e3c27227b44c5f674d374f685a7252ac48df7cbdb6cb4b24ef98291b83a501c8237790fe9dd1ab86749497a19e5823d8a30793254456ddc653c653fa808d834a5eb7d4d59ffb92952f1066a00bce07815b7b6d48a1722932d00dbdee09c36353b3109cdf5e573402fe43eed02728bedac7695eecc6592553d856ef5c81f3ac1aae42258794c093e644c10232030162346daaed7eb5035eeedc50977abe7153d2a693ed4a3808361052bbbd83cdd05d314de0d22a343bc438fb7d6cf3e96986d06662f1005a21a1a92a75cc0b9e59032f9cdeccd2d0ce9961ac063991b8adade53529e42a66e71cfe2898c62fea7a35048348ed3c1558f7dccf1d57ec1e04dce785f2b7d53a725bee3285c34c39c4bcfc7e78de0e2056ee113473335dff60475785116916d1f140a093a98912ab97185763da02e09aff786dabac1ecb508f44c729831afccd8127a432236ca799e232e24d6a432401121373560729431c07d280d5ddca29f8b090ba9fb342c0472dd41254696804d890335594dc908892b5b4141817d074e3d18f60fcc88a09d01167ebc34abe1fa88ad479b255fed991086555f6715611b75281c919e08295d7dce5a94354de0d3f9ab6a0ca20a76060b23caf7c18bf50d5cc1035f292394bf1be8640588918f692827dfdc1e4095c2b468a80b722b69e350e66c88c222bf1c357b3867d162e5e1d90777223b7dac6b9bd8fca2ee2019dbe35f7eb9f4562dd0d761adf16f1c2659aea0fe284602a4c188fae98d28f6bbe8c9928ecaa3ab282e4eb4480f8d26b1e38df368d808dc037350d13fd898638c1ffb13005709a6340fa4dec43307c7a53236399d02e03280fe5b37326b4bf920770607950aa957f73b56eb42b50428b80f533d57042b8cec67548f60789e557f5e68426b7ea3c7e2ed0c68e571bbb4d14dbb1a7e32750c30a97535bc6a398204e0b4b20038a2905fa97a899c0c153b9f783e08561d6d7ce9c593b20a8c9d0342c64639db4e4a900de891f9cf418caf585a9fb1fe88cd1febb3fadc934827e10adc73668c2bec4161c6d9d8af83b94916ba183fd4319139cea73173a5a2a5a50665643a0ca3de14b989706eecdbb010c45c9826ef368fc494c468446813208021c973c933a58507bc8a51baf3b77af624c8d15fad4e2d3cc7b2092c089baed0cd1f545cd6f1646bdaab17a11a74666c24e2af78dff22c8767155c7257235e851a4d57f51cc65e14f51c4a2afe1af92cdc25e5e71bdd3dde36ed40cb6393cc9696d7235e47929dbdb6a5d9d9059e19cd5e2e55ee1c25408f7deae259db7da26b81aa60365da1694085cfcda459930e6cc31501ece761aa36c12027a297f9e8b7da2b8149b251519a805ba3d5d850221e50ccc97b93281753193943d23b50be93fe957395c0ca116ebcedca7998c7f408dc938aba02b18ad9da724c2e3716981a658ce235d1723aba974c768c07dbef8678ff11cf46afae541ac5ac3a65ae67a51d201d9c8619592484afadcd4af0a4b0ea4af052a551e61bca70f2fac665e2e4d974ae3ee76f71ed58fc2e4194d9fd94b1a627cc7e116f11d67683144308947f4707422d31d4485a573e760963c74085dec9ed551d63c802d57e1633b82711b514a5b873b2be89660d84a188dbf1b97d7a23cb8b364f6ea031077718b19d01a6ed5942564525cb749e21c9a68ce245489db7e4fd383ed3e93ee006ff10a58c2fe3c91d97f790b8a271180c69589c21a0c72e68d84eddde3e01d5eb034e77a5a27cb80e34fa36f0fa4125a22944f60590e1b9b0f1c836d64217322286e3d24af8e991458af3a542ea8354fbe83a4d513893a39539523eef23802bff8019a5de324cbf39ec1e913fbb3cacbf7c7cf15ebfffbdd11c24543845d87e8b401671d2ae8d5db07d7e929248e1a348a17d80aff99ef1b3836f79a93f958a70d4e33a7f04fa15e1336f5c26289b46e470eff41958dce02e3163c199dd1ec083df1c8447624e529320fba36b848d27390aeb331d357de60465c2e0fb501916b1aa238ac1869dce80a17d9bba484c48a8928c170925889c", 0x5c1}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffffbe, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) 6.877733215s ago: executing program 5 (id=7150): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYBLOB="7c7772a069c5e93f79285021075370d76335c1d6d81ac255712aac2bb79b21f17bffc4d9c95edc50b6b467509a50340174f4432b4d4cac89d8df8ee5b0e3ff4c76d0bb4d275308c320763061abc7d58160c95071ad8ce2f8ed3ed0dcd0a493ad2b3e4445e1e069776fa65cfd6450400e15e3fa042b4b8fe9dc86a698ae67de1d366f33c3c64a5acb6aa8e3e27a8c5183df99a496f7b3627a6e00d67e3593db5236134421bb39e53f1288fb", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB="4af3868fd747eeb4c82daca348dd542e6f623eca75e84e33b1a8d01a403234b6808d18bd6707b7ec80267500a0c2ca7f348521", @ANYRESHEX=0x0, @ANYRES32=0x0], 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8001, &(0x7f00000049c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100021, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x1d, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, r2, 0x17, 0xc, 0x0, @void, @value, @void, @void, r5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) (async) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x5b23, 0x0) (async) ioctl$FS_IOC_GETVERSION(r8, 0x5b23, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) (async) r9 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r9, &(0x7f00000008c0)='/', 0x1, 0x0) (async) pwrite64(r9, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r9, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r9, 0x0) lseek(r9, 0x0, 0x4) (async) lseek(r9, 0x0, 0x4) sendfile(r9, r9, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') pidfd_getfd(0xffffffffffffffff, r9, 0x0) 6.850559254s ago: executing program 7 (id=7151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f80a000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000002e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) (async) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) read$FUSE(r3, &(0x7f0000003f80)={0x2020}, 0x2020) (async) read$usbmon(r3, &(0x7f0000000340)=""/126, 0x7e) 6.672034759s ago: executing program 9 (id=7152): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x4, &(0x7f0000000000)="b8aefda53220572da6376137631e997c5febfda715523e5ed78f4c3d221102acdf652f011e5f1e3f1a30e3e56ab72d070ea1e7ab13aae98401864c822c74f465ed8ddc3106b073d1871606cfc7f11d0f13f1470405510343c87632d6818d8e1e97eda6c581278436d1740a8ce947f8733a2747d9c363b7652b65046a326e135d5eb82416256254bc10a3adc2793962af5f5bb2aed8de574285c0b8c47c") (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001800110101000000000000000a0082"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) syz_emit_ethernet(0x6ea, &(0x7f0000001240)={@random="e33110495bfd", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x6b4, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd678, 0x4fff, "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"}}}}}}, 0x0) (async) r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x1) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x82000, 0x3d) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @remote}}}, &(0x7f0000000280)=0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x4}}, 0xfffffffe, 0x5, 0x1, 0x5, 0x80000001}, &(0x7f0000000380)=0x98) 6.368817866s ago: executing program 9 (id=7154): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0xfffffffffffffe6d) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000ac1414aa0000000000000000000000007f0000010000000000000000000000000004000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000ac1414bb000000000000000000000000ac1efe01000000000000000000000000e00000020000000000000000000000006c000000feffffff0200020000000000000000000000000000000000ac1414bb"], 0xec}, 0x1, 0x0, 0x0, 0x8814}, 0x20000140) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x2, 'j8'}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) 6.298368658s ago: executing program 7 (id=7155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0xb, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/16, 0x10}, 0x1}], 0x1, 0x45833af96e4a29bd, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000580)=""/225, 0xe1, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, 0x20) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040041}, 0x4800) r8 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r3, 0x801, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 5.241026533s ago: executing program 7 (id=7156): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="031661057a3d", 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}) 5.161248657s ago: executing program 5 (id=7157): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 5.15945284s ago: executing program 8 (id=7158): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x100010, r1, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x4b30, 0x20, 0x1, 0x34f}, &(0x7f0000000040), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x0, 0xf0}) unshare(0x2040400) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) fallocate(r3, 0x0, 0x0, 0x1001f0) 4.736274701s ago: executing program 5 (id=7159): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x77, &(0x7f0000000000), 0x62) 4.730766867s ago: executing program 7 (id=7160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd8000ea54c7beef916a7257a38af7", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x80800) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmmsg$alg(r1, &(0x7f0000006d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0xf2f780820a180eba}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30, 0x44000}], 0x1, 0x840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) clock_getres(0x6, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000060a0104000000000000000002000001180004ff140001800a0001007265646972000000e9ff02800900010073797a30000000000900020073797a3200000000050007405d000000140000001100010000000000000000000000000a00"/116], 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x0) 4.678455766s ago: executing program 8 (id=7161): r0 = socket$inet6_udp(0xa, 0x2, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000440)=0x130, 0x4) sendto(r1, &(0x7f0000000580)="1db4", 0x2, 0x8094, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000600)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa", 0x6f, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r0, r0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x0, 0x300}}, 0x26}}, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xfffd}}, 0x26) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "97f8bc2d8540e77b362edca09de5ecce12e762877e8995026de93cb0c9b6d0d1", "5865f9321253bcade6c699fe9effe3cb1b034801e215428b41e8ff2a99d4d5a969ffa4113c803009c80af47e30f1dc19", "82796fec32a4ed8a185cb1ac1cff2e2b1b88b2ff5eea9e6fe02d8654", {"052f4d39596ed6d6cf91bd5cc9cb5ea5", "b59dbd234115903901fc17bd881ea35d"}}}}}}}, 0x0) 4.302737332s ago: executing program 4 (id=7162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce8a3000000d800006455", @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f00000000c0)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x1) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x80) r9 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) write$dsp(r8, &(0x7f0000000240), 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001800dd8d0000000000000214"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000140)=0x4) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r10, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.168236499s ago: executing program 8 (id=7163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000010c0)="450f0866450f7f4e92440fc71b420f5411460f01cf660f12b100700000c422f547751766ba4300ec430fc7ad0e000000b9800000c00f3235004000000f30", 0x3e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000080)={0x1, 0x0, [{0x1a, 0x0, 0x1}]}) 4.164554815s ago: executing program 9 (id=7164): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002fc0)='dctcp\x00', 0x6) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}}, 0x0) 3.974716748s ago: executing program 8 (id=7165): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) fanotify_init(0x202, 0x101000) r1 = syz_io_uring_setup(0x7a67, &(0x7f0000000340)={0x0, 0x1f32, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ppoll(&(0x7f0000000280)=[{r4, 0x4600}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x9e5}}}, &(0x7f0000000100)=0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000280)={0x3}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 3.74055807s ago: executing program 4 (id=7166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000000000000000000d6aaefe76d8c6d1923fc839ee78a3d10b6642e99e43e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160aeb080000000000000000020000000900020073797a30000000000900010073797a3000000000140003317e4800252a7d94000800014000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) close(r2) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)={[&(0x7f00000001c0)='/dev/nvme-fabrics\x00', &(0x7f0000000280)='/{[-*^\x00', &(0x7f00000002c0)='$:--\x00', &(0x7f0000000380)=':\x00']}, &(0x7f0000000780)={[&(0x7f0000000400)='/dev/nvme-fabrics\x00', &(0x7f0000000440)='}\x00', &(0x7f0000000480)='$.[@*-\xc8[*-*\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)=':-:\x00', &(0x7f0000000540)='&**-\x00', &(0x7f0000000580)='%+9llu \x00', &(0x7f0000000700)='numa_maps\x00', &(0x7f0000000740)='#\x00']}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r4, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) mknod$loop(&(0x7f0000000800)='\x00', 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_aout(r4, &(0x7f0000000880)={{0x108, 0x9c, 0x9, 0x1ab, 0xbb, 0x6, 0x353, 0x700}, "62c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a8d5455025fbe4115e52a5b2a8e27d7ac72c718cf2b4f1cea", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9e4) 3.63992512s ago: executing program 5 (id=7167): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x6}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x40000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0xfffffffffffffffa, 0x3fff}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$bt_hci(r7, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_connect$cdc_ncm(0x4, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x9, 0x60, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "cd"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0xc9e, 0x1e}, {0x6, 0x24, 0x1a, 0x7, 0x11}, [@mdlm={0x15, 0x24, 0x12, 0x706}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7f, 0x8, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x3, 0xa, 0x40, 0xff}, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="050f050099d73232534200"], 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1801}}, {0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, {0x42, &(0x7f00000003c0)=@string={0x42, 0x3, "e9b6aa0b0196fc015fac1c5fe2a4f520292df5301ee5c5bbea5060535a53614434ef4e0a6cea137295425a4c43f8ff89d314d92a4779675240394582587cae60"}}, {0xf7, &(0x7f0000000500)=@string={0xf7, 0x3, "9cea15010dfd084ceed68c7ab9933c7399ea4f2f97081cdd27f3a2cdbf24775b98bd7418289e0fe0b657be32cf8e6e926c1fd7fe1a2aae1647f8ba086b8d0944368ff80c2f49f0b8f9f03ae7f90362addeeb631a35c943130f65cf15aeb5f3d1b7585b39d6378d28d24a73d5e38181fbcc7b72263289d39cfa4c03c5e40af83f68e702b2ff0be844c0c6a5d61aa0be7236052426be3ce8fdd3ab3387a8c7fcd77b91495773fddd0c186f6030f10744f0b3c60c8f53a3a19152704be0efea7e05433a65c04ef744a7bc5facbbb9d7b6a4de03d2aeb71f7e85efaf04a1c1b3f6fd6fb1eb917e689fcd490cd031de14a504a63c482f7e"}}, {0x80, &(0x7f0000000600)=@string={0x80, 0x3, "bdd6f4d87961298a995a162e19f49d1eee290fb41eab28b884f3e52e410e35eaf03d6e8880a627e549bda7f57491f50068e78acd5694322e9826ea9c28750cf6dd4cd2f1e177f6e73fccf6485e5d472dc518baaa44cda693f01bef4e0cfdc6d14f91b489da0946cb01e5a48764a48f543d66f4c0eb4a1d14cc0164adea6f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42b}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x28002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) rmdir(&(0x7f0000000800)='./file0\x00') r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000a00)={@dev, @initdev}, &(0x7f0000000a40)=0xc) syz_usb_disconnect(r0) 3.190385604s ago: executing program 9 (id=7168): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x8, 0x8, 0xfffffffc}) syz_usb_connect(0x0, 0x1b, &(0x7f0000000f00)={{0x12, 0x1, 0x201, 0xa5, 0x65, 0x6f, 0x30, 0x2b73, 0x17, 0xe67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xe, 0x0, 0x0, 0xc}}]}}, 0x0) 2.23129179s ago: executing program 4 (id=7169): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x40044) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x40044) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x2, 0x2bd9, 0x6) r1 = socket$inet6(0xa, 0x3, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x8979) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x799) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap$snddsp_status(&(0x7f00000da000/0x4000)=nil, 0x112, 0x2000005, 0x12, r2, 0x82000000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private2, @in=@local, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) socket(0x26, 0x4, 0x4) (async) socket(0x26, 0x4, 0x4) 2.140284699s ago: executing program 4 (id=7170): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="031661057a3d", 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 2.125609853s ago: executing program 4 (id=7171): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0xffff0018) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r2, 0x0, r2, &(0x7f0000000080)=0xfffffffffffffffc, 0x1, 0x0) r3 = syz_io_uring_setup(0x29a7, &(0x7f0000000300)={0x0, 0xdb7c, 0x801, 0x8000, 0x200, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2df0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11\x94\x97\xc5C\xb1)\x04\xf9\x856_\x84z\xb1\xadi\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@I\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf8\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x00\x00\x00\x00\x00\x00\x00\x00\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xf4N\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq', 0x42, 0x119, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, r0, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) 1.982235628s ago: executing program 4 (id=7172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x1, 0x0) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd, 0x5, {0x0, r2}, 0x1, 0x4, 0x1, {0x0, r7}}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket(0x1e, 0x1, 0x0) (async) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd, 0x5, {0x0, r2}, 0x1, 0x4, 0x1, {0x0, r7}}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) (async) 1.615964284s ago: executing program 8 (id=7173): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000240)=@ethtool_ringparam={0x10, 0xfffffffb, 0x7, 0x2, 0x5, 0x8, 0x7, 0x8fb, 0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000280)={0x0, 0x10f2fc, 0x0, 0xfffffffc, 0x2d0}, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000000c0)=[0x6, 0xfffffffb], 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f0000000cc0)="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", 0x118) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbac1e00010000000000000000000000000000000000000000070000000000007600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000ff01000000000000000000000000000100"/204], 0x174}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000343c0020010000000000000000000000000002fe8000000000000000000000000000aa330300000000000007080000000000000000070800000000000000000502000400000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800004487e1b8843a22a9358ec656359a3fc49a3767104a3a2e78e4da38539033089b1e06a54c114b380d858e5a7ceb753f418c044fe46a4df99ad6b3fd97ca76bc4955f862e28c77a8dc8c838f71348e02000000"], 0x0) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) ioctl$KDGKBENT(r7, 0x80045440, &(0x7f0000000000)={0x8, 0x1, 0x4}) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8919, &(0x7f0000000080)) 1.615007778s ago: executing program 5 (id=7174): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getrandom(&(0x7f0000000380)=""/286, 0x11e, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xbc6, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e21, @private=0xa010101}, 0x3, 0x2, 0x4, 0x1}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000050013000000000014000800000000000010000000000000000000000c00160000000000000000000500140000000000"], 0x44}}, 0x0) mmap(&(0x7f000088b000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x83f65000) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x11, 0x0, r3, &(0x7f0000000200)={0x4000000c}, r8, 0x3, 0x0, 0x1}) 1.263043229s ago: executing program 7 (id=7175): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000001100)={0x2, 0x4624, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x280182, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x3}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x20a0}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000001180)={0x80, 0x0, 0x400}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[@ANYRESHEX=r5], 0x14}}, 0x4004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073798d30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a30e0ff000005000740080000fe25f764d978519e0ada82eac72e5eba1d403c9e90a9503f"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r7, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.228539012s ago: executing program 8 (id=7176): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000040)={0x2, 0x2, @start={0x2, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@hyper, 0xdbe}, 0x0, 0x0, 0xb}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000600)="c8cfa87a774840843e63d2c3169139744f21936d4817844e5932e2d8229a8c8e370ec32477042230dda705d8d71c1ed80840bbbc0abe7fabc57b9b5757b72c75cbb599869db51fcc8424e345d3cefdc7b135c1436a7885a4d68b3099a3bfe0d7741b487f115b0cb677c9183cbb41c436644226db9f87c3c4e8a8b11a525c835783df4f7ed859d3fb15eba0a77a977f04c079ec9e2fcabbb3fd7297ffbb4a9ede", 0xa0, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @private0, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r6, &(0x7f00000006c0)=[{&(0x7f00000005c0)="49e61f48", 0x4}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000480)=[{{&(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x46044805) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f0000000500)='\a', 0x1, 0xc020, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={r9, 0x7fff}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 580.210238ms ago: executing program 5 (id=7177): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)=r3, 0x62) 149.613879ms ago: executing program 7 (id=7178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESDEC=r0, @ANYBLOB="08001b"], 0x30}}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"f8ffffff4fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0aee29973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e821119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa177b3c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfdd95083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dacc4c3f0008047096a44002bebc2421aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b346fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e20cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047499569373c0e23ef4df5c89644f48bb536f7945b59d7bcddff754420d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad039c2211f1033195563c7f93cd54b9094f226e783271e1e5a207c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d8c768f7971d31488b8658afc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae095ed3eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a897fe8e757a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f12f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3918c54e24b48ec027562d0687dc746b0827cbf6529006c6b95f2722e5655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2786f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f11aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7cb6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af22af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000022ff00", 0x1000}}, 0x1006) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setown(r3, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00010002000000fddbdf25070000009b70df5148ac9449526f87ca145aa2bc93f56d8a0000000000000bdd5d763271fac17eddae4619a7b0cd3067e59135ea04ff48425d8854c79eff143fdea498b7007b2b89e55b15069e1508577b000000", @ANYRES32=r6, @ANYBLOB="0300d6060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400027fff, 0x4000000000001, &(0x7f0000000300)=0x1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10a00, 0x10) r9 = open_tree(r8, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_setup(0x5, &(0x7f0000000e80)) io_submit(0x0, 0x6, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x7, r7, &(0x7f0000000180)="0432fbbe46979422e0a04fe196aab6b349fe631ee023ffe3d7230ee5512142dc90dac8594eb5583953dc8a2695a081ea6e3e1de9c6b7", 0x36, 0x0, 0x0, 0x5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0xb16, r5, &(0x7f0000000440)="25771b1603ee5249a0cbda9d9eca37acbfa3c596624923af6104e0647c6474fc81bd5f809086f316ea1191868d19a1316b0b1d8aa3d1f86fa2b18c8bca10a8196fbfb5ec2f7565e98793c580804d2a983108cf", 0x53, 0x6, 0x0, 0x2, r9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000004c0)="9d8d31012cea2493f9c9aa78cdc99f7a72741ae147c76edd161c3f1ac0f21f76b85098712804983b2eb6b47456bc251f03066d8fd1dc9ed176e6c0d968a1e733be8d24ab64216c35064f3f06bcde1bdf", 0x50, 0x5, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0xac, r2, &(0x7f0000000580)="6541319960103fe5b9a87becd093e60b50775bc33789296c78818df1d00ca23cbbac153088374f99856b3bbe6ddc8bd597f2296f491a2c9c14e3237eef8cc0edd0d0be0e03fcfdd2fd7de937ec79c385f218bba0e066daeb8670f0110387b490d15af3af36dd4be02d0a82fcedd8", 0x6e, 0x0, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f0000002080)="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", 0x1000, 0xe, 0x0, 0x0, r9}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x9aca, 0xffffffffffffffff, &(0x7f0000000700)="6ef7dc150dccc6beb2f9d49e1da25227231dc9976fd8ea913742bf15bc530431b40847bd71c18c375c1b35e7dd9635d41e9ff2fd9eefa0b7c0672a835f9978e23c7dde87bdc92510e67fb91cde3dfa56afbd95694bae2f49535fbc50d826416293b796869f0f26e40ccbb9b568a31a172a6172ef62fa4d53623a635f683fc712d92b983ba5873e8d47ea31c9f39bf3c429588cd642ec0f", 0x97, 0x7, 0x0, 0x0, r9}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) 0s ago: executing program 9 (id=7179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async, rerun: 32) r3 = gettid() (rerun: 32) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 32) prlimit64(r3, 0x9, 0x0, &(0x7f0000000100)) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) close(0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa34e, 0x8, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (rerun: 64) io_uring_enter(r4, 0x47f6, 0x2000000, 0x2, 0x0, 0x0) (async, rerun: 64) fcntl$setstatus(r1, 0x4, 0x42000) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): [ 2245.805333][ T30] audit: type=1326 audit(1749948039.948:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2188 comm="syz.5.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2245.830564][ T30] audit: type=1326 audit(1749948039.948:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2188 comm="syz.5.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2245.871819][ T2187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2245.884631][ T2187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2245.911263][ T2202] binder: 2182:2202 ioctl c0306201 200000000100 returned -11 [ 2245.949847][T20670] usb 6-1: USB disconnect, device number 26 [ 2246.914949][ T6182] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2247.063133][ T6182] usb 6-1: device descriptor read/64, error -71 [ 2247.182510][T19701] pegasus 10-1:0.0: setup Pegasus II specific registers [ 2247.312131][ T6182] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2247.394542][ T2178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.409648][ T2178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.488867][ T5927] usb 9-1: USB disconnect, device number 59 [ 2247.491926][ T6182] usb 6-1: device descriptor read/64, error -71 [ 2247.612605][ T6182] usb usb6-port1: attempt power cycle [ 2247.666313][T20670] usb 5-1: USB disconnect, device number 61 [ 2247.975158][ T6182] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2248.031939][ T5927] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2248.118985][ T6182] usb 6-1: device descriptor read/8, error -71 [ 2248.191672][ T5927] usb 9-1: Using ep0 maxpacket: 32 [ 2248.200940][ T5927] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2248.214044][ T5927] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2248.225081][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2248.421888][T19701] pegasus 10-1:0.0: can't locate MII phy, using default [ 2248.451066][T19701] pegasus 10-1:0.0: eth21, ELECOM USB Ethernet LD-USB20, ae:26:8a:78:f1:28 [ 2248.466429][ T5927] usb 9-1: Product: syz [ 2248.483253][ T5927] usb 9-1: Manufacturer: syz [ 2248.490753][T19701] usb 10-1: USB disconnect, device number 2 [ 2248.506387][ T5927] usb 9-1: SerialNumber: syz [ 2248.543821][ T5927] usb 9-1: config 0 descriptor?? [ 2248.549711][ T2224] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2248.562242][ T6182] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2248.582449][ T6182] usb 6-1: device descriptor read/8, error -71 [ 2248.710732][ T6182] usb usb6-port1: unable to enumerate USB device [ 2248.723858][ T5927] hub 9-1:0.0: bad descriptor, ignoring hub [ 2248.729915][ T5927] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2248.838483][ T5927] usb 9-1: USB disconnect, device number 60 [ 2249.341652][ T6182] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2249.531789][ T6182] usb 10-1: Using ep0 maxpacket: 16 [ 2249.548770][ T6182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2249.578120][ T6182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2249.588696][ T6182] usb 10-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2249.599100][ T6182] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.620762][ T6182] usb 10-1: config 0 descriptor?? [ 2250.030211][ T6182] hid (null): unknown global tag 0xc [ 2250.048706][ T6182] nzxt-kraken2 0003:1E71:170E.0048: unknown global tag 0xc [ 2250.074714][ T6182] nzxt-kraken2 0003:1E71:170E.0048: item 0 1 1 12 parsing failed [ 2250.108278][ T6182] nzxt-kraken2 0003:1E71:170E.0048: hid parse failed with -22 [ 2250.130048][ T6182] nzxt-kraken2 0003:1E71:170E.0048: probe with driver nzxt-kraken2 failed with error -22 [ 2250.360735][ T2267] FAULT_INJECTION: forcing a failure. [ 2250.360735][ T2267] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.414449][ T2267] CPU: 1 UID: 0 PID: 2267 Comm: syz.8.6718 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2250.414472][ T2267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2250.414483][ T2267] Call Trace: [ 2250.414489][ T2267] [ 2250.414497][ T2267] dump_stack_lvl+0x189/0x250 [ 2250.414526][ T2267] ? __pfx____ratelimit+0x10/0x10 [ 2250.414551][ T2267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2250.414576][ T2267] ? __pfx__printk+0x10/0x10 [ 2250.414598][ T2267] ? __pfx___might_resched+0x10/0x10 [ 2250.414622][ T2267] ? fs_reclaim_acquire+0x7d/0x100 [ 2250.414645][ T2267] should_fail_ex+0x414/0x560 [ 2250.414669][ T2267] should_failslab+0xa8/0x100 [ 2250.414687][ T2267] __kmalloc_noprof+0xcb/0x4f0 [ 2250.414702][ T2267] ? kfree+0x4d/0x440 [ 2250.414723][ T2267] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2250.414751][ T2267] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2250.414775][ T2267] ? tomoyo_domain+0xd9/0x130 [ 2250.414803][ T2267] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2250.414822][ T2267] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2250.414843][ T2267] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2250.414881][ T2267] ? __lock_acquire+0xab9/0xd20 [ 2250.414919][ T2267] ? __fget_files+0x2a/0x420 [ 2250.414939][ T2267] ? __fget_files+0x2a/0x420 [ 2250.414955][ T2267] ? __fget_files+0x3a0/0x420 [ 2250.414971][ T2267] ? __fget_files+0x2a/0x420 [ 2250.414992][ T2267] security_file_ioctl+0xcb/0x2d0 [ 2250.415012][ T2267] __se_sys_ioctl+0x47/0x170 [ 2250.415037][ T2267] do_syscall_64+0xfa/0x3b0 [ 2250.415051][ T2267] ? lockdep_hardirqs_on+0x9c/0x150 [ 2250.415074][ T2267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.415090][ T2267] ? clear_bhb_loop+0x60/0xb0 [ 2250.415110][ T2267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2250.415125][ T2267] RIP: 0033:0x7ff1fc18e929 [ 2250.415139][ T2267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2250.415153][ T2267] RSP: 002b:00007ff1f9fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2250.415169][ T2267] RAX: ffffffffffffffda RBX: 00007ff1fc3b6080 RCX: 00007ff1fc18e929 [ 2250.415184][ T2267] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000003 [ 2250.415194][ T2267] RBP: 00007ff1f9fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2250.415204][ T2267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2250.415213][ T2267] R13: 0000000000000001 R14: 00007ff1fc3b6080 R15: 00007ff1fc4dfa28 [ 2250.415236][ T2267] [ 2250.417693][ T2267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2251.027943][ T2271] random: crng reseeded on system resumption [ 2251.119076][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2251.119097][ T30] audit: type=1326 audit(1749948046.418:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.7.6719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x0 [ 2251.655096][ T2282] bridge_slave_0: left allmulticast mode [ 2251.688191][ T2282] bridge_slave_0: left promiscuous mode [ 2251.817861][ T2282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2252.179353][ T2282] bridge_slave_1: left allmulticast mode [ 2252.273326][T19702] usb 10-1: USB disconnect, device number 3 [ 2252.322905][ T2282] bridge_slave_1: left promiscuous mode [ 2252.360314][ T2282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.504456][ T2282] bond0: (slave bond_slave_0): Releasing backup interface [ 2252.527526][ T2282] bond0: (slave bond_slave_1): Releasing backup interface [ 2252.724289][ T2282] team0: Port device team_slave_0 removed [ 2252.801187][ T2282] team0: Port device team_slave_1 removed [ 2253.535378][ T2308] ALSA: seq fatal error: cannot create timer (-22) [ 2253.558752][ T2312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2254.464136][T25828] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2254.681949][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2254.689882][T25828] usb 10-1: Using ep0 maxpacket: 16 [ 2254.700219][T25828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2254.722388][T25828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2254.732637][T25828] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2254.741964][T25828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.782366][T25828] usb 10-1: config 0 descriptor?? [ 2255.211099][ T2327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.220726][ T2327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.250937][ T2327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.260967][ T2327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.280078][T25828] kye 0003:0458:5016.0049: control desc unexpectedly large [ 2255.289682][T25828] kye 0003:0458:5016.0049: control desc unexpectedly large [ 2255.316116][T25828] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.0049/input/input141 [ 2255.343754][ T2333] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6732'. [ 2255.436660][T25828] kye 0003:0458:5016.0049: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0 [ 2255.538360][T25828] usb 10-1: USB disconnect, device number 4 [ 2255.720059][ T2336] fido_id[2336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2255.760131][ T30] audit: type=1800 audit(1749948051.058:3662): pid=2331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6731" name="bus" dev="ramfs" ino=141456 res=0 errno=0 [ 2256.563018][ T30] audit: type=1326 audit(1749948051.818:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2337 comm="syz.5.6733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x0 [ 2258.838434][ T2399] tipc: Started in network mode [ 2258.847187][ T2399] tipc: Node identity , cluster identity 4711 [ 2258.865816][ T2403] tipc: Started in network mode [ 2258.875501][ T2403] tipc: Node identity , cluster identity 4711 [ 2259.087089][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.103909][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.118846][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.129520][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.132643][T25828] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2259.150810][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.164679][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.179518][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.190701][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.204240][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 2259.231717][ T5927] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2259.322603][T25828] usb 6-1: Using ep0 maxpacket: 8 [ 2259.339712][T25828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2259.379735][T25828] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2259.383962][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 2259.418038][T25828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2259.450524][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2259.467521][T25828] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2259.479315][ T5927] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2259.482041][T25828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.496365][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2259.508358][ T5927] usb 5-1: Product: syz [ 2259.513238][ T5927] usb 5-1: Manufacturer: syz [ 2259.517928][ T5927] usb 5-1: SerialNumber: syz [ 2259.544437][T25828] usb 6-1: Product: syz [ 2259.553719][ T5927] usb 5-1: config 0 descriptor?? [ 2259.562366][ T2405] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2259.573231][ T5927] hub 5-1:0.0: bad descriptor, ignoring hub [ 2259.594814][ T5927] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2259.651649][T19701] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2259.697152][T25828] usb 6-1: Manufacturer: syz [ 2259.719819][T25828] usb 6-1: SerialNumber: syz [ 2259.754351][T25828] usb 6-1: config 0 descriptor?? [ 2259.813260][T19701] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 2259.828926][T25828] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 2259.839385][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2259.859011][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2259.901130][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2259.934754][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2259.953507][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2259.983103][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.003232][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2260.015191][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2260.026673][T25828] usb 6-1: USB disconnect, device number 31 [ 2260.046479][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.055999][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2260.079211][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2260.112816][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.126050][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2260.178725][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2260.197870][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.207769][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2260.220036][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2260.235500][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.246021][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2260.285847][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2260.326271][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.342712][T19701] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2260.359961][T19701] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2260.381120][T19701] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2260.405252][T19701] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2260.417252][T19701] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2260.426900][T19701] usb 10-1: Product: syz [ 2260.431261][T19701] usb 10-1: Manufacturer: syz [ 2260.439080][T19701] usb 10-1: SerialNumber: syz [ 2260.451146][T19701] usb 10-1: config 0 descriptor?? [ 2260.469471][T19701] yurex 10-1:0.0: USB YUREX device now attached to Yurex #1 [ 2260.561722][T25828] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2260.654269][ T5927] usb 5-1: USB disconnect, device number 62 [ 2260.713428][T25828] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2260.745044][T25828] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2260.757103][ T2424] __nla_validate_parse: 24 callbacks suppressed [ 2260.757125][ T2424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6754'. [ 2260.781889][T25828] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2260.795848][T25828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.821833][T25828] usb 9-1: config 0 descriptor?? [ 2260.934924][ T30] audit: type=1326 audit(1749948056.238:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2425 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2260.957399][ C1] vkms_vblank_simulate: vblank timer overrun [ 2260.976241][ T2430] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2260.982851][ T2430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2260.997244][ T30] audit: type=1326 audit(1749948056.278:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2425 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2261.027941][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.034717][ T2430] vhci_hcd vhci_hcd.0: Device attached [ 2261.045959][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.073587][ T2431] vhci_hcd: connection closed [ 2261.075802][ T560] vhci_hcd: stop threads [ 2261.079730][ T30] audit: type=1326 audit(1749948056.278:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2425 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2261.080693][ T560] vhci_hcd: release socket [ 2261.090784][ T30] audit: type=1326 audit(1749948056.278:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2425 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2261.158963][ T30] audit: type=1326 audit(1749948056.278:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2425 comm="syz.7.6756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2261.190716][ T560] vhci_hcd: disconnect device [ 2261.191169][ T2438] usb usb8: usbfs: process 2438 (syz.7.6757) did not claim interface 0 before use [ 2261.233944][ T5927] vhci_hcd: vhci_device speed not set [ 2261.276417][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.321812][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.328919][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.348224][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.376762][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.392083][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.406719][T25828] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 2261.435611][T25828] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2261.519164][T25828] cp2112 0003:10C4:EA90.004A: error requesting version [ 2261.543257][T25828] cp2112 0003:10C4:EA90.004A: probe with driver cp2112 failed with error -32 [ 2262.003646][ T2457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6760'. [ 2262.149266][ T2457] ip6gretap2: entered promiscuous mode [ 2262.156118][ T2457] ip6gretap2: entered allmulticast mode [ 2262.411438][T25828] usb 10-1: USB disconnect, device number 5 [ 2262.439662][T25828] yurex 10-1:0.0: USB YUREX #1 now disconnected [ 2263.361960][T25828] usb 9-1: USB disconnect, device number 61 [ 2264.555481][ T5927] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2264.723600][ T5927] usb 10-1: device descriptor read/64, error -71 [ 2264.816067][ T2508] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 2264.823739][ T2508] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 2264.842736][ T2508] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2264.981750][ T5927] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2265.131817][ T5927] usb 10-1: device descriptor read/64, error -71 [ 2265.492312][ T5927] usb usb10-port1: attempt power cycle [ 2265.636030][ T2521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6772'. [ 2265.659584][ T2521] FAULT_INJECTION: forcing a failure. [ 2265.659584][ T2521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.671782][T19702] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2265.694612][ T2521] CPU: 1 UID: 0 PID: 2521 Comm: syz.5.6772 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2265.694648][ T2521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2265.694661][ T2521] Call Trace: [ 2265.694670][ T2521] [ 2265.694681][ T2521] dump_stack_lvl+0x189/0x250 [ 2265.694721][ T2521] ? __pfx____ratelimit+0x10/0x10 [ 2265.694757][ T2521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2265.694793][ T2521] ? __pfx__printk+0x10/0x10 [ 2265.694833][ T2521] should_fail_ex+0x414/0x560 [ 2265.694869][ T2521] _copy_to_user+0x31/0xb0 [ 2265.694902][ T2521] simple_read_from_buffer+0xe1/0x170 [ 2265.694933][ T2521] proc_fail_nth_read+0x1df/0x250 [ 2265.694965][ T2521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2265.694997][ T2521] ? rw_verify_area+0x258/0x650 [ 2265.695030][ T2521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2265.695059][ T2521] vfs_read+0x1fd/0x980 [ 2265.695100][ T2521] ? __pfx___mutex_lock+0x10/0x10 [ 2265.695123][ T2521] ? __pfx_vfs_read+0x10/0x10 [ 2265.695160][ T2521] ? __fget_files+0x2a/0x420 [ 2265.695191][ T2521] ? __fget_files+0x3a0/0x420 [ 2265.695216][ T2521] ? __fget_files+0x2a/0x420 [ 2265.695252][ T2521] ksys_read+0x145/0x250 [ 2265.695275][ T2521] ? __pfx_ksys_read+0x10/0x10 [ 2265.695324][ T2521] do_syscall_64+0xfa/0x3b0 [ 2265.695344][ T2521] ? lockdep_hardirqs_on+0x9c/0x150 [ 2265.695378][ T2521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.695401][ T2521] ? clear_bhb_loop+0x60/0xb0 [ 2265.695429][ T2521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.695451][ T2521] RIP: 0033:0x7fbd5a18d33c [ 2265.695472][ T2521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2265.695492][ T2521] RSP: 002b:00007fbd5af2b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2265.695515][ T2521] RAX: ffffffffffffffda RBX: 00007fbd5a3b5fa0 RCX: 00007fbd5a18d33c [ 2265.695532][ T2521] RDX: 000000000000000f RSI: 00007fbd5af2b0a0 RDI: 0000000000000007 [ 2265.695547][ T2521] RBP: 00007fbd5af2b090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.695561][ T2521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.695575][ T2521] R13: 0000000000000000 R14: 00007fbd5a3b5fa0 R15: 00007fbd5a4dfa28 [ 2265.695610][ T2521] [ 2265.923883][ C1] vkms_vblank_simulate: vblank timer overrun [ 2266.001737][ T5927] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2266.159104][ T5927] usb 10-1: device descriptor read/8, error -71 [ 2266.352160][T19702] usb 9-1: config 0 has no interfaces? [ 2266.373191][T19702] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2266.442052][T19701] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2266.451702][ T5927] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2266.492298][T19702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.609757][T19702] usb 9-1: Product: syz [ 2266.615373][ T5927] usb 10-1: device descriptor read/8, error -71 [ 2266.627122][T19702] usb 9-1: Manufacturer: syz [ 2266.641946][T19702] usb 9-1: SerialNumber: syz [ 2266.654777][T19702] usb 9-1: config 0 descriptor?? [ 2266.689638][T19701] usb 5-1: config 0 has no interfaces? [ 2266.732065][ T5927] usb usb10-port1: unable to enumerate USB device [ 2266.750145][T19701] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2266.808067][T19701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.881407][T19701] usb 5-1: Product: syz [ 2266.904864][T19701] usb 5-1: Manufacturer: syz [ 2266.952975][T19701] usb 5-1: SerialNumber: syz [ 2266.980440][T19701] usb 5-1: config 0 descriptor?? [ 2267.792218][T25828] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2267.971785][T25828] usb 10-1: Using ep0 maxpacket: 8 [ 2268.050691][T25828] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2268.061382][T25828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.086601][T25828] usb 10-1: Product: syz [ 2268.092372][T25828] usb 10-1: Manufacturer: syz [ 2268.105977][T25828] usb 10-1: SerialNumber: syz [ 2268.138683][T25828] usb 10-1: config 0 descriptor?? [ 2268.160423][T25828] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2268.392452][T25828] gspca_sq930x: ucbus_write failed -71 [ 2268.532444][ T5927] usb 9-1: USB disconnect, device number 62 [ 2268.564000][ T2564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2268.621868][T25828] gspca_sq930x: Sensor ov9630 not yet treated [ 2268.660438][T25828] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 2268.853676][T25828] usb 10-1: USB disconnect, device number 10 [ 2269.366145][T19701] usb 5-1: USB disconnect, device number 63 [ 2269.770205][ T2575] syz_tun: entered allmulticast mode [ 2270.149613][ T2571] syz_tun: left allmulticast mode [ 2270.241919][ T6182] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2270.411619][ T6182] usb 10-1: Using ep0 maxpacket: 16 [ 2270.423333][ T6182] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2270.442326][ T6182] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2270.453674][ T6182] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.469114][ T6182] usb 10-1: Product: syz [ 2270.483787][ T2599] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 2270.490440][ T2599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2270.506915][ T6182] usb 10-1: Manufacturer: syz [ 2270.525559][ T6182] usb 10-1: SerialNumber: syz [ 2270.568278][ T2599] vhci_hcd vhci_hcd.0: Device attached [ 2270.581859][ T6182] usb 10-1: config 0 descriptor?? [ 2270.685088][ T6182] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 2270.699066][ T6182] usb 10-1: Detected FT232H [ 2270.710846][ T2601] vhci_hcd: connection closed [ 2270.716675][ T560] vhci_hcd: stop threads [ 2270.732402][T25828] vhci_hcd: vhci_device speed not set [ 2270.750157][ T560] vhci_hcd: release socket [ 2270.913707][T25828] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 2270.951807][ T560] vhci_hcd: disconnect device [ 2270.957350][ T6182] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2270.964826][T19701] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 2270.966339][T25828] usb 47-1: enqueue for inactive port 0 [ 2271.053458][T25828] vhci_hcd: vhci_device speed not set [ 2271.409469][T19701] usb 5-1: config 0 has no interfaces? [ 2271.628255][T19701] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2271.688563][T19701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.742388][T19701] usb 5-1: Product: syz [ 2271.760369][T19701] usb 5-1: Manufacturer: syz [ 2271.784508][T19701] usb 5-1: SerialNumber: syz [ 2271.884873][T19701] usb 5-1: config 0 descriptor?? [ 2272.163289][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6791'. [ 2272.311764][T25577] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2272.662018][T25577] usb 6-1: Using ep0 maxpacket: 16 [ 2272.669521][T25577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.681285][T25577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.697450][T25577] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2272.720281][T25577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.747734][T25577] usb 6-1: config 0 descriptor?? [ 2272.958059][ T6182] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 2273.005066][ T2628] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 2273.074858][ T6182] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2273.115196][ T6182] usb 10-1: USB disconnect, device number 11 [ 2273.133185][ T30] audit: type=1326 audit(1749948068.428:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.165896][ T30] audit: type=1326 audit(1749948068.428:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.245762][ T6182] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2273.272740][ T6182] ftdi_sio 10-1:0.0: device disconnected [ 2273.298323][ T30] audit: type=1326 audit(1749948068.428:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.329353][T25577] nzxt-kraken2 0003:1E71:170E.004B: unknown main item tag 0x0 [ 2273.343555][T25577] nzxt-kraken2 0003:1E71:170E.004B: unknown main item tag 0x0 [ 2273.361899][T25577] nzxt-kraken2 0003:1E71:170E.004B: unknown main item tag 0x0 [ 2273.378560][T25577] nzxt-kraken2 0003:1E71:170E.004B: unknown main item tag 0x0 [ 2273.396299][T25577] nzxt-kraken2 0003:1E71:170E.004B: unknown main item tag 0x0 [ 2273.446084][ T30] audit: type=1326 audit(1749948068.428:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.486629][T25577] nzxt-kraken2 0003:1E71:170E.004B: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.5-1/input0 [ 2273.569756][ T30] audit: type=1326 audit(1749948068.428:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.665243][T25577] usb 6-1: USB disconnect, device number 32 [ 2273.669620][ T30] audit: type=1326 audit(1749948068.428:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.764087][ T6182] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2273.778083][ T30] audit: type=1326 audit(1749948068.438:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.815397][ T5927] usb 5-1: USB disconnect, device number 64 [ 2273.834547][ T2631] fido_id[2631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2273.841596][ T30] audit: type=1326 audit(1749948068.438:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.904079][ T30] audit: type=1326 audit(1749948068.438:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.941811][ T30] audit: type=1326 audit(1749948068.438:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.9.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f846718e929 code=0x7ffc0000 [ 2273.974210][ T6182] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2274.004701][ T6182] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.016579][ T6182] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 2274.036581][ T6182] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2274.051129][ T6182] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2274.066892][ T6182] usb 10-1: Product: syz [ 2274.073729][ T6182] usb 10-1: Manufacturer: syz [ 2274.308908][ T2630] FAULT_INJECTION: forcing a failure. [ 2274.308908][ T2630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.313888][ T5927] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2274.323293][ T2630] CPU: 1 UID: 0 PID: 2630 Comm: syz.9.6794 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2274.323330][ T2630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2274.323347][ T2630] Call Trace: [ 2274.323357][ T2630] [ 2274.323368][ T2630] dump_stack_lvl+0x189/0x250 [ 2274.323414][ T2630] ? __pfx____ratelimit+0x10/0x10 [ 2274.323456][ T2630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2274.323494][ T2630] ? __pfx__printk+0x10/0x10 [ 2274.323537][ T2630] should_fail_ex+0x414/0x560 [ 2274.323576][ T2630] _copy_to_user+0x31/0xb0 [ 2274.323604][ T2630] simple_read_from_buffer+0xe1/0x170 [ 2274.323638][ T2630] proc_fail_nth_read+0x1df/0x250 [ 2274.323671][ T2630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2274.323706][ T2630] ? rw_verify_area+0x258/0x650 [ 2274.323744][ T2630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2274.323777][ T2630] vfs_read+0x1fd/0x980 [ 2274.323823][ T2630] ? __pfx___mutex_lock+0x10/0x10 [ 2274.323849][ T2630] ? __pfx_vfs_read+0x10/0x10 [ 2274.323888][ T2630] ? __fget_files+0x2a/0x420 [ 2274.323922][ T2630] ? __fget_files+0x3a0/0x420 [ 2274.323958][ T2630] ? __fget_files+0x2a/0x420 [ 2274.323997][ T2630] ksys_read+0x145/0x250 [ 2274.324023][ T2630] ? __pfx_ksys_read+0x10/0x10 [ 2274.324061][ T2630] ? __secure_computing+0xe2/0x2a0 [ 2274.324112][ T2630] do_syscall_64+0xfa/0x3b0 [ 2274.324133][ T2630] ? lockdep_hardirqs_on+0x9c/0x150 [ 2274.324169][ T2630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.324193][ T2630] ? clear_bhb_loop+0x60/0xb0 [ 2274.324223][ T2630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.324248][ T2630] RIP: 0033:0x7f846718d33c [ 2274.324271][ T2630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2274.324293][ T2630] RSP: 002b:00007f846801f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2274.324320][ T2630] RAX: ffffffffffffffda RBX: 00007f84673b5fa0 RCX: 00007f846718d33c [ 2274.324339][ T2630] RDX: 000000000000000f RSI: 00007f846801f0a0 RDI: 0000000000000007 [ 2274.324353][ T2630] RBP: 00007f846801f090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.324370][ T2630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2274.324385][ T2630] R13: 0000000000000000 R14: 00007f84673b5fa0 R15: 00007f84674dfa28 [ 2274.324422][ T2630] [ 2274.361061][ T6182] usb 10-1: USB disconnect, device number 12 [ 2274.637530][ T2643] FAULT_INJECTION: forcing a failure. [ 2274.637530][ T2643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.657913][ T2643] CPU: 1 UID: 0 PID: 2643 Comm: syz.9.6797 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2274.657949][ T2643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2274.657962][ T2643] Call Trace: [ 2274.657971][ T2643] [ 2274.657981][ T2643] dump_stack_lvl+0x189/0x250 [ 2274.658020][ T2643] ? __pfx____ratelimit+0x10/0x10 [ 2274.658053][ T2643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2274.658087][ T2643] ? __pfx__printk+0x10/0x10 [ 2274.658123][ T2643] should_fail_ex+0x414/0x560 [ 2274.658156][ T2643] _copy_from_user+0x2d/0xb0 [ 2274.658175][ T2643] sctp_setsockopt+0x19f/0x1200 [ 2274.658195][ T2643] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2274.658213][ T2643] do_sock_setsockopt+0x257/0x3e0 [ 2274.658234][ T2643] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2274.658257][ T2643] ? __fget_files+0x2a/0x420 [ 2274.658280][ T2643] __x64_sys_setsockopt+0x18b/0x220 [ 2274.658304][ T2643] do_syscall_64+0xfa/0x3b0 [ 2274.658318][ T2643] ? lockdep_hardirqs_on+0x9c/0x150 [ 2274.658341][ T2643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.658356][ T2643] ? clear_bhb_loop+0x60/0xb0 [ 2274.658375][ T2643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.658390][ T2643] RIP: 0033:0x7f846718e929 [ 2274.658405][ T2643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2274.658418][ T2643] RSP: 002b:00007f846801f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2274.658435][ T2643] RAX: ffffffffffffffda RBX: 00007f84673b5fa0 RCX: 00007f846718e929 [ 2274.658447][ T2643] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 2274.658457][ T2643] RBP: 00007f846801f090 R08: 0000000000000098 R09: 0000000000000000 [ 2274.658467][ T2643] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 2274.658477][ T2643] R13: 0000000000000000 R14: 00007f84673b5fa0 R15: 00007f84674dfa28 [ 2274.658500][ T2643] [ 2274.925663][ T5927] usb 5-1: device descriptor read/64, error -71 [ 2275.180977][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2275.351909][ T5927] usb 5-1: device descriptor read/64, error -71 [ 2275.510389][ T5927] usb usb5-port1: attempt power cycle [ 2275.862080][ T6182] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2275.891682][ T5927] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2275.922648][ T5927] usb 5-1: device descriptor read/8, error -71 [ 2276.020360][ T6182] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.033399][ T6182] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2276.071657][ T6182] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2276.121589][ T6182] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2276.128385][ T6182] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 2276.179277][ T6182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.191755][ T5927] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2276.192934][ T6182] usb 6-1: config 0 descriptor?? [ 2276.242897][ T5927] usb 5-1: device descriptor read/8, error -71 [ 2276.355654][ T5927] usb usb5-port1: unable to enumerate USB device [ 2276.401869][T19702] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2276.555921][T19702] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2276.566662][T19702] usb 9-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 2276.579953][T19702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.590717][T19702] usb 9-1: config 0 descriptor?? [ 2276.591702][T25828] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2276.611923][T19702] gspca_main: kinect-2.14.0 probing 045e:02bf [ 2276.764217][T25828] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 2276.775399][T25828] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 2276.789345][T25828] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 2276.807843][T25828] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 2276.817347][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2276.821636][T25828] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2276.838960][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2276.844407][ T5927] usb 9-1: USB disconnect, device number 63 [ 2276.858039][T25828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.878099][ T6182] logitech-hidpp-device 0003:046D:C090.004C: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.5-1/input0 [ 2277.065381][ T6182] usb 6-1: USB disconnect, device number 33 [ 2277.105605][T25828] ath6kl: Failed to submit usb control message: -71 [ 2277.126952][T25828] ath6kl: unable to send the bmi data to the device: -71 [ 2277.141142][ T2687] tipc: Enabled bearer , priority 10 [ 2277.150507][T25828] ath6kl: Unable to send get target info: -71 [ 2277.162472][T25828] ath6kl: Failed to init ath6kl core: -71 [ 2277.169783][T25828] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 2277.194589][T25828] usb 10-1: USB disconnect, device number 13 [ 2277.483099][ T2695] loop6: detected capacity change from 0 to 524287999 [ 2277.516723][T20410] buffer_io_error: 23 callbacks suppressed [ 2277.516746][T20410] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 2278.026393][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.049022][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.232062][ T5927] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2278.251588][T25577] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2278.417656][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 2278.452730][ T5927] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2278.488823][ T5927] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2278.514900][ T5927] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2278.538813][ T5927] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2278.557041][ T5927] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2278.571431][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2278.578858][ T5927] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2278.588957][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.609816][ T5927] usb 5-1: config 0 descriptor?? [ 2279.383061][ T5927] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 2279.414108][ T5927] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 2279.427121][ T5927] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 2279.447855][ T5927] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 2279.461937][ T5927] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 2279.475990][ T5927] hid-thrustmaster 0003:044F:B65D.004D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 2279.500927][ T5927] hid-thrustmaster 0003:044F:B65D.004D: setup data couldn't be sent [ 2279.570442][ C0] hid-thrustmaster 0003:044F:B65D.004D: URB to get model id failed with error -71 [ 2279.579012][ T2757] netlink: 'syz.5.6823': attribute type 2 has an invalid length. [ 2279.598222][ T5927] usb 5-1: USB disconnect, device number 69 [ 2280.045568][ T2758] fido_id[2758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2280.316194][ T2763] tipc: Started in network mode [ 2280.324607][ T2763] tipc: Node identity , cluster identity 4711 [ 2280.344205][ T2765] batadv_slave_0: left allmulticast mode [ 2280.347692][ T2762] delete_channel: no stack [ 2280.555567][ T2776] sch_tbf: peakrate 64 is lower than or equals to rate 2147483649 ! [ 2280.568626][ T2776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2280.709689][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 2280.709709][ T30] audit: type=1326 audit(1749948076.008:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.748323][ T30] audit: type=1326 audit(1749948076.028:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.774764][ T30] audit: type=1326 audit(1749948076.028:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.797147][ C1] vkms_vblank_simulate: vblank timer overrun [ 2280.807057][ T30] audit: type=1326 audit(1749948076.028:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.829416][ C1] vkms_vblank_simulate: vblank timer overrun [ 2280.837411][ T30] audit: type=1326 audit(1749948076.028:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.866823][ T30] audit: type=1326 audit(1749948076.028:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.897925][ T2786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2280.906857][ T30] audit: type=1326 audit(1749948076.028:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2280.935772][ T2782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2280.987561][ T30] audit: type=1326 audit(1749948076.028:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2281.054207][ T30] audit: type=1326 audit(1749948076.028:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2281.078277][ T30] audit: type=1326 audit(1749948076.028:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2781 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2281.250135][ T2798] loop8: detected capacity change from 0 to 7 [ 2281.260648][ T2798] Dev loop8: unable to read RDB block 7 [ 2281.267122][ T2798] loop8: AHDI p1 p3 p4 [ 2281.271861][ T2798] loop8: partition table partially beyond EOD, truncated [ 2281.279594][ T2798] loop8: p1 start 975770946 is beyond EOD, truncated [ 2281.293699][ T2798] loop8: p3 start 6514546 is beyond EOD, truncated [ 2281.321024][ T2800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2282.041788][T25828] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2282.202548][T25828] usb 6-1: Using ep0 maxpacket: 8 [ 2282.215789][T25828] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2282.255120][T25828] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2282.267087][T25828] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2282.279093][T25828] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2282.290632][T25828] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2282.307729][T25828] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2282.326764][T25828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.564236][T25828] usb 6-1: usb_control_msg returned -32 [ 2282.570015][T25828] usbtmc 6-1:16.0: can't read capabilities [ 2283.084693][T25828] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2283.163834][ T2832] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6841'. [ 2283.389272][T25828] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2283.438853][T25828] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2283.490706][T25828] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 2283.531644][T25828] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2283.564755][T25828] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2283.587556][ T2835] fuse: Bad value for 'user_id' [ 2283.592878][T25828] usb 10-1: Product: syz [ 2283.597348][ T2835] fuse: Bad value for 'user_id' [ 2283.602502][T25828] usb 10-1: Manufacturer: syz [ 2283.738552][ T2839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6848'. [ 2283.752817][ T2839] 8021q: VLANs not supported on vcan0 [ 2283.896654][ T2852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.905541][ T2852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.067965][ T2859] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6851'. [ 2284.800182][ T5927] usb 6-1: USB disconnect, device number 34 [ 2284.825762][ T2881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2284.899435][ T2884] ?H: renamed from lo (while UP) [ 2285.009100][ T2884] fuse: Bad value for 'fd' [ 2285.879680][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6863'. [ 2286.079008][ T6182] usb 10-1: USB disconnect, device number 14 [ 2286.261844][T25828] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2286.433001][T25828] usb 5-1: Using ep0 maxpacket: 32 [ 2286.474303][T25828] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 2286.552154][T25828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.586973][T25828] usb 5-1: config 0 descriptor?? [ 2286.649690][T25828] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 2286.721339][T25828] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2286.738968][ T2937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6871'. [ 2286.750486][T25828] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 2286.766516][T25828] usb 5-1: media controller created [ 2286.809066][T25828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2286.838597][ T2940] netlink: zone id is out of range [ 2286.866278][ T2940] netlink: zone id is out of range [ 2286.888575][ T2940] netlink: zone id is out of range [ 2286.895714][ T2940] netlink: zone id is out of range [ 2286.920255][T25828] usb 5-1: selecting invalid altsetting 1 [ 2286.931607][ T2940] netlink: zone id is out of range [ 2286.936872][ T2940] netlink: zone id is out of range [ 2286.943543][ T2940] netlink: zone id is out of range [ 2286.951463][ T2940] netlink: zone id is out of range [ 2286.958355][ T2940] netlink: zone id is out of range [ 2286.965785][ T2940] netlink: zone id is out of range [ 2286.972263][T25828] set interface failed [ 2286.972790][T25828] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2286.992269][T25828] error writing reg: 0xff, val: 0x00 [ 2287.002039][T25577] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2287.026026][ T6182] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2287.079345][T25828] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2287.181755][ T6182] usb 6-1: Using ep0 maxpacket: 16 [ 2287.188624][ T6182] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 2287.197724][ T6182] usb 6-1: config 252 has no interface number 0 [ 2287.204217][ T6182] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 2287.238441][ T6182] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2287.255941][ T6182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.261692][T25577] usb 9-1: Using ep0 maxpacket: 8 [ 2287.264226][ T6182] usb 6-1: Product: syz [ 2287.274308][ T6182] usb 6-1: Manufacturer: syz [ 2287.279084][ T6182] usb 6-1: SerialNumber: syz [ 2287.287160][T25577] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 2287.297835][T25577] usb 9-1: config 0 has no interface number 0 [ 2287.312016][T25577] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2287.340473][T25577] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2287.358597][T25577] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2287.360279][ T6182] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2287.381258][T25577] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2287.400781][T25577] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2287.412807][T25577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.427685][T25577] usb 9-1: config 0 descriptor?? [ 2287.441234][T25577] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2287.505054][ T2945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6871'. [ 2287.531120][ T2946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.540664][ T2946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.557068][ T6182] usb 6-1: USB disconnect, device number 35 [ 2287.567486][T26375] usb 6-1: Failed to submit usb control message: -71 [ 2287.580374][T26375] usb 6-1: unable to send the bmi data to the device: -71 [ 2287.588513][T26375] usb 6-1: unable to get target info from device [ 2287.595328][T26375] usb 6-1: could not get target info (-71) [ 2287.602225][T26375] usb 6-1: could not probe fw (-71) [ 2287.649775][ T2935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.672474][ T2935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.846690][ T2952] binder: 2951:2952 ioctl c0306201 0 returned -14 [ 2287.855560][ T2952] binder: 2951:2952 ioctl c020aa00 200000000240 returned -22 [ 2287.863891][ T2952] binder: 2951:2952 ioctl 7af 200000000dc0 returned -22 [ 2287.962104][T25577] usb 9-1: USB disconnect, device number 65 [ 2287.979432][T25577] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 2288.610626][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.617104][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.678053][ T2964] binder_alloc: 2963: binder_alloc_buf size 8 failed, no address space [ 2288.694038][ T2964] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 2288.986272][T19701] usb 5-1: USB disconnect, device number 70 [ 2289.268711][ T2977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2289.282506][ T2975] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2289.711962][T20670] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2289.869727][ T2996] loop8: detected capacity change from 0 to 7 [ 2289.882043][T20670] usb 6-1: Using ep0 maxpacket: 32 [ 2289.906145][T20670] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2289.914848][ T6182] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2289.968821][T20670] usb 6-1: config 0 has no interface number 0 [ 2289.990603][T20670] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2290.024801][T20670] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2290.039208][T20670] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2290.058195][T20670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.070372][T20670] usb 6-1: Product: syz [ 2290.079721][T20670] usb 6-1: Manufacturer: syz [ 2290.084987][T20670] usb 6-1: SerialNumber: syz [ 2290.101115][T20670] usb 6-1: config 0 descriptor?? [ 2290.131634][ T6182] usb 5-1: Using ep0 maxpacket: 16 [ 2290.139036][ T6182] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2290.150044][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2290.160926][ T6182] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2290.177530][ T6182] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2290.195032][ T6182] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2290.206455][ T6182] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2290.217520][ T6182] usb 5-1: Manufacturer: syz [ 2290.225391][ T6182] usb 5-1: config 0 descriptor?? [ 2290.234712][T25828] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2290.317427][T20670] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2290.353999][T20670] cx231xx 6-1:0.1: Failed to read PCB config [ 2290.360095][T20670] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 2290.361699][T25577] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2290.385270][T20670] usb 6-1: USB disconnect, device number 36 [ 2290.402101][T25828] usb 10-1: Using ep0 maxpacket: 8 [ 2290.414044][T25828] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2290.423969][T25828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.447788][ T6182] usb 5-1: USB disconnect, device number 71 [ 2290.475349][T25828] usb 10-1: Product: syz [ 2290.489931][T25828] usb 10-1: Manufacturer: syz [ 2290.496739][T25828] usb 10-1: SerialNumber: syz [ 2290.507888][T25828] usb 10-1: config 0 descriptor?? [ 2290.561616][T25577] usb 9-1: Using ep0 maxpacket: 8 [ 2290.568776][T25577] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2290.578528][T25577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.589837][T25577] usb 9-1: config 0 descriptor?? [ 2290.718711][T25828] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2290.811702][T20670] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2290.965225][T20670] usb 6-1: Using ep0 maxpacket: 32 [ 2290.976636][T20670] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2290.987656][T20670] usb 6-1: config 0 has no interface number 0 [ 2290.998813][T20670] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2291.014607][T20670] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2291.025687][T20670] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2291.038958][T20670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.049437][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 2291.049456][ T30] audit: type=1800 audit(1749948086.358:3863): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6891" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2291.050969][T20670] usb 6-1: Product: syz [ 2291.090525][T20670] usb 6-1: Manufacturer: syz [ 2291.095504][T20670] usb 6-1: SerialNumber: syz [ 2291.106850][T20670] usb 6-1: config 0 descriptor?? [ 2291.348566][T20670] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2291.364512][T20670] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 2291.484512][T20670] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 2291.493761][ T5923] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2291.513245][T20670] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2291.528187][T20670] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2291.544800][T20670] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2291.554688][T20670] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2291.563760][T20670] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -32 [ 2291.599050][T20670] i2c i2c-4: Added multiplexed i2c bus 6 [ 2291.633184][T20670] i2c i2c-4: Added multiplexed i2c bus 7 [ 2291.654666][T20670] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 2291.672862][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 2291.680139][T20670] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 2291.701355][ T5923] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2291.723897][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.739205][ T5923] usb 5-1: Product: syz [ 2291.754168][ T5923] usb 5-1: Manufacturer: syz [ 2291.774098][T20670] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -32 [ 2291.784161][ T5923] usb 5-1: SerialNumber: syz [ 2291.810778][ T5923] usb 5-1: config 0 descriptor?? [ 2292.445382][T25828] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2292.553614][ T5923] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2293.195024][T19701] usb 6-1: USB disconnect, device number 37 [ 2293.701662][T25577] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2293.737262][T25577] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 2293.837111][T25577] asix 9-1:0.0: probe with driver asix failed with error -71 [ 2293.873961][T25577] usb 9-1: USB disconnect, device number 66 [ 2294.282271][ T5927] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2294.322005][T25828] usb 5-1: USB disconnect, device number 72 [ 2294.651908][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 2294.658300][ T5561] input: syz0 as /devices/virtual/input/input142 [ 2294.690462][ T5927] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 2294.810824][ T5927] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2295.015315][ T5927] usb 6-1: config 4 has no interface number 0 [ 2295.037495][ T5927] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2295.142995][ T5927] usb 6-1: config 4 interface 51 has no altsetting 0 [ 2295.162205][ T5923] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2295.209081][ T5927] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 2295.251948][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.274723][ T5927] usb 6-1: Product: syz [ 2295.281561][ T5927] usb 6-1: Manufacturer: syz [ 2295.286216][ T5927] usb 6-1: SerialNumber: syz [ 2295.356096][ T5923] usb 9-1: device descriptor read/64, error -71 [ 2295.372207][ T5927] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 2295.623292][ T5923] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2295.771832][ T5923] usb 9-1: device descriptor read/64, error -71 [ 2295.846417][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2295.862702][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2295.957098][ T5923] usb usb9-port1: attempt power cycle [ 2296.331750][ T5923] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2296.352909][ T5923] usb 9-1: device descriptor read/8, error -71 [ 2296.367140][ T5927] usb 10-1: USB disconnect, device number 15 [ 2296.592383][ T5923] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2296.623645][ T5923] usb 9-1: device descriptor read/8, error -71 [ 2296.732001][ T5923] usb usb9-port1: unable to enumerate USB device [ 2297.270209][ T30] audit: type=1326 audit(1749948092.568:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2297.332194][ T5923] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2297.357019][ T30] audit: type=1326 audit(1749948092.568:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2297.384078][ T30] audit: type=1326 audit(1749948092.578:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2297.411354][ T30] audit: type=1326 audit(1749948092.578:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2297.439230][ T30] audit: type=1326 audit(1749948092.578:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8331f8d290 code=0x7ffc0000 [ 2297.477586][ T30] audit: type=1326 audit(1749948092.578:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2297.504648][ T30] audit: type=1326 audit(1749948092.578:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5580 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8331f8e929 code=0x7ffc0000 [ 2297.545762][ T5923] usb 10-1: Using ep0 maxpacket: 8 [ 2297.557837][ T5923] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2297.580519][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.594910][ T5923] usb 10-1: Product: syz [ 2297.602183][ T5923] usb 10-1: Manufacturer: syz [ 2297.622281][ T5923] usb 10-1: SerialNumber: syz [ 2297.650606][ T5923] usb 10-1: config 0 descriptor?? [ 2297.740081][ T5927] usb 6-1: USB disconnect, device number 38 [ 2297.874015][ T5923] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2297.889285][ T5585] input: syz0 as /devices/virtual/input/input143 [ 2298.282907][ T5923] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2298.309135][ T5923] usb 10-1: USB disconnect, device number 16 [ 2298.326161][T25828] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2298.404208][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6906'. [ 2298.492072][T25828] usb 9-1: Using ep0 maxpacket: 32 [ 2298.502926][T25828] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2298.561345][T25828] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2298.579525][T25828] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2298.606473][T25828] usb 9-1: Product: syz [ 2298.617562][T25828] usb 9-1: Manufacturer: syz [ 2298.631324][T25828] usb 9-1: SerialNumber: syz [ 2298.657878][T25828] usb 9-1: config 0 descriptor?? [ 2298.677946][ T5588] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2298.702382][T25828] hub 9-1:0.0: bad descriptor, ignoring hub [ 2298.720201][T25828] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2298.885769][ T5612] netlink: 'syz.9.6912': attribute type 1 has an invalid length. [ 2298.912352][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6912'. [ 2299.537394][ T30] audit: type=1326 audit(1749948094.838:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.5.6915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x0 [ 2299.754539][T19701] usb 9-1: USB disconnect, device number 71 [ 2299.865752][ T5927] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2300.092444][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 2300.132205][ T5628] team0: entered promiscuous mode [ 2300.137635][ T5628] team_slave_0: entered promiscuous mode [ 2300.140780][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.154906][ T5927] usb 5-1: config 0 has no interfaces? [ 2300.160679][ T5927] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2300.173213][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.224284][ T5628] team_slave_1: entered promiscuous mode [ 2300.232322][ T5628] bond0: entered promiscuous mode [ 2300.238796][ T5927] usb 5-1: config 0 descriptor?? [ 2300.245033][ T5628] bond_slave_0: entered promiscuous mode [ 2300.320365][ T5628] bond_slave_1: entered promiscuous mode [ 2300.340054][ T5628] batadv0: entered promiscuous mode [ 2300.350243][ T5628] dummy0: entered promiscuous mode [ 2300.374390][ T5628] hsr1: entered allmulticast mode [ 2300.392207][ T5628] team0: entered allmulticast mode [ 2300.412681][ T5628] team_slave_0: entered allmulticast mode [ 2300.448925][ T5628] team_slave_1: entered allmulticast mode [ 2300.465760][ T5628] bond0: entered allmulticast mode [ 2300.505882][ T5628] bond_slave_0: entered allmulticast mode [ 2300.523112][ T5628] bond_slave_1: entered allmulticast mode [ 2300.547313][ T5628] batadv0: entered allmulticast mode [ 2300.571827][ T5628] dummy0: entered allmulticast mode [ 2300.583088][ T5628] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2300.652791][ T5631] team0: Device gtp0 is of different type [ 2300.664298][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.674709][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2301.024076][T25828] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2301.269145][T25828] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 2301.288183][T25828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 2301.341738][T25828] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2301.398547][T25828] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2301.421873][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6921'. [ 2301.435786][T25828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.493173][T25828] usb 10-1: config 0 descriptor?? [ 2301.523608][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6921'. [ 2301.539934][ T5635] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2301.580049][T25828] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2301.951837][ T5923] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2302.105806][T25828] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 2302.172234][ T5923] usb 6-1: device descriptor read/64, error -71 [ 2302.268396][T25828] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2302.338579][T25828] usb 10-1: MIDIStreaming interface descriptor not found [ 2302.347350][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6924'. [ 2302.413448][ T5656] net_ratelimit: 7 callbacks suppressed [ 2302.413462][ T5656] netlink: ct family unspecified [ 2302.518934][ T5656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2302.561986][ T5923] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2302.741879][ T5923] usb 6-1: device descriptor read/64, error -71 [ 2302.744387][ T5656] : renamed from bond0 [ 2302.982290][ T5923] usb usb6-port1: attempt power cycle [ 2303.308617][T19702] usb 5-1: USB disconnect, device number 73 [ 2303.392003][ T5923] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2303.422645][ T5923] usb 6-1: device descriptor read/8, error -71 [ 2303.682191][ T5923] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2303.718094][ T5923] usb 6-1: device descriptor read/8, error -71 [ 2303.839809][ T6182] usb 10-1: USB disconnect, device number 17 [ 2303.858629][ T5923] usb usb6-port1: unable to enumerate USB device [ 2304.090589][ T5672] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 2304.106878][ T5672] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 2305.011633][ T5927] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2305.242836][ T5927] usb 5-1: device descriptor read/64, error -71 [ 2305.382003][T19702] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2305.541609][T19702] usb 6-1: Using ep0 maxpacket: 32 [ 2305.574366][T19702] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2305.611817][ T5927] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2305.629273][T19702] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2305.689029][T19702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2305.791604][T19702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2305.851654][T19702] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2305.964931][ T5927] usb 5-1: device descriptor read/64, error -71 [ 2306.239384][T19702] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2306.290241][T19702] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2306.361552][T19702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.377377][ T5927] usb usb5-port1: attempt power cycle [ 2306.454657][T19702] usb 6-1: config 0 descriptor?? [ 2306.701264][T19702] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2306.716700][T19702] usb 6-1: USB disconnect, device number 43 [ 2306.787483][T19702] usblp0: removed [ 2306.792105][ T5927] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2306.822858][ T5927] usb 5-1: device descriptor read/8, error -71 [ 2307.092078][ T5927] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2307.147251][ T5927] usb 5-1: device descriptor read/8, error -71 [ 2307.263003][ T5927] usb usb5-port1: unable to enumerate USB device [ 2307.312036][T19702] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2307.483865][T19702] usb 6-1: Using ep0 maxpacket: 32 [ 2307.493098][T19702] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2307.506568][T19702] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2307.519793][T19702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2307.661763][T19702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2307.671929][T19702] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2307.682382][T19702] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2307.696222][T19702] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2307.706374][T19702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.732316][T19702] usb 6-1: config 0 descriptor?? [ 2308.290254][T19702] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2308.467585][T19702] usb 6-1: USB disconnect, device number 44 [ 2308.549980][T19702] usblp0: removed [ 2308.624621][ T5713] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6938'. [ 2308.688012][ T5713] netlink: 'syz.5.6938': attribute type 1 has an invalid length. [ 2309.262103][T19702] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2309.532559][T19702] usb 9-1: device descriptor read/64, error -71 [ 2309.620423][T25828] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2309.838173][T25828] usb 6-1: config 0 has no interfaces? [ 2309.857205][T25828] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2309.866604][T25828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.876907][T25828] usb 6-1: Product: syz [ 2309.887710][T25828] usb 6-1: Manufacturer: syz [ 2309.894854][T25828] usb 6-1: SerialNumber: syz [ 2309.922437][T25828] usb 6-1: config 0 descriptor?? [ 2309.937716][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6947'. [ 2309.982669][T19702] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2310.141969][T19702] usb 9-1: device descriptor read/64, error -71 [ 2310.267346][T19702] usb usb9-port1: attempt power cycle [ 2310.642010][T19702] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2310.707953][T19702] usb 9-1: device descriptor read/8, error -71 [ 2310.972051][T19702] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2310.992229][T19702] usb 9-1: device descriptor read/8, error -71 [ 2311.104180][T19702] usb usb9-port1: unable to enumerate USB device [ 2312.522741][ T5927] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2312.703626][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 2312.713382][ T5927] usb 9-1: no configurations [ 2312.718192][ T5927] usb 9-1: can't read configurations, error -22 [ 2312.804121][ T6182] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2312.841837][T19702] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 2312.877178][ T5927] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2312.961888][ T6182] usb 5-1: Using ep0 maxpacket: 32 [ 2312.968793][ T6182] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2313.019923][T25828] usb 6-1: USB disconnect, device number 45 [ 2313.023014][T19702] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2313.039884][T19702] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2313.060285][ T6182] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2313.062571][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 2313.078179][T19702] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2313.088396][ T5927] usb 9-1: no configurations [ 2313.094108][ T5927] usb 9-1: can't read configurations, error -22 [ 2313.096455][ T6182] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2313.101935][T19702] usb 10-1: config 1 has no interface number 1 [ 2313.116269][ T5927] usb usb9-port1: attempt power cycle [ 2313.122946][T19702] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2313.136447][T19702] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 160, setting to 64 [ 2313.136474][ T6182] usb 5-1: Product: syz [ 2313.152066][T19702] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2313.152100][T19702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.152124][T19702] usb 10-1: Product: syz [ 2313.152142][T19702] usb 10-1: Manufacturer: syz [ 2313.152160][T19702] usb 10-1: SerialNumber: syz [ 2313.212685][ T6182] usb 5-1: Manufacturer: syz [ 2313.217369][ T6182] usb 5-1: SerialNumber: syz [ 2313.226379][ T6182] usb 5-1: config 0 descriptor?? [ 2313.233773][ T5788] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2313.244425][ T6182] hub 5-1:0.0: bad descriptor, ignoring hub [ 2313.250395][ T6182] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2313.461838][ T5927] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2313.484975][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 2313.491422][ T5927] usb 9-1: no configurations [ 2313.496530][ T5927] usb 9-1: can't read configurations, error -22 [ 2313.523621][T25828] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2313.632073][ T5927] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2313.655940][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 2313.662009][ T5927] usb 9-1: no configurations [ 2313.666672][ T5927] usb 9-1: can't read configurations, error -22 [ 2313.677877][ T5927] usb usb9-port1: unable to enumerate USB device [ 2314.319811][ T6182] usb 5-1: USB disconnect, device number 78 [ 2315.599134][ T5819] dlm: no locking on control device [ 2315.866460][T19702] usb 10-1: USB disconnect, device number 18 [ 2315.970476][T20410] udevd[20410]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2316.211686][T19702] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 2316.230194][ T30] audit: type=1800 audit(1749948111.528:3872): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6966" name="dmabuf" dev="dmabuf" ino=192 res=0 errno=0 [ 2316.267795][ T5828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2316.276691][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6965'. [ 2316.366194][T19702] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 2316.380699][T19702] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.394419][T19702] usb 10-1: config 0 has no interface number 0 [ 2316.408080][T19702] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 2316.419663][T19702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.436097][T19702] usb 10-1: config 0 descriptor?? [ 2316.454907][T19702] hub 10-1:0.3: bad descriptor, ignoring hub [ 2316.470366][T19702] hub 10-1:0.3: probe with driver hub failed with error -5 [ 2316.497978][T19702] sierra 10-1:0.3: Sierra USB modem converter detected [ 2316.632389][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6969'. [ 2316.713197][ T5819] syz_tun: entered promiscuous mode [ 2316.728801][ T5819] vlan2: entered promiscuous mode [ 2316.858593][T19702] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 2316.894840][T19702] usb 10-1: USB disconnect, device number 19 [ 2316.927183][T19702] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2316.949858][T19702] sierra 10-1:0.3: device disconnected [ 2317.433461][ T5850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2317.493722][ T5852] netlink: 468 bytes leftover after parsing attributes in process `syz.9.6972'. [ 2318.455355][ T6182] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2318.486574][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6976'. [ 2318.625531][ T6182] usb 9-1: Using ep0 maxpacket: 8 [ 2318.653922][ T6182] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2318.705612][ T6182] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2318.719979][ T6182] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.776451][ T6182] usb 9-1: Product: syz [ 2318.780714][ T6182] usb 9-1: Manufacturer: syz [ 2318.806703][ T6182] usb 9-1: SerialNumber: syz [ 2318.832993][ T6182] usb 9-1: config 0 descriptor?? [ 2318.856006][ T6182] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2319.321772][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2319.461641][T20670] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2319.698928][T20670] usb 6-1: config 0 has no interfaces? [ 2319.710532][T20670] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2319.729662][T20670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.738968][T20670] usb 6-1: Product: syz [ 2319.743589][T20670] usb 6-1: Manufacturer: syz [ 2319.748216][T20670] usb 6-1: SerialNumber: syz [ 2319.775783][T20670] usb 6-1: config 0 descriptor?? [ 2320.111694][T20670] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 2320.261646][T20670] usb 10-1: Invalid ep0 maxpacket: 16 [ 2320.401847][T20670] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 2320.551956][T20670] usb 10-1: Invalid ep0 maxpacket: 16 [ 2320.557927][T20670] usb usb10-port1: attempt power cycle [ 2320.903266][T20670] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 2320.933288][T20670] usb 10-1: Invalid ep0 maxpacket: 16 [ 2321.071937][T20670] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 2321.113945][T20670] usb 10-1: Invalid ep0 maxpacket: 16 [ 2321.121464][ T6182] gspca_zc3xx: reg_r err -32 [ 2321.129360][T20670] usb usb10-port1: unable to enumerate USB device [ 2321.712714][ T6182] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2321.719320][ T6182] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2321.821379][ T6182] usb 6-1: USB disconnect, device number 47 [ 2322.294750][T25577] usb 9-1: USB disconnect, device number 80 [ 2323.283794][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6994'. [ 2323.346222][ T5932] bridge1: entered promiscuous mode [ 2324.043379][ T6182] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2324.142942][T20670] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2324.252285][ T6182] usb 6-1: Using ep0 maxpacket: 32 [ 2324.294015][ T6182] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2324.318746][ T6182] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2324.342381][ T5945] ALSA: mixer_oss: invalid OSS volume 'LINE3' [ 2324.349210][ T5945] ALSA: mixer_oss: invalid OSS volume '' [ 2324.402651][ T6182] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2324.410947][ T6182] usb 6-1: Product: syz [ 2324.484139][T20670] usb 5-1: config 0 has no interfaces? [ 2324.561950][ T6182] usb 6-1: Manufacturer: syz [ 2324.567531][ T6182] usb 6-1: SerialNumber: syz [ 2324.598390][ T6182] usb 6-1: config 0 descriptor?? [ 2324.626650][ T5941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2324.654338][ T6182] hub 6-1:0.0: bad descriptor, ignoring hub [ 2324.660402][ T6182] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2324.676486][T20670] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2324.711539][T20670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.744213][T20670] usb 5-1: Product: syz [ 2324.754712][T20670] usb 5-1: Manufacturer: syz [ 2324.763693][T20670] usb 5-1: SerialNumber: syz [ 2324.784211][T20670] usb 5-1: config 0 descriptor?? [ 2324.912152][ T6182] usb 9-1: new low-speed USB device number 81 using dummy_hcd [ 2325.021652][ T5923] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2325.086336][ T6182] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2325.101269][ T6182] usb 9-1: config 179 has no interface number 0 [ 2325.137292][ T6182] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2325.149993][ T6182] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2325.163412][ T6182] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2325.177771][ T6182] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 2325.196139][ T6182] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2325.196197][ T6182] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2325.225329][ T6182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.258258][ T5923] usb 10-1: no configurations [ 2325.264123][ T5923] usb 10-1: can't read configurations, error -22 [ 2325.275530][ T5953] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 2325.295919][ T6182] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2325.432177][ T5923] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2325.440303][ T6182] xpad 9-1:179.65: probe with driver xpad failed with error -5 [ 2325.489800][ T6182] usb 9-1: USB disconnect, device number 81 [ 2325.623041][ T5923] usb 10-1: no configurations [ 2325.627986][ T5923] usb 10-1: can't read configurations, error -22 [ 2325.635892][ T5923] usb usb10-port1: attempt power cycle [ 2325.722661][T20670] usb 6-1: USB disconnect, device number 48 [ 2326.002196][ T5923] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2326.034179][ T5923] usb 10-1: no configurations [ 2326.039334][ T5923] usb 10-1: can't read configurations, error -22 [ 2326.131926][ T5961] xt_CT: No such helper "snmp" [ 2326.171715][ T5923] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2326.193081][ T5923] usb 10-1: no configurations [ 2326.197941][ T5923] usb 10-1: can't read configurations, error -22 [ 2326.205421][ T5923] usb usb10-port1: unable to enumerate USB device [ 2326.371617][T20670] usb 9-1: new full-speed USB device number 82 using dummy_hcd [ 2326.541960][ T5923] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 2326.555296][T20670] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 2326.563848][T20670] usb 9-1: config 2 has no interface number 0 [ 2326.570107][T20670] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 2326.583289][T20670] usb 9-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 2326.599387][T20670] usb 9-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2326.612144][T20670] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2326.622478][T20670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.630520][T20670] usb 9-1: Product: syz [ 2326.634935][T20670] usb 9-1: Manufacturer: syz [ 2326.639581][T20670] usb 9-1: SerialNumber: syz [ 2326.648786][ T5961] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2326.691860][ T5923] usb 6-1: device descriptor read/64, error -71 [ 2326.862667][ T6182] usb 5-1: USB disconnect, device number 79 [ 2326.869257][ T5961] tipc: Started in network mode [ 2326.883646][ T5961] tipc: Node identity ff, cluster identity 4711 [ 2326.894755][ T5961] tipc: Node number set to 255 [ 2326.912986][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.933287][ T5923] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 2326.945180][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.956573][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7002'. [ 2326.973991][ T5961] random: crng reseeded on system resumption [ 2327.008332][T20670] usb 9-1: probing VID:PID(0424:012C) [ 2327.018866][T20670] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 2327.026860][T20670] usb 9-1: vub300 testing BULK IN EndPoint(1) 82 [ 2327.034049][T20670] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 2327.074476][T20670] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 2327.083581][ T5923] usb 6-1: device descriptor read/64, error -71 [ 2327.103057][T20670] usb 9-1: USB disconnect, device number 82 [ 2327.163865][ T5972] fuse: Unknown parameter 'group_d' [ 2327.192937][ T5923] usb usb6-port1: attempt power cycle [ 2327.531846][ T5923] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 2327.554683][ T5923] usb 6-1: device descriptor read/8, error -71 [ 2327.596148][ T5977] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7007'. [ 2327.792026][ T5923] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 2327.835714][ T5923] usb 6-1: device descriptor read/8, error -71 [ 2327.942040][T20670] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2327.952686][ T5923] usb usb6-port1: unable to enumerate USB device [ 2328.092484][ T5992] netlink: 'syz.9.7011': attribute type 21 has an invalid length. [ 2328.103035][T20670] usb 5-1: Using ep0 maxpacket: 32 [ 2328.112321][ T5982] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7009'. [ 2328.133612][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.163868][ T5994] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7009'. [ 2328.185855][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2328.214059][T20670] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2328.223688][T20670] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2328.232369][T20670] usb 5-1: can't read configurations, error -71 [ 2328.316730][ T5997] fuse: Invalid uid '00000000000000000006' [ 2330.061623][ T6182] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2330.232688][ T6182] usb 6-1: device descriptor read/64, error -71 [ 2330.906111][ T6182] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2331.113353][ T6182] usb 6-1: device descriptor read/64, error -71 [ 2331.235109][ T6182] usb usb6-port1: attempt power cycle [ 2331.351763][ T5927] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2331.546076][ T5927] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2331.581932][ T5927] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2331.631974][ T5927] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2331.661797][ T6182] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2331.667678][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.698654][ T6035] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2331.712605][ T6182] usb 6-1: device descriptor read/8, error -71 [ 2331.757802][ T5927] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2331.953523][ T6182] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2331.976239][ T5927] usb 9-1: USB disconnect, device number 83 [ 2332.002804][ T6182] usb 6-1: device descriptor read/8, error -71 [ 2332.011665][T25828] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2332.112719][ T6182] usb usb6-port1: unable to enumerate USB device [ 2332.174380][T25828] usb 5-1: config index 0 descriptor too short (expected 42, got 34) [ 2332.192457][T25828] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 2332.205793][T25828] usb 5-1: config 0 has no interface number 0 [ 2332.221758][T25828] usb 5-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2332.242165][T25828] usb 5-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2332.261647][T25828] usb 5-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 166, changing to 7 [ 2332.282068][T25828] usb 5-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 2332.320563][T25828] usb 5-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2332.346993][T25828] usb 5-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= d.81 [ 2332.364040][T25828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.381729][T25828] usb 5-1: Product: syz [ 2332.386200][T25828] usb 5-1: Manufacturer: syz [ 2332.390840][T25828] usb 5-1: SerialNumber: syz [ 2332.402922][T25828] usb 5-1: config 0 descriptor?? [ 2332.408955][ T6045] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2332.420801][T25828] em28xx 5-1:0.92: New device syz syz @ 480 Mbps (093b:a005, interface 92, class 92) [ 2332.446833][T25828] em28xx 5-1:0.92: DVB interface 92 found: isoc [ 2332.694434][T25828] em28xx 5-1:0.92: unknown em28xx chip ID (0) [ 2332.760588][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7032'. [ 2332.778890][ T6058] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 2332.789195][ T6058] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 2332.797875][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7031'. [ 2332.820982][T25828] em28xx 5-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 2332.844920][T25828] em28xx 5-1:0.92: board has no eeprom [ 2332.918394][T25828] em28xx 5-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 2332.944012][T25828] em28xx 5-1:0.92: dvb set to isoc mode. [ 2332.949856][ T6182] em28xx 5-1:0.92: Remote control support is not available for this card. [ 2332.983387][T25828] usb 5-1: USB disconnect, device number 82 [ 2332.991210][T25828] em28xx 5-1:0.92: Disconnecting em28xx [ 2332.998331][T25828] em28xx 5-1:0.92: Closing input extension [ 2333.035817][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7031'. [ 2333.059043][T25828] em28xx 5-1:0.92: Freeing device [ 2333.220936][ T6061] input: syz0 as /devices/virtual/input/input144 [ 2333.271638][T20670] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2333.299163][ T6068] bridge0: port 3(gretap0) entered blocking state [ 2333.306260][ T6068] bridge0: port 3(gretap0) entered disabled state [ 2333.362134][ T6068] gretap0: entered promiscuous mode [ 2333.402062][ T6071] gretap0: left promiscuous mode [ 2333.409984][ T6071] bridge0: port 3(gretap0) entered disabled state [ 2333.447312][T20670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2333.466222][T20670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2333.493616][T20670] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2333.532281][T20670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.561434][T20670] usb 6-1: config 0 descriptor?? [ 2333.867314][ T6081] fuse: Unknown parameter 'Dd>GnJbir@u^e5C{_PHtL[.;`|ϧ(~' [ 2333.892153][T25828] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2333.935605][ T6087] usb usb8: usbfs: process 6087 (syz.9.7041) did not claim interface 0 before use [ 2333.992402][T20670] cm6533_jd 0003:0D8C:0022.004E: unknown main item tag 0x0 [ 2334.007097][T20670] cm6533_jd 0003:0D8C:0022.004E: unknown main item tag 0x0 [ 2334.053784][T25828] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2334.065209][T20670] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.004E/input/input145 [ 2334.067509][T25828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.124595][T20670] cm6533_jd 0003:0D8C:0022.004E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 2334.171455][T25828] usb 9-1: config 0 descriptor?? [ 2334.201396][T20670] usb 6-1: USB disconnect, device number 57 [ 2334.358981][ T6090] fido_id[6090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2334.469430][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2334.481432][ T5923] IPVS: starting estimator thread 0... [ 2334.531938][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.574044][ T6094] IPVS: using max 28 ests per chain, 67200 per kthread [ 2334.914974][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7044'. [ 2335.949785][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7046'. [ 2336.014643][ T6109] erspan0: entered promiscuous mode [ 2336.046818][ T6109] macvtap0: entered promiscuous mode [ 2336.070204][ T6109] macvtap0: entered allmulticast mode [ 2336.087898][ T6109] erspan0: entered allmulticast mode [ 2336.139522][ T6110] erspan0: left allmulticast mode [ 2336.196101][ T6110] erspan0: left promiscuous mode [ 2336.776044][T25828] usb 9-1: Cannot read MAC address [ 2336.860494][T25828] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2336.882381][ T5927] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2336.989360][T25828] usb 9-1: USB disconnect, device number 84 [ 2337.104499][ T5927] usb 10-1: too many configurations: 253, using maximum allowed: 8 [ 2337.177269][ T6123] fuse: Unknown parameter 'r:Iode' [ 2337.190952][ T5927] usb 10-1: string descriptor 0 read error: -71 [ 2337.200639][ T6124] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2337.233597][ T5927] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2337.262084][ T5927] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.304954][ T5927] usb 10-1: can't set config #1, error -71 [ 2337.338490][ T5927] usb 10-1: USB disconnect, device number 28 [ 2338.207628][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2338.852551][T25828] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2339.011760][T25828] usb 6-1: Using ep0 maxpacket: 16 [ 2339.036764][T25828] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2339.055715][T25828] usb 6-1: config 0 has no interface number 0 [ 2339.073768][ T6158] program syz.7.7057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2339.102924][T25828] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2339.129355][T25828] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2339.168089][T25828] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2339.222007][T25828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.262147][T25828] usb 6-1: config 0 descriptor?? [ 2339.662077][T19702] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2339.709692][T25828] usbhid 6-1:0.1: can't add hid device: -71 [ 2339.715962][T25828] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 2339.738353][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7059'. [ 2339.760837][T25828] usb 6-1: USB disconnect, device number 58 [ 2339.872994][T19702] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2339.881172][T19702] usb 10-1: config 0 has no interface number 0 [ 2339.923251][T19702] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2339.959328][T19702] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.022302][T19702] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2340.064378][T19702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.092726][T19702] usb 10-1: config 0 descriptor?? [ 2340.383212][ T6189] sg_write: data in/out 268435436/14 bytes for SCSI command 0x0-- guessing data in; [ 2340.383212][ T6189] program syz.7.7066 not setting count and/or reply_len properly [ 2340.575605][T19702] input: HID 04d9:a055 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:04D9:A055.004F/input/input147 [ 2340.699609][T19702] holtek_kbd 0003:04D9:A055.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.9-1/input1 [ 2340.777882][T19702] usb 10-1: USB disconnect, device number 29 [ 2340.784754][ T5927] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2340.959753][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2340.975283][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 2340.983179][ T5927] usb 9-1: config 166 has an invalid interface number: 177 but max is 1 [ 2340.992016][ T5927] usb 9-1: config 166 has an invalid interface number: 34 but max is 1 [ 2341.000349][ T5927] usb 9-1: config 166 has no interface number 0 [ 2341.077038][ T5927] usb 9-1: config 166 has no interface number 1 [ 2341.092336][ T5927] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2341.118196][ T5927] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2341.325854][ T5927] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2341.365665][ T5927] usb 9-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2341.383580][ T5927] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2341.408564][ T5927] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2341.463770][ T5927] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2341.500069][ T5927] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2341.544906][ T5927] usb 9-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2341.571764][ T5927] usb 9-1: config 166 interface 177 has no altsetting 0 [ 2341.579037][ T5927] usb 9-1: config 166 interface 34 has no altsetting 0 [ 2341.603626][ T5927] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2341.621686][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.630002][ T5927] usb 9-1: Product: syz [ 2341.640189][ T5927] usb 9-1: Manufacturer: syz [ 2341.645390][ T5927] usb 9-1: SerialNumber: syz [ 2341.903038][ T5927] ums-realtek 9-1:166.177: USB Mass Storage device detected [ 2342.244641][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2342.257186][ T5927] ums-realtek 9-1:166.34: USB Mass Storage device detected [ 2342.280099][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2342.639835][ T5927] ums-realtek 9-1:166.34: probe with driver ums-realtek failed with error -5 [ 2342.691147][ T5927] usb 9-1: Found UVC 0.00 device syz (0bda:0138) [ 2342.722656][ T5927] usb 9-1: No valid video chain found. [ 2342.794404][ T5927] usb 9-1: USB disconnect, device number 85 [ 2344.492316][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7080'. [ 2344.550638][ T6247] syz_tun: entered promiscuous mode [ 2344.679000][ T6247] syz_tun: left promiscuous mode [ 2345.091862][T20670] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2345.307465][T20670] usb 10-1: Using ep0 maxpacket: 8 [ 2345.320003][T20670] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2345.331928][T20670] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.374993][T20670] usb 10-1: Product: syz [ 2345.379327][T20670] usb 10-1: Manufacturer: syz [ 2345.408276][T20670] usb 10-1: SerialNumber: syz [ 2345.473045][T20670] usb 10-1: config 0 descriptor?? [ 2345.709031][T20670] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2346.190771][ T30] audit: type=1326 audit(1749948141.488:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.8.7088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1fc18e929 code=0x0 [ 2346.265415][ T30] audit: type=1326 audit(1749948141.538:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.304414][ T30] audit: type=1326 audit(1749948141.568:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.334654][ T30] audit: type=1326 audit(1749948141.568:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.360829][ T30] audit: type=1326 audit(1749948141.568:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.383209][ C0] vkms_vblank_simulate: vblank timer overrun [ 2346.390228][T19702] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 2346.404032][ T30] audit: type=1326 audit(1749948141.568:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.427470][ T30] audit: type=1326 audit(1749948141.568:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.449807][ C0] vkms_vblank_simulate: vblank timer overrun [ 2346.458269][ T30] audit: type=1326 audit(1749948141.568:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.510782][ T30] audit: type=1326 audit(1749948141.568:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.533090][ C0] vkms_vblank_simulate: vblank timer overrun [ 2346.542412][T19702] usb 5-1: device descriptor read/64, error -71 [ 2346.563104][ T30] audit: type=1326 audit(1749948141.638:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.5.7089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5a18e929 code=0x7ffc0000 [ 2346.585609][ C0] vkms_vblank_simulate: vblank timer overrun [ 2346.781695][T19702] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2346.926527][T19702] usb 5-1: device descriptor read/64, error -71 [ 2347.042512][ T5923] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 2347.061910][T19702] usb usb5-port1: attempt power cycle [ 2347.209789][ T5923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2347.244719][ T5923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2347.284081][ T5923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2347.297626][ T5923] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 2347.316807][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2347.336916][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2347.345269][ T5923] usb 6-1: SerialNumber: syz [ 2347.364081][ T6286] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2347.372019][ T6286] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2347.387617][ T5923] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 2347.431953][T19702] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 2347.462675][T19702] usb 5-1: device descriptor read/8, error -71 [ 2347.511805][T19701] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2347.582765][T20670] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2347.604946][T20670] usb 10-1: USB disconnect, device number 30 [ 2347.695244][T19701] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2347.709857][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.725227][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2347.733442][T19701] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2347.743082][T19702] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 2347.754881][T19701] usb 9-1: config 1 has no interface number 0 [ 2347.762332][T19701] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2347.773684][T19701] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2347.783824][T19702] usb 5-1: device descriptor read/8, error -71 [ 2347.794070][T19701] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2347.806716][T19701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2347.818362][ T6306] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7092'. [ 2347.843003][T19701] usb 9-1: Product: syz [ 2347.847533][T19701] usb 9-1: Manufacturer: syz [ 2347.876777][T19701] usb 9-1: SerialNumber: syz [ 2347.896313][T19702] usb usb5-port1: unable to enumerate USB device [ 2349.722336][T19701] cdc_ncm 9-1:1.1: failed GET_NTB_PARAMETERS [ 2349.728548][T19701] cdc_ncm 9-1:1.1: bind() failure [ 2349.778865][T19701] usb 9-1: USB disconnect, device number 86 [ 2349.881136][ T5923] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 2349.942452][ T6326] TCP: TCP_TX_DELAY enabled [ 2350.060743][ T5923] usb 6-1: USB disconnect, device number 59 [ 2350.080679][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.090263][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.671762][T20670] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2351.086737][T20670] usb 6-1: config 0 has no interfaces? [ 2351.118963][T20670] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2351.133264][T20670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.141448][T20670] usb 6-1: Product: syz [ 2351.336889][T20670] usb 6-1: Manufacturer: syz [ 2351.366279][T20670] usb 6-1: SerialNumber: syz [ 2351.385002][T20670] usb 6-1: config 0 descriptor?? [ 2351.530849][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2351.530877][ T30] audit: type=1326 audit(1749948146.798:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.618655][ T30] audit: type=1326 audit(1749948146.798:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.802359][ T30] audit: type=1326 audit(1749948146.808:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.843620][ T6353] misc userio: No port type given on /dev/userio [ 2351.870640][ T30] audit: type=1326 audit(1749948146.808:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.901161][ T30] audit: type=1326 audit(1749948146.808:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.932145][ T30] audit: type=1326 audit(1749948146.808:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.961794][ T30] audit: type=1326 audit(1749948146.808:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2351.985913][ T6354] misc userio: The device must be registered before sending interrupts [ 2352.005910][ T30] audit: type=1326 audit(1749948146.808:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2352.138303][T14004] Bluetooth: hci4: command 0x0406 tx timeout [ 2352.216749][ T30] audit: type=1326 audit(1749948146.808:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2352.255805][ T30] audit: type=1326 audit(1749948146.808:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.7.7110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa70498e929 code=0x7ffc0000 [ 2352.493297][ T6359] tipc: Failed to remove unknown binding: 66,3,3/255:378899369/378899370 [ 2354.769340][T19701] usb 6-1: USB disconnect, device number 60 [ 2354.836496][ T6390] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 2355.461988][T19701] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2355.665174][T19701] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2355.712140][T19701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2355.767233][T19701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2355.798084][T19701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2355.863018][ T6411] netlink: 'syz.9.7126': attribute type 12 has an invalid length. [ 2355.879782][T19701] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2355.912073][T19701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.957267][T19701] usb 5-1: config 0 descriptor?? [ 2356.398437][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2356.412215][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.433244][T19702] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 2356.587495][T19701] hid-picolcd 0003:04D8:C002.0050: No report with id 0x11 found [ 2356.669432][T19702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2356.751002][T19701] usb 5-1: USB disconnect, device number 87 [ 2356.788564][T19702] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2356.803649][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2356.877648][T19702] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2356.895250][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.918811][T19702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2356.936226][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2356.946888][T19702] usb 6-1: Product: syz [ 2356.958926][T19702] usb 6-1: Manufacturer: syz [ 2356.969988][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.978930][T19702] usb 6-1: SerialNumber: syz [ 2357.098350][ T880] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2357.496444][ T6433] input: syz1 as /devices/virtual/input/input148 [ 2357.598070][ T6436] xt_recent: Unsupported userspace flags (000000de) [ 2357.793014][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7135'. [ 2358.879711][T25577] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2359.171701][T25577] usb 5-1: Using ep0 maxpacket: 32 [ 2359.282148][T19702] usb 6-1: cannot find UAC_HEADER [ 2359.296818][T25577] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2359.430250][T25577] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2359.464338][T19702] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2359.487701][T19702] usb 6-1: USB disconnect, device number 61 [ 2359.497474][T25577] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2359.507909][T20410] udevd[20410]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2359.535104][T25577] usb 5-1: Product: syz [ 2359.559715][T25577] usb 5-1: Manufacturer: syz [ 2359.573864][T25577] usb 5-1: SerialNumber: syz [ 2359.833040][T25577] usb 5-1: config 0 descriptor?? [ 2359.852786][ T6459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2359.867867][T25577] hub 5-1:0.0: bad descriptor, ignoring hub [ 2359.878243][T25577] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2361.061614][T19702] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2361.153552][T25577] usb 5-1: USB disconnect, device number 88 [ 2361.222498][T19702] usb 9-1: Using ep0 maxpacket: 32 [ 2361.254323][T19702] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 2361.263664][T19702] usb 9-1: config 0 has no interface number 0 [ 2361.269826][T19702] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2361.422091][T19702] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2361.454286][T19702] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2361.515268][T19702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.533276][T19702] usb 9-1: Product: syz [ 2361.537533][T19702] usb 9-1: Manufacturer: syz [ 2361.547084][T19702] usb 9-1: SerialNumber: syz [ 2361.580683][T19702] usb 9-1: config 0 descriptor?? [ 2361.698506][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7152'. [ 2361.909832][T19702] radio-si470x 9-1:0.35: this is not a si470x device. [ 2361.917658][T25577] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2362.010852][T19702] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 2362.039191][T19702] usb 9-1: USB disconnect, device number 88 [ 2362.115847][T25577] usb 6-1: Using ep0 maxpacket: 8 [ 2362.135417][T25577] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2362.197379][T25577] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2362.333197][ T6516] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7155'. [ 2362.335504][T25577] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2362.384559][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7154'. [ 2362.424989][T25577] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2362.528226][T25577] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2362.586410][T25577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.097584][T25577] usb 6-1: usb_control_msg returned -71 [ 2363.135406][T25577] usbtmc 6-1:16.0: can't read capabilities [ 2363.276448][T25577] usb 6-1: USB disconnect, device number 62 [ 2363.342982][ T6523] loop6: detected capacity change from 0 to 63 [ 2363.388905][T20428] Buffer I/O error on dev loop6, logical block 0, async page read [ 2363.434954][T20428] Buffer I/O error on dev loop6, logical block 0, async page read [ 2363.480549][T20428] Buffer I/O error on dev loop6, logical block 0, async page read [ 2363.520874][T20428] Buffer I/O error on dev loop6, logical block 0, async page read [ 2363.575320][T20428] Buffer I/O error on dev loop6, logical block 0, async page read [ 2364.283021][ T6537] fuse: Unknown parameter '' [ 2364.313019][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7164'. [ 2364.376642][ T6545] gretap0: entered promiscuous mode [ 2364.394964][ T6545] gretap0: left promiscuous mode [ 2364.656875][T25828] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2364.842122][ T5923] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2364.852223][T25828] usb 9-1: Using ep0 maxpacket: 8 [ 2364.859142][T25828] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2364.872227][T25828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2364.884651][T25828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2364.900567][T25828] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2364.918147][T25828] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2364.928104][T25828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.995248][ T5923] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2365.015670][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2365.067279][ T6554] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 2365.090688][ T6554] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 2365.115450][ T5923] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2365.128180][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2365.141142][ T5923] usb 6-1: Product: syz [ 2365.146146][ T5923] usb 6-1: Manufacturer: syz [ 2365.157632][T25828] usb 9-1: GET_CAPABILITIES returned 0 [ 2365.163851][T25828] usbtmc 9-1:16.0: can't read capabilities [ 2365.171606][ T5923] usb 6-1: SerialNumber: syz [ 2365.200543][ T5923] usb 6-1: config 0 descriptor?? [ 2365.249968][ T5923] usb 6-1: selecting invalid altsetting 0 [ 2365.451587][T25577] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2365.546221][T20670] usb 9-1: USB disconnect, device number 89 [ 2365.601354][ T5923] usb 6-1: USB disconnect, device number 63 [ 2365.652610][T25577] usb 10-1: device descriptor read/64, error -71 [ 2365.922463][T25577] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2366.071666][T25577] usb 10-1: device descriptor read/64, error -71 [ 2366.179009][ T6567] io-wq is not configured for unbound workers [ 2366.182334][T25577] usb usb10-port1: attempt power cycle [ 2366.572039][T25577] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 2366.612503][T25577] usb 10-1: device descriptor read/8, error -71 [ 2366.927767][T25577] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2367.028353][T25577] usb 10-1: device descriptor read/8, error -71 [ 2367.190044][T25577] usb usb10-port1: unable to enumerate USB device [ 2368.326137][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7178'. [ 2368.392204][ T6596] [ 2368.394603][ T6596] ===================================================== [ 2368.401638][ T6596] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2368.409133][ T6596] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted [ 2368.416255][ T6596] ----------------------------------------------------- [ 2368.423213][ T6596] syz.7.7178/6596 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2368.430885][ T6596] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 2368.439560][ T6596] [ 2368.439560][ T6596] and this task is already holding: [ 2368.446948][ T6596] ffff88804cbebba0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2368.455611][ T6596] which would create a new lock dependency: [ 2368.461517][ T6596] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2368.469159][ T6596] [ 2368.469159][ T6596] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2368.478639][ T6596] (&dev->event_lock#2){..-.}-{3:3} [ 2368.478676][ T6596] [ 2368.478676][ T6596] ... which became SOFTIRQ-irq-safe at: [ 2368.491603][ T6596] lock_acquire+0x120/0x360 [ 2368.496243][ T6596] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2368.501561][ T6596] input_event+0x7a/0xc0 [ 2368.505933][ T6596] xpad360_process_packet+0x1fe/0xb30 [ 2368.511421][ T6596] xpad_irq_in+0x1638/0x26e0 [ 2368.516131][ T6596] __usb_hcd_giveback_urb+0x41a/0x690 [ 2368.521706][ T6596] dummy_timer+0x862/0x4550 [ 2368.526341][ T6596] __hrtimer_run_queues+0x52c/0xc60 [ 2368.531659][ T6596] hrtimer_run_softirq+0x187/0x2b0 [ 2368.536888][ T6596] handle_softirqs+0x286/0x870 [ 2368.541758][ T6596] __irq_exit_rcu+0xca/0x1f0 [ 2368.546482][ T6596] irq_exit_rcu+0x9/0x30 [ 2368.550829][ T6596] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2368.556569][ T6596] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2368.562669][ T6596] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2368.568502][ T6596] rcu_preempt_deferred_qs_irqrestore+0x874/0xc40 [ 2368.575040][ T6596] rcu_read_unlock_special+0x3fe/0x4c0 [ 2368.580622][ T6596] __rcu_read_unlock+0x84/0xe0 [ 2368.585496][ T6596] unwind_next_frame+0x19ae/0x2390 [ 2368.590742][ T6596] arch_stack_walk+0x11c/0x150 [ 2368.595607][ T6596] stack_trace_save+0x9c/0xe0 [ 2368.600393][ T6596] kasan_save_track+0x3e/0x80 [ 2368.605194][ T6596] __kasan_kmalloc+0x93/0xb0 [ 2368.609897][ T6596] __kmalloc_cache_noprof+0x230/0x3d0 [ 2368.615416][ T6596] kmem_cache_free+0x166/0x400 [ 2368.620277][ T6596] exit_mmap+0x53f/0xb50 [ 2368.624617][ T6596] __mmput+0x118/0x420 [ 2368.628782][ T6596] exec_mmap+0x6ac/0x7d0 [ 2368.633131][ T6596] begin_new_exec+0x129c/0x2120 [ 2368.638089][ T6596] load_elf_binary+0x96a/0x2790 [ 2368.643040][ T6596] bprm_execve+0x999/0x1450 [ 2368.647646][ T6596] do_execveat_common+0x510/0x6a0 [ 2368.652769][ T6596] __x64_sys_execve+0x94/0xb0 [ 2368.657547][ T6596] do_syscall_64+0xfa/0x3b0 [ 2368.662143][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2368.668145][ T6596] [ 2368.668145][ T6596] to a SOFTIRQ-irq-unsafe lock: [ 2368.675172][ T6596] (tasklist_lock){.+.+}-{3:3} [ 2368.675201][ T6596] [ 2368.675201][ T6596] ... which became SOFTIRQ-irq-unsafe at: [ 2368.687847][ T6596] ... [ 2368.687857][ T6596] lock_acquire+0x120/0x360 [ 2368.695050][ T6596] _raw_read_lock+0x36/0x50 [ 2368.699653][ T6596] __do_wait+0xde/0x740 [ 2368.703905][ T6596] do_wait+0x1f8/0x520 [ 2368.708077][ T6596] kernel_wait+0xab/0x170 [ 2368.712502][ T6596] call_usermodehelper_exec_work+0xbe/0x230 [ 2368.718527][ T6596] process_scheduled_works+0xae1/0x17b0 [ 2368.724183][ T6596] worker_thread+0x8a0/0xda0 [ 2368.728864][ T6596] kthread+0x70e/0x8a0 [ 2368.733026][ T6596] ret_from_fork+0x3fc/0x770 [ 2368.737711][ T6596] ret_from_fork_asm+0x1a/0x30 [ 2368.742578][ T6596] [ 2368.742578][ T6596] other info that might help us debug this: [ 2368.742578][ T6596] [ 2368.752826][ T6596] Chain exists of: [ 2368.752826][ T6596] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 2368.752826][ T6596] [ 2368.766049][ T6596] Possible interrupt unsafe locking scenario: [ 2368.766049][ T6596] [ 2368.774372][ T6596] CPU0 CPU1 [ 2368.779737][ T6596] ---- ---- [ 2368.785109][ T6596] lock(tasklist_lock); [ 2368.789364][ T6596] local_irq_disable(); [ 2368.796120][ T6596] lock(&dev->event_lock#2); [ 2368.803350][ T6596] lock(&f_owner->lock); [ 2368.810232][ T6596] [ 2368.813692][ T6596] lock(&dev->event_lock#2); [ 2368.818560][ T6596] [ 2368.818560][ T6596] *** DEADLOCK *** [ 2368.818560][ T6596] [ 2368.826816][ T6596] 5 locks held by syz.7.7178/6596: [ 2368.831936][ T6596] #0: ffff888064c38428 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2368.841113][ T6596] #1: ffff88807d26eb48 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470 [ 2368.851790][ T6596] #2: ffffffff99af8330 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x735/0x1a80 [ 2368.861298][ T6596] #3: ffff88807e0a01c8 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 2368.870980][ T6596] #4: ffff88804cbebba0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2368.880144][ T6596] [ 2368.880144][ T6596] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2368.890651][ T6596] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2368.896499][ T6596] IN-SOFTIRQ-W at: [ 2368.900744][ T6596] lock_acquire+0x120/0x360 [ 2368.907433][ T6596] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2368.914815][ T6596] input_event+0x7a/0xc0 [ 2368.921267][ T6596] xpad360_process_packet+0x1fe/0xb30 [ 2368.928835][ T6596] xpad_irq_in+0x1638/0x26e0 [ 2368.935622][ T6596] __usb_hcd_giveback_urb+0x41a/0x690 [ 2368.943179][ T6596] dummy_timer+0x862/0x4550 [ 2368.949862][ T6596] __hrtimer_run_queues+0x52c/0xc60 [ 2368.957249][ T6596] hrtimer_run_softirq+0x187/0x2b0 [ 2368.964536][ T6596] handle_softirqs+0x286/0x870 [ 2368.971495][ T6596] __irq_exit_rcu+0xca/0x1f0 [ 2368.978468][ T6596] irq_exit_rcu+0x9/0x30 [ 2368.984895][ T6596] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2368.992719][ T6596] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2369.000884][ T6596] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2369.008797][ T6596] rcu_preempt_deferred_qs_irqrestore+0x874/0xc40 [ 2369.017400][ T6596] rcu_read_unlock_special+0x3fe/0x4c0 [ 2369.025045][ T6596] __rcu_read_unlock+0x84/0xe0 [ 2369.031993][ T6596] unwind_next_frame+0x19ae/0x2390 [ 2369.039382][ T6596] arch_stack_walk+0x11c/0x150 [ 2369.046327][ T6596] stack_trace_save+0x9c/0xe0 [ 2369.053186][ T6596] kasan_save_track+0x3e/0x80 [ 2369.060055][ T6596] __kasan_kmalloc+0x93/0xb0 [ 2369.066828][ T6596] __kmalloc_cache_noprof+0x230/0x3d0 [ 2369.074383][ T6596] kmem_cache_free+0x166/0x400 [ 2369.081323][ T6596] exit_mmap+0x53f/0xb50 [ 2369.087748][ T6596] __mmput+0x118/0x420 [ 2369.094009][ T6596] exec_mmap+0x6ac/0x7d0 [ 2369.100452][ T6596] begin_new_exec+0x129c/0x2120 [ 2369.107487][ T6596] load_elf_binary+0x96a/0x2790 [ 2369.114523][ T6596] bprm_execve+0x999/0x1450 [ 2369.121214][ T6596] do_execveat_common+0x510/0x6a0 [ 2369.128421][ T6596] __x64_sys_execve+0x94/0xb0 [ 2369.135286][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.141967][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.150036][ T6596] INITIAL USE at: [ 2369.154197][ T6596] lock_acquire+0x120/0x360 [ 2369.160820][ T6596] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2369.168121][ T6596] input_inject_event+0xab/0x320 [ 2369.175163][ T6596] kbd_led_trigger_activate+0xbc/0x100 [ 2369.182724][ T6596] led_trigger_set+0x52a/0x950 [ 2369.189580][ T6596] led_trigger_set_default+0x260/0x2a0 [ 2369.197142][ T6596] led_classdev_register_ext+0x73d/0x930 [ 2369.204870][ T6596] input_leds_connect+0x517/0x790 [ 2369.211989][ T6596] input_register_device+0xceb/0x10b0 [ 2369.219463][ T6596] atkbd_connect+0x70e/0x9c0 [ 2369.226154][ T6596] serio_driver_probe+0x82/0xa0 [ 2369.233096][ T6596] really_probe+0x26a/0x9a0 [ 2369.239707][ T6596] __driver_probe_device+0x18c/0x2f0 [ 2369.247116][ T6596] driver_probe_device+0x4f/0x430 [ 2369.254249][ T6596] __driver_attach+0x452/0x700 [ 2369.261128][ T6596] bus_for_each_dev+0x230/0x2b0 [ 2369.268081][ T6596] serio_handle_event+0x1a2/0x860 [ 2369.275209][ T6596] process_scheduled_works+0xae1/0x17b0 [ 2369.282857][ T6596] worker_thread+0x8a0/0xda0 [ 2369.289537][ T6596] kthread+0x70e/0x8a0 [ 2369.295703][ T6596] ret_from_fork+0x3fc/0x770 [ 2369.302530][ T6596] ret_from_fork_asm+0x1a/0x30 [ 2369.309401][ T6596] } [ 2369.312170][ T6596] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2369.321487][ T6596] -> (&client->buffer_lock){....}-{3:3} { [ 2369.327527][ T6596] INITIAL USE at: [ 2369.331606][ T6596] lock_acquire+0x120/0x360 [ 2369.338139][ T6596] _raw_spin_lock+0x2e/0x40 [ 2369.344562][ T6596] evdev_handle_get_val+0x70/0x9f0 [ 2369.351598][ T6596] evdev_ioctl_handler+0x1202/0x1f10 [ 2369.358799][ T6596] __se_sys_ioctl+0xf9/0x170 [ 2369.365316][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.371745][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.379571][ T6596] } [ 2369.382244][ T6596] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 2369.390597][ T6596] ... acquired at: [ 2369.394574][ T6596] lock_acquire+0x120/0x360 [ 2369.399275][ T6596] _raw_spin_lock+0x2e/0x40 [ 2369.403965][ T6596] evdev_handle_get_val+0x70/0x9f0 [ 2369.409259][ T6596] evdev_ioctl_handler+0x1202/0x1f10 [ 2369.414721][ T6596] __se_sys_ioctl+0xf9/0x170 [ 2369.419495][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.424175][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.430246][ T6596] [ 2369.432582][ T6596] -> (&new->fa_lock){....}-{3:3} { [ 2369.437824][ T6596] INITIAL USE at: [ 2369.441825][ T6596] lock_acquire+0x120/0x360 [ 2369.448103][ T6596] _raw_write_lock_irq+0xa2/0xf0 [ 2369.454800][ T6596] fasync_remove_entry+0xf1/0x1c0 [ 2369.461584][ T6596] __fput+0x89f/0xa70 [ 2369.467327][ T6596] task_work_run+0x1d1/0x260 [ 2369.473664][ T6596] exit_to_user_mode_loop+0xec/0x110 [ 2369.480696][ T6596] do_syscall_64+0x2bd/0x3b0 [ 2369.487155][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.494794][ T6596] INITIAL READ USE at: [ 2369.499214][ T6596] lock_acquire+0x120/0x360 [ 2369.505900][ T6596] _raw_read_lock_irqsave+0xaf/0x100 [ 2369.513369][ T6596] kill_fasync+0x199/0x4d0 [ 2369.519966][ T6596] snd_fasync_work_fn+0x162/0x210 [ 2369.527179][ T6596] process_scheduled_works+0xae1/0x17b0 [ 2369.534911][ T6596] worker_thread+0x8a0/0xda0 [ 2369.541688][ T6596] kthread+0x70e/0x8a0 [ 2369.547951][ T6596] ret_from_fork+0x3fc/0x770 [ 2369.554724][ T6596] ret_from_fork_asm+0x1a/0x30 [ 2369.561675][ T6596] } [ 2369.564275][ T6596] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2369.573044][ T6596] ... acquired at: [ 2369.576933][ T6596] lock_acquire+0x120/0x360 [ 2369.581632][ T6596] _raw_read_lock_irqsave+0xaf/0x100 [ 2369.587122][ T6596] kill_fasync+0x199/0x4d0 [ 2369.591722][ T6596] evdev_pass_values+0x627/0xbd0 [ 2369.596835][ T6596] evdev_events+0x1e6/0x340 [ 2369.601524][ T6596] input_pass_values+0x285/0x890 [ 2369.606662][ T6596] input_event_dispose+0x330/0x6b0 [ 2369.612056][ T6596] input_inject_event+0x1fe/0x320 [ 2369.617284][ T6596] evdev_write+0x2fc/0x480 [ 2369.621876][ T6596] vfs_write+0x27b/0xa90 [ 2369.626309][ T6596] ksys_write+0x145/0x250 [ 2369.630807][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.635484][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.641566][ T6596] [ 2369.643905][ T6596] -> (&f_owner->lock){....}-{3:3} { [ 2369.649132][ T6596] INITIAL USE at: [ 2369.653033][ T6596] lock_acquire+0x120/0x360 [ 2369.665927][ T6596] _raw_write_lock_irq+0xa2/0xf0 [ 2369.672605][ T6596] __f_setown+0x67/0x370 [ 2369.678428][ T6596] fcntl_dirnotify+0x3d6/0x690 [ 2369.684771][ T6596] do_fcntl+0x6d0/0x1910 [ 2369.690596][ T6596] __se_sys_fcntl+0xc8/0x150 [ 2369.696761][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.702832][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.710296][ T6596] INITIAL READ USE at: [ 2369.714656][ T6596] lock_acquire+0x120/0x360 [ 2369.721254][ T6596] _raw_read_lock_irqsave+0xaf/0x100 [ 2369.728560][ T6596] send_sigio+0x38/0x370 [ 2369.734901][ T6596] dnotify_handle_event+0x169/0x440 [ 2369.742122][ T6596] fsnotify+0x1814/0x1a80 [ 2369.748447][ T6596] path_openat+0x171e/0x3830 [ 2369.755044][ T6596] do_filp_open+0x1fa/0x410 [ 2369.761571][ T6596] do_sys_openat2+0x121/0x1c0 [ 2369.768291][ T6596] __x64_sys_openat+0x138/0x170 [ 2369.775155][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.781760][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.789694][ T6596] } [ 2369.792194][ T6596] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2369.801049][ T6596] ... acquired at: [ 2369.804860][ T6596] lock_acquire+0x120/0x360 [ 2369.809554][ T6596] _raw_read_lock_irqsave+0xaf/0x100 [ 2369.815027][ T6596] send_sigio+0x38/0x370 [ 2369.819456][ T6596] kill_fasync+0x24d/0x4d0 [ 2369.824088][ T6596] lease_break_callback+0x26/0x30 [ 2369.829296][ T6596] __break_lease+0x6a2/0x1620 [ 2369.834170][ T6596] vfs_truncate+0x428/0x520 [ 2369.838878][ T6596] do_sys_truncate+0xdb/0x190 [ 2369.843734][ T6596] __x64_sys_truncate+0x5b/0x70 [ 2369.848762][ T6596] do_syscall_64+0xfa/0x3b0 [ 2369.853441][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.859513][ T6596] [ 2369.861838][ T6596] [ 2369.861838][ T6596] the dependencies between the lock to be acquired [ 2369.861849][ T6596] and SOFTIRQ-irq-unsafe lock: [ 2369.875376][ T6596] -> (tasklist_lock){.+.+}-{3:3} { [ 2369.880525][ T6596] HARDIRQ-ON-R at: [ 2369.884522][ T6596] lock_acquire+0x120/0x360 [ 2369.890713][ T6596] _raw_read_lock+0x36/0x50 [ 2369.896908][ T6596] __do_wait+0xde/0x740 [ 2369.902724][ T6596] do_wait+0x1f8/0x520 [ 2369.908484][ T6596] kernel_wait+0xab/0x170 [ 2369.914475][ T6596] call_usermodehelper_exec_work+0xbe/0x230 [ 2369.922040][ T6596] process_scheduled_works+0xae1/0x17b0 [ 2369.929272][ T6596] worker_thread+0x8a0/0xda0 [ 2369.935513][ T6596] kthread+0x70e/0x8a0 [ 2369.941242][ T6596] ret_from_fork+0x3fc/0x770 [ 2369.947491][ T6596] ret_from_fork_asm+0x1a/0x30 [ 2369.953917][ T6596] SOFTIRQ-ON-R at: [ 2369.957904][ T6596] lock_acquire+0x120/0x360 [ 2369.964081][ T6596] _raw_read_lock+0x36/0x50 [ 2369.970426][ T6596] __do_wait+0xde/0x740 [ 2369.976425][ T6596] do_wait+0x1f8/0x520 [ 2369.982177][ T6596] kernel_wait+0xab/0x170 [ 2369.988164][ T6596] call_usermodehelper_exec_work+0xbe/0x230 [ 2369.995719][ T6596] process_scheduled_works+0xae1/0x17b0 [ 2370.002933][ T6596] worker_thread+0x8a0/0xda0 [ 2370.009176][ T6596] kthread+0x70e/0x8a0 [ 2370.014943][ T6596] ret_from_fork+0x3fc/0x770 [ 2370.021207][ T6596] ret_from_fork_asm+0x1a/0x30 [ 2370.027632][ T6596] INITIAL USE at: [ 2370.031540][ T6596] lock_acquire+0x120/0x360 [ 2370.037728][ T6596] _raw_write_lock_irq+0xa2/0xf0 [ 2370.044248][ T6596] copy_process+0x224f/0x3c00 [ 2370.050494][ T6596] kernel_clone+0x21e/0x870 [ 2370.056564][ T6596] user_mode_thread+0xdd/0x140 [ 2370.062910][ T6596] rest_init+0x23/0x300 [ 2370.068632][ T6596] start_kernel+0x47d/0x500 [ 2370.074701][ T6596] x86_64_start_reservations+0x24/0x30 [ 2370.081743][ T6596] x86_64_start_kernel+0x143/0x1c0 [ 2370.088459][ T6596] common_startup_64+0x13e/0x147 [ 2370.094971][ T6596] INITIAL READ USE at: [ 2370.099332][ T6596] lock_acquire+0x120/0x360 [ 2370.105845][ T6596] _raw_read_lock+0x36/0x50 [ 2370.112356][ T6596] __do_wait+0xde/0x740 [ 2370.118525][ T6596] do_wait+0x1f8/0x520 [ 2370.124650][ T6596] kernel_wait+0xab/0x170 [ 2370.130989][ T6596] call_usermodehelper_exec_work+0xbe/0x230 [ 2370.138893][ T6596] process_scheduled_works+0xae1/0x17b0 [ 2370.146458][ T6596] worker_thread+0x8a0/0xda0 [ 2370.153055][ T6596] kthread+0x70e/0x8a0 [ 2370.159138][ T6596] ret_from_fork+0x3fc/0x770 [ 2370.165743][ T6596] ret_from_fork_asm+0x1a/0x30 [ 2370.172601][ T6596] } [ 2370.175103][ T6596] ... key at: [] tasklist_lock+0x18/0x40 [ 2370.182839][ T6596] ... acquired at: [ 2370.186640][ T6596] lock_acquire+0x120/0x360 [ 2370.191326][ T6596] _raw_read_lock+0x36/0x50 [ 2370.196014][ T6596] send_sigio+0x101/0x370 [ 2370.200532][ T6596] dnotify_handle_event+0x169/0x440 [ 2370.205917][ T6596] fsnotify+0x1814/0x1a80 [ 2370.210426][ T6596] vfs_mkdir+0x477/0x510 [ 2370.214857][ T6596] do_mkdirat+0x247/0x590 [ 2370.219459][ T6596] __x64_sys_mkdirat+0x87/0xa0 [ 2370.224415][ T6596] do_syscall_64+0xfa/0x3b0 [ 2370.229096][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.235168][ T6596] [ 2370.237492][ T6596] [ 2370.237492][ T6596] stack backtrace: [ 2370.243392][ T6596] CPU: 0 UID: 0 PID: 6596 Comm: syz.7.7178 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2370.243414][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2370.243425][ T6596] Call Trace: [ 2370.243433][ T6596] [ 2370.243440][ T6596] dump_stack_lvl+0x189/0x250 [ 2370.243470][ T6596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2370.243496][ T6596] ? __pfx__printk+0x10/0x10 [ 2370.243517][ T6596] validate_chain+0x1f05/0x2140 [ 2370.243541][ T6596] __lock_acquire+0xab9/0xd20 [ 2370.243566][ T6596] ? send_sigio+0x101/0x370 [ 2370.243587][ T6596] lock_acquire+0x120/0x360 [ 2370.243609][ T6596] ? send_sigio+0x101/0x370 [ 2370.243631][ T6596] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2370.243654][ T6596] ? dnotify_handle_event+0x62/0x440 [ 2370.243676][ T6596] _raw_read_lock+0x36/0x50 [ 2370.243698][ T6596] ? send_sigio+0x101/0x370 [ 2370.243718][ T6596] send_sigio+0x101/0x370 [ 2370.243740][ T6596] dnotify_handle_event+0x169/0x440 [ 2370.243765][ T6596] fsnotify+0x1814/0x1a80 [ 2370.243786][ T6596] ? fsnotify+0x735/0x1a80 [ 2370.243800][ T6596] ? __pfx_fsnotify+0x10/0x10 [ 2370.243817][ T6596] ? inc_nlink+0x4d/0x150 [ 2370.243835][ T6596] vfs_mkdir+0x477/0x510 [ 2370.243862][ T6596] do_mkdirat+0x247/0x590 [ 2370.243887][ T6596] ? __pfx_do_mkdirat+0x10/0x10 [ 2370.243912][ T6596] ? getname_flags+0x1e5/0x540 [ 2370.243932][ T6596] __x64_sys_mkdirat+0x87/0xa0 [ 2370.243957][ T6596] do_syscall_64+0xfa/0x3b0 [ 2370.243972][ T6596] ? lockdep_hardirqs_on+0x9c/0x150 [ 2370.243995][ T6596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.244011][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 2370.244029][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.244046][ T6596] RIP: 0033:0x7fa70498e929 [ 2370.244068][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2370.244083][ T6596] RSP: 002b:00007fa7058d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2370.244100][ T6596] RAX: ffffffffffffffda RBX: 00007fa704bb5fa0 RCX: 00007fa70498e929 [ 2370.244112][ T6596] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 2370.244124][ T6596] RBP: 00007fa704a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2370.244134][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2370.244144][ T6596] R13: 0000000000000000 R14: 00007fa704bb5fa0 R15: 00007fa704cdfa28 [ 2370.244161][ T6596] [ 2370.482270][ C0] vkms_vblank_simulate: vblank timer overrun