last executing test programs: 9m52.953204777s ago: executing program 0 (id=2258): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465"], 0x1ac}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000600)=@x86={0xfd, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8, 0x8b, 0x5, 0xf, 0x5, 0x0, 0x0, 0x9, 0x2b, 0x8d, 0x0, 0x2, 0x45, '\x00', 0x0, 0xf}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r5, 0xffffffffffffffff, 0x0) 9m52.587217115s ago: executing program 0 (id=2261): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) splice(r2, 0x0, r0, 0x0, 0x9, 0x120000008dffffff) 9m52.528076925s ago: executing program 0 (id=2262): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@loopback, 0x0, 0x4020, 0xffff, 0x8574, 0xa, 0x10}, {0x2, 0x800000000000000, 0x4, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x3}, {0x40000004, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2}, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfbfffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x12, 0x0, @empty}, 0x1c) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000040)={'ip_vti0\x00', @ifru_settings={0x2, 0x0, @fr=0x0}}) r4 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x8000}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 9m49.275684736s ago: executing program 0 (id=2277): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000180001000000200800000000000000000000000a0000000005001b0002010000"], 0x24}}, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000000008040000000000004800000016160101000b008000000000010000000900020073797a3100000000090001ad8e3abd2d9dbbfd001c000380180003801400010070676d36726567310000000000000000140000001000010000000000000000000000000a33dff2cf"], 0xd0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e000000208000600ac14142b080004000500000030001a"], 0x78}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x80000, 0x4008000) 9m44.954406794s ago: executing program 0 (id=2303): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x10162, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) alarm(0x9) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd3f7010301090234"], 0x0) alarm(0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x250300, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0xff7ffff7) eventfd(0x4) syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) userfaultfd(0x80801) pipe2$9p(&(0x7f0000000040), 0x0) socket$inet6(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 9m43.369596077s ago: executing program 0 (id=2309): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac060000050000009ab67e1db9c9a431078d40f722e600"}) socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x2, 0x2, "00769a7d8200010000001495595915303d6000"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0xa8e3, 0x9, 0xfc, 0xb75, 0x14, "588d4682a4d347e5"}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x59ca, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01003db331b65a8500000000000000000a0000003c0081802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000400000000000000000010c0002805c00ff0f000000003c0002802c00018814000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000200aa0c000280050001000000000008400740000000009d8872479f2e88e31cef83dafa129c965f15486842f382197ca5f09890b1dca4deb20a4bf77735"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1435000000000000008f000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x20008040) r10 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r10, 0x0) r11 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x66666666666680e, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}]}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 9m28.326725567s ago: executing program 32 (id=2309): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac060000050000009ab67e1db9c9a431078d40f722e600"}) socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x2, 0x2, "00769a7d8200010000001495595915303d6000"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0xa8e3, 0x9, 0xfc, 0xb75, 0x14, "588d4682a4d347e5"}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x59ca, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01003db331b65a8500000000000000000a0000003c0081802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000400000000000000000010c0002805c00ff0f000000003c0002802c00018814000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000200aa0c000280050001000000000008400740000000009d8872479f2e88e31cef83dafa129c965f15486842f382197ca5f09890b1dca4deb20a4bf77735"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1435000000000000008f000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x20008040) r10 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r10, 0x0) r11 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x66666666666680e, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}]}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 6m46.46710127s ago: executing program 5 (id=3237): r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300), 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x280002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)=ANY=[], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300), 0x8) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x280002, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 6m46.15971307s ago: executing program 5 (id=3239): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062002000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) ptrace$setopts(0x4200, r6, 0xedcb, 0x455b843fbdb64c6d) 6m44.78276196s ago: executing program 5 (id=3242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1a4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x17c, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x12, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 6m44.534854892s ago: executing program 5 (id=3243): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06643d3f94c35384f6312d7dfdbebd8fcf0a9af21a5412f5fd7096c3bca8b2042c9531e76645e61f007f874673aac8c19a412ec75c50", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x20, 0x8, 0x2, 0xfff, {{0x3a, 0x4, 0x0, 0x9, 0xe8, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x14, 0xce, 0x1, 0x5, [{@multicast2, 0x40}, {@loopback, 0x738}]}, @ssrr={0x89, 0xb, 0xe2, [@loopback, @remote]}, @timestamp_addr={0x44, 0x2c, 0x47, 0x1, 0x8, [{@broadcast, 0x81}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4a99}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdd4d}]}, @timestamp_prespec={0x44, 0x24, 0x7e, 0x3, 0x5, [{@local, 0x2}, {@remote, 0x5}, {@empty, 0x1ff}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0xd7, 0x3, 0x3, [{@empty}, {@multicast2, 0x7fff}, {@multicast1, 0xfffeffff}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0xba, 0x3, 0x9, [{@remote, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x59f}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xff}, {@broadcast, 0x8}]}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff}]}]}}}}}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000100)={@empty, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r12, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000440)={@private0, 0x0}, &(0x7f0000000480)=0x14) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@mpls_getroute={0x7c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x0, 0x20, 0x3, 0x0, 0x7, 0xc8, 0x4, 0xa00}, [@RTA_VIA={0x14, 0x12, {0x2a, "65b2b99e2eaab99fab7080ea638e"}}, @RTA_OIF={0x8, 0x4, r8}, @RTA_OIF={0x8, 0x4, r9}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x10, 0x5, r10}}, @RTA_DST={0x8, 0x1, {0xb, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r12}, @RTA_VIA={0x14, 0x12, {0x1f, "9d6450951d2d57724bc64378bd7e"}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x0, 0xa0, r13}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 6m43.447940147s ago: executing program 5 (id=3251): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @loopback, 0xfffffc03}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) 6m43.104443107s ago: executing program 5 (id=3252): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 6m42.521528301s ago: executing program 33 (id=3252): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 4m57.783867209s ago: executing program 1 (id=3879): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 4m57.409176914s ago: executing program 1 (id=3880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'pim6reg0\x00', {0x2, 0x4e23, @remote}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x358, 0x98, 0x98, 0x0, 0x248, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'syzkaller1\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@empty, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0xff, 'macvlan1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x4}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x102}, 0x1c) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) read$FUSE(r7, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4208, r8) socket$kcm(0x29, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x4040080) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write$P9_RFSYNC(r7, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 4m55.770201754s ago: executing program 1 (id=3888): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x5000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 4m55.675640329s ago: executing program 1 (id=3889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYRES32=r0], 0xa4}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x1e, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_virt_wifi\x00'}) 4m54.81182408s ago: executing program 1 (id=3904): r0 = socket$kcm(0x10, 0x2, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x8}, 0x16, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet(0x2, 0x3, 0x6) r7 = dup3(r5, r6, 0x0) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x1, 0x5, 0x7, 0x3, 0x0, {0x4, 0x183, 0xff, 0x5, 0x100, 0x100000007cf4, 0x9, 0x7ffffffd, 0x7, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x9}}}, 0xa0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000}) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x84200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc}) 4m54.515177223s ago: executing program 1 (id=3911): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sync() (async, rerun: 64) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120400000000001b00"/24], 0x0) (async, rerun: 64) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400e0}, 0x4000040) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000e65d00000000000000000000000a20000000000a03000000ffffffeb0000070000040900010073797a30000000008c000000090a010400000000000000000700000408000a40020000000900020073797a30000000000900010073797a3000000000080005400000000e48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001800b00010064796e7365740000080003400000012014000000"], 0xd4}}, 0x20050800) (rerun: 64) 4m54.118602232s ago: executing program 34 (id=3911): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sync() (async, rerun: 64) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120400000000001b00"/24], 0x0) (async, rerun: 64) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400e0}, 0x4000040) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000e65d00000000000000000000000a20000000000a03000000ffffffeb0000070000040900010073797a30000000008c000000090a010400000000000000000700000408000a40020000000900020073797a30000000000900010073797a3000000000080005400000000e48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001800b00010064796e7365740000080003400000012014000000"], 0xd4}}, 0x20050800) (rerun: 64) 8.796740621s ago: executing program 4 (id=5813): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x54}}, 0x0) 8.648107431s ago: executing program 4 (id=5814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = semget(0x2, 0x4, 0x200) semtimedop(r2, &(0x7f00000000c0)=[{0x4, 0x7, 0x800}], 0x1, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg$kcm(r3, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x2) r4 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80802) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000003c0)=0xfffffffd) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000380)=0x580, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000000327bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04800000212000001c0012800c0c0002800800010011000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x200480c0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2201000000000040050b2218000000000001090224000100000000090400200103000200092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="080a0700160007003d7da31f15"], 0x0, 0x0, 0x0, 0x0}, 0x0) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000400)="31d3a3119f5d4d367c079cf8bea6f28fb332306aa17f35bc51d3307031ac344def31d81c521c9f4b3f6c826c5128db87b8e3d9cfecfcda339ec79aff6ecfbebea1ad4aa7dc26555e06", 0x49, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 7.979996824s ago: executing program 6 (id=5818): capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000007fffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 7.917016542s ago: executing program 6 (id=5819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x1}, {0x0, 0x0, 0x8000000}, {0x0, 0x2000}, 0x0, 0x0, 0x2, 0x3, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1a0}}]}, 0x158}}, 0x0) 7.791585728s ago: executing program 6 (id=5820): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000200)=0x3) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0xe8, 0x0, 0x0, [{{0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7, 0x0, 0x173d4, {0x0, 0x8000, 0x3f8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x0, 0x2, 0x0, r2, 0x2, 0xdffffffd}}, {0x4, 0x0, 0x3e, 0x0, '.&^\'\x9b\x8e\xf1\x8a\xbb\xbe\xddn=@\x9bE\xe4c\xfd\xcc\xba\xed\x0f\xd1\xb5}v-\xccq\x91\xe6\xbdw5\x06\x15\xd5\xf8\xec\"|\x00\x00\x00\x7f\xdf\xdf\xac&{d)v\x94\xd4B\xfd\'\xbc@\x95'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/192, 0xc0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.579494187s ago: executing program 6 (id=5821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x430, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40054}, 0x20008090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xa4, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x58, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x6e, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="1885e6d75963"}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7.495372746s ago: executing program 2 (id=5822): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="200002"], 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = socket$netlink(0x10, 0x3, 0x12) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945fd084947e570028925a01000400000000008000f0fffeffe809000000fff5bc0000001000010006080c00418e00000004fcff", 0x58}], 0x1) prctl$PR_GET_DUMPABLE(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000001"], 0xa) r5 = syz_open_dev$video(&(0x7f0000000400), 0x3, 0xc0c00) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) 5.686167755s ago: executing program 3 (id=5826): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="f7086cdf9527fffbe2780f58e0aaffabe71b1d826b5c38297649f61c01d0ff07e0edf895c7a0c99af44af43d", 0x2c}, {&(0x7f0000000380)="aabc3f6f422b23d35d46520f8c7f80d9fda09488b6b82b380b5fcf86a3692ec005a2d0559110fcdacedb70ae02e6b8540ed1069eb7e62e5816c6e1c5597e096d3bffcd3844fc33dafdc7f227564c7d21121422a5f86d71cc5adcfbb74651309e080be78d4c3a7f00a9be29d8c65e7aa3711d5688bf92028e62a602f38364baba0980d7c3e54b5d433f8764a74be4bda2259a23392226460da7c337503f5d8ba0b4b8c9020c7c771fe13e0d6b30bb78033c3cbf789d314f1ef1d96efceffc4d36f70815010b6c8247212f79715fac", 0xce}, {&(0x7f0000000180)="33b4d1916f0f27337657aa94b44f35ad06f27e163fb754df8e194159e833649e70228a820758ed7ed14477288700d816a0", 0x31}, {&(0x7f0000001fc0)="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", 0x13e}, {&(0x7f0000000480)="d9156f1e06a904c5328d10bffe26544050e8dffbfbf5e0fd0fdd2d9fca3d694bd39e543e7058467e4fc2bf31d7dc988b2d58ffe14269f9f2d5a9835d7fc141167e12aca42cf1ed663f4ef39466086a63795394b560e6bdc7b2a73c4b16994c51113b69f19fceeb8f1b55f335c35bde6baed6bd0b74fee9610b6b0c0e2cb6891ae8e976ed42229da98988752bb194f7e6b27cabb8897cfe7ed3463c02c8bb5809a485c38ee7b6182dcbd0df27265f204b9d90a59576baf5e9e626c68bd37d1fd6bcaa701eaa66cfdbf5e63c0819c8b7", 0xcf}, {&(0x7f0000000640)="8568c45d89e2dcd99e8bc61d3a812bcee15bac395972d846ac0790d229640455bff4cfa4fca5452c9c51bd7c6eb213b253e3a96e084483b53c36203224daf8b1dcce98a91a221bba4ca2c28d88fa42436c44b6b6ff61d4d3c278fd0e7cf0af7aea38fb127ee0a188e4e577e4835bc27d975c6ce21db2bbd7b500d59ea37f24ea42681d302d2925", 0x87}, {&(0x7f00000001c0)="e385fa44d17643910397dec5ddb3b3a8cd5dbb7bcb839b164d90001f43ede66344ea8e55", 0x24}, {&(0x7f0000000580)="725aaaacf0548a814cc68096183429425e20a6c00dcb140a7c839e12c82b29a432b861929e7423f7b8a56cddddb1fa8b5d6a347cfe5177cb846c08b29bbd2ceb7153e0bdf417602c7c190becf9f3c84293106cd43aceb53b98d689313dc9503f015e6343d7", 0x65}], 0x8}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="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", 0x172}, {&(0x7f00000000c0)="da729a2b6005142377d8571e52f89f66095dd7b3be", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000002600)="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", 0x5ba}, {0x0}], 0x2}}], 0x4, 0x2000c044) 5.503720535s ago: executing program 3 (id=5827): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "2a104a6b"}]}}, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x50, 0x3, 0x6, 0x20}, {0x6, 0x99, 0xff, 0x2}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x45833af92e4b39ff, 0x0) 5.364139771s ago: executing program 7 (id=5829): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0xffffff7f00000000}, 0x4000) 5.261661253s ago: executing program 2 (id=5830): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x8000}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x20001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x8000000000000000, 0x3}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1, 0x4, &(0x7f0000001080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1], &(0x7f00000010c0)='syzkaller\x00', 0x40005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x44}, 0x10}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) open_by_handle_at(r2, 0x0, 0x2080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x66040, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000000c0)={0x5, 0x1, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010200000000000000000000000014000000"], 0x3c}, 0x1, 0x1200}, 0x0) 5.179863286s ago: executing program 7 (id=5831): capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000fffffffffffffffe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.61014569s ago: executing program 4 (id=5832): capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000e4ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.552367082s ago: executing program 7 (id=5833): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffff9, 0x80000, &(0x7f0000006680)) msgrcv(0x0, 0x0, 0x0, 0x1, 0xea1085a4413175e2) syslog(0x9, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x15, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x56, 0xa, 0x3, "3258ae1e008faa00000000000000000000000000000100000000271e00000020", 0x48524742}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05d10e000000000000000000ff00050000000000a196ec4d8336dec362416f3bc3dac6b8ea8e5f8bf049359d16425e655448d4a4e53a00b081fafb09ad326fb1dd168625e990934dabcf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) read$FUSE(r1, &(0x7f000000ddc0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) mkdir(&(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0x1f4) 4.467319338s ago: executing program 4 (id=5834): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0xee01, &(0x7f00000004c0)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r3, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r4, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359c01}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) syz_usb_connect$uac1(0x1, 0xb4, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x9, 0x50, 0xb7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf3, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x4, 0x3, 0xb}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x1, 0x8, "aba5722cfce9"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x4, 0x7f}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x8, '3'}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff0, 0x5, 0x40, "a27ffa59"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x80, "", "845e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x56, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x8, 0xb0, {0x7, 0x25, 0x1, 0x8a50e7098371a17f, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x18, &(0x7f00000001c0)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x5, 0x401}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x9}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x2e, 0x0, '\x00', [@padn]}]}}}}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) 4.233510714s ago: executing program 6 (id=5835): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0xe8, 0x0, 0x0, [{{0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7, 0x0, 0x173d4, {0x0, 0x8000, 0x3f8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x0, 0x2, 0x0, r2, 0x2, 0xdffffffd}}, {0x4, 0x0, 0x3e, 0x0, '.&^\'\x9b\x8e\xf1\x8a\xbb\xbe\xddn=@\x9bE\xe4c\xfd\xcc\xba\xed\x0f\xd1\xb5}v-\xccq\x91\xe6\xbdw5\x06\x15\xd5\xf8\xec\"|\x00\x00\x00\x7f\xdf\xdf\xac&{d)v\x94\xd4B\xfd\'\xbc@\x95'}}]}, 0x0, 0x0, 0x0}) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)) 4.165236344s ago: executing program 2 (id=5836): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01a2fa72b08b717a8b02000000000000000020000041a5f00e63f8"], 0x78}}, 0x0) 4.067623089s ago: executing program 2 (id=5837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000002020102000000000000000001000003080009000000000404000380"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1000000001, 0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000406011100000000000000000200000105000100070000000900020073797a320000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000004d564b000000000900000000002100"]) r10 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) 4.039437732s ago: executing program 6 (id=5838): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x13d8, &(0x7f0000002000)={[{0xab, 0x4e00, "e182256f7e6445937303fd2f843ae2e1c6eac9cd3a79c5372619288efd2ea883bc89206d5f2763c679cdeb032f8b62b87d6f77c93e3fcff79fb5fdb07fc2ad39bdc4ecf8224fc2490f3f42157492356824456c48a5fb7f037dc5932b69eec85543583056edd4605db81c9ac1d80418f154046a2eb090d4f1a01e3674924624a80e927708702106a53d8c3d82e76e323420cec8cb5edcb5a9b68383fc0f2f5194ecfa7cd904eaadea483aa7"}, {0xd3, 0x4e00, "026940024f40fca14a9b3dcd119b1e88302c7445fb303654cb4b26e9c349ea224f9fba02d5f7128d6688c82d221c8d4baed47f9337510e14cb0684c1c9c9057c13e2abc13e52aa7619a116d044a054cb5c29557f78efd163b6c0e25a5a8feb3b25fa512efc657f1499037cdacb32b359b756ab5e82a1b725cd702674df576911bad6f40c364818954e2cf8b13336fa27c440605f4525820727d71250c7bbf2b2722a366b18058ea0d856747eff1c3515d3fe6109a1c72e3e94ed298fadc2011587316f7d4ed987f2190c6e9f9024a213e50e4e"}, {0xe5, 0x4e00, "8de795c42e7f654524436ceda93ab8ff33c0e2c87f6c0f338c6fb05ac6af9ced2484475e18d850b0ab40367b0e73a16c3ae4d76701ec15e21ef9d32e8ec9fb730e64d7d2b7ee08251275341a7a9a3dc66008c4a87a531bee6e5ae61a79ab30ac45e4be35818d9e824b836baa386747611856453ed507062d4c84f5ed8bfd960dee66e01c19d098527a56d472cbffc793c46d07bafee54b701a4705b831672c9c64c6d13c5f903c6b6bf4654d1d2086d839befbf152b9c86db494c1d556688fe68ac5989de48d457f81e7e79b38237d3d377a38fc9c4ff8939bdd66351e0cb8908784f2e56c"}, {0x77, 0x4e00, "7c2ea070f7b5c54cd36e01a803cb1343b83cbf2fbd0beef99dbb39af55e0863c8a94532e769d8bbe9cafcb2765bbcd3563f5a406192766ffa5f85510a4118eab52480001e6c3eaf40836ca80c661969ee3dc142effd052ccd1c328b837c4b909b0a3f7fdec20e2cd66a1bef5abc4570d3e9aa4bb59c289"}, {0x1000, 0x4e00, "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"}, {0x95, 0x4e00, "078781901188872df8e5367749877aabe3ae1633113a423fa41c2d6131fbdf1f731e8ee9258ba01d57ec9a54810514cb57fe78d0c8a05b1977822d800f116f30e6fe21dcb74908f6eccf60b5983f4d9720bac7750f560af1c1fdb5b647506b60ea5369bd4f99846ba5800aa10d0e67541b819ff50b8b7e7b2db631a83b8b41d29f0c9c08513fd3c07c058f70ca1b46ff45f690acb1"}, {0x44, 0x4e00, "993e135ec7934d8fe5e2d842b739f98afc6dde458f3cad6afcd43841e1ce87535fd623b0ad15e761a33996544d5e83211fc185e18ab5dad57c2caea8733dd6314865c2df"}]}) ptrace(0x10, r4) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_disconnect(r5) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1004, &(0x7f0000003400)={[{0x1000, 0x4e00, "673af54d6aca09c8fe9c76ab0ccb7e358fda60c771224693e94ff89d19adff2ea6eb3c2e7935a9e586cad9412a2217f71c5dbc04892438726b8f6511bc33cbcaa6669323157bbf4682698d3999cb41dda04c3ea853523bf7672190d1b16df49406ff41caf3d3c175ca9759642fd0b05a8ced000243e2f1eca8ea168a18d5812bbc06e6c868323406ea41cc16e44f8b9d2b7dfa29fd698530b1d4c57fddf7fe2269cc2be5f1e67430bb6f9e7e72ade919cba177e1d29648aa6df55408b8318c0620c57013a90eea3612d5cb46bdefe998a78c035206dc89005bfc4709a814441f783e26be2d7347fd4569a919bb95caecc5ec2300ae7cd42e6dd9beff45ce40f17203bb017d29ef779278ff26ebdf8662d9e4dc74eddef39e3be358da635bd4b13ef95e3744b850cb203210c561710d5ada336e2edf9012b2cb23237ba2a187269be8911864f9892f4ffbb01e4c0d0e2bbb517afcbaa3dc47f76a3d933a1427f73b64ab5b0a8313d488dcf9f7a1e2589bd2a9d7b3871dc6adee16d7e5207183bc6bdd3aac73b3f27a57f12b58042b9b3dcbb9a118c0e004e7337cc7919c9f5f67a3af9ecf836b6bdb94720e5186b980932cec94de020769b2019e77275a856d858403c18a3c9eeb6d6d185f2e031e626bccb10720bbcfb32f72bb14988003b3b303202cd21b5db41344a99fcf781ad2b91230050f4abcd4909e8ac40c79894238ef697d20c44fb2a0b004ffe21e2fd4a71bffde9d2245b88d91e47d20ac9fc2dcdd86a30208baa0d39f2f03f3821f6c29fc4b043211d955c2e82d7dc58a4a5763081307ff739da6c93c01016528bb76aee9f90426469e12337930f69d62e2717565b09fe5c6c46bdae36d15495eb94ab6d19b2c1c7e5117fc23807a13a4a011fe870ed750e831034c77c858010838699f1a28e2c3d0ac265e0abd03e78ccff641a35fdcb69380278751c0b6615dde7c00b4e157f122be63d2fd2443bfbf7a4d86936db688b1c47d334a5b02a7f70bdff9738405046d2d8b935783a37804844a1f72b2797052f0d69e703ed2f9e70ca1df30fe4a2a3ca08e66e80a297cc7763d3b853d15f7f6beed90003c0836b963a20ed9674b50b60dfa1f95050db713aa36f46c8c1288ac0d7ccb625c2b3a1096376969e1d9aade92bbfccfe639ab08c73fe467220932a658d69a2b9147385a55371c4f2b14b67b48cc13a2fa00463368ade9b1a5fa824f3616a4ac7957e17de9444b5a42258dc3ba62a6be3c4878a5326b88af30d371d4ce1c372f3446db85b2fbeb31f63cb7e1fbe3ce709a43faa3905f0488ab4047bd5adb7559badb4ff59afbb1931d5b975970c71ef18f54f07685d5b8645f3c62753692ebaff71ce5a21716202f6a213ea678726b4a214023187bc84ad7ae3179b85fa8e28482dca7a39fc216d813cb3a5057d8091b38d06e984773448ecfcdcd95a77b22d8f65baf35470a6928191c18fe5f71ef2e776363bc26e926129bf287eea17a6737f53310d6761603a674acce575f3cef8677f4ac3ec3493b8a96b3f40893a500a66eb6b1c6da8051146d3253ef7ae97425ef9dc1c19d8e2786cd4bd9052de87d18a2dd1e75080fc9e88f431dc708c3a7892999048140c622d2fe442d47648d01d6c12fca98125b67d3b462e44a29900565acfad026dc1503ff39f5b05488c420d071006bb6193e49fd8cd287e5d08e55a54f573e32671061623202215cc54aab8b06d8b2a9c13ba754907bbab48c32b66c290bc085b3169d2e06bb096faac4e934a222495c811be272b9720225debdb2a0886a687799e16575b5ca5fba77de29cad19a2e4c15472825e5c0f08bf87a79471cb51a2a83cd9dd6dea2cedd7b93bb4a311e5b6e9b205cab17a05fb57a35d2ebda6d3795219588b620e4ffbe2dfead2d5870dcb8e0a27a39d4c0f09496f98d0acfeb7d280316058f2a642812dd0ae9b12e26572464ab688ed11d02e7ff4d7d822559f1c9acfd7c55fb17ef2b44d32603b464aa9ab8aa2f03aba823bf03605de80f6d3892d7f6c38adde7083d20c4bc96ade554255ef8652f14ef71f8219c671ad1b734d46403efeef80e21befb743acefd31d52776b26ba387bfc6dcbe6c09e7d37f7ee4144aebd727025089d1c462eab2059072819f48946bbe9d0453783484779dc5d9bb86a38eb3002f5c0153176d7bd86003724b7583d04d23cf8296cfb81ec111b322cdac87624836261ee429706301573240a3fd08f71c49464fe7dddc8b5537d636e6f70add9158bf5d5db955c78211d758376e9b815a3456963719e5fec708232c24304906a1559810b9d183657f21c4326c3e1fac43628884cc39601591e27d0d8bbd0381580ca362678573b6362f68dfafa3f001c96f4f67335a9df860a26de4f434c6b79fb1b6650307cb9fc1331213290b30bc31d7832695e9ab346ea7f2b3857e327aedf49fe19eb409f7f02d3de42deb7f3115d62981a3fe646801b215ed998469e8b5072a69c042cb179e1890407b1ea03a0c4c7a1ad62a0fe5832c6c88859e81891b1325c97349a684e354df17058430603ae6ffea57f967c5ba0ac714d4ada886f1a9e9192e21d691d16bd2efc9213d031cfcc259d450537c24860b48ded104c4018bf30b391b80ffd4b1b9f11958b17cdfb7367d10fd42bf30f9aab9bdac2365e015ac35c002ea7f2d141e6b544a160af72c4e128a01ed3980a9a492d0421dc27a21de1b3f176b7e70007e9d6a36d5a3e00e86d8345260e0eecc50fd6865c4d500889d4e1561b30dd41882105e2d0886a83448b0f20dd6b71de9362818b93594e544b48e0f4717d28c930b9e1b1450507cd5f4ec5f20da62e9bad93a6182e79721401bfda7a7b2c8129b6bbf1d9d2f120c750a8bc6a952384f31f0870306fb8843496d3ed66dd7f539a98a65edb4b270fb1434c2308d1a5eb9b8b8e307f37c3e81f8e2742526f6999ae1807a7f7835684cce67552315f55610b6801cdba1493f53a6cd87bbbf02590c9708aa90723dc26105df6c40bd931dc5ad6d3f95a70cb2ac3cb98a947e791a20346cf62f417c7089af9842047921ac90e136ec17dbac5e411d4b323cfb65ee90b2ea488fd83a390bc170c5f91ca2c0b647376495741466fba06ce3928919e2f1c524876c04e61e0a571fd567fa607b16f844a740a834aadc40450181757356d8e21ca267386579f76dc881c86f5ca9b509a1965c1f95a95d20375b71d2d61192519989de5284b10771a84e58459f136b807f5ff3e355cfc3c3da0d929248146b6144199234c22d5fc770032782a2469c2c5d10e4202fa0649bf6d27739850a8cf69de6ce87259215ab7a8572898ef74bafcf1afee860eb6f77372898ee2c946ea1f6fc3a7cdb558bcec0a3b1cba48685791f8d4812fc58d586ce52b5e6427771a5c572c4c5084798ab271084fc433324e84840a3d7c76e1973c9c664db0bf21863d0000e55dfc95b04761f828f7789759bfbc819939c3bc5fecdaae1791b76726f3850bd47f1f31e321d7ce1d5494adb9c7fe2348f6ac734b68cdfd8527a8d8f346499f257b32bd72a52d0036faef3ff7d74ece584fae09ad688089833eecca933a70bcd31c276b7e4f96cadd1b3c4dee34f02eea2278539a5bfbdb00b52742ced90de8dfc6afd040b73cc1b694a66fea18a5dd3c8c9a77214557f4a3f542ed9a7ca78243471ab75598755f3529c6ec46631fe68b61f47d330a9222c2551a193b76fedb72efb6d607a02fed2eb267cc55e28fa0236041f9ff80c961189c0de2f0fde0d42fb82f86d0949ffdfcf45fb302a88cd66410489407b204c367b95dd15a562c8b8d93f143c81c8ecdb5a311ba99880aca15794336f288b32df85e884207e458c3b5755fe41a46b0d677597e024e0afcef8c9f99d30d7bdb1fa5aef6a7e4792ae23b000f376ccf99159f9ff0b6fc6207b749fb6f449225d8fcb685e3fa6eac504c51fbe06a20b9c82243af4a514e0983d7fe198bd1623c88cf5c7b4a58a036bbb06d5c131dd597a27b81087696c7195d187c1a6463e4a0df4428ebf23481a44f2953841c1143a961defa6e80a387b3e2698baddceccadb4f927ca632fc05eef0f50ed6727b87b7f0167cc39bc22131763d10dfebe303b8895911aff92dd0978ba2ec46464e60ffb3418b3cf5c0b8c1fc22e719ce79363dcc03965dad1f1cd1057558cd31935ba0192d5c573e18de5bf61b119c5af8b74a961da08ee9fbc9f95bb287dac1f012fcc3dfd840b6efd400c8e9e38af2b8410f720f4aaec0986ea5273930010924957e741ae3e8d1352c7883685eb1e196640925e6c64ec186f40c72fd0536811f9bf42e01f43f2d4dba1b3df97625b84056fb57dfc40b166144c31568471d5b6f034a0a9613f118f410ae59f4b709cf5e86939537a329e179dd00a87293aed7e71911a1164f181bfa0bc0729769019dc979d432f51de73913ee0860c585a3195b2c51961cbda8e42130f60deb27772a1cc78392f0dba4065aab2f1a45f3b0b03caa308a3fedb81fe3368664b82f86cd6793c8e46736de1a904d50544f79f1c11401bb8d012d5d39f3722cc790d75d3a64adfdd2eb826660698fcd27790ac8726298e727b4d0184b3fee59a97f12d9c4b180dc6ddc6bd623b7ddb4e4e8a21301d35ce10d6f03aa51c340eb8b9b4978a500d69a31dbc431ba2b9b58f4110c5ff5b9b2f2c6db89e8095b0efec68866586d83a84f1216608c71352212eee36ed609d29707d1df29421d646c41a291f7d0e058dade69b0350a990d7d4b809504b6413c1e2fb924c793e0dddbe4c7f26df2f36a0cf20e679c23128a966c0cc493597bbe7331f686a45838772d71d06edf11848b97b510f297f7f19457eca67b373a94ffa479ff2409423add7408478660681494ed8984b31bdfec918775afc84c4b980110f597eec5b781a2442fc9dfed56ee9bef514e09a760594fd26321c66749c8c22c9e144faf1e3891ab060a3858f6bb761b22303964c9362bd769fc95c5691835a1441df91951a6ec79d9e7cbf2709c380118e493cca0b96ea44650d4588b1c00b0ffc78e22f24a9887916405bd5748bcf45910776a63e3d3545aa15e63384870806c2efa57276c4545eb0cd26e619e5ae209072c7df9da7c19938ae2a3010575c75ef94d99164fc575f0a3ef46e64cb53534068f73992ad4da5ed1dd28ff128f5e2af3f296c960cc95c45582ea4b99c2a9db11ba91bab98d4a32da277c3a8087c5a24b34e3a0fc1232a1e16d7506991b9339a1a25deabc17de1c7adb35384f2da69e9fc3db37d9f861fa1d18d9da0501e543fab5c60ecb6faaa4e55f7306a21aed857e0bb28b818a35e04e494d91668045cf9effe3a578e3c0b54c0de9093355b695622df174bc7cb23c122c1c82c0bbfe95ab44d733e1e43cce1951cdc3849de39e1a01e106a42b9b6be7282182efc9fe83db49f4936bca55af1a7ece2fb9e1941c1de09fb5a3c22cfdd9c42837e9d95cee488ad08adf3a0a2ac3bee56034eb3bef781ac6dfcd1b67952ed46b4811ec00093abd7f5341db1e7a11b04f3ca00fa80c1f80677cf429c3a0e748259672bade7031648f07fe82ef84b7c468f42e20ca8bba4afcaf2f25cefcd4c2086c936b662f62804f8cbe695dc346e613c642b73b5c6e79463ec8980ca60ee8de38a25c1fb4f63bf6edb260547ebea06245888843dbca9f0dfe75e8d18b03c460f78249c00e7805f3a42fd976ec6b8583e2911b0a44e398322e72ecec084bbc660dae10df4b588dfdde1633f262045e67a483d1b19674710c58d6361406ae06a8b"}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ptrace$setopts(0x4200, r4, 0xedcb, 0x455b843fbdb64c6d) 3.674635133s ago: executing program 7 (id=5839): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x340400c4) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) rmdir(0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000640)='nilfs2\x00', 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00030714"], &(0x7f0000000380)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0xbd, 0x4, 0xd1d, 0xf000, 0x0, [0xc00f, 0x1bf0f, 0x3f3f, 0xff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x99, 0x8, 0xd, 0x0, 0xfd}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6f97e5ae181260b7f9696da83c1b4dea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xff, 0x9, 0x2}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5b, 0x0, 0xa, 0x1, "4a599cc4", "bc554288"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x8, 0x4, 0x0, 0x7fff, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x14, 0xed, "38aa4953aa928a87ef707f4e24ee7e53231b313a69e2ee4e5007019e7ee9be3e59bfc92c7981cf1b84afad8ab274c9f67dc896d540b9ec374438177f32635b6488945657a423d7643009106b3d0bf490ba549f4ffee63927cf29de30945e3232e528032ecbf1bd9593f204583c6ad50dccfe112c010297fa08d960629cb8d005a21c8d23d03cd11f431ea501f13841eeeb739c6dbadff86fff6ff3dd8cf55d3686537fe69fe30ecbb01e42a60f7221eda33686fa9e16041f564e50960bf02ec7735b808bc0c5afe9ca0466971c4d7c702fd9cd523dea4511e6e71c0a9ca99b5d1b5313e0332ac60b009650d384"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x200, 0x1, [0x870]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x60}, &(0x7f0000000900)={0x40, 0xb, 0x2, '|E'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "b622"}, 0x0, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 2.855770646s ago: executing program 3 (id=5840): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="f7086cdf9527fffbe2780f58e0aaffabe71b1d826b5c38297649f61c01d0ff07e0edf895c7a0c99af44af43d", 0x2c}, {&(0x7f0000000380)="aabc3f6f422b23d35d46520f8c7f80d9fda09488b6b82b380b5fcf86a3692ec005a2d0559110fcdacedb70ae02e6b8540ed1069eb7e62e5816c6e1c5597e096d3bffcd3844fc33dafdc7f227564c7d21121422a5f86d71cc5adcfbb74651309e080be78d4c3a7f00a9be29d8c65e7aa3711d5688bf92028e62a602f38364baba0980d7c3e54b5d433f8764a74be4bda2259a23392226460da7c337503f5d8ba0b4b8c9020c7c771fe13e0d6b30bb78033c3cbf789d314f1ef1d96efceffc4d36f70815010b6c8247212f79715fac", 0xce}, {&(0x7f0000000180)="33b4d1916f0f27337657aa94b44f35ad06f27e163fb754df8e194159e833649e70228a820758ed7ed14477288700d816a0", 0x31}, {&(0x7f0000001fc0)="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", 0x13e}, {&(0x7f0000000480)="d9156f1e06a904c5328d10bffe26544050e8dffbfbf5e0fd0fdd2d9fca3d694bd39e543e7058467e4fc2bf31d7dc988b2d58ffe14269f9f2d5a9835d7fc141167e12aca42cf1ed663f4ef39466086a63795394b560e6bdc7b2a73c4b16994c51113b69f19fceeb8f1b55f335c35bde6baed6bd0b74fee9610b6b0c0e2cb6891ae8e976ed42229da98988752bb194f7e6b27cabb8897cfe7ed3463c02c8bb5809a485c38ee7b6182dcbd0df27265f204b9d90a59576baf5e9e626c68bd37d1fd6bcaa701eaa66cfdbf5e63c0819c8b7", 0xcf}, {&(0x7f0000000640)="8568c45d89e2dcd99e8bc61d3a812bcee15bac395972d846ac0790d229640455bff4cfa4fca5452c9c51bd7c6eb213b253e3a96e084483b53c36203224daf8b1dcce98a91a221bba4ca2c28d88fa42436c44b6b6ff61d4d3c278fd0e7cf0af7aea38fb127ee0a188e4e577e4835bc27d975c6ce21db2bbd7b500d59ea37f24ea42681d302d2925", 0x87}, {&(0x7f00000001c0)="e385fa44d17643910397dec5ddb3b3a8cd5dbb7bcb839b164d90001f43ede66344ea8e55", 0x24}, {&(0x7f0000000580)="725aaaacf0548a814cc68096183429425e20a6c00dcb140a7c839e12c82b29a432b861929e7423f7b8a56cddddb1fa8b5d6a347cfe5177cb846c08b29bbd2ceb7153e0bdf417602c7c190becf9f3c84293106cd43aceb53b98d689313dc9503f015e6343d7", 0x65}], 0x8}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="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", 0x172}, {&(0x7f00000000c0)="da729a2b6005142377d8571e52f89f66095dd7b3be", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000002600)="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", 0x5ba}, {0x0}], 0x2}}], 0x4, 0x2000c044) 2.345881215s ago: executing program 3 (id=5841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r4 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0xb, r4, &(0x7f0000002280)=""/4100, 0x1004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r9 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) 1.475191506s ago: executing program 4 (id=5842): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)="ef", 0x1}], 0x2}}], 0x1, 0x4400c800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ab9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/18, 0x12, 0x0, 0x0}, &(0x7f0000000100)=0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sync_file_range(r2, 0x5, 0x41d, 0x1) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000140)=@attr_other={0x0, 0x1, 0x9, &(0x7f00000000c0)}) 1.088035465s ago: executing program 3 (id=5843): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004efff000000000000", 0x39}], 0x1) 1.007723987s ago: executing program 3 (id=5844): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0xee01, &(0x7f00000004c0)) syz_usb_connect$uac1(0x1, 0xb4, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x9, 0x50, 0xb7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf3, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x4, 0x3, 0xb}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x1, 0x8, "aba5722cfce9"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x4, 0x7f}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x8, '3'}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff0, 0x5, 0x40, "a27ffa59"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x80, "", "845e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x56, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x8, 0xb0, {0x7, 0x25, 0x1, 0x8a50e7098371a17f, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x18, &(0x7f00000001c0)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x5, 0x401}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x9}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x2e, 0x0, '\x00', [@padn]}]}}}}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x1900, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) 758.263695ms ago: executing program 4 (id=5845): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0x40a45323, &(0x7f00000000c0)={{0x80}, 'port1\x00'}) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) eventfd(0x6) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000180)) close_range(r4, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, 0x0, 0x1000004, 0x0) open(&(0x7f0000000040)='.\x00', 0x458881, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x10) socket(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001f80)=r10, 0x4) 683.038452ms ago: executing program 7 (id=5846): capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000feffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 480.670858ms ago: executing program 7 (id=5847): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0xee01, &(0x7f00000004c0)) syz_usb_connect$uac1(0x1, 0xb4, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x9, 0x50, 0xb7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf3, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x4, 0x3, 0xb}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x1, 0x8, "aba5722cfce9"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x4, 0x7f}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x8, '3'}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff0, 0x5, 0x40, "a27ffa59"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x80, "", "845e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x56, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x8, 0xb0, {0x7, 0x25, 0x1, 0x8a50e7098371a17f, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x18, &(0x7f00000001c0)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x5, 0x401}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x9}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x2e, 0x0, '\x00', [@padn]}]}}}}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) (fail_nth: 6) 251.882514ms ago: executing program 2 (id=5848): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01a2fa72b08b717a8b02000000000000220007000041a5f00e63f8"], 0x78}}, 0x0) 0s ago: executing program 2 (id=5849): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0xa2, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd678ab8c8006c0001ff01000000000000000000fff4000001fe80000000000000000000000000002e3a"], 0x0) kernel console output (not intermixed with test programs): ed -16 [ 936.020055][T12738] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 936.630146][T19658] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 936.780163][T19658] usb 4-1: Using ep0 maxpacket: 8 [ 936.806989][T19658] usb 4-1: unable to get BOS descriptor or descriptor too short [ 936.818738][T19658] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 936.833779][T19658] usb 4-1: config 4 has no interface number 0 [ 936.840079][T19658] usb 4-1: config 4 interface 30 has no altsetting 0 [ 936.854681][T19658] usb 4-1: string descriptor 0 read error: -22 [ 936.861922][T19658] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 936.874455][T19658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.888465][T19658] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 936.899614][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.899661][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.913676][T19658] dw2102: su3000_power_ctrl: 1, initialized 0 [ 936.919783][T19658] dvb-usb: bulk message failed: -22 (2/0) [ 936.933022][T19658] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 936.946144][T19658] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 936.954313][T19658] usb 4-1: media controller created [ 936.959610][T19658] dvb-usb: bulk message failed: -22 (6/0) [ 936.966070][T19658] dw2102: i2c transfer failed. [ 936.971912][T19658] dvb-usb: bulk message failed: -22 (6/0) [ 936.977686][T19658] dw2102: i2c transfer failed. [ 936.984080][T19658] dvb-usb: bulk message failed: -22 (6/0) [ 936.996647][T19658] dw2102: i2c transfer failed. [ 937.006385][T19658] dvb-usb: bulk message failed: -22 (6/0) [ 937.012618][T19658] dw2102: i2c transfer failed. [ 937.021262][T19658] dvb-usb: bulk message failed: -22 (6/0) [ 937.030634][T19658] dw2102: i2c transfer failed. [ 937.037062][T19658] dvb-usb: bulk message failed: -22 (6/0) [ 937.043072][T19658] dw2102: i2c transfer failed. [ 937.048253][T19658] dvb-usb: MAC address: 02:02:02:02:02:02 [ 937.076675][T19658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.091080][T22972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.104262][T22972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.128544][T22972] dvb-usb: bulk message failed: -22 (3/0) [ 937.134849][T22972] dw2102: i2c transfer failed. [ 937.140094][T22972] dvb-usb: bulk message failed: -22 (3/0) [ 937.145854][T22972] dw2102: i2c transfer failed. [ 937.156523][T19658] dvb-usb: bulk message failed: -22 (3/0) [ 937.183628][T19658] dw2102: command 0x0e transfer failed. [ 937.189634][T19658] dvb-usb: bulk message failed: -22 (3/0) [ 937.205524][T19658] dw2102: command 0x0e transfer failed. [ 937.519987][T19658] dvb-usb: bulk message failed: -22 (3/0) [ 937.525797][T19658] dw2102: command 0x0e transfer failed. [ 937.556887][T19658] dvb-usb: bulk message failed: -22 (3/0) [ 937.611123][T19658] dw2102: command 0x0e transfer failed. [ 937.616852][T19658] dvb-usb: bulk message failed: -22 (1/0) [ 937.624043][T19658] dw2102: command 0x51 transfer failed. [ 937.629703][T19658] dvb-usb: bulk message failed: -22 (5/0) [ 937.636247][T19658] dw2102: i2c probe for address 0x68 failed. [ 937.642367][T19658] dvb-usb: bulk message failed: -22 (5/0) [ 937.648212][T19658] dw2102: i2c probe for address 0x69 failed. [ 937.654543][T19658] dvb-usb: bulk message failed: -22 (5/0) [ 937.660544][T19658] dw2102: i2c probe for address 0x6a failed. [ 937.666635][T19658] dw2102: probing for demodulator failed. Is the external power switched on? [ 937.675676][T19658] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 937.946111][T19658] rc_core: IR keymap rc-tt-1500 not found [ 937.959231][T19658] Registered IR keymap rc-empty [ 937.970485][T19658] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 937.993006][T19658] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input97 [ 938.028146][T19658] dvb-usb: schedule remote query interval to 250 msecs. [ 938.057495][T19658] dw2102: su3000_power_ctrl: 0, initialized 1 [ 938.080404][T19658] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 938.116380][T19658] usb 4-1: USB disconnect, device number 31 [ 938.185970][T23001] fuse: Bad value for 'fd' [ 938.191410][T19658] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 938.256029][T23003] binder: 22998:23003 ioctl 4018620d 0 returned -22 [ 938.264596][T23003] binder: 22998:23003 ioctl c0306201 0 returned -14 [ 938.272377][T23003] binder: 22998:23003 ioctl c0306201 0 returned -14 [ 938.482136][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4974'. [ 939.249080][T23018] geneve3: entered promiscuous mode [ 939.261516][T23018] geneve3: entered allmulticast mode [ 939.434161][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4977'. [ 940.260668][T23038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4983'. [ 940.851543][T23047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.970976][T23050] netlink: 'syz.6.4987': attribute type 1 has an invalid length. [ 941.050204][ T847] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 941.062438][T23053] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4988'. [ 941.133559][T23055] loop2: detected capacity change from 0 to 7 [ 941.181594][T23055] Dev loop2: unable to read RDB block 7 [ 941.201865][ T847] usb 4-1: Using ep0 maxpacket: 8 [ 941.213711][T23055] loop2: unable to read partition table [ 941.226619][T23055] loop2: partition table beyond EOD, truncated [ 941.233819][ T847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 941.241898][T23055] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 941.251848][ T847] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 941.262974][ T847] usb 4-1: config 4 has no interface number 0 [ 941.274179][ T847] usb 4-1: config 4 interface 30 has no altsetting 0 [ 941.300569][ T847] usb 4-1: string descriptor 0 read error: -22 [ 941.313239][ T847] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 941.348332][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.385063][ T847] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 941.407247][ T847] dw2102: su3000_power_ctrl: 1, initialized 0 [ 941.451274][ T847] dvb-usb: bulk message failed: -22 (2/0) [ 941.522023][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 941.531198][T23066] fuse: Bad value for 'fd' [ 941.556493][ T847] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 941.572928][ T847] usb 4-1: media controller created [ 941.587964][T23045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.601357][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 941.623814][ T847] dw2102: i2c transfer failed. [ 941.635612][T23045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.649066][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 941.680100][ T847] dw2102: i2c transfer failed. [ 941.698975][T23045] dvb-usb: bulk message failed: -22 (3/0) [ 941.705047][T23045] dw2102: i2c transfer failed. [ 941.711722][T23045] dvb-usb: bulk message failed: -22 (3/0) [ 941.717588][T23045] dw2102: i2c transfer failed. [ 941.723097][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 941.728989][ T847] dw2102: i2c transfer failed. [ 941.734687][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 941.755580][ T847] dw2102: i2c transfer failed. [ 941.768323][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 941.782731][ T847] dw2102: i2c transfer failed. [ 941.787676][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 941.794896][ T847] dw2102: i2c transfer failed. [ 941.799843][ T847] dvb-usb: MAC address: 02:02:02:02:02:02 [ 941.817070][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.841510][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 941.854092][ T847] dw2102: command 0x0e transfer failed. [ 941.866246][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 941.872385][ T847] dw2102: command 0x0e transfer failed. [ 941.910032][T18835] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 942.195523][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 942.208442][ T847] dw2102: command 0x0e transfer failed. [ 942.217121][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 942.250344][ T847] dw2102: command 0x0e transfer failed. [ 942.255919][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 942.280453][T18835] usb 3-1: Using ep0 maxpacket: 16 [ 942.306061][T18835] usb 3-1: config index 0 descriptor too short (expected 38701, got 45) [ 942.314941][T18835] usb 3-1: config 19 has too many interfaces: 124, using maximum allowed: 32 [ 942.323810][ T847] dw2102: command 0x51 transfer failed. [ 942.323827][ T847] dvb-usb: bulk message failed: -22 (5/0) [ 942.323869][ T847] dw2102: i2c probe for address 0x68 failed. [ 942.323882][ T847] dvb-usb: bulk message failed: -22 (5/0) [ 942.323896][ T847] dw2102: i2c probe for address 0x69 failed. [ 942.323912][ T847] dvb-usb: bulk message failed: -22 (5/0) [ 942.323926][ T847] dw2102: i2c probe for address 0x6a failed. [ 942.323937][ T847] dw2102: probing for demodulator failed. Is the external power switched on? [ 942.409976][T18835] usb 3-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config [ 942.440474][ T847] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 942.460021][T18835] usb 3-1: config 19 has 0 interfaces, different from the descriptor's value: 124 [ 942.509051][T18835] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 942.545294][ T847] rc_core: IR keymap rc-tt-1500 not found [ 942.558847][ T847] Registered IR keymap rc-empty [ 942.577528][T18835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.580397][ T847] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 942.623181][ T847] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input98 [ 942.659845][ T847] dvb-usb: schedule remote query interval to 250 msecs. [ 942.692784][ T847] dw2102: su3000_power_ctrl: 0, initialized 1 [ 942.698948][ T847] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 942.750457][ T847] usb 4-1: USB disconnect, device number 32 [ 942.842968][ T847] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 943.029739][T18835] usb 3-1: string descriptor 0 read error: -71 [ 943.058502][T18835] usb 3-1: USB disconnect, device number 19 [ 943.142374][T23087] FAULT_INJECTION: forcing a failure. [ 943.142374][T23087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.186013][T23087] CPU: 1 UID: 0 PID: 23087 Comm: syz.4.4997 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 943.186044][T23087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 943.186055][T23087] Call Trace: [ 943.186062][T23087] [ 943.186069][T23087] dump_stack_lvl+0x189/0x250 [ 943.186093][T23087] ? __pfx____ratelimit+0x10/0x10 [ 943.186114][T23087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.186133][T23087] ? __pfx__printk+0x10/0x10 [ 943.186154][T23087] ? __might_fault+0xb0/0x130 [ 943.186179][T23087] ? rcu_is_watching+0x15/0xb0 [ 943.186195][T23087] should_fail_ex+0x414/0x560 [ 943.186217][T23087] _copy_from_iter+0x1db/0x16f0 [ 943.186232][T23087] ? __might_fault+0xb0/0x130 [ 943.186252][T23087] ? __might_fault+0xcc/0x130 [ 943.186276][T23087] ? __pfx__copy_from_iter+0x10/0x10 [ 943.186289][T23087] ? sock_alloc_send_pskb+0x875/0x990 [ 943.186310][T23087] ? __pfx__copy_from_iter+0x10/0x10 [ 943.186325][T23087] ? page_copy_sane+0x16a/0x280 [ 943.186340][T23087] copy_page_from_iter+0xdd/0x170 [ 943.186356][T23087] skb_copy_datagram_from_iter+0x306/0x720 [ 943.186392][T23087] tun_get_user+0x1691/0x3e20 [ 943.186409][T23087] ? rcu_is_watching+0x15/0xb0 [ 943.186424][T23087] ? lock_release+0x4b/0x3e0 [ 943.186458][T23087] ? aa_file_perm+0x44d/0x1550 [ 943.186472][T23087] ? __pfx_tun_get_user+0x10/0x10 [ 943.186485][T23087] ? _parse_integer_limit+0x1ae/0x1f0 [ 943.186507][T23087] ? kstrtoull+0x12f/0x1d0 [ 943.186529][T23087] ? ref_tracker_alloc+0x318/0x460 [ 943.186548][T23087] ? get_pid_task+0x20/0x1f0 [ 943.186566][T23087] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 943.186586][T23087] ? tun_get+0x1c/0x2f0 [ 943.186598][T23087] ? tun_get+0x1c/0x2f0 [ 943.186609][T23087] ? rcu_is_watching+0x15/0xb0 [ 943.186622][T23087] ? tun_get+0x1c/0x2f0 [ 943.186634][T23087] ? lock_release+0x4b/0x3e0 [ 943.186671][T23087] ? common_file_perm+0x1b5/0x230 [ 943.186694][T23087] ? tun_get+0x1c/0x2f0 [ 943.186709][T23087] tun_chr_write_iter+0x113/0x200 [ 943.186733][T23087] vfs_write+0x5c9/0xb30 [ 943.186754][T23087] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 943.186778][T23087] ? __pfx_vfs_write+0x10/0x10 [ 943.186800][T23087] ? __fget_files+0x2a/0x420 [ 943.186816][T23087] ksys_write+0x145/0x250 [ 943.186836][T23087] ? __pfx_ksys_write+0x10/0x10 [ 943.186855][T23087] ? rcu_is_watching+0x15/0xb0 [ 943.186871][T23087] ? rcu_is_watching+0x15/0xb0 [ 943.186886][T23087] do_syscall_64+0xfa/0x3b0 [ 943.186916][T23087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.186931][T23087] ? clear_bhb_loop+0x60/0xb0 [ 943.186948][T23087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.186963][T23087] RIP: 0033:0x7f583378ebe9 [ 943.186977][T23087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.186991][T23087] RSP: 002b:00007f58319f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 943.187008][T23087] RAX: ffffffffffffffda RBX: 00007f58339b5fa0 RCX: 00007f583378ebe9 [ 943.187019][T23087] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 943.187030][T23087] RBP: 00007f58319f6090 R08: 0000000000000000 R09: 0000000000000000 [ 943.187040][T23087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.187049][T23087] R13: 00007f58339b6038 R14: 00007f58339b5fa0 R15: 00007f5833adfa28 [ 943.187066][T23087] [ 943.865928][T23093] loop2: detected capacity change from 0 to 7 [ 943.883310][T15608] loop2: [ 943.886290][T15608] loop2: partition table partially beyond EOD, truncated [ 943.916221][T23093] loop2: [ 943.919230][T23093] loop2: partition table partially beyond EOD, truncated [ 943.992271][T23099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5004'. [ 944.091115][ T30] audit: type=1326 audit(1755476898.725:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23104 comm="syz.4.5005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f583378ebe9 code=0x0 [ 944.320716][T23113] netlink: 'syz.2.5002': attribute type 10 has an invalid length. [ 944.870140][T23117] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5007'. [ 944.882650][T23117] vlan3: entered promiscuous mode [ 944.887706][T23117] team0: entered promiscuous mode [ 944.923853][T23117] team_slave_0: entered promiscuous mode [ 944.990719][T23117] team_slave_1: entered promiscuous mode [ 945.526350][T23125] netlink: 'syz.7.5010': attribute type 8 has an invalid length. [ 945.855654][T23133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5013'. [ 946.377406][T23144] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5017'. [ 946.676924][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5021'. [ 946.701484][T23152] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 946.709248][T23152] macsec1: entered allmulticast mode [ 946.745455][T23152] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 946.769306][T23152] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 946.789262][T23152] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 946.821133][T23158] netlink: 'syz.7.5023': attribute type 21 has an invalid length. [ 946.829019][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5023'. [ 947.005375][T23163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5024'. [ 947.095238][T23163] vlan3: entered promiscuous mode [ 947.493909][T23180] program syz.7.5028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.557128][T23174] netlink: 'syz.2.5026': attribute type 10 has an invalid length. [ 947.655189][T23183] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5031'. [ 947.872992][T23195] geneve2: entered promiscuous mode [ 947.879107][T23195] geneve2: entered allmulticast mode [ 948.324245][T23203] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 948.342688][T23203] macsec1: entered allmulticast mode [ 948.420292][T23203] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 948.539033][T23203] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 948.593636][T23203] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 948.877649][T23212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5041'. [ 948.934141][T23212] vlan2: entered promiscuous mode [ 948.962145][T23212] team0: entered promiscuous mode [ 949.001994][T23212] team_slave_0: entered promiscuous mode [ 949.014027][T23212] team_slave_1: entered promiscuous mode [ 949.060968][T23224] loop2: detected capacity change from 0 to 7 [ 949.069823][ T5879] loop2: [ 949.075307][ T5879] loop2: partition table partially beyond EOD, truncated [ 949.082358][T23221] RDS: rds_bind could not find a transport for fc02::ff, load rds_tcp or rds_rdma? [ 949.118020][T23224] loop2: [ 949.121316][T23224] loop2: partition table partially beyond EOD, truncated [ 949.882965][T23252] loop2: detected capacity change from 0 to 7 [ 949.892251][T23252] Dev loop2: unable to read RDB block 7 [ 949.897918][T23252] loop2: unable to read partition table [ 949.905020][T23252] loop2: partition table beyond EOD, truncated [ 949.952816][T23252] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 950.253923][T23253] netlink: 'syz.4.5050': attribute type 10 has an invalid length. [ 950.301869][T23260] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 950.309847][T23260] macsec1: entered allmulticast mode [ 950.319113][T23260] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 950.337463][T23260] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 950.350490][T23260] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 951.023870][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5059'. [ 951.036438][T23271] vlan2: entered promiscuous mode [ 951.296701][T23282] kvm: kvm [23281]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 951.802881][T23309] netlink: 'syz.7.5072': attribute type 10 has an invalid length. [ 951.820080][T18835] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 951.875517][T23309] bond0: (slave wlan1): Opening slave failed [ 951.980113][T18835] usb 5-1: Using ep0 maxpacket: 8 [ 951.995715][T18835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 952.004676][T18835] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 952.021225][T18835] usb 5-1: config 4 has no interface number 0 [ 952.027965][T18835] usb 5-1: config 4 interface 30 has no altsetting 0 [ 952.039508][T18835] usb 5-1: string descriptor 0 read error: -22 [ 952.046816][T18835] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 952.058780][T18835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.137196][T18835] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 952.165974][T18835] dw2102: su3000_power_ctrl: 1, initialized 0 [ 952.174183][T18835] dvb-usb: bulk message failed: -22 (2/0) [ 952.198488][T18835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 952.213419][T18835] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 952.224705][T18835] usb 5-1: media controller created [ 952.245864][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 952.256280][T18835] dw2102: i2c transfer failed. [ 952.262846][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 952.268824][T18835] dw2102: i2c transfer failed. [ 952.280492][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 952.450033][T23303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.550249][T23303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.583678][T18835] dw2102: i2c transfer failed. [ 952.608825][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 952.645525][T18835] dw2102: i2c transfer failed. [ 952.676877][T23303] dvb-usb: bulk message failed: -22 (3/0) [ 952.696154][T23303] dw2102: i2c transfer failed. [ 952.703416][T23303] dvb-usb: bulk message failed: -22 (3/0) [ 952.710860][T23303] dw2102: i2c transfer failed. [ 952.716912][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 952.733267][T18835] dw2102: i2c transfer failed. [ 952.742290][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 952.748118][T18835] dw2102: i2c transfer failed. [ 952.753736][T18835] dvb-usb: MAC address: 02:02:02:02:02:02 [ 952.790035][T12738] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 952.881770][T18835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.940131][T12738] usb 3-1: Using ep0 maxpacket: 16 [ 952.946904][T12738] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 952.957587][T12738] usb 3-1: can't read configurations, error -61 [ 952.965858][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 952.980904][T18835] dw2102: command 0x0e transfer failed. [ 952.986902][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 952.997052][T18835] dw2102: command 0x0e transfer failed. [ 953.113377][T12738] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 953.123287][T23320] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 953.290147][T12738] usb 3-1: Using ep0 maxpacket: 16 [ 953.296554][T23327] syzkaller0: entered promiscuous mode [ 953.302192][T23327] syzkaller0: entered allmulticast mode [ 953.318126][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 953.326541][T18835] dw2102: command 0x0e transfer failed. [ 953.333202][T12738] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 953.333666][T23327] macvlan0: mtu greater than device maximum [ 953.345111][T12738] usb 3-1: can't read configurations, error -61 [ 953.353402][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 953.359150][T18835] dw2102: command 0x0e transfer failed. [ 953.369705][T12738] usb usb3-port1: attempt power cycle [ 953.384277][T18835] dvb-usb: bulk message failed: -22 (1/0) [ 953.390643][T18835] dw2102: command 0x51 transfer failed. [ 953.396412][T18835] dvb-usb: bulk message failed: -22 (5/0) [ 953.420358][T18835] dw2102: i2c probe for address 0x68 failed. [ 953.426807][T18835] dvb-usb: bulk message failed: -22 (5/0) [ 953.433137][T18835] dw2102: i2c probe for address 0x69 failed. [ 953.439181][T18835] dvb-usb: bulk message failed: -22 (5/0) [ 953.445400][T18835] dw2102: i2c probe for address 0x6a failed. [ 953.456445][T18835] dw2102: probing for demodulator failed. Is the external power switched on? [ 953.466256][T18835] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 953.610300][T18835] rc_core: IR keymap rc-tt-1500 not found [ 953.616062][T18835] Registered IR keymap rc-empty [ 953.626147][T18835] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 953.637985][T18835] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input99 [ 953.653495][T18835] dvb-usb: schedule remote query interval to 250 msecs. [ 953.661076][T18835] dw2102: su3000_power_ctrl: 0, initialized 1 [ 953.717042][T18835] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 953.725783][T12738] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 953.769977][T18835] usb 5-1: USB disconnect, device number 19 [ 953.780581][T12738] usb 3-1: Using ep0 maxpacket: 16 [ 953.789145][T12738] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 953.880344][T12738] usb 3-1: can't read configurations, error -61 [ 953.900631][T18835] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 954.019987][T12738] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 954.043245][T12738] usb 3-1: Using ep0 maxpacket: 16 [ 954.051553][T12738] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 954.059197][T12738] usb 3-1: can't read configurations, error -61 [ 954.068226][T12738] usb usb3-port1: unable to enumerate USB device [ 954.186175][T23347] input: syz1 as /devices/virtual/input/input100 [ 954.240129][T18835] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 954.483021][T18835] usb 5-1: Using ep0 maxpacket: 32 [ 954.498259][T18835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.519431][T18835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.539458][T18835] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 954.552440][T18835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.580961][T18835] usb 5-1: config 0 descriptor?? [ 954.588031][T18835] hub 5-1:0.0: USB hub found [ 954.877394][T23360] netlink: 'syz.7.5090': attribute type 10 has an invalid length. [ 954.887370][T23360] bond0: (slave wlan1): Opening slave failed [ 954.917859][T18835] hub 5-1:0.0: 1 port detected [ 955.522698][T18835] hub 5-1:0.0: activate --> -90 [ 956.180960][T23389] netlink: 'syz.7.5101': attribute type 4 has an invalid length. [ 956.548369][T23404] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5106'. [ 956.697887][T23408] netlink: 'syz.3.5109': attribute type 21 has an invalid length. [ 956.730874][T23408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5109'. [ 957.002981][T23418] FAULT_INJECTION: forcing a failure. [ 957.002981][T23418] name failslab, interval 1, probability 0, space 0, times 0 [ 957.018503][T23418] CPU: 0 UID: 0 PID: 23418 Comm: syz.6.5113 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 957.018533][T23418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.018546][T23418] Call Trace: [ 957.018555][T23418] [ 957.018569][T23418] dump_stack_lvl+0x189/0x250 [ 957.018592][T23418] ? __pfx____ratelimit+0x10/0x10 [ 957.018611][T23418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 957.018628][T23418] ? __pfx__printk+0x10/0x10 [ 957.018646][T23418] ? read_seqbegin+0x1ac/0x250 [ 957.018664][T23418] ? __pfx___might_resched+0x10/0x10 [ 957.018683][T23418] ? lock_acquire+0x5f/0x360 [ 957.018704][T23418] should_fail_ex+0x414/0x560 [ 957.018724][T23418] should_failslab+0xa8/0x100 [ 957.018745][T23418] __kmalloc_noprof+0xcb/0x4f0 [ 957.018763][T23418] ? tomoyo_encode+0x28b/0x550 [ 957.018778][T23418] tomoyo_encode+0x28b/0x550 [ 957.018793][T23418] tomoyo_realpath_from_path+0x58d/0x5d0 [ 957.018810][T23418] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 957.018833][T23418] tomoyo_path_number_perm+0x1e8/0x5a0 [ 957.018860][T23418] ? lock_release+0x4b/0x3e0 [ 957.018888][T23418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 957.018917][T23418] ? rcu_is_watching+0x15/0xb0 [ 957.018934][T23418] ? lock_release+0x4b/0x3e0 [ 957.018953][T23418] ? vfs_write+0x956/0xb30 [ 957.018973][T23418] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 957.019000][T23418] ? lock_release+0x4b/0x3e0 [ 957.019022][T23418] ? __fget_files+0x2a/0x420 [ 957.019033][T23418] ? __fget_files+0x3a0/0x420 [ 957.019044][T23418] ? __fget_files+0x2a/0x420 [ 957.019058][T23418] security_file_ioctl+0xcb/0x2d0 [ 957.019077][T23418] __se_sys_ioctl+0x47/0x170 [ 957.019094][T23418] do_syscall_64+0xfa/0x3b0 [ 957.019115][T23418] ? rcu_is_watching+0x15/0xb0 [ 957.019128][T23418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.019142][T23418] ? clear_bhb_loop+0x60/0xb0 [ 957.019157][T23418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.019171][T23418] RIP: 0033:0x7fe9d778ebe9 [ 957.019184][T23418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.019197][T23418] RSP: 002b:00007fe9d8568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.019213][T23418] RAX: ffffffffffffffda RBX: 00007fe9d79b5fa0 RCX: 00007fe9d778ebe9 [ 957.019224][T23418] RDX: 0000200000000100 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 957.019234][T23418] RBP: 00007fe9d8568090 R08: 0000000000000000 R09: 0000000000000000 [ 957.019243][T23418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.019252][T23418] R13: 00007fe9d79b6038 R14: 00007fe9d79b5fa0 R15: 00007fe9d7adfa28 [ 957.019267][T23418] [ 957.019623][T23418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 957.328626][T18835] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 957.363007][T23420] netlink: 'syz.2.5112': attribute type 10 has an invalid length. [ 957.441443][ T847] usb 5-1: USB disconnect, device number 20 [ 957.543635][ T30] audit: type=1326 audit(1755476912.165:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23406 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60358ebe9 code=0x7fc00000 [ 957.663648][T23427] loop2: detected capacity change from 0 to 7 [ 957.718327][T23427] Dev loop2: unable to read RDB block 7 [ 957.719132][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5117'. [ 957.750147][T23427] loop2: unable to read partition table [ 957.756002][T23427] loop2: partition table beyond EOD, truncated [ 957.781584][T23427] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 958.810071][T12738] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 958.972014][T12738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 959.010123][ T847] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 959.024016][T12738] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 959.035352][T12738] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 959.069593][T23460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5127'. [ 959.085767][T12738] usb 5-1: Product: syz [ 959.097393][T12738] usb 5-1: Manufacturer: syz [ 959.119959][T12738] usb 5-1: SerialNumber: syz [ 959.175905][T12738] usb 5-1: config 0 descriptor?? [ 959.191331][ T847] usb 4-1: Using ep0 maxpacket: 8 [ 959.212555][ T847] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 959.222009][ T847] usb 4-1: config 2 has no interface number 0 [ 959.232979][ T847] usb 4-1: config 2 interface 31 has no altsetting 0 [ 959.280462][ T847] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 959.280491][T23450] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 959.289653][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.307053][T12738] hub 5-1:0.0: bad descriptor, ignoring hub [ 959.313431][T12738] hub 5-1:0.0: probe with driver hub failed with error -5 [ 959.326664][ T847] usb 4-1: Product: syz [ 959.346201][ T847] usb 4-1: Manufacturer: syz [ 959.390317][ T847] usb 4-1: SerialNumber: syz [ 959.430748][ T847] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 959.670551][T12738] usb 5-1: USB disconnect, device number 21 [ 959.894209][T23472] loop2: detected capacity change from 0 to 7 [ 959.906940][T23472] loop2: [ 959.911304][T23472] loop2: partition table partially beyond EOD, truncated [ 960.235384][T23483] netlink: 'syz.6.5135': attribute type 10 has an invalid length. [ 960.417078][T23486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer. [ 960.503624][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5137'. [ 960.515530][T23488] veth1: entered promiscuous mode [ 960.524055][T23488] veth1: left promiscuous mode [ 960.788697][T23502] loop2: detected capacity change from 0 to 7 [ 960.806007][T23502] Dev loop2: unable to read RDB block 7 [ 960.886177][T23503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5138'. [ 960.920205][T23502] loop2: unable to read partition table [ 961.028991][T23502] loop2: partition table beyond EOD, truncated [ 961.078963][T23502] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 961.470034][T23513] netlink: 'syz.6.5143': attribute type 4 has an invalid length. [ 961.627146][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5144'. [ 961.720768][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5146'. [ 961.738060][T23521] vlan3: entered promiscuous mode [ 962.127647][T23532] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 962.138894][T23532] macsec1: entered allmulticast mode [ 962.146715][T23532] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 962.166531][T23532] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 962.174792][T23532] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 962.288006][T23540] netlink: 'syz.6.5154': attribute type 8 has an invalid length. [ 962.357761][ T847] usb 4-1: USB disconnect, device number 33 [ 962.492719][T23554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 962.532539][T23553] geneve2: entered promiscuous mode [ 962.537807][T23553] geneve2: entered allmulticast mode [ 962.750008][ T30] audit: type=1800 audit(1755476917.385:816): pid=23569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5162" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 962.975189][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5161'. [ 963.016489][T23572] vlan3: entered promiscuous mode [ 963.378546][T23594] loop9: detected capacity change from 0 to 7 [ 963.405582][T23594] buffer_io_error: 11 callbacks suppressed [ 963.405602][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.419845][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.428158][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.437207][T23599] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.445732][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.462154][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.480751][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.488887][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.529697][T23594] ldm_validate_partition_table(): Disk read failed. [ 963.544299][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.594046][T23594] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.666322][T23594] Dev loop9: unable to read RDB block 0 [ 963.681764][T23594] loop9: unable to read partition table [ 963.689297][T23594] loop9: partition table beyond EOD, truncated [ 963.839576][T23594] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 963.839576][T23594] ) failed (rc=-5) [ 963.917722][T23620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.962876][T23620] trusted_key: encrypted_key: keyword 'Uew' not recognized [ 963.988760][T23620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 964.010336][T23620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.243922][T23632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5178'. [ 964.353372][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5180'. [ 964.423981][T23634] vlan3: entered promiscuous mode [ 964.470905][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 964.654188][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 964.664360][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 964.677398][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 964.687936][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.698438][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.779065][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 964.796822][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.057401][ T9] usb 5-1: usb_control_msg returned -71 [ 965.069456][ T9] usbtmc 5-1:16.0: can't read capabilities [ 965.098239][ T9] usb 5-1: USB disconnect, device number 22 [ 965.292974][T23656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5187'. [ 966.222815][ T847] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 966.374714][T23676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5194'. [ 966.410042][ T847] usb 4-1: device descriptor read/64, error -71 [ 966.599403][T23682] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 966.619162][T23682] macsec1: entered allmulticast mode [ 966.624733][T23682] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 966.638151][T23682] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 966.647479][T23682] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 966.661816][ T847] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 966.800167][ T847] usb 4-1: device descriptor read/64, error -71 [ 966.910232][ T847] usb usb4-port1: attempt power cycle [ 967.270110][ T847] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 967.290676][ T847] usb 4-1: device descriptor read/8, error -71 [ 967.501594][T23702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer. [ 967.519274][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.547905][ T847] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 967.680646][ T847] usb 4-1: device descriptor read/8, error -71 [ 967.810022][ T847] usb usb4-port1: unable to enumerate USB device [ 968.166701][T23712] netlink: 'syz.4.5207': attribute type 8 has an invalid length. [ 968.975666][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 969.230060][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 969.250222][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 969.263389][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 969.309705][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 969.370895][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 969.391074][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 969.406016][T23732] loop2: detected capacity change from 0 to 7 [ 969.418147][ T5879] loop2: [ 969.422609][ T5879] loop2: partition table partially beyond EOD, truncated [ 969.509039][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 969.558589][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.588749][T23732] loop2: [ 969.595821][ T9] usb 5-1: Product: syz [ 969.601398][T23732] loop2: partition table partially beyond EOD, truncated [ 969.626906][ T5234] loop2: [ 969.631457][ T5234] loop2: partition table partially beyond EOD, truncated [ 969.639951][ T9] usb 5-1: Manufacturer: syz [ 969.644592][ T9] usb 5-1: SerialNumber: syz [ 969.694226][ T9] usb 5-1: config 0 descriptor?? [ 969.740148][T12738] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 969.950201][T12738] usb 3-1: Using ep0 maxpacket: 16 [ 969.993692][T12738] usb 3-1: config 0 has no interfaces? [ 970.003708][T12738] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 970.018287][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.025304][T12738] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 970.038071][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.045101][T12738] usb 3-1: Manufacturer: syz [ 970.050181][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.057540][T12738] usb 3-1: config 0 descriptor?? [ 970.066594][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.075732][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.085096][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.092447][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.098788][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.105523][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.111980][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.118214][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.124824][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.131102][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.137419][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.144077][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.150584][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.156846][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.163528][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.169840][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.176548][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 970.180266][ T847] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 970.183149][ T9] input input101: Timeout waiting for response from device. [ 970.201186][ T9] usb 5-1: USB disconnect, device number 23 [ 970.349939][ T847] usb 4-1: Using ep0 maxpacket: 16 [ 970.356740][ T847] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 970.366386][ T847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.376541][ T847] usb 4-1: config 0 has no interface number 0 [ 970.384688][ T847] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 970.393806][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.401869][ T847] usb 4-1: Product: syz [ 970.406052][ T847] usb 4-1: Manufacturer: syz [ 970.410796][ T847] usb 4-1: SerialNumber: syz [ 970.417358][ T847] usb 4-1: config 0 descriptor?? [ 970.426513][ T847] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 970.432980][ T847] usb 4-1: No valid video chain found. [ 970.644730][ T847] usb 4-1: USB disconnect, device number 38 [ 971.225743][T23756] netlink: 'syz.7.5219': attribute type 10 has an invalid length. [ 971.235171][T23756] bond0: (slave wlan1): Opening slave failed [ 971.309944][T12042] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 971.460417][T12042] usb 5-1: Using ep0 maxpacket: 8 [ 971.486713][T12042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 971.502188][T12042] usb 5-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 971.532444][T12042] usb 5-1: config 1 interface 0 has no altsetting 0 [ 971.558632][T12042] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 971.569920][T12042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.579469][T12042] usb 5-1: Product: syz [ 971.589542][T12042] usb 5-1: Manufacturer: syz [ 971.598487][T12042] usb 5-1: SerialNumber: syz [ 971.734076][T18835] usb 3-1: USB disconnect, device number 24 [ 972.265742][T12042] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input102 [ 972.349614][T23777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5228'. [ 972.360340][ T5219] bcm5974 5-1:1.0: could not read from device [ 972.375037][ T5219] bcm5974 5-1:1.0: could not read from device [ 972.390846][T12042] usb 5-1: USB disconnect, device number 24 [ 973.141378][T23783] loop2: detected capacity change from 0 to 7 [ 973.158842][ T5879] loop2: [ 973.163245][ T5879] loop2: partition table partially beyond EOD, truncated [ 973.180116][T23783] loop2: [ 973.183233][T23783] loop2: partition table partially beyond EOD, truncated [ 973.660651][T23797] netlink: 'syz.7.5235': attribute type 8 has an invalid length. [ 973.682791][T23798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 973.959596][T23813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5241'. [ 974.546203][T23831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5244'. [ 976.351816][T23872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5258'. [ 976.616534][T23875] trusted_key: encrypted_key: master key parameter is missing [ 976.970115][T12042] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 977.298493][T12042] usb 3-1: Using ep0 maxpacket: 8 [ 977.338189][T12042] usb 3-1: unable to get BOS descriptor or descriptor too short [ 977.352670][T23886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5263'. [ 977.379552][T12042] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 977.398474][T12042] usb 3-1: config 4 has no interface number 0 [ 977.425098][T12042] usb 3-1: config 4 interface 30 has no altsetting 0 [ 977.428510][T23888] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 977.444414][T23888] macsec1: entered allmulticast mode [ 977.451538][T23888] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 977.462072][T23888] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 977.462195][T12042] usb 3-1: string descriptor 0 read error: -22 [ 977.475828][T23888] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 977.475833][T12042] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 977.475861][T12042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.541919][T12042] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 977.549435][T12042] dw2102: su3000_power_ctrl: 1, initialized 0 [ 977.555929][T12042] dvb-usb: bulk message failed: -22 (2/0) [ 977.568472][T12042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.680870][T12042] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 977.733192][T12042] usb 3-1: media controller created [ 977.746247][T23879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.771067][T23879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.779197][T12042] dvb-usb: bulk message failed: -22 (6/0) [ 977.787366][T12042] dw2102: i2c transfer failed. [ 977.794033][T12042] dvb-usb: bulk message failed: -22 (6/0) [ 977.866136][T12042] dw2102: i2c transfer failed. [ 977.884394][T12042] dvb-usb: bulk message failed: -22 (6/0) [ 977.891085][T12042] dw2102: i2c transfer failed. [ 977.907126][T23879] dvb-usb: bulk message failed: -22 (3/0) [ 977.913850][T23879] dw2102: i2c transfer failed. [ 977.918979][T23879] dvb-usb: bulk message failed: -22 (3/0) [ 977.928223][T23879] dw2102: i2c transfer failed. [ 977.933776][T12042] dvb-usb: bulk message failed: -22 (6/0) [ 977.939703][T12042] dw2102: i2c transfer failed. [ 977.948741][T12042] dvb-usb: bulk message failed: -22 (6/0) [ 977.955721][T12042] dw2102: i2c transfer failed. [ 977.960901][T12042] dvb-usb: bulk message failed: -22 (6/0) [ 977.972349][T12042] dw2102: i2c transfer failed. [ 977.984524][T12042] dvb-usb: MAC address: 02:02:02:02:02:02 [ 978.049126][T12042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 978.080338][T12042] dvb-usb: bulk message failed: -22 (3/0) [ 978.086187][T12042] dw2102: command 0x0e transfer failed. [ 978.094130][T12042] dvb-usb: bulk message failed: -22 (3/0) [ 978.100737][ T5918] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 978.110048][T12042] dw2102: command 0x0e transfer failed. [ 978.260092][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 978.265981][ T5918] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 978.275229][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 978.283659][ T5918] usb 4-1: can't read configurations, error -61 [ 978.422502][T12042] dvb-usb: bulk message failed: -22 (3/0) [ 978.428359][T12042] dw2102: command 0x0e transfer failed. [ 978.435202][ T5918] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 978.443089][T12042] dvb-usb: bulk message failed: -22 (3/0) [ 978.448838][T12042] dw2102: command 0x0e transfer failed. [ 978.454565][T12042] dvb-usb: bulk message failed: -22 (1/0) [ 978.460441][T12042] dw2102: command 0x51 transfer failed. [ 978.466046][T12042] dvb-usb: bulk message failed: -22 (5/0) [ 978.472138][T12042] dw2102: i2c probe for address 0x68 failed. [ 978.478629][T12042] dvb-usb: bulk message failed: -22 (5/0) [ 978.489997][T12042] dw2102: i2c probe for address 0x69 failed. [ 978.504952][T12042] dvb-usb: bulk message failed: -22 (5/0) [ 978.511472][T12042] dw2102: i2c probe for address 0x6a failed. [ 978.517506][T12042] dw2102: probing for demodulator failed. Is the external power switched on? [ 978.530674][T12042] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 978.605583][T12042] rc_core: IR keymap rc-tt-1500 not found [ 978.611521][T12042] Registered IR keymap rc-empty [ 978.619297][T12042] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 978.620225][T12738] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 978.628516][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 978.642265][T12042] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input103 [ 978.653378][ T5918] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 978.664559][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 978.673227][T12042] dvb-usb: schedule remote query interval to 250 msecs. [ 978.683094][ T5918] usb 4-1: can't read configurations, error -61 [ 978.693756][ T5918] usb usb4-port1: attempt power cycle [ 978.699370][T12042] dw2102: su3000_power_ctrl: 0, initialized 1 [ 978.718373][T12042] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 978.731872][T12042] usb 3-1: USB disconnect, device number 25 [ 978.747499][T23900] team0: Device gtp0 is of different type [ 978.778715][T12042] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 978.790715][T12738] usb 5-1: Using ep0 maxpacket: 8 [ 978.816047][T12738] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 978.863790][T23903] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5270'. [ 978.867622][T12738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 978.896287][T12738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 978.922049][T12738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 978.944409][T12738] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 978.958648][T12738] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 978.970867][T12738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.985737][T12738] usb 5-1: config 0 descriptor?? [ 979.060157][ T5918] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 979.110116][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 979.118836][ T5918] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 979.133854][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 979.146835][ T5918] usb 4-1: can't read configurations, error -61 [ 979.236644][T12042] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 979.299998][ T5918] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 979.382855][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 979.390663][ T5918] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 979.409637][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 979.432208][ T5918] usb 4-1: can't read configurations, error -61 [ 979.474124][T12042] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 979.490162][ T5918] usb usb4-port1: unable to enumerate USB device [ 979.511591][T23922] netlink: 'syz.7.5277': attribute type 10 has an invalid length. [ 979.523075][T23922] bond0: (slave wlan1): Opening slave failed [ 979.545537][T12042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.561494][T12042] usb 3-1: Product: syz [ 979.565776][T12042] usb 3-1: Manufacturer: syz [ 979.573258][T12042] usb 3-1: SerialNumber: syz [ 979.583532][T12042] usb 3-1: config 0 descriptor?? [ 979.594569][T12042] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 979.961181][T12738] usb 5-1: USB disconnect, device number 25 [ 980.706954][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5279'. [ 980.721371][T23931] veth0: entered promiscuous mode [ 980.728234][T23931] veth0: left promiscuous mode [ 980.829185][T23938] fuse: Unknown parameter 'fdUW' [ 981.038039][T23949] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer. [ 981.227814][T12042] gspca_sunplus: reg_r err -71 [ 981.232814][T12042] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 981.261290][T12042] usb 3-1: USB disconnect, device number 26 [ 981.323328][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5291'. [ 981.359223][T23965] loop2: detected capacity change from 0 to 7 [ 981.371580][T23965] loop2: [ 981.374594][T23965] loop2: partition table partially beyond EOD, truncated [ 981.385636][ T5234] loop2: [ 981.388642][ T5234] loop2: partition table partially beyond EOD, truncated [ 981.860124][T12738] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 982.075177][T23979] netlink: 'syz.2.5295': attribute type 10 has an invalid length. [ 982.120676][T12738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.134731][T12738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.145065][T12738] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 982.162678][T12738] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 982.175547][T12738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.194740][T12738] usb 5-1: config 0 descriptor?? [ 982.976394][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5297'. [ 983.023404][T12738] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 983.290222][T12042] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 983.365676][T23996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer. [ 983.471335][T12042] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 983.510508][T12042] usb 3-1: config 3 has no interface number 0 [ 983.544958][T12042] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 983.568332][T12042] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 983.585332][T12042] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 983.596235][T12042] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 983.606155][T12042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.620029][T23991] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 983.842588][T12042] usb 3-1: string descriptor 0 read error: -71 [ 983.858067][T12042] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 983.866957][T12042] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 983.878131][T12042] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 983.888623][T12042] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 983.909464][T12042] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 983.922391][T12042] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 983.933020][T12042] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 983.944585][T12042] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 983.971462][T12042] usb 3-1: USB disconnect, device number 27 [ 984.010810][T12042] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 984.039749][T12042] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 984.058109][T12042] keyspan 3-1:3.168: device disconnected [ 984.388774][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5306'. [ 984.526139][T24016] netlink: 'syz.7.5305': attribute type 1 has an invalid length. [ 984.550835][T12042] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 984.691668][T24016] bond1: entered promiscuous mode [ 984.698346][T24016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.115278][T24035] netlink: 'syz.3.5309': attribute type 1 has an invalid length. [ 985.190823][ T30] audit: type=1326 audit(1755476939.825:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24036 comm="syz.2.5310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7071d8ebe9 code=0x0 [ 985.276929][ T30] audit: type=1800 audit(1755476939.885:818): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5310" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 985.370631][ T5918] usb 5-1: USB disconnect, device number 26 [ 985.994411][T24048] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 986.001926][T24048] macsec1: entered allmulticast mode [ 986.132221][T24048] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 986.218892][T24048] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 986.234430][T24048] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 986.891744][T24059] netlink: 'syz.7.5316': attribute type 8 has an invalid length. [ 987.056871][T24066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5319'. [ 987.083956][T24066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5319'. [ 987.510020][ T30] audit: type=1326 audit(1755476942.145:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24076 comm="syz.7.5324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff8638ebe9 code=0x0 [ 987.643907][T24084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5320'. [ 988.045964][T24099] netlink: 'syz.4.5331': attribute type 8 has an invalid length. [ 988.533428][T24114] netlink: 340 bytes leftover after parsing attributes in process `syz.3.5335'. [ 988.596949][T24114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5335'. [ 988.701107][T24118] netlink: 'syz.3.5337': attribute type 4 has an invalid length. [ 988.717341][T24120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5338'. [ 988.753081][T24120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5338'. [ 988.817905][T24123] loop2: detected capacity change from 0 to 7 [ 988.825996][ T5879] loop2: [ 988.829102][ T5879] loop2: partition table partially beyond EOD, truncated [ 988.837510][T24123] loop2: [ 988.845241][T24123] loop2: partition table partially beyond EOD, truncated [ 988.872006][T24126] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5341'. [ 988.894053][ T5918] IPVS: starting estimator thread 0... [ 988.992921][T24128] IPVS: using max 36 ests per chain, 86400 per kthread [ 989.030379][ T30] audit: type=1326 audit(1755476943.675:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.2.5344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7071d8ebe9 code=0x0 [ 989.708081][T24143] netlink: 'syz.3.5346': attribute type 8 has an invalid length. [ 989.901288][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5349'. [ 990.382576][T24161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5352'. [ 990.805669][T24167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5353'. [ 990.949966][ T5918] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 991.145651][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 991.159754][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 991.173197][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 991.199932][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 991.227199][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 991.237895][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.268730][ T5918] usb 5-1: config 0 descriptor?? [ 991.583550][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5357'. [ 991.707135][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 991.722080][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 991.724356][ T30] audit: type=1326 audit(1755476946.365:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.7.5360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff8638ebe9 code=0x0 [ 991.739063][ T5918] usb 5-1: USB disconnect, device number 27 [ 991.899964][ T979] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 992.051439][ T979] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 992.062607][ T979] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 992.074050][ T979] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 992.084204][ T979] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 992.094227][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.105321][T24181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.117524][ T979] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.351936][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5361'. [ 992.433086][ T979] usb 3-1: USB disconnect, device number 28 [ 994.507560][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5372'. [ 994.518421][T24220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5372'. [ 994.585322][ T30] audit: type=1326 audit(1755476949.225:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24222 comm="syz.2.5373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7071d8ebe9 code=0x0 [ 994.939523][T24226] geneve3: entered promiscuous mode [ 994.945216][T24226] geneve3: entered allmulticast mode [ 995.153763][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5375'. [ 995.849923][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5377'. [ 997.859888][T24281] loop2: detected capacity change from 0 to 7 [ 997.895888][T24281] loop2: [ 997.914789][T24281] loop2: partition table partially beyond EOD, truncated [ 998.069032][T24285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5393'. [ 998.343505][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.349152][T24295] netlink: 'syz.4.5396': attribute type 4 has an invalid length. [ 998.355831][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.560034][ T979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 998.712350][ T979] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 998.741010][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.810693][ T979] usb 3-1: config 0 descriptor?? [ 998.832164][ T979] gspca_main: spca508-2.14.0 probing 8086:0110 [ 999.022976][ T979] gspca_spca508: reg_read err -32 [ 999.270747][T24293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5394'. [ 999.580163][ T979] gspca_spca508: reg_read err -110 [ 999.585822][ T979] gspca_spca508: reg_read err -32 [ 999.597184][ T979] gspca_spca508: reg_read err -32 [ 999.612549][ T979] gspca_spca508: reg write: error -32 [ 999.630070][ T979] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 999.985630][T24330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1000.119073][ T30] audit: type=1800 audit(1755476954.755:823): pid=24333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5405" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1000.566970][T24340] loop6: detected capacity change from 0 to 7 [ 1000.589784][T24340] Dev loop6: unable to read RDB block 7 [ 1000.595798][T24340] loop6: AHDI p1 p2 [ 1000.599780][T24340] loop6: partition table partially beyond EOD, truncated [ 1000.607195][T24340] loop6: p1 start 926365495 is beyond EOD, truncated [ 1000.906047][ T5234] Dev loop6: unable to read RDB block 7 [ 1000.931799][ T5234] loop6: AHDI p1 p2 [ 1000.937867][ T5234] loop6: partition table partially beyond EOD, truncated [ 1000.953585][ T5234] loop6: p1 start 926365495 is beyond EOD, truncated [ 1000.966096][T24343] netlink: 'syz.6.5409': attribute type 8 has an invalid length. [ 1001.050440][ T5879] udevd[5879]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1001.193648][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1001.214351][T24350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1001.269635][ T979] usb 3-1: USB disconnect, device number 29 [ 1001.458815][T24365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5417'. [ 1001.546900][T24368] batadv0: entered promiscuous mode [ 1001.558609][T24368] batadv0: left promiscuous mode [ 1001.704113][T12738] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1001.804509][T24375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1001.904924][T12738] usb 4-1: Using ep0 maxpacket: 32 [ 1001.918324][T12738] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.928468][T12738] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1001.995742][T12738] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1002.008589][T12738] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1002.025503][T12738] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1002.039784][T12738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1002.060080][T12738] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1002.088706][T12738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.155355][T12738] usb 4-1: config 0 descriptor?? [ 1002.608312][T12738] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 1002.618696][T12738] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 1002.697674][T12738] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 1002.727283][T12738] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 1002.815413][T12738] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 1002.825573][T12738] hid-thrustmaster 0003:044F:B65D.0022: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1002.838593][T12738] hid-thrustmaster 0003:044F:B65D.0022: setup data couldn't be sent [ 1002.859144][ C0] hid-thrustmaster 0003:044F:B65D.0022: URB to get model id failed with error -71 [ 1002.873193][T12738] usb 4-1: USB disconnect, device number 43 [ 1002.886345][T24404] netlink: 'syz.7.5431': attribute type 23 has an invalid length. [ 1003.012375][T24406] fido_id[24406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1003.434211][T24415] fuse: Bad value for 'fd' [ 1003.779969][T12738] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1003.931720][T12738] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.942270][T12738] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1003.951964][T12738] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1003.961672][T12738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.213005][T24423] input: syz1 as /devices/virtual/input/input105 [ 1006.421999][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5439'. [ 1006.516160][ T979] usb 4-1: USB disconnect, device number 44 [ 1006.587316][T24451] netlink: 'syz.3.5444': attribute type 4 has an invalid length. [ 1006.674929][T24453] fuse: Bad value for 'rootmode' [ 1006.967476][T24460] netlink: 'syz.3.5447': attribute type 8 has an invalid length. [ 1007.197189][T24462] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5445'. [ 1007.390542][T24466] geneve3: entered promiscuous mode [ 1007.395945][T24466] geneve3: entered allmulticast mode [ 1008.014284][T24479] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1008.075388][T24479] macsec2: entered allmulticast mode [ 1008.136659][T24479] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1008.170278][T24479] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1008.178658][T24479] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1008.863101][T24482] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1009.207963][T24498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.947482][T24518] geneve2: entered promiscuous mode [ 1009.986825][T24518] geneve2: entered allmulticast mode [ 1010.186996][ T979] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1010.371777][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.407897][ T979] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1010.469923][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1010.487033][ T979] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1010.517427][ T979] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1010.559970][ T979] usb 3-1: Product: syz [ 1010.564197][ T979] usb 3-1: Manufacturer: syz [ 1010.585357][ T979] usb 3-1: SerialNumber: syz [ 1010.621980][ T979] usb 3-1: config 0 descriptor?? [ 1010.707143][ T979] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1010.771802][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.264675][T24567] geneve3: entered promiscuous mode [ 1011.300078][T24567] geneve3: entered allmulticast mode [ 1011.377805][T24572] netlink: 'syz.7.5483': attribute type 8 has an invalid length. [ 1011.439144][T24574] loop2: detected capacity change from 0 to 7 [ 1011.486918][T24574] loop2: [ 1011.496409][T24574] loop2: partition table partially beyond EOD, truncated [ 1011.786585][ T979] usb 3-1: USB disconnect, device number 30 [ 1011.932383][T24594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.230203][ T979] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1012.420121][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 1012.435427][ T979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.476819][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1012.506098][ T979] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.544224][ T30] audit: type=1326 audit(1755476967.165:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24581 comm="syz.4.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583378ebe9 code=0x7fc00000 [ 1012.590053][ T979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.629520][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.676272][ T979] usb 3-1: Product: syz [ 1012.689915][ T979] usb 3-1: Manufacturer: syz [ 1012.726007][ T979] usb 3-1: SerialNumber: syz [ 1012.752612][ T979] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1012.760275][ T979] cdc_ncm 3-1:1.0: bind() failure [ 1013.448329][ T30] audit: type=1326 audit(1755476968.085:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24626 comm="syz.4.5503" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f583378ebe9 code=0x0 [ 1014.479741][T24637] netlink: 'syz.3.5507': attribute type 4 has an invalid length. [ 1014.499981][T12738] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1014.650804][T12738] usb 5-1: Using ep0 maxpacket: 8 [ 1014.663885][T12738] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.695449][T12738] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1014.711239][T12738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1014.725665][T12738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1014.744077][T12738] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1014.757700][T12738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.783395][T12738] hub 5-1:1.0: bad descriptor, ignoring hub [ 1014.789426][T12738] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1014.798624][T12738] cdc_wdm 5-1:1.0: skipping garbage [ 1014.808114][T12738] cdc_wdm 5-1:1.0: skipping garbage [ 1014.817378][T12738] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1014.826614][T12738] cdc_wdm 5-1:1.0: Unknown control protocol [ 1014.859305][ T9] usb 3-1: USB disconnect, device number 31 [ 1015.218548][ T30] audit: type=1326 audit(1755476969.855:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24660 comm="syz.2.5516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7071d8ebe9 code=0x0 [ 1015.298283][T24664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5517'. [ 1015.311359][T24664] vlan2: entered promiscuous mode [ 1015.497395][T24668] netlink: 'syz.6.5519': attribute type 4 has an invalid length. [ 1015.627266][T24675] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1015.742299][T24635] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1015.888240][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5525'. [ 1016.076185][T24690] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1016.084551][T24690] macsec1: entered allmulticast mode [ 1016.091463][T24690] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1016.102083][T24690] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1016.109289][T24690] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1016.246603][T24692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.406360][T24694] netlink: 'syz.2.5530': attribute type 4 has an invalid length. [ 1016.495559][T24699] loop6: detected capacity change from 0 to 524288000 [ 1016.771883][T24712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5536'. [ 1016.901223][ T30] audit: type=1326 audit(1755476971.535:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24715 comm="syz.3.5538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff60358ebe9 code=0x0 [ 1016.971446][ T5918] usb 5-1: USB disconnect, device number 28 [ 1016.974892][T24635] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1017.060156][ T979] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1017.189989][ T979] usb 3-1: device descriptor read/64, error -71 [ 1017.430003][ T979] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1017.560030][ T979] usb 3-1: device descriptor read/64, error -71 [ 1017.680459][ T979] usb usb3-port1: attempt power cycle [ 1017.713429][T24723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1017.770995][T24727] netlink: 'syz.3.5542': attribute type 4 has an invalid length. [ 1017.898300][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1017.965362][T24746] tipc: Enabled bearer , priority 0 [ 1017.986138][T24743] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1018.005489][T24745] tipc: Disabling bearer [ 1018.040101][ T979] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1018.060786][ T979] usb 3-1: device descriptor read/8, error -71 [ 1018.150552][T24754] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5552'. [ 1018.225284][T24757] fuse: Bad value for 'fd' [ 1018.320207][ T979] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1018.355237][ T979] usb 3-1: device descriptor read/8, error -71 [ 1018.500645][ T979] usb usb3-port1: unable to enumerate USB device [ 1018.540204][T24761] geneve2: entered promiscuous mode [ 1018.598421][T24761] geneve2: entered allmulticast mode [ 1019.306212][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1019.492239][T24777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 1020.198325][T24797] geneve2: entered promiscuous mode [ 1020.208796][T24797] geneve2: entered allmulticast mode [ 1020.595411][T12738] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1020.733545][T12738] usb 4-1: device descriptor read/64, error -71 [ 1020.970004][ T979] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1020.981865][T12738] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1021.120033][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 1021.126775][ T979] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1021.139979][ T979] usb 3-1: config 0 has no interface number 0 [ 1021.149968][T12738] usb 4-1: device descriptor read/64, error -71 [ 1021.157135][ T979] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1021.169361][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.180326][ T979] usb 3-1: Product: syz [ 1021.185139][ T979] usb 3-1: Manufacturer: syz [ 1021.189817][ T979] usb 3-1: SerialNumber: syz [ 1021.227217][ T979] usb 3-1: config 0 descriptor?? [ 1021.234088][ T979] smsc95xx v2.0.0 [ 1021.263152][T12738] usb usb4-port1: attempt power cycle [ 1021.290063][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1021.420090][ T9] usb 5-1: device descriptor read/64, error -71 [ 1021.600740][T12738] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1021.620350][T12738] usb 4-1: device descriptor read/8, error -71 [ 1021.640108][ T979] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1021.651378][ T979] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1021.659973][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1021.789968][ T9] usb 5-1: device descriptor read/64, error -71 [ 1021.859961][T12738] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1021.883130][T12738] usb 4-1: device descriptor read/8, error -71 [ 1021.902192][ T9] usb usb5-port1: attempt power cycle [ 1022.006917][T12738] usb usb4-port1: unable to enumerate USB device [ 1022.063587][T24818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.072529][ T979] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1022.083580][T24818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.100061][ T979] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1022.143117][ T979] usb 3-1: USB disconnect, device number 36 [ 1022.250063][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1022.271085][ T9] usb 5-1: device descriptor read/8, error -71 [ 1022.323330][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'. [ 1022.509970][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1022.530909][ T9] usb 5-1: device descriptor read/8, error -71 [ 1022.652076][ T9] usb usb5-port1: unable to enumerate USB device [ 1024.974272][T24862] loop2: detected capacity change from 0 to 7 [ 1024.981275][T24862] loop2: [ 1024.984322][T24862] loop2: partition table partially beyond EOD, truncated [ 1025.102284][T24864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5587'. [ 1025.438914][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5593'. [ 1025.495352][T24884] fuse: Unknown parameter 'use00000000000000000000' [ 1025.543732][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5592'. [ 1025.555781][T24885] sctp: [Deprecated]: syz.3.5592 (pid 24885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1025.555781][T24885] Use struct sctp_sack_info instead [ 1025.819942][T12738] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1026.249964][T12738] usb 5-1: Using ep0 maxpacket: 32 [ 1026.275674][T12738] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1026.523299][T12738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.595715][T12738] usb 5-1: Product: syz [ 1026.666053][T12738] usb 5-1: Manufacturer: syz [ 1026.720781][T24908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1026.740130][T12738] usb 5-1: SerialNumber: syz [ 1026.775667][T12738] usb 5-1: config 0 descriptor?? [ 1026.883456][T24912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1027.027922][T12738] airspy 5-1:0.0: Board ID: 05 [ 1027.064955][T12738] airspy 5-1:0.0: Firmware version:  [ 1027.238800][T12738] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 1027.330458][T12738] airspy 5-1:0.0: Registered as swradio24 [ 1027.375452][T24941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1027.391401][T12738] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1027.637605][T12738] usb 5-1: USB disconnect, device number 33 [ 1028.040104][T24961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1028.080166][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1028.107720][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1028.291636][T24966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5621'. [ 1028.385083][T24968] netlink: 'syz.3.5622': attribute type 8 has an invalid length. [ 1028.434158][T24968] bridge11: entered promiscuous mode [ 1029.226650][T24975] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 1029.262214][T24975] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1029.386570][T24985] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1029.640053][ T979] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1029.811732][T25001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1029.821088][ T979] usb 5-1: device descriptor read/64, error -71 [ 1029.834438][T25001] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1030.070117][ T979] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1030.090313][ T5918] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1030.203057][ T979] usb 5-1: device descriptor read/64, error -71 [ 1030.270024][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1030.276722][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.287017][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.295542][ T5918] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1030.304784][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.314234][ T979] usb usb5-port1: attempt power cycle [ 1030.321297][ T5918] usb 4-1: Product: syz [ 1030.325493][ T5918] usb 4-1: Manufacturer: syz [ 1030.330449][ T5918] usb 4-1: SerialNumber: syz [ 1030.344458][ T5918] usb 4-1: config 0 descriptor?? [ 1030.352504][ T5918] hub 4-1:0.0: bad descriptor, ignoring hub [ 1030.358529][ T5918] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1030.368808][ T5918] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1030.381766][ T59] usb 4-1: Failed to submit usb control message: -71 [ 1030.388888][ T59] usb 4-1: unable to send the bmi data to the device: -71 [ 1030.396788][ T59] usb 4-1: unable to get target info from device [ 1030.403378][ T59] usb 4-1: could not get target info (-71) [ 1030.409343][ T59] usb 4-1: could not probe fw (-71) [ 1030.660396][ T979] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1030.684681][ T5918] usb 4-1: USB disconnect, device number 49 [ 1030.711276][ T979] usb 5-1: device descriptor read/8, error -71 [ 1030.950079][ T979] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1030.960687][T25031] xfrm0: entered promiscuous mode [ 1030.966276][T25031] xfrm0: entered allmulticast mode [ 1031.078521][ T979] usb 5-1: device descriptor read/8, error -71 [ 1031.201920][ T979] usb usb5-port1: unable to enumerate USB device [ 1031.260330][ T5918] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1031.431410][ T5918] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1031.441202][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.481912][ T5918] usb 3-1: config 0 descriptor?? [ 1031.773934][ T5918] usb 3-1: Cannot read MAC address [ 1031.780718][ T5918] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1031.809110][ T5918] usb 3-1: USB disconnect, device number 37 [ 1032.282828][T25067] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5653'. [ 1032.300317][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1032.470178][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1032.481404][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1032.502873][ T9] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 1032.515222][ T9] usb 4-1: config 4 has no interface number 0 [ 1032.521465][ T9] usb 4-1: config 4 interface 30 has no altsetting 0 [ 1032.638318][T25082] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5655'. [ 1032.881814][T25083] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5658'. [ 1032.895140][T25083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5658'. [ 1032.905134][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1032.914008][ T9] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1032.924425][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.946591][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1032.966079][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1033.058557][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1033.073100][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1033.084828][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1033.093797][ T9] usb 4-1: media controller created [ 1033.099111][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1033.106783][ T9] dw2102: i2c transfer failed. [ 1033.113013][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1033.118825][ T9] dw2102: i2c transfer failed. [ 1033.120076][ T5918] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1033.125183][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1033.138057][ T9] dw2102: i2c transfer failed. [ 1033.143206][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1033.149075][ T9] dw2102: i2c transfer failed. [ 1033.149265][T25049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.154785][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1033.168775][ T9] dw2102: i2c transfer failed. [ 1033.174691][T25049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.175917][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1033.192012][ T9] dw2102: i2c transfer failed. [ 1033.196894][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1033.196912][T25049] dvb-usb: bulk message failed: -22 (3/0) [ 1033.209159][T25049] dw2102: i2c transfer failed. [ 1033.231365][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1033.247860][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1033.253989][ T9] dw2102: command 0x0e transfer failed. [ 1033.259553][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1033.265505][ T9] dw2102: command 0x0e transfer failed. [ 1033.282914][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 1033.289697][ T5918] usb 5-1: config 0 has an invalid interface number: 191 but max is 1 [ 1033.298301][ T5918] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1033.332747][ T5918] usb 5-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 1033.343292][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1033.352601][ T5918] usb 5-1: config 0 has no interface number 0 [ 1033.358952][ T5918] usb 5-1: config 0 interface 191 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1033.373142][ T5918] usb 5-1: config 0 interface 191 has no altsetting 0 [ 1033.394702][ T5918] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0901, bcdDevice=cb.61 [ 1033.406979][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.422088][ T5918] usb 5-1: Product: syz [ 1033.426475][ T5918] usb 5-1: Manufacturer: syz [ 1033.432945][ T5918] usb 5-1: SerialNumber: syz [ 1033.442561][T25085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5659'. [ 1033.457040][ T5918] usb 5-1: config 0 descriptor?? [ 1033.463952][T25085] vlan3: entered promiscuous mode [ 1033.582092][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1033.587897][ T9] dw2102: command 0x0e transfer failed. [ 1033.608031][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1033.630269][ T9] dw2102: command 0x0e transfer failed. [ 1033.638923][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1033.645420][ T9] dw2102: command 0x51 transfer failed. [ 1033.654903][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1033.662877][ T9] dw2102: i2c probe for address 0x68 failed. [ 1033.668912][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1033.676441][ T9] dw2102: i2c probe for address 0x69 failed. [ 1033.708895][ T5918] option 5-1:0.191: GSM modem (1-port) converter detected [ 1033.729956][ T5918] usb 5-1: USB disconnect, device number 38 [ 1033.858360][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1034.748796][ T9] dw2102: i2c probe for address 0x6a failed. [ 1034.753984][ T5918] option 5-1:0.191: device disconnected [ 1034.768184][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 1034.778107][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1034.985775][T25104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1035.034983][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1035.120193][ T9] rc_core: IR keymap rc-tt-1500 not found [ 1035.126969][ T9] Registered IR keymap rc-empty [ 1035.146340][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1035.184165][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input108 [ 1035.198444][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 1035.205680][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1035.212684][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1035.245112][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1035.309147][ T9] usb 4-1: USB disconnect, device number 50 [ 1035.473715][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1036.250018][T25141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1036.372652][T25147] random: crng reseeded on system resumption [ 1036.853504][T25160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1037.320003][ T5918] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1037.469942][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1037.476455][ T5918] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 1037.485588][ T5918] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.495929][ T5918] usb 4-1: config 4 has no interface number 0 [ 1037.502130][ T5918] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1037.515447][ T5918] usb 4-1: config 4 interface 51 has no altsetting 0 [ 1037.525140][ T5918] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1037.534480][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.542581][ T5918] usb 4-1: Product: syz [ 1037.546769][ T5918] usb 4-1: Manufacturer: syz [ 1037.553682][ T5918] usb 4-1: SerialNumber: syz [ 1037.563229][ T5918] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 1037.703710][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5690'. [ 1037.715874][T25187] veth0: entered promiscuous mode [ 1037.722574][T25187] veth0: left promiscuous mode [ 1037.930575][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1038.091487][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5693'. [ 1038.137152][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1038.159716][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1038.183582][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1038.206000][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1038.218549][ T9] usb 5-1: Product: syz [ 1038.222873][ T9] usb 5-1: Manufacturer: syz [ 1038.227564][ T9] usb 5-1: SerialNumber: syz [ 1038.238430][ T9] usb 5-1: config 0 descriptor?? [ 1038.248957][ T9] usb 5-1: selecting invalid altsetting 0 [ 1038.697921][ T5918] usb 5-1: USB disconnect, device number 39 [ 1039.888805][T25215] cgroup: fork rejected by pids controller in /syz2 [ 1040.154871][ T9] usb 4-1: USB disconnect, device number 51 [ 1040.392718][T25265] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1040.400479][T25265] macsec1: entered allmulticast mode [ 1040.405896][T25265] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1040.412951][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5705'. [ 1040.423108][T25265] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1040.430587][T25265] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1040.825149][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5707'. [ 1041.102599][T25274] netlink: 'syz.2.5708': attribute type 3 has an invalid length. [ 1042.146501][T25323] tipc: Enabled bearer , priority 0 [ 1042.161288][T25323] syzkaller0: entered promiscuous mode [ 1042.175610][T25323] syzkaller0: entered allmulticast mode [ 1042.197636][T25323] sg_write: data in/out 1037/44 bytes for SCSI command 0x22-- guessing data in; [ 1042.197636][T25323] program syz.2.5723 not setting count and/or reply_len properly [ 1042.243065][T25323] tipc: Resetting bearer [ 1042.259523][T25322] tipc: Resetting bearer [ 1042.287516][T25322] tipc: Disabling bearer [ 1042.425924][T25332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5727'. [ 1042.510124][ T5918] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1042.562168][T25337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5729'. [ 1042.679987][T12738] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1042.700080][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 1042.710435][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1042.720519][ T5918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1042.731872][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1042.747870][ T5918] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1042.757356][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.768983][ T5918] usb 5-1: Product: syz [ 1042.775777][ T5918] usb 5-1: Manufacturer: syz [ 1042.783232][ T5918] usb 5-1: SerialNumber: syz [ 1042.793526][ T5918] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 1042.841223][T12738] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 1042.854703][T12738] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1042.869993][T12738] usb 3-1: can't read configurations, error -22 [ 1042.996247][ T9] usb 5-1: USB disconnect, device number 40 [ 1043.005091][T12738] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1043.170651][T12738] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 1043.179758][T12738] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1043.187931][T12738] usb 3-1: can't read configurations, error -22 [ 1043.194486][T12738] usb usb3-port1: attempt power cycle [ 1043.322682][T25344] netlink: 'syz.7.5731': attribute type 8 has an invalid length. [ 1043.334950][T25344] bridge9: entered promiscuous mode [ 1043.342267][T25344] bridge9: entered allmulticast mode [ 1043.540255][T12738] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1043.571715][T12738] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 1043.581191][T12738] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1043.593853][T12738] usb 3-1: can't read configurations, error -22 [ 1043.730264][T12738] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1043.764136][T12738] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 1043.785377][T12738] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1043.794639][T12738] usb 3-1: can't read configurations, error -22 [ 1043.807598][T12738] usb usb3-port1: unable to enumerate USB device [ 1043.830035][T25363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.620018][T12738] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1044.780126][T12738] usb 4-1: Using ep0 maxpacket: 8 [ 1044.817596][T12738] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1044.836478][T12738] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 1044.845440][T12738] usb 4-1: config 4 has no interface number 0 [ 1044.851811][T12738] usb 4-1: config 4 interface 30 has no altsetting 0 [ 1044.862954][T12738] usb 4-1: string descriptor 0 read error: -22 [ 1044.869228][T12738] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1044.878404][T12738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.058878][T12738] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1045.069397][T12738] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1045.075824][T12738] dvb-usb: bulk message failed: -22 (2/0) [ 1045.088383][T12738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1045.210560][T12738] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1045.220335][T12738] usb 4-1: media controller created [ 1045.225642][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1045.232038][T12738] dw2102: i2c transfer failed. [ 1045.234636][T25375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.238964][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1045.247408][T25375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.253504][T12738] dw2102: i2c transfer failed. [ 1045.264022][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1045.267439][T25375] FAULT_INJECTION: forcing a failure. [ 1045.267439][T25375] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.269771][T12738] dw2102: i2c transfer failed. [ 1045.269792][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1045.286614][T25375] CPU: 1 UID: 0 PID: 25375 Comm: syz.3.5742 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1045.286653][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1045.286670][T25375] Call Trace: [ 1045.286694][T25375] [ 1045.286705][T25375] dump_stack_lvl+0x189/0x250 [ 1045.286741][T25375] ? __pfx____ratelimit+0x10/0x10 [ 1045.286776][T25375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.286803][T25375] ? __pfx__printk+0x10/0x10 [ 1045.286839][T25375] ? __pfx___might_resched+0x10/0x10 [ 1045.286863][T25375] ? lock_acquire+0x5f/0x360 [ 1045.286898][T25375] should_fail_ex+0x414/0x560 [ 1045.286931][T25375] should_failslab+0xa8/0x100 [ 1045.286967][T25375] __kmalloc_noprof+0xcb/0x4f0 [ 1045.286998][T25375] ? kfree+0x4d/0x440 [ 1045.287026][T25375] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1045.287053][T25375] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1045.287079][T25375] ? tomoyo_domain+0xd9/0x130 [ 1045.287103][T25375] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1045.287136][T25375] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1045.287168][T25375] ? lock_release+0x4b/0x3e0 [ 1045.287201][T25375] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1045.287236][T25375] ? rcu_is_watching+0x15/0xb0 [ 1045.287261][T25375] ? lock_release+0x4b/0x3e0 [ 1045.287291][T25375] ? vfs_write+0x956/0xb30 [ 1045.287325][T25375] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1045.287369][T25375] ? lock_release+0x4b/0x3e0 [ 1045.287405][T25375] ? __fget_files+0x2a/0x420 [ 1045.287426][T25375] ? __fget_files+0x3a0/0x420 [ 1045.287444][T25375] ? __fget_files+0x2a/0x420 [ 1045.287466][T25375] security_file_ioctl+0xcb/0x2d0 [ 1045.287498][T25375] __se_sys_ioctl+0x47/0x170 [ 1045.287527][T25375] do_syscall_64+0xfa/0x3b0 [ 1045.287562][T25375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.287587][T25375] ? clear_bhb_loop+0x60/0xb0 [ 1045.287613][T25375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.287638][T25375] RIP: 0033:0x7ff60358ebe9 [ 1045.287659][T25375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.287686][T25375] RSP: 002b:00007ff604450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.287711][T25375] RAX: ffffffffffffffda RBX: 00007ff6037b5fa0 RCX: 00007ff60358ebe9 [ 1045.287729][T25375] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 1045.287745][T25375] RBP: 00007ff604450090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.287761][T25375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.287776][T25375] R13: 00007ff6037b6038 R14: 00007ff6037b5fa0 R15: 00007ff6038dfa28 [ 1045.287805][T25375] [ 1045.287818][T25375] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1045.683286][T12738] dw2102: i2c transfer failed. [ 1045.712710][T25375] dvb-usb: bulk message failed: -22 (3/0) [ 1045.721648][T25375] dw2102: i2c transfer failed. [ 1045.726498][T25375] dvb-usb: bulk message failed: -22 (3/0) [ 1045.736370][T25375] dw2102: i2c transfer failed. [ 1045.741434][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1045.749769][T12738] dw2102: i2c transfer failed. [ 1045.755884][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1045.767945][T12738] dw2102: i2c transfer failed. [ 1045.783482][T12738] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1045.827274][T12738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1045.846930][T12738] dvb-usb: bulk message failed: -22 (3/0) [ 1045.853559][T12738] dw2102: command 0x0e transfer failed. [ 1045.859228][T12738] dvb-usb: bulk message failed: -22 (3/0) [ 1045.866021][T12738] dw2102: command 0x0e transfer failed. [ 1046.184409][T12738] dvb-usb: bulk message failed: -22 (3/0) [ 1046.195590][T12738] dw2102: command 0x0e transfer failed. [ 1046.203515][T12738] dvb-usb: bulk message failed: -22 (3/0) [ 1046.249820][T12738] dw2102: command 0x0e transfer failed. [ 1046.264202][T12738] dvb-usb: bulk message failed: -22 (1/0) [ 1046.277340][T12738] dw2102: command 0x51 transfer failed. [ 1046.283491][T12738] dvb-usb: bulk message failed: -22 (5/0) [ 1046.289769][T12738] dw2102: i2c probe for address 0x68 failed. [ 1046.300201][T12738] dvb-usb: bulk message failed: -22 (5/0) [ 1046.306218][T12738] dw2102: i2c probe for address 0x69 failed. [ 1046.313082][T12738] dvb-usb: bulk message failed: -22 (5/0) [ 1046.318984][T12738] dw2102: i2c probe for address 0x6a failed. [ 1046.325836][T12738] dw2102: probing for demodulator failed. Is the external power switched on? [ 1046.335975][T12738] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1046.480354][ T979] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1046.510733][T12738] rc_core: IR keymap rc-tt-1500 not found [ 1046.516908][T12738] Registered IR keymap rc-empty [ 1046.535675][T12738] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1046.592616][T12738] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input109 [ 1046.654658][T12738] dvb-usb: schedule remote query interval to 250 msecs. [ 1046.675011][T12738] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1046.683920][T25402] fuse: Unknown parameter 'mGN8oad' [ 1046.710222][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 1046.725372][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1046.725418][T12738] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1046.745421][ T979] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1046.755151][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.788693][ T979] usb 5-1: Product: syz [ 1046.798103][ T979] usb 5-1: Manufacturer: syz [ 1046.803289][T12738] usb 4-1: USB disconnect, device number 52 [ 1046.806615][ T979] usb 5-1: SerialNumber: syz [ 1046.839549][T12738] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1046.859283][ T979] usb 5-1: config 0 descriptor?? [ 1047.196161][T25411] netlink: 'syz.3.5754': attribute type 4 has an invalid length. [ 1047.282344][ T979] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 1047.490451][T25417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1047.918575][ T979] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 1047.937367][ T979] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1048.172296][T12738] usb 5-1: USB disconnect, device number 41 [ 1048.811241][ T30] audit: type=1326 audit(1755477003.455:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25379 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7071d8ebe9 code=0x7fc00000 [ 1049.744098][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5767'. [ 1049.747663][T25452] kvm: pic: non byte write [ 1049.795807][T25452] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5766'. [ 1049.825897][T25452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.979989][T18835] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1050.157208][T18835] usb 3-1: Using ep0 maxpacket: 16 [ 1050.175733][T18835] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 1050.190293][T18835] usb 3-1: config 0 has no interface number 0 [ 1050.200092][T18835] usb 3-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 1050.247157][T18835] usb 3-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 1050.258133][T18835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.272114][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5770'. [ 1050.294404][T18835] usb 3-1: config 0 descriptor?? [ 1050.305980][T25448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1050.358592][T25469] veth0: entered promiscuous mode [ 1050.366305][T25469] batman_adv: batadv0: Adding interface: macvlan3 [ 1050.389455][T25469] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.396627][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.472580][T25469] batman_adv: batadv0: Interface activated: macvlan3 [ 1051.324962][T25486] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1051.339264][T25486] syz.3.5776 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1051.496735][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5778'. [ 1051.656516][T25497] fuse: Bad value for 'user_id' [ 1051.670096][T25497] fuse: Bad value for 'user_id' [ 1051.691621][T25497] tipc: Enabling of bearer rejected, failed to enable media [ 1051.814429][T25511] geneve2: entered promiscuous mode [ 1051.820206][T25511] geneve2: entered allmulticast mode [ 1052.640526][ T30] audit: type=1326 audit(1755477007.275:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1052.696682][ T30] audit: type=1326 audit(1755477007.275:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1052.698093][ T5918] usb 3-1: USB disconnect, device number 42 [ 1052.799975][ T30] audit: type=1326 audit(1755477007.275:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1053.440520][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1053.513562][ T30] audit: type=1326 audit(1755477007.275:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1053.564802][ T30] audit: type=1326 audit(1755477007.275:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1053.617269][ T30] audit: type=1326 audit(1755477007.275:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1053.652602][ T30] audit: type=1326 audit(1755477007.275:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1053.736374][ T30] audit: type=1326 audit(1755477007.445:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1053.760269][ T30] audit: type=1326 audit(1755477007.445:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.6.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d778ebe9 code=0x7ffc0000 [ 1054.020196][ T5918] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1054.117795][T25563] netlink: 'syz.4.5800': attribute type 2 has an invalid length. [ 1054.125790][T25563] netlink: 'syz.4.5800': attribute type 8 has an invalid length. [ 1054.133772][T25563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5800'. [ 1054.202865][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 1054.213487][ T5918] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1054.222656][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.245609][ T5918] usb 3-1: Product: syz [ 1054.257349][ T5918] usb 3-1: Manufacturer: syz [ 1054.798010][ T5918] usb 3-1: SerialNumber: syz [ 1054.815346][ T5918] usb 3-1: config 0 descriptor?? [ 1055.333718][ T5918] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1055.556520][T25578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5807'. [ 1056.248757][T25590] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5811'. [ 1056.309005][T25595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1056.494531][T25541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.507225][T25541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.705049][T25602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1056.801976][ T5918] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1056.815723][ T5918] usb 3-1: USB disconnect, device number 43 [ 1056.976234][T25608] geneve2: entered promiscuous mode [ 1056.982933][T25608] geneve2: entered allmulticast mode [ 1057.110156][T18835] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1057.295025][T18835] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.307286][T18835] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.322945][T18835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1057.335015][T18835] usb 5-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1057.347442][T18835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.368873][T18835] usb 5-1: config 0 descriptor?? [ 1057.947327][T25626] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1058.160070][T12738] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1058.389967][T12738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.455952][T12738] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1058.677574][T12738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.691201][T12738] usb 3-1: config 0 descriptor?? [ 1059.123307][T12738] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 1059.156226][T12738] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input110 [ 1059.203591][T25634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5824'. [ 1059.268533][T12738] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1059.427692][T12738] usb 3-1: USB disconnect, device number 44 [ 1059.447023][T25637] netlink: 'syz.7.5825': attribute type 8 has an invalid length. [ 1059.532042][T25636] fido_id[25636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1059.773624][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.775932][T25646] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1059.780214][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.788386][T25646] macsec1: entered allmulticast mode [ 1059.799633][T25646] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1059.809006][T25646] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 1059.816636][T25646] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 1059.909902][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1060.465522][T18835] usbhid 5-1:0.0: can't add hid device: -71 [ 1060.472642][T18835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1060.549602][T18835] usb 5-1: USB disconnect, device number 42 [ 1060.563371][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.603935][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1060.614332][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.631258][ T9] usb 4-1: config 0 descriptor?? [ 1060.960090][T18835] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1060.974687][T25667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1061.160350][T18835] usb 5-1: Using ep0 maxpacket: 8 [ 1061.225322][T18835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1061.242776][T18835] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 1061.251958][T18835] usb 5-1: config 4 has no interface number 0 [ 1061.390085][T18835] usb 5-1: config 4 interface 30 has no altsetting 0 [ 1061.519954][ T5918] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1061.522080][T18835] usb 5-1: string descriptor 0 read error: -22 [ 1061.570119][ T9] razer 0003:1532:010E.0024: failed to enable macro keys: -71 [ 1061.641975][T18835] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1061.763653][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 1061.786833][T25681] random: crng reseeded on system resumption [ 1061.816870][ T9] razer 0003:1532:010E.0024: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 1061.828557][T18835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.838171][ T5918] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1061.858929][ T5918] usb 3-1: config 0 has no interface number 0 [ 1061.893097][ T5918] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1061.914337][ T9] usb 4-1: USB disconnect, device number 53 [ 1061.925698][T18835] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1061.934803][T18835] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1061.960148][ T5918] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1062.001255][T18835] dvb-usb: bulk message failed: -22 (2/0) [ 1062.085815][T18835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1062.091936][T25683] fido_id[25683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1062.129470][T18835] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1062.167835][T18835] usb 5-1: media controller created [ 1062.189689][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 1062.203189][T25684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.227279][T25684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.236368][T18835] dw2102: i2c transfer failed. [ 1062.277282][ T5918] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1062.296979][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 1062.321176][ T5918] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1062.332913][T18835] dw2102: i2c transfer failed. [ 1062.490058][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 1062.495908][T18835] dw2102: i2c transfer failed. [ 1062.501067][T25662] dvb-usb: bulk message failed: -22 (3/0) [ 1062.507088][T25662] dw2102: i2c transfer failed. [ 1062.550047][ T5918] usb 3-1: Product: syz [ 1062.550083][T25662] dvb-usb: bulk message failed: -22 (3/0) [ 1062.554260][ T5918] usb 3-1: Manufacturer: syz [ 1062.554279][ T5918] usb 3-1: SerialNumber: syz [ 1062.580093][T25662] dw2102: i2c transfer failed. [ 1062.598338][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 1062.604262][T18835] dw2102: i2c transfer failed. [ 1062.609074][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 1062.630344][T18835] dw2102: i2c transfer failed. [ 1062.638856][T18835] dvb-usb: bulk message failed: -22 (6/0) [ 1062.670360][ T5918] usb 3-1: config 0 descriptor?? [ 1062.695188][ T5918] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 1062.725476][ T5918] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 1062.735500][T18835] dw2102: i2c transfer failed. [ 1062.755629][T18835] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1062.767149][ T5918] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 1062.796622][ T5918] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1062.836535][ T5918] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 1062.861785][ T5918] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1062.863436][T18835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1062.966819][ T5918] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 1062.989430][ T5918] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1063.535879][ T5918] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 1063.899687][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 1063.928819][T18835] dw2102: command 0x0e transfer failed. [ 1063.939204][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 1063.946479][T18835] dw2102: command 0x0e transfer failed. [ 1064.006183][ T5918] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1064.038259][T25697] netlink: 'syz.3.5843': attribute type 4 has an invalid length. [ 1064.270054][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 1064.275976][T18835] dw2102: command 0x0e transfer failed. [ 1064.309930][T12738] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1064.321716][T18835] dvb-usb: bulk message failed: -22 (3/0) [ 1064.347973][T18835] dw2102: command 0x0e transfer failed. [ 1064.400807][T18835] dvb-usb: bulk message failed: -22 (1/0) [ 1064.456818][T18835] dw2102: command 0x51 transfer failed. [ 1064.477954][T12738] usb 4-1: Using ep0 maxpacket: 8 [ 1064.491562][T18835] dvb-usb: bulk message failed: -22 (5/0) [ 1064.516484][T12738] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1064.535831][T18835] dw2102: i2c probe for address 0x68 failed. [ 1064.544280][T12738] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 1064.574512][T12738] usb 4-1: config 4 has no interface number 0 [ 1064.581114][T18835] dvb-usb: bulk message failed: -22 (5/0) [ 1064.622131][T12738] usb 4-1: config 4 interface 30 has no altsetting 0 [ 1064.632768][T18835] dw2102: i2c probe for address 0x69 failed. [ 1064.638811][T18835] dvb-usb: bulk message failed: -22 (5/0) [ 1064.687044][T12738] usb 4-1: string descriptor 0 read error: -22 [ 1064.698543][ T5918] usb 3-1: USB disconnect, device number 45 [ 1064.699617][T12738] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1064.714270][T18835] dw2102: i2c probe for address 0x6a failed. [ 1064.728111][T25701] loop9: detected capacity change from 0 to 8 [ 1064.735774][T18835] dw2102: probing for demodulator failed. Is the external power switched on? [ 1064.753761][ T5918] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1064.760166][T12738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.783137][T18835] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1064.803028][ T5879] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1064.821205][ T5918] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1064.822742][ T5879] loop9: partition table partially beyond EOD, [ 1064.844334][T12738] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1064.878814][ T5879] truncated [ 1064.883531][ T5879] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1064.915467][ T5918] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1064.919382][T12738] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1064.945364][T12738] dvb-usb: bulk message failed: -22 (2/0) [ 1064.951831][T25701] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1064.957274][T25701] loop9: partition table partially beyond EOD, truncated [ 1064.967532][T25701] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1064.976881][T25710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5848'. [ 1064.991536][T18835] rc_core: IR keymap rc-tt-1500 not found [ 1064.999623][T18835] Registered IR keymap rc-empty [ 1065.006532][ T5918] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1065.013618][T18835] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1065.039458][T25699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.059056][ T5918] keyspan 3-1:0.107: device disconnected [ 1065.060592][T12738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1065.090363][T25699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.104434][T12738] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1065.115800][T18835] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input111 [ 1065.122431][T25699] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 1065.128513][T12738] usb 4-1: media controller created [ 1065.137537][T25699] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 1065.137562][T25699] CPU: 1 UID: 0 PID: 25699 Comm: syz.3.5844 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1065.137591][T25699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1065.137606][T25699] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 1065.137637][T25699] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 8d b6 3c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 1065.137659][T25699] RSP: 0018:ffffc9001af67aa8 EFLAGS: 00010202 [ 1065.137681][T25699] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 1065.137697][T25699] RDX: ffffffff87e65d05 RSI: ffffffff8f0d3a50 RDI: 0000000000001900 [ 1065.137714][T25699] RBP: 0000000000000000 R08: ffff88803007da00 R09: 0000000000000002 [ 1065.137730][T25699] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 1065.137747][T25699] R13: 1ffff1100fc95838 R14: 0000000000000002 R15: ffff88807e4ac1c8 [ 1065.137764][T25699] FS: 00007ff6044506c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1065.137784][T25699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1065.137799][T25699] CR2: 000000110c3816b2 CR3: 000000008016c000 CR4: 00000000003526f0 [ 1065.137818][T25699] Call Trace: [ 1065.137828][T25699] [ 1065.144018][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1065.151440][T25699] ? i2cdev_ioctl+0x64b/0x7f0 [ 1065.151487][T25699] __i2c_transfer+0x871/0x2170 [ 1065.163725][T12738] dw2102: i2c transfer failed. [ 1065.173638][T25699] ? __pfx___i2c_transfer+0x10/0x10 [ 1065.173683][T25699] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1065.173707][T25699] ? i2c_transfer+0x120/0x3a0 [ 1065.173740][T25699] i2c_transfer+0x25b/0x3a0 [ 1065.173780][T25699] ? lock_release+0x4b/0x3e0 [ 1065.184465][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1065.199420][T25699] ? __pfx_i2c_transfer+0x10/0x10 [ 1065.199465][T25699] ? __might_fault+0xcc/0x130 [ 1065.199498][T25699] ? _copy_from_user+0x94/0xb0 [ 1065.206246][T12738] dw2102: i2c transfer failed. [ 1065.213552][T25699] i2cdev_ioctl_rdwr+0x460/0x740 [ 1065.213603][T25699] i2cdev_ioctl+0x64b/0x7f0 [ 1065.213635][T25699] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1065.213671][T25699] ? __fget_files+0x3a0/0x420 [ 1065.213691][T25699] ? __fget_files+0x2a/0x420 [ 1065.222447][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1065.229643][T25699] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1065.238220][T12738] dw2102: i2c transfer failed. [ 1065.245584][T25699] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1065.245633][T25699] __se_sys_ioctl+0xf9/0x170 [ 1065.245663][T25699] do_syscall_64+0xfa/0x3b0 [ 1065.255234][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1065.261211][T25699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.261237][T25699] ? clear_bhb_loop+0x60/0xb0 [ 1065.261260][T25699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.261281][T25699] RIP: 0033:0x7ff60358ebe9 [ 1065.261299][T25699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.261317][T25699] RSP: 002b:00007ff604450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1065.452421][T25699] RAX: ffffffffffffffda RBX: 00007ff6037b5fa0 RCX: 00007ff60358ebe9 [ 1065.460399][T25699] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 1065.468368][T25699] RBP: 00007ff603611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1065.476344][T25699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.484317][T25699] R13: 00007ff6037b6038 R14: 00007ff6037b5fa0 R15: 00007ff6038dfa28 [ 1065.492300][T25699] [ 1065.495353][T25699] Modules linked in: [ 1065.500066][T12738] dw2102: i2c transfer failed. [ 1065.500375][T25699] ---[ end trace 0000000000000000 ]--- [ 1065.504878][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1065.516108][T12738] dw2102: i2c transfer failed. [ 1065.520956][T12738] dvb-usb: bulk message failed: -22 (6/0) [ 1065.526709][T12738] dw2102: i2c transfer failed. [ 1065.531854][T12738] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1065.549384][T12738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.591289][T25699] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 1065.628195][T25699] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 8d b6 3c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 1065.634105][T12738] dvb-usb: bulk message failed: -22 (3/0) [ 1065.650494][T25699] RSP: 0018:ffffc9001af67aa8 EFLAGS: 00010202 [ 1065.660446][T25699] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 1065.668904][T25699] RDX: ffffffff87e65d05 RSI: ffffffff8f0d3a50 RDI: 0000000000001900 [ 1065.679218][T25699] RBP: 0000000000000000 R08: ffff88803007da00 R09: 0000000000000002 [ 1065.688375][T25699] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 1065.696888][T25699] R13: 1ffff1100fc95838 R14: 0000000000000002 R15: ffff88807e4ac1c8 [ 1065.705382][T18835] dvb-usb: schedule remote query interval to 250 msecs. [ 1065.728659][T25699] FS: 00007ff6044506c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1065.740786][ T5879] udevd[5879]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1065.742052][T25699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1065.752062][T18835] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1065.764138][T25699] CR2: 000000110c2fbe80 CR3: 000000008016c000 CR4: 00000000003526f0 [ 1065.772307][T12738] dw2102: command 0x0e transfer failed. [ 1065.772322][T12738] dvb-usb: bulk message failed: -22 (3/0) [ 1065.772338][T12738] dw2102: command 0x0e transfer failed. [ 1065.778048][T18835] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1065.789631][T18835] usb 5-1: USB disconnect, device number 43 [ 1065.808207][T25699] Kernel panic - not syncing: Fatal exception [ 1065.814669][T25699] Kernel Offset: disabled [ 1065.818999][T25699] Rebooting in 86400 seconds..