last executing test programs: 3m22.699145877s ago: executing program 1 (id=744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="0ca8228b63f96967de59ca57118842b35a7fa4cc24761a9231ecb25cc3311f9c7a5e2cf1d96dfd770af4dc961187e901d161f4a5df1d5299c9f79759d7fdee2f23d1750eaa9f2adb", 0x48}, {&(0x7f0000000000)="50090c5cd43f9fc23b5a57dfb49d4fe0cd456e8646657eb3654f1a80120615ac791694208acc77383d5b97ac47ab1650e2ec64a48115758f7196d66aed", 0x3d}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000009c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) 3m22.488289044s ago: executing program 1 (id=746): symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x24020400) unshare(0x22020400) execve(0x0, 0x0, 0x0) 3m22.422563302s ago: executing program 1 (id=747): r0 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000080)=[0x400000000000], 0x1}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="02bfcce6240000000000000000000004"], 0x10}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x2) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x8000000000000000) renameat2(r6, &(0x7f0000000340)='./bus\x00', r6, &(0x7f0000002200)='./bus\x00', 0x2) socket$kcm(0x29, 0x5, 0x0) 3m22.295663219s ago: executing program 1 (id=748): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0xfffffffffffffedb, @random="900854f6650e"}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) 3m21.195601823s ago: executing program 1 (id=751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000500)={r5, 0xa407}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x8001, 0x31324d59, 0x2, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x116c76ab5c1ba20c}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x46c, 0xb, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x384, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x610d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x41}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x73accaa5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x16c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x146}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x154}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x500a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2536}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe19}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x57c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prctl$PR_GET_NAME(0x59616d61, &(0x7f0000000280)=""/256) syz_emit_ethernet(0x74, &(0x7f0000000080)=ANY=[], 0x0) 3m20.64758927s ago: executing program 1 (id=752): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0xba01}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) (async) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x2) r4 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) (async) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) (async) r6 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000002680)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x0, 0x8, {"00000000000000000000000000008001"}, 0x80000001, 0x2}}}, 0x118) getdents(r6, &(0x7f0000000280)=""/4096, 0x9005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0xb, 0x8}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040015}, 0x440a0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0xb, 0x8}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040015}, 0x440a0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r10, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) 3m20.021963669s ago: executing program 32 (id=752): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0xba01}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) (async) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x2) r4 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) (async) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) (async) r6 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000002680)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x0, 0x8, {"00000000000000000000000000008001"}, 0x80000001, 0x2}}}, 0x118) getdents(r6, &(0x7f0000000280)=""/4096, 0x9005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0xb, 0x8}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040015}, 0x440a0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0xb, 0x8}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040015}, 0x440a0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r10, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) 2m54.46002993s ago: executing program 2 (id=844): unshare(0x14000600) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x2, 0x40000000000000]}}) (async) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400e8ffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e000000180002800400120005001600020000000600180000000000"], 0x4c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40500e3ff40000461104e0000000000660500000200000095e8ff0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@empty, 0xfffc, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x4, 0xfffffffffffffffc, 0x7fffffffffffffff}, {0x5}, 0x6, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x0, 0x1}}, 0xe8) (rerun: 64) unshare(0x22020400) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r5, 0x5) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r7, 0x0) read(r7, &(0x7f0000000280)=""/269, 0x10d) (async) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_CONTROLLER, 0x7f, 0x0, 0xfb}) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000004000080270000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004044) syz_usb_control_io(r2, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000880), 0x0, 0x2) (async) pselect6(0x40, &(0x7f0000000480)={0x5e, 0x1d2d, 0x96, 0x3, 0xffffffffffffffd5, 0x5, 0x26, 0x80000001}, &(0x7f0000000700)={0x1000, 0xd, 0xf39, 0x820, 0x9, 0x5, 0x7, 0x400}, &(0x7f0000000740)={0x2, 0x5, 0x75e6, 0x1, 0x1, 0xab00000, 0x7, 0x5}, &(0x7f00000007c0)={r10, r11+60000000}, &(0x7f0000000840)={&(0x7f0000000800)={[0x4]}, 0x8}) 2m53.184683746s ago: executing program 2 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) r3 = syz_clone(0x820000, &(0x7f0000000700)="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", 0xfd, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000800)="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") sched_setattr(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 2m51.103841037s ago: executing program 2 (id=849): dup(0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r3, 0x5b3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x84, &(0x7f00000004c0)={@random="99177fa54f29", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\b\x00', 0x4e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x4e, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, "30b00afe4e70c81fab214abd82f8b48a4772060f5becd81580cda204a4937e4c9cf80b40bf9f6677e16efb281d8a7cb4eabd96c2608fddf1dd501e903ae0"}}}}}}}, 0x0) 2m50.795654385s ago: executing program 2 (id=852): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141901) r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x101, 0x81) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x5, 0xa, 0x0, 0x1, 0x5}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000380)={0x0, {0x1, 0x1}}) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", '\x00', "03000500", "fc599184", ["8bada940ed86af0a00", "c2a4a110cfc1bac26ef76ef7", '\x00', "00113a071fa0fcd9c500"]}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffb, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="050087ca01a5", 0x0, 0x400, 0x20004, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) clock_gettime(0x0, &(0x7f0000000280)) ppoll(&(0x7f0000000240)=[{r5, 0xc310}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x8202) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) 2m49.716179104s ago: executing program 2 (id=856): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}]}}]}, 0xa4}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1d, 0x12}}) 2m49.312911353s ago: executing program 2 (id=857): r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000b50b"]) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.258386121s ago: executing program 33 (id=857): r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000b50b"]) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.552033344s ago: executing program 0 (id=1202): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x48000, 0x0) process_madvise(r5, 0x0, 0x0, 0xf, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0x7040, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x2000000, 0x13, r0, 0x81000000) 1m7.28190853s ago: executing program 0 (id=1203): r0 = creat(0x0, 0x109) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0xe0000000, 0x1, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000000400"], 0x328}}, 0x84) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getrlimit(0x8, &(0x7f00000000c0)) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$alg(0x26, 0x5, 0x0) 1m5.467022239s ago: executing program 0 (id=1206): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1a8, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffffffffdbc, 0x2043, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) 1m3.354249443s ago: executing program 3 (id=1213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) syz_usb_connect(0x6, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e00014004fcff", 0x58}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x404001) dup3(r0, r2, 0x0) 1m3.162296838s ago: executing program 4 (id=1216): add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) (async) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x880200, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001380)=0x8) 1m3.082746989s ago: executing program 4 (id=1217): r0 = accept$unix(0xffffffffffffffff, &(0x7f00000016c0)=@abs, &(0x7f0000000540)=0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r2 = dup(0xffffffffffffffff) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x5, 0x4, 0xa, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, &(0x7f00000005c0)="8f739e42aaf7d9a33d36b017fcc1c384d1efdca9ca383526d621759b2fc315dce230becf6f482320f5bd40c5438baf6563b9e8f85d3b6d433624ade3441156a4a88399ae34fbd12307ddfde9a20ad746b4db27b69588fd8287e0d5d48ce9c3990020f7daf6e381913d1e01bac0be1468c87a63092164b184d4d53e3b7e93ae21fee2a3f3c112940e00b54c958b1d05f30e17e017fd9f69fe9ac3a95accaee0574b69df0d3e4ce811796ee7ca315846c99cd4d4f9b8061eaa57d11079ddf2c273ba6317fb52fe524a5ed0809330ef9e75fd570e3794f1d02772f0b2ba866dce429c8e8c0ea6816cf147e1a4c4e0270392bfa13dee0b210c97f61f8adaa1e8c5780ac1c0bd4057a9ee9c4ee363d34daeff173d442ebc3553f27ce303bbe78df5e0a77515022f86713bb45b099f777e16cb8e7341af3cab20864ade0019a737ccbc585fb872949cb4f651702ae767c828d13aa0198c5c333b0d06bf6c7449f5f049c189502ee9c7845eff53400fe97b775dbe3f964d97d436d8865fdb088af4a9994f3376d945bf8d7d20efd90fd4acdad994490548448c19ebf7bb9b1ddc8706dd0024e8e73d3290ae639e86e8403177f0526540650a899e225ef8f30c2e08b249d048b0f03977595847a35aaee7307941c26d540d37765ce1fca4e995ab4f6930a8b59f5edcc79b94a01289f4b5f02d7dfc4e5994c5ae5e8613a3c34e459e87208463d77b93ee34ccc25d704a31138a39c319dd3899bd2943057b1c6cb73eac356c1f72ce2fff508ec206f44b8aeba318f9a42f9991c519f14a5518d8acabe2406d49485ca4320e6a06d073c6e870c7645952a51410bf51da1a33eb8071fd17b844d8e2c38336d67844b6d768350d79c1389d331a671fee5a7f74ef6fd2ff575a8e7d0f0696bbf52b96c7241f943a590c53382cd315b202c4a1cdd21e212a50835c2df8394315b020c9f4a53e27b4cdbbb828da7e6f3ab4178e397312d103ca7810494037498c1bdc405fb2b4ca42707bc43451d255eafb2d2d85ded942965177236661151fcb845c97483a74b3b042774889cd9dfd45c63557496d55a2954879e7dc5b98e1aec0d8f4fb6df5a78c6824f5595d8f81b2988c9ed2d64d3df386459cda143036ec088713860e4d5b56b4a98d7a5706c00026c37f75c17ab8582e3fa785b3d51bfeb661d3ef19f9ffaf3da1e2ab38547db0ca058a91ab15afaee9d1261a10e56cbaaeee29fd97becd20fd2ff688069ff9d729535c4871bef52bed21364da062a1d85ba2b6881466eee9cae6cdcf2d4bb2b7413f0a96e0cb5760f6b26c0baac070c9a95434ccb539e74afc8a2376ba556d7f23b6df3568ef3317fd8e440857c446f499b36bcf485c8d496189b8a797d70c7f64a23b1c683da873dcc0ae3b0e9791e3681b1c0795b3851c70e5c129aea5a238b77c18326517fbba8d439b31700acf8ef32ad3dd32ad861a869bde284266217fd01ed0e8079cfd59d6396da6499606db0adf30f980be7eb63449b2f0e84ba693cd042cfc1bba9dc5875d5e2dd934cd5b94c7d50869776be6d52b8d011a79837a84c904963d5f9787d0c205b926cb42b27c8c62fadbdc2839e7acea0453aaa395fdb369456a4efd7956694e6857359e4966eb5a5093fcaa9843e7c666e73227bacaa5f8cf61c012d029382f162bd17dc02148107e5dc93c1ec550041220ba80c1a4c4871f4d2637fe024162063a3e8b44f7676cb79e9efcacd8362c7723bee3344f18285a3f1a5be5a3ef07c7ad2e9301abfa6a5f3bfc77018030f8db0e234a94a70ae9ef25b6ded69fcd13ba62f2bb52588070bd708ccbc975466c76afdf4584a6826347ef04b1519296e51e5f8bf23d5b117e829cd1de6ed49b6dbe789f81020838650ed2c355cf2d58af140607172bef644d6771cf6adf3ccfe62ccad77a9491eb11425e0b0cb35fbd08e899fb28435279c4728ce5eb00abc51b6249a87ddb3f1b5f394818cfaf7f8487ff348996ab1d113a7893c6a4b123e3e4a66e1836c50ce6611bcb4c54d9d8eb6c7a3b0330de1b9d9511c8606f4f720ce3676ba98147c5acd9bb930c7726f0ec6b15f88d752fb0cdc11ede1a47342df8c968a53316b49754afde7593c9eace0f83cddac4973ed705a13cc12d0426cb70bf341360e5d540b5904a2b935d6eb3ed3ca39c7fedf3e8dbd79e280c00da60c343cd0fd071df0838b5d9ada3a3c958ba4fc33af6d4de381151aba47d4d12db4b3e7cf66c0a56df962ee7bf4445bb2e83d67c560a82e91e253ffac158dfc5b4ef815ebaa840cea70797b37e6d89f823d80156369a656dbe64c943f0e525934e3ee54a4fbb7af8622261cc0e893fc239186b65f9508388ba6f14dff8c6cf04f932756f4ada1c64b04a0e5532308b2b0e8110bddb3c74ca8ce2efca9236322a0465ec87f3bf7db4a81f34d3705fe83f1178c50a33ae5cfed428a7b597bc465fd2dbf0bebf9b2272e219132c6ddb949d9d7c61219e447c7ca0f1a443da202c0dd194756bff027e62e4cfd402fcd3fd2e5efb87eb059120071d5034ee1368b223bfb8ff5d5e1c4092b86ffb24c55f0b031bc3c97d0b9b14694674ef5378a9507cff853172821e2a23f7606c90c6ff62f002e212ecaa8a6db65149f669e33746c5eb275ee4a0a09e2af3071465b1a02f7f92c8a9e45175fa994e18c508404a37fe3f8f4eb1367c1f0bf021acb848a137b82a335d45d541f8d60ae0a5fd9dedf7135da7d7e4047a528cc01f7ee7a34d96fd5ca9467b7762050cc9fdb17f249d10c8fbf5aedb9555d105b69d244dd69fea92e70c4e86821b03d02e6d92c0b85c5f93052ddb0fb3b1899b193362efce676cc5e359da2447564740841d92a6f2128db7818223cf39d4098963010d708f2ef905f83e0eb16f2fe09aff7ae19c636c23703a4262f29486d8e6b3f60cc7fa8b8ea20f2acdf8ead34bf05f798ed93f0d9439fce52c6fb02250acbdf65265e742941e8b83520c37195d0228999d2dbdca262e61c217264c905fae6ce29422fd41a6f9b228cafa648e948605caa63d72b27b8f42d695b9b4c25503d203f273ace4138fb88e5289a70a5b571d42cd503595b4120368b054b1e098d86c38c76542e2a8269733232eee876371b2ff1a403f82124becde070024b830ad1460b030edad9633a0fd4be575fac38f6a7fe11532fb3239d0cd579d41fd1465f28f39a049f71e99ac7093d45f3739440b2e135bb69d6b65f758c925fe64bbf78a9272c5d77d3e9c399240fe0cae9f966b52cca0a7c259fe6ae5c50170ece488b9334d52fc4bac35e9004c96a1f185ad0f5aaba38440ea607effe88d940c452e0a72a6fcb5d3aa32b55d07cbb32d9ff19d62392d86144f65b201ee510eb67c42d2fd9c9a01bbf98529e8ad1cb76d977cffa0d0a88aaf6465b2b2852917a4204cf601ef6c9d7db596530b53a154c92c9b77c2576a1cfc601214ea01d5a7d22d53b889d294509885b7f516545bde1f96e92163a2ab9c88a8944ef618c4ce8db15778c764cbe06f01a51396c258761f517ec5da69f07a24acd5c3efae82619406b3b1163729b669b45c6c2e132cdf3ad31f46988dd68d410b7c408454984eb2c4fa648a15b6a84c9ac70e3ed44188047184f43c129763e8453a91e76dd553ddb35534909fa2409155410bb96b481d73bc12f64bf406ae5cdfb162c40f00472a8c9fe0724a790af006ceba592330e3db4dca4b9d19980e438b2cb4d82d41a0bdb702f3abd2c95c7f1948a3c1b25e81ee507bbcb39aff06242c33c78bdb41a390544b730b68ca331952738f7fab6ffc63957fc685db2e7a31b6b17c807b04c3a575ea92ca283eacb11bec9567f638ef05d556ec56b6905f76c6e6790c3ca1eb3dcd02cbb685a0ed42825abc18f17c526313b7221f05d77e5bfe437ba84f771bcb222382b74d15d58eb465631679568cbcec23f57e666dbf6b7cb7c51d82c50c771240580efdcfb93667a3af63b2431fb12376fa7fca5538bb9887a5163ff8f9b8b185e5a56cff45f91ce637ddcce3d0166c1dd415a5d29e72cb260e6256ac4532d9afa12fec3efecdf58c21f5986f37816f98cdf3cd01177656fe27847f21959fd2d75cbe62f1154de0c5bef5d739ef3f532254bf4b7a8cb57e832d69c2224a657709af0a05964bb259153314227c33283d64a61faeec0b1e79d072780d3f7c4292a0f26c81910224646c0f844b2f316296134dcbf7ae52fb16ceed84b805ee6b47a75488f0b74c58fbf0cf2629f40e83bacda39c5e0f4f51a8340d4241082173af0ab9118ca25433f2524fcf4aa44148679ae6d9216a1235a1c94f65eb2128ba0fa5adc812b706442271ce1a7860e5a36134a3fab99a5861cbb599c82881d0d1099c3e5f4babc43a60ab1d686eb5174a3776604e96e724f2cedfd5e65f2e78d7ca1e340c3f5c3c52cf3854228e35e7195120482f067a7f0a493511768de721fb7bd322e3aa764eb23d643cfbc507250623c7136e56c6d95b8772ad2cca2b16a39587b3f4628b0ce2f6893c98b1e09607776d55a311b4f32b63bcda431469a7c0c71dd6f198b9dc11ed342996a9f11ac90cde3d0c0590d48d5118453cc5ebece8658abf2095532e6c43ba8fa0e239f33ee6045aee88f6dc798bc37baa68cd8463cf2dd80b669228a2c538b4b8b13e6cb7f37690943f06d40be56fd2cad30e4ab632f9650e18ce1b2d223630469eda26fe11fcfb6359712dcd2b9c7e0bbb649eb3a52dea289aa6dddbbc88ce8a457be4e4892bbc4336c906c37edc546de08a81396eb92dad646b76d85732f54e3deceb64fbc09c9a79ffc8b80a9555d6e79badf959a92e46febfb0e6adf999c3b9ad9944717552ed39e231e639e37b7bf4bfbfd78c096c806e9bbff541bf4f79109b4183c0699d59c600fed70805eb9345f61270b7199c41e20f81e9b785b273b24bea16589511a4f2b02f330f14b9a9b73e90eda1689ca0fd1bddb553100d1c75b52b400bb94a0a9a2209acf0712352c32d9f6b48960e5f85d4a9358fbfd89e279bf5c2c7754c86f772b0a27238b1c2f82e80fe57e5e31225412b3877f4f31ef90470e1ca7fc55dbc6bca32fc10bbe84b8d456da56584eb1ba6ca29bdfac2a7ffcae8598048c94838eaf88610caca109366ee94ef423c48e58afcf916cdab9e1121d2e9d454934f1876a017a2a798e16f65a7fb09a888af518043ea29d8afce37cc3f0f2dfda4e8e057217b9c46c2c245897fa2e1b0d49d98fe1d9291574cea310b0af74ded580268938d8ed517a6afa888730ca1f475ddb50252ce0f5c277ac92c106390ff49a3bc6119cb1fc9fc3f5ad44766ea7b78bb1a41626d974b0f7fb0dd45b4b4b5d7f267d7766527003cd8478c58c0c8beaeac96a604ff352d09d532593516d99e3a1f1478ff0df16903ec07ce5bbde09e66e540d4839ed79cce5ab312f78cdc95f2e8a3facf7c51bd31b90ae6edd66b899f5bb0ead70eed8bb09e223fcc2c71ff530de2f81f55ed39a52b75832db786585430da618cbdbec5837c4eff1de10b7fd77b4eba96e269e9987ead5bd705e23963ac1d33a4c34ed2ee36bc9663b8f7050ce2217f4d6f87a8e36b33d57fe43c18253f8ebe32de036ad1073d2a6d08cd9df30a679fc29b6fe6c42c74b24579b17b9abc6ede6ce5c0cb66e39c93ed6ecc3e8fefdc7ebb5d6364330f167726690dbe4647626c47c7c5b88cb5edf318b9db3d68b29e4b279b5113c7043e6fb5d2bd2035468e26cdb824767a4c748910182a651874ad957d0d0521c04ecc45caec3076e01c2f9562b793a4dcb5", &(0x7f00000015c0)=""/229}, 0x20) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xfffffdfc}]) r10 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x47bc, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) ppoll(&(0x7f0000000240)=[{r7, 0xc310}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000027e842463d6590307abdc1c3fbe53399c4b889e6e53867f4fb2f1f53c235e8fb2461914171e7a9233b84850a433a9c3799f9841fb69c0afbab2cb08b608dc19215be2aa81be601df2a4353ea4e213c0a2bbd51af42a6650bf5672a2734a0f1b78dc7dd19917dece89536b5e866c08348a01421b3bcf8a1047ce04152319fdba848e9692800fa1bdce", @ANYRES16=r13, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r14, @ANYBLOB="10005a800c00018005000200540000000a0018000303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 1m2.972742288s ago: executing program 5 (id=1218): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x140) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, '\x00\x00\x00\b \x00\x00\x00'}}}}}, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="000000000000000000000000000075ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)={0x8, 0x0, [{0xd000, 0x1000, &(0x7f00000021c0)=""/4096}, {0x1, 0xa4, &(0x7f0000000180)=""/164}, {0x4000, 0xf6, &(0x7f0000000340)=""/246}, {0xdddd1000, 0x3c, &(0x7f00000002c0)=""/60}, {0x8080000, 0x1000, &(0x7f00000031c0)=""/4096}, {0xffff1000, 0x2c, &(0x7f0000000440)=""/44}, {0xd000, 0xf7, &(0x7f0000000500)=""/247}, {0x6000, 0xb9, &(0x7f0000000600)=""/185}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route(r4, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c333d001a0008002cbdb100fddbdded8d265f80eee8fd0100080000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c050}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000005902"]) 1m2.874900594s ago: executing program 5 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2d, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb6}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m2.737139037s ago: executing program 5 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) r3 = syz_clone(0x820000, &(0x7f0000000700), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000800)="41f55fc7dbe7598b533fdae858d1d24d566794edb136ef54d9f8cd9a5949ee2374c13f4b8cdd663573050224b803604f3b032388adde5d7e62b1dd672675b991e091a3ba021991818c32e7789635b2e865f5379606add74157a61222803f55fbd3f9d2edb117e3194f291499de8599c796ccd5c4daff76cf0ce3a565b2972bf4cfdd650f495227d04273908ac6beaffa9627abca89d23a9d6a40f569375c835986aef5dd28ca30019e9d5792339752e4df500bbe044e371115f8bcebc9971f1f68d957d90f8b5c4b41b801dcdf58b1b311481ec3cbba65241ed69e9a370a15beaf3d285f4b7eb129423454bdff4184ee834788eb7a0f2df2413053593f49f0") sched_setattr(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 1m2.660285206s ago: executing program 3 (id=1221): syz_usb_connect(0x3, 0x4ba, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0xe5, 0x89, 0xa689e0b5f7dcd0d9, 0x1ff4, 0x600a, 0x9ea3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a8, 0x2, 0x2, 0x7, 0x10, 0x1, [{{0x9, 0x4, 0x5d, 0x8, 0xe, 0xd1, 0x7d, 0x84, 0x8, [@hid_hid={0x9, 0x21, 0xb61, 0x1c, 0x1, {0x22, 0x396}}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0xa2, 0x12}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x5, 0xff, 0x7}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x4, 0x7, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7ee}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x9, 0x8, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xb32c}, @generic={0xfa, 0x16, "7d4a9fc738f33374aed06470fe0a08f439d8c10fe7c496d6df7976bae63216f8aa50fd2cb8f145cc9907cb2aae2d526c105fd378a53e991b1d7d3eaea58ac1c69e15bf80a13883f8e08c83f37c19f36bcba2322e208fb33b6fc36bb284bc010302d1d86280cb31e1c6cef85792ea0df8347250edd0d81cae0a2c4f884faad5c5d7948e2a0d72e7bbc9d108cf9cffb7b4e040e1a8e488d1f2b89154f70bcd5342904cd45f4f5f308ac26aef82345b1f4e0a9c8340ddeed0846bab8ee94d8d57491ad620043c3da2a66a07cdf231e3910e0c097fe378d32f34a08886003c64582cbae3515749838b005cf268ec25bce9af2a120fbce6de4d51"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x21, 0x1, 0x0, [@generic={0x11, 0xb, "e56153c59d405db4faae1831c25b0e"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x3, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x46, 0x11fb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26ae}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x81, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x9, 0x3, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x10, 0x51, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7, 0x10, 0x15}}]}}, {{0x9, 0x4, 0x36, 0xa4, 0x5, 0x6f, 0x1b, 0x2e, 0x7, [@generic={0x36, 0x21, "05e40804cd293accef0299b1ef8405f30dbc0c8077f8821f56c5c135d1dc9bb273ffbb0272147b814fc3e7ee3f2b0deef4c9f84e"}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xa, 0x4, 0x8, [@generic={0x6e, 0x1, "0e50841dfb32e1c05339ea0f44d0f53c617967334cbdccc00f73e117d67ac95a55e0ca3c3db90a0d3b11410ff61cda4b856da652b187d4df964e0a3844f0290739685855baaea11cabc82fe12f395a62a55c47f1f8618c11165b245e640f7b7f6a16a01399986d44f1d5c6c7"}, @generic={0x20, 0x3, "5f476557ffe96951268989cc360cb5e96093890dd99b287df13e5ad0e9d3"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x2, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x71083d411a61ea07, 0x6, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}, @generic={0xe4, 0x6, "522427a354f515b2504c30b1b12f799641bd55b0a5be74d1ca9f31cc650037b603cbc8690c09759b0c437644e0b8b762fc5e2b93322f15e90eed983d007b769b4e3a386b47db9624db586c6dc9982cf4406ad7e39f7e88a52015ca693567988fb620a3dfce3477ff0a2d588c35a489d405d281161bb0bf3c8ea24061c60a105a2efb1f05af47e1fceaf8d6bd70ba4d95e6fc218321ac8afd73808f49d1a93c0a60d093bc95373aae05675c7b03a7ca204d295997990490c939475e656e2e0ad4f502fffc65376f9e452f64bd4ba6a51d2f0d81e6fa45a92ecfba77f3b18ed6acbdf2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x4d, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}, @generic={0xee, 0x23, "5c2b7d4a25b0ee98ad5d7931d95058c99b4f3bb52cc2641d6b89a55bae330d1ed5b19eca90107d2ca6ee49289d06a4c1da00153753431868d0069ac6357f3ab463d97d7f4c0184583741d46baf0fc65c436951ee38fb39e5b38c94981b54a27334a8806993c18bc88dc1d34443c828e97643d9565acd973eaa3c022dc6aa714a8ffa91a1df946cbdca7eaa8a3f0ca21295fda4b4901af52b7b25f003bc9da6114641aa002db924c81a3a18a3e2caa7cb6960925b09251d5bf12f42a454a7b770621cbd547e1c0cae31f7bc0dd583bb09da9c44743d19abd923fc38c243623c178dc34ccbec20854f5eca83a4"}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xfa, 0x81, 0x8f, 0x20, 0x9}, 0x41, &(0x7f0000000500)={0x5, 0xf, 0x41, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3d75, 0x0, 0xd, [0xff3fcf]}, @generic={0x22, 0x10, 0xb, "60136de378c38c6de43f84d4aedc22a5e87a0e38da8d2d47a468027ee081d5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xaf, 0x4, 0x7}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140a}}]}) syz_usb_connect$cdc_ncm(0x1, 0x8b, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x4d, 0x0, 0x2a, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1e81bd02f5"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x10}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@country_functional={0xa, 0x24, 0x7, 0x9, 0xfff5, [0x6, 0x7f]}, @obex={0x5, 0x24, 0x15, 0x9}, @acm={0x4, 0x24, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2a, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xc1, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x9, 0x11, 0x4}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x7, 0xe0, 0x4, 0x8}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x449}}, {0x21, &(0x7f0000000780)=@string={0x21, 0x3, "9d1b2bd37dfa46873afb246679cf8321c8792d749c4588e84dbc55bcab6532"}}, {0xf1, &(0x7f00000007c0)=@string={0xf1, 0x3, "7a61d62ba25255713f3bd2df0d8590b7449a89419c60fd80dbfb69655ba34b5d05e816393ef8ce4b0695c58b089a4cf987c60abeb3e6141ee5fecba499cc511c70cbd60576d6907707371fd5aa2c2d71f6d7590b3e0f7214247cb53470dd12a304042e96087f747732f64d8f5c23fdcca9725ceeae02b00ebe7b58eed31a92133e61b51cad13b940588581fd9b6bdbf2e5d1b13c135237cfea78d86f3702d3dd25921cb7e9a49669af6683f65cfad61859588e653dec9fef908d282241f19bfff11936b667ac71c85fff921864c20eb9ac0b5533edc3ed5677f8f09f8edfb8af55c54254feba73d29355a061b0963b"}}, {0x85, &(0x7f00000008c0)=@string={0x85, 0x3, "9aa7df9d29053c67614d4ddc51beeb71625bf42f49d9acd6f2e8cb6c735064c963e44412bfe1b9300bcdb5b607ceff70e9937deac3bf801cbf28867f6e0ee85dfbcbf31d8226d9e6813a6226d2604c6ad006408b1874ab327cffb21ad747cbb5263e9561b625b8dcd89f9d84b76e4ad0917c121723bb3f1bd591e0cdf394d1dcd559f4"}}]}) r0 = syz_open_dev$dri(&(0x7f0000000a00), 0xb, 0x101000) write(r0, &(0x7f0000000a40)="7a65e36ff032740be510d2490f692668f645c7e4577bf9ca5990acc433b715e32bc94519383823b5f9c331e63a9fc54b86", 0x31) bind$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e22, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x866}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000b80)={0x6, &(0x7f0000000b40)=[{0x91a1, 0x6, 0x4, 0x4}, {0x7, 0x80, 0x82, 0x6}, {0x4, 0x3, 0x0, 0xffff}, {0x1, 0xff, 0x6, 0x5}, {0xea, 0x4, 0xb, 0x1}, {0x1ff, 0x5, 0xef, 0x7c8}]}) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000c40)={0x0, 0x1, 0xf, r4, 0x200}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) syz_clone(0x102400, &(0x7f0000000e00)="1094181f5eb01eb1997bae79c0ac92a9e0c3459f5ef49f67c9dcc8c12722d50936d52784a3e84d0deb3c580d069da5486ab97931bf52f1b9d2e5e657129ce02e2255afc2fcae3294c32318ceffc4134d03cc1771435e08c280459fa41a75c1b1c4e91efb96ec302d22c9cce7076d435e1a541e7f99dccda22d1cb58c5783bbc34b836281e92f75b06a1456288a0b4cbdc791e1ef922591de0ee072c6780666889a8dc002f975a745d3a1e36f053584f2c6dd81b9becc40269f7f", 0xba, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)="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") r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, &(0x7f0000001f80)={'\x00', 0x7, 0x1, 0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002000)={{0x1, 0x1, 0x18, r3, {0xe}}, './file0\x00'}) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000002040), 0x4) pipe(&(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x12, r9, 0x3fa17000) openat$sysctl(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000002100)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000002140)='\\%#\\)($\x00', &(0x7f0000002180)='@%\x00', 0x0) syz_usb_connect$cdc_ecm(0x5, 0x72, &(0x7f00000021c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0xc2, 0x3, 0x2, 0x6, 0x0, 0xfe, {{0x6, 0x24, 0x6, 0x0, 0x0, "cb"}, {0x5, 0x24, 0x0, 0xdee}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x0, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0xf, 0x7f, 0x80, 0xb}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xcd, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x401, 0xb, 0x27, 0x2e, 0x8a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x61, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc9, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0xf, 0x2}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x2c, 0xa, 0x5, 0x20, 0x8d}, 0x30, &(0x7f0000002280)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "fe99b50fe79969aea1d5bd70b310fd1a"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x8, 0xf, 0x8, [0xff0000]}]}, 0x8, [{0x81, &(0x7f00000022c0)=@string={0x81, 0x3, "ec1adb9384153ed46f42378a8970633ce136c45090eaa436ec93038cc07cd949f7756749cfa7b3a3b85ea6f0c50c26c57eae2030ab5cc53f48508298631f510599235b376cce4091521ec9e6bf08f120c29d0eb5bdf52bac48f16612a4e83c2ffce73ac91e89cd0bf8767c53a7f92d6c8710726609bbeb0938febaf0e0ed13"}}, {0x87, &(0x7f0000002380)=@string={0x87, 0x3, "c8d777ed3a5f974b083f14e0acd0573b16887d6464d891aa207ce7a11f814d4867c5d95797a81ee1097b78f62507f0c74dcb88e3383b20934f17857a97783230472502a45fb01926843c250fe950894421b57147298ef71ba50bdc662f7d20dbab223ec34d6c3c3c6423cc5dfbdb2634aaa3865c88bb5a4d9ad2ec8ed7c444d7b68d9b3d64"}}, {0x76, &(0x7f0000002440)=@string={0x76, 0x3, "da55082c3d088439f618b3b7000dd5e88b2cc46619bf66dcf891915e6ccf8a6c899a1da0888385ee01a8060ff15d4d5e953dd0a588c2cc9b37a0410feeaf4f1e6cccef66c1d0b0f117fc83569fe4d2d93ec1262ff301d4efaeaf8446fdf95a327b195a7d8470d8c70d99afaf672a322ec4266584"}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x445}}, {0xf3, &(0x7f0000002540)=@string={0xf3, 0x3, "31aaa99e871948e53f479a4140411e6f6a3324848eddd1ace8f6809930e97870d79a7373c381d637e97f6f7ce5c431125ea3db03eead3acdaf62db0647cdc71f448a5092fb022a361106475d382e9710365f9fa6c58c5c660696624e93af110f3f7ffea123fb1848ff2803416b90051845dac29a2041a3420f4c3388fc76702ef3798b4a0cf1746d44111dc5957f31d5c5645ba59802510e4d28cba13afdef08bf349af18861586f08cc59bea773de1ecc64cf677c8c93c324d216ee6830e1867d31e967e9245c0f7ed269ae59e6caf946e6efc5873ebae0285536151ff7ea7f83eb79259a4387d2bd76347c728fc2c653"}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x418}}, {0x38, &(0x7f0000002680)=@string={0x38, 0x3, "42d485b5cda4cc9d559fd04650781d1449df67241200ea3bf0a6e32fa44839ba03de4fd42d605ed1cd8043e450d032b0951824418e61"}}]}) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002740), 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002780), 0x101000) 1m2.325437111s ago: executing program 0 (id=1222): syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc, 0x0, 0xb49, 0x2, 0xc, 0x53, 0x80000003}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff3}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x858, 0x2, [@TCA_FW_POLICE={0x854, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x8, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x108, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x9, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x8, 0x645, 0x2, 0x80000800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0xfffffffd, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0x7f, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x4, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0xfd8, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0x34, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x3, 0xa5, 0x80, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x3, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x1, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x4009366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8002, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x4, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xc, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x9, 0x10001, 0xda, 0x689, 0x7fffffff, 0x6, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x7ffe, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0x101, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x9, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x23, 0x2, 0xff, 0xfffffffb, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0xffffffff, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x3c5, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x2, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x3, 0x8, 0x81, 0x80000001, 0x102, 0x10000, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0x8, 0x3, 0x10001, 0x4ed, 0x8, 0x9e, 0x9, 0x3, 0xfffffff8, 0x800e58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x100, 0x9, 0xfc, 0x3, 0x5, 0x8002, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x47, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xffff0002}, 0x1, 0xf, 0x1}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x18, r10}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m2.056428256s ago: executing program 4 (id=1223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f0000000040)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x1014020, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="3f4920944032cb747ba13616d06da01782da64e960fbe3b67a127d6964bf78fc679a73abd35f103bdcfdfaf3b5e518d7e3e9e997333c0b2add0f7017c9e2da4b93740fa03c608d890c5e467dd8b841c644223c5c7e5d83d81d2b99af33c4", 0x5e, 0x20000080, &(0x7f0000000380)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'essiv(rfc7539(xchacha20-neon,rmd128),sha224)\x00'}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_aout(r4, &(0x7f0000000880)={{0x108, 0x9c, 0x9, 0x1ab, 0xbb, 0x6, 0x353, 0x700}, "62c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9cc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)='%+9llu \x00'}, 0x1c) pipe2$watch_queue(&(0x7f00000006c0), 0x80) write$sysctl(r2, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 1m0.821893363s ago: executing program 6 (id=1225): r0 = socket$isdn(0x22, 0x3, 0x32) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c7202c3f1a345416e09746cef15b6fdf9846f11e6b56e80c9a59295e2b5111326231bbf4c4667203658f8ef8bb59ef303deea294a7f69a466927b7f86ab7b0de8d0ecec5e1f9efffb496bc7a908e05d", 0x50}, {&(0x7f0000000580)="bcd6468e38f38b8af94a751a1ddac382ed688aec77c4565af693828dd6bdb4d5188114e200aa3d7497859ef60c79619cd366d5bb287dfb70cca6a2f342010be3b86768a87e2167f5abf3657abe93c0c1d876299e3cf0ebe4274dbd107cf3a925dae6f6e9a0689923cdf6a1969dbd580b8a30067f11d0e813d3be40601cec9f21a537e4ca2bcb68f300120d058fd66eea071b6ce3720bb7ad2a30088a4c3a951058368773fb8f64592f6d2d7d284a1f9f19eb8394beabec870cdd35f6af53263906", 0xc1}], 0x2, &(0x7f00000003c0)=[{0x98, 0x10e, 0x9, "e3c245312404f7f4513e1b5d0aa02e5f677a7078bc82eb7d120acd0c5734b72c1e9194f9c34cd14592aac128ec6dcdb5e2a9aabc02fb20bbc8c5ef19695bb15d061f366bccac33ca2db4656f40437e9f3e9af84e0461e821b6a19fa45f722f1f7ae01d79a8209d19beda063bc9e0153e7b40d8976231510018d45d155b7b5d65b2b572c2"}, {0x100, 0x114, 0x32b, "bc3b3af2f30802105e8f654a3aa1e98bc854906e20dd68833d0bb2a9c77e3166f99d774a032b7399656b060ed09ed473877132e88fe66c1152463034eb01dfc3f459dc01e8f023262936d25d7585f5d7da5d17df14dd974a26ee5f80d59ad43c02ebbede5d5d1141492f6757bbc13e0810df7cab0354542752ee3f2c07d881a71bc97c8ccdbf0979a9df020dcbe8e3bdb7740f4b9a34cfb3c048809ab4876abc09425cad0166ce3ec43bd28b3cca40b8a69a4d0143692a3034b505cf665535cc1705ebd94d75d95cc3971b815369a2bbfee63eb624974119a62d544253750e09a32b9ce24c8630953d61b2b7"}], 0x198}, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x91, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}, {"702437d816c682c2da24c62769b75f5d07f212f221f856bea34969726fcb1adc1bc3a9a8b5405fcd3a607332728127e3660b0ef951d2a9b82ceedadb67b14e62bc45ababf37ec1a19b6a827a3dd9db084e77f4e2d9682f1ab2c054"}}}}}}, 0x0) 59.420082931s ago: executing program 3 (id=1226): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x9, &(0x7f0000000000)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000629000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{&(0x7f0000000900)={0xa, 0x4e22, 0xf2, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400440200000000290000000b0000000000000600000000180000000000000029000000360000002b000000000000006c7558028aa0ea498dc8f75f0cfc2ef703c2b3cb5c7378c708926631866876248083bb9535000081848180ac"], 0x30}}], 0x1, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b0d, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x300000, 0x0, 0xa5c, 0x2}, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000006800010003001000fdffff7f00000000000000001c00020001000000c40000000e"], 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 59.177320518s ago: executing program 6 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000100)={0x2, 0x100, 0x2d7, 0x0, 0x5, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x84, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffe}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x48}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x40}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000807}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000140)) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) 56.105371903s ago: executing program 0 (id=1228): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x9, {}, {0xb289d58468e4db09, 0x0, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) 55.049160512s ago: executing program 5 (id=1229): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ab, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020600) bind$tipc(r3, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1c, 0x4007, @fd=r0, 0xa, 0x0, 0x0, 0x6, 0x1, {0x6}}) io_uring_enter(r0, 0x629, 0x4c1, 0x43, 0x0, 0x0) 54.727713605s ago: executing program 3 (id=1230): unshare(0x60480) (async, rerun: 32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x69, 0x0, 0x4, 0x3}, 0x10) (async, rerun: 32) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) (async) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001200), 0x80000, 0x0) fcntl$notify(r5, 0x402, 0x31) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) (async) r7 = io_uring_setup(0x30d5, &(0x7f0000000000)) close_range(r7, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000180)={[0x3ff]}, 0x0, 0x0, 0x8) (async) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000140)=0xffff) (async, rerun: 32) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x8042, 0x2, 0x1}, 0x18, 0x3) (rerun: 32) landlock_restrict_self(r8, 0x6) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000502, 0x0, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) pread64(r9, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (rerun: 32) 53.603109154s ago: executing program 0 (id=1231): socket$can_raw(0x1d, 0x3, 0x1) r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0xf657, 0x34324d59, 0x1, @discrete={0x8, 0x83b6}}) madvise(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x5, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x9}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3}]}, 0x48}}, 0x0) syz_io_uring_setup(0x3978, &(0x7f0000000300)={0x0, 0xfefc, 0x1000, 0x2, 0x1af, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', r1}) mmap(&(0x7f000050d000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x7dc5a000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000)="9327ef4d8a900222bf31cc58e4407f11ab1207f1c0fcd0aa4fe4eb080fd175bdae472859a9ca55cb9312d61d160c889627daf4daef805c9d39fc4a55efe68192cd4d6dfd267d1fa53482385129da02f712eeddc40a90dc6c984e160fe14457537809285f66a8ae9618729784419a96e254f5b5be904a72d80845d9bec44a1325e67eb478c004aec8f6c77cc9332edb", &(0x7f0000000180)=""/181, 0x4}, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000780)={{0x7, 0x1, 0x9, 0x2, 'syz1\x00', 0x1}, 0x0, [0xc, 0x9, 0x53c, 0x0, 0xff, 0x9, 0x7, 0x40, 0x4, 0x0, 0x1, 0x8000, 0x2d1, 0x9, 0x2, 0xd474, 0x7, 0x4, 0x3, 0x48a0, 0x8, 0x0, 0x400, 0x8, 0x5, 0x7, 0x14b, 0x2, 0x3, 0x1, 0x1, 0x200, 0x8000, 0x3999f186, 0x0, 0x4d, 0x0, 0x1, 0x7, 0x2, 0x0, 0x400, 0x0, 0xbbe3, 0xffffffff7fffffff, 0xf83, 0x5, 0x40, 0x8000000000000001, 0x8000000000000000, 0x10001, 0x94, 0x0, 0x5, 0x1, 0x6, 0x800, 0x6, 0x4, 0x5, 0x1, 0x1, 0x7fffffff, 0x1c, 0x13c0, 0x0, 0x6, 0x9, 0x5, 0x31, 0x8, 0xec47, 0x7, 0x7, 0xb8, 0xa, 0x8, 0xdde, 0x5864, 0x5, 0x9, 0x5800000, 0x5, 0x0, 0x1ff, 0x8, 0xd800000000000000, 0x5, 0x6, 0xa4, 0xff, 0x6, 0x8, 0x3, 0x7, 0x4, 0x2697, 0x5, 0x3, 0x7fffffffffffffff, 0x7f, 0x400, 0xe, 0x100, 0xfffffffffffffff7, 0x9, 0x10000, 0x1, 0xb615, 0x2, 0x4, 0x80000000, 0x10001, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x0, 0x6, 0x1, 0xe, 0x6, 0x5, 0x7a0e, 0x4, 0xf8, 0x9, 0x6, 0x7, 0x6]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000700000008001240000a0000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000180)={0xfffffffffffffff9, 0xbe}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x4) unshare(0x22030500) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r7, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) 53.563991962s ago: executing program 6 (id=1232): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8890}, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000140), 0x10000, &(0x7f0000ffb000/0x4000)=nil, 0x6) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x40020) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x6) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r13 = socket$vsock_stream(0x28, 0x1, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x30, r15, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x7c, r15, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x5, 0x7, 0x7, 0x0, 0x16f, 0x8, 0xc]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x7, 0x200, 0x4, 0x8, 0xcab7, 0x8, 0x2, 0x0, 0x0]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20040812) connect$vsock_stream(r13, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 53.457482781s ago: executing program 4 (id=1233): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0x5}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40800) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/74, 0x4a) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x4) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x1000002, 0x4, 0xfffffffc, 0xf, "00769aff95595915303d74ffdeffff000400"}) (async) read(r2, &(0x7f0000000280)=""/4096, 0x1000) (async) syz_open_pts(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async) socket(0x2000000000000021, 0x2, 0xfffffffe) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) 53.136171185s ago: executing program 3 (id=1234): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) (async, rerun: 32) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) (rerun: 32) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 53.134536715s ago: executing program 5 (id=1235): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000d00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 53.133603987s ago: executing program 6 (id=1236): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xd, 0xf, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x5, 0x5, 0xffff2d37, 0xffffff03, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xc23c, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x1c, 0x7, 0x3e, 0x8f, 0x6, 0x6, 0xffffffff, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x3, 0x4, 0x1, 0x40], [0x1, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x6, 0x2f, 0xe, 0x312, 0x7b, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x402, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x4, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x1, 0x3, 0x403, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xb, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x800007, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x9, 0x0, 0xffffff7f, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x5, 0x1ff, 0x5, 0x57, 0x514, 0x3, 0x101, 0x10040, 0x4, 0x7fff, 0xffff, 0x6, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x110000, 0x40003, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x9, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x8, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r1 = io_uring_setup(0x1f09, &(0x7f00000001c0)={0x0, 0x3709, 0x1880, 0x1, 0x154}) syz_io_uring_setup(0x324e, &(0x7f0000000080)={0x0, 0x4, 0x13580, 0x2, 0x0, 0x0, r1}, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@remote, @multicast1}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x1}, 0x18) 53.0988711s ago: executing program 4 (id=1237): prctl$PR_MCE_KILL_GET(0x22) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket(0x21, 0x5, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="aa62be51bc6b89cb90ddb69d01c16c9e4f9ca5f22a6eb590ad41533ea1a9", 0x1e}, {&(0x7f0000000200)="829a006634fd71b2d858d09932dff6bd01c2897b54d256afa33de628eab4b2def384498e47fead959c9ff20476e3aa9e5ad3a017963cc0", 0x37}, {&(0x7f00000002c0)="b352122161c11b7fe214f10e44d5ff3e70ea4a65d47a292e21c256704ae59dc610067bf94c30225d33e9b66af7eb4e2835c3ac8c8a71115f9e6bffdeb4510ed342529ce5de4c22", 0x47}, {&(0x7f0000000440)="b598be4f75681915c82cebd945b09073d24a03b037a0ec6ea8328c0024dc3f9ec57308e202c11e534d601e54f9a84309cee177c2b55f3a143715d044635376deb3fe08e49a2e51d353e62906f397a220c128f3ef9b2a1263ac720afe11515bb3c77564f8dfaed7c63db883199bde9296129f4f283590e9c384eb005074517ddc0da7e2cd5e6a5fff8e900779630e695f8fa9110d36b195a9665312f25601ae44e45d100155086a60e4c93abeaa2fa84b401a91940b33b2ee338307a9850aff5198b462522f319f17875e44fb208520c9cbc876107df74c", 0xd7}, {&(0x7f0000000540)="f272055bad361ea093eb7fd94887a33bd123aac97575c323253fe99710e20b4b13b42be08fd653b9b96381ea7ae5eb4f8f02e91e9f6bece53ef00916ae4cd239b5120c45f92f0a3722c8cf4962b198303960560a49fc09d9e23500f27f9ccb2106b395be9b834d5677bf27d7c0a3db026d8d235d8f48c45c5b245e1c15ddaf08d4a851486d978ff1ea4393ea55c978236a217c0b018014a4f4cd86766c21b384c7809bcb0fcc2d1dc2b8408c6b49b06496be0f", 0xb3}, {&(0x7f0000000340)="550585fe151ee4c8848f60ec6cffd044a83c11501a6100b880d340797fef4d75275e95131c59df0d3102739c7dfceb14d50caa6f4ba834735ad1d3a44f7835", 0x3f}], 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001000000010000000800"/20, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x1}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a40)="a4ba92606a35ceb6a6fc29bfc0acb168bfc20b4458047204d420", 0x1a}, {0xfffffffffffffffc}, {&(0x7f0000000a80)="055aa7757d5c5b644d7ecf7e08d97a5dda7e8321d247b516431557186dc3a95eb022af3a61ff6a92565570f814487897e50f614cc02fc38333f25b79565eeb922885b9b97669abe9c49666e8a3ae58b70c2d9048f017b9aedfd249f464d291f45965a47c4843d9f68e4bda0af19409f5c1cc0bfec791d20f8a563d79617df1e66b7ff42423087002e5efc34f8252b99ccf8e477cee2365ca73479ddc03fc90629d95e5c44151a6202d0cc30aaf6b50d447ea87fa777941e0e62edd37ea076a75602839", 0xc3}, {&(0x7f0000000b80)="0006159dc9a108b16d91920b789332c03136ff326c12cae643945ae55dbb23191b8e0b8c36104478bcc9a87a0223825e20c6a5a0f53a2b738d636c60b8264cdd0e81809cd7a01dd1521327be1e2f73e93a31d7187e9e3c4c1016c35969e9b1bb813a798b31378d5123fc74c2e2d58903539b40ead998c5d9b27541045e63a0081aae70a45cdccf359e5daa3f4e3b5c100379859650d374f351df9e4e8f62a954", 0xa0}, {&(0x7f0000000c40)="fd6d67478a0a125a9208b362c69dc3c25f12e578699dc5dd32d0350bacd70a22c3908a41dc3d61e097779550550f22961bee944ba847178b98e05c43dca13dee73", 0x41}, {&(0x7f0000000cc0)="401b00fc63753be636b52d93193fa5ee36e22b5c7d3686d2d96b8318", 0x1c}], 0x6, 0x0, 0x0, 0x890}}, {{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e00)="2b32434c23463de7757d9750e56f50ccbf950b1a4611272a7de2d95ef75f6c2745629d0e2b25d6ff41db7c97bd5591470acca9e543e7bc3e7ab340d1ee759a663b49938174cc2d1bd2170c24beff1f66a90d41ca3ea12e544240bed20a413d149858718b1b350310a2bca47b1e8291dcb54b0ef9a3b751b5cc98b77550f7541459adef502c5e227061a95f6ae6cb9815da2af0e9bb3409cc69b2cc59f3193257262ef00082d43e7f9065cf300bfd7e3ce6e92c6f65e79950eefffb3ed3b8fc049143a45f53451be1d073fd8b801038683b98ad347465a1e0bd7fbf2c43786d24303af72ca4f8687bfd17a4e8f5d955b033d05bd6cf074a9965", 0xf9}, {&(0x7f0000000f00)="26cf285a0d0aa3b8c980d1bb4ba3c609876638b1fd28c3a5eab92b0128c724b87df1325b7c2ae6df62319821a1f723b944263ca3124dcc126e535e36afe2dc82ad5a1f3350bb3a", 0x47}, {&(0x7f0000000f80)="604f703be476d021e2ad30228d27dc5a2ae93eeb329b2f4a3630aa22ca0a73b9a451d6a1608577ab37773f0ce6d5f77ced2a5c80ca26fbbb5932fa869d212062d68128b5d2e94c6975f351a6be0514", 0x4f}, {&(0x7f0000001000)="211c2b99e372fdd0a22b4eed", 0xc}, {&(0x7f0000001040)="df566d06689adef2cb1d00e166418732a21f997f7ea0", 0x16}, {&(0x7f0000001080)="0b1c87891aa536d5adfe0274c36a09d079859583fea2d47e8b2416b3cd7d7d9fb0c6a2c08e076d5442841c83efa38b539d99d7bc09d6c99d87aaefaf0bb869e0f1100dbdb6667edfe9bac855dd42bebda6b652ba4362602dff28", 0x5a}, {&(0x7f0000001100)="fb3dfecd3d43c3a24d2f67e85e7c514b9731d84ab30c113bdf671ef37a62a6d27cf78f0e02b05469e3940efaf423bde8b8e6d71d6bb52cc4b6abe0b0af4f0311a51a0de0746fb06d1941a067d63b180a8017f5c5b53d101b9ae32133b0ff57e4e3d27dd9dc1a12face7b2f05d918887c8d0264fea36be109dda050356987c15fe7cfb13ce42832d241a199232e40e99803d8a7dee3f68c8e8bd1591f143f10aad7f28b248f8cfc9b4597d55fc3149d00318b0fa51a152b416b5a036d6574536c187f627e68d5c2e120123628ea8efd7f669357caa1af5ef498d3d7060fde109d21fbb2828e9a5a914855590257dafaac89f54fc91d8073", 0xf7}, {&(0x7f0000001200)="6cdee5f89b0eda4650014a16a6005f4331a0fcb3c614306478967b72b829432eede6a88bc0cab9bb621242dfb00aa35b65369863587f282c2b5f69d87f5cb37cf9c62e3b498c1113f3e2c0247fac9572f68477b8d76a49571736a319596a991b6a678b8eb8093ddb941fac949f42b4bb85195669447d2186e4caa6ef886658052a12e25cc5e39bc0531f39dde330692d118c1ae057e2419500d3ca0c048cfc2bdf8456c97034cf3382c9a8ee694532dda7fa809ab6bce1", 0xb7}], 0x8, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110, 0x4000080}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001540)="a5bd7a112c26e9b7c6458a9ad0ac46a8eca3e8cd4c514b294b45cef272034def78d6c7ede9090c759da3de6d4b401f8d5ca6fc29818a348464621e9d929b32e5b13a9a228a7f0a8ee25ba07e3a3ae14851aed2563cf8da893acc26eb37b3d8fd9c9a546ca6350546cdc9affa05d78735e94e192d8b462982f978da77e1b38db0ecd30d993b8cb40b90f2db7b01d48485b5afe8dbbb8ea7b943d9b309967c5fe5219e338c75e2a77143", 0xa9}, {&(0x7f0000001600)="111d06a86e3e31909c012461afd4032e02fd653caa30555755485a930c508c2f3883783ba91759da9e481b9145a067449a8179e28b09425351f9a6cd0f78c9e5707d2b334eea5bc8a4bf25e899772e8adfdcb2a943b22d4d217f79e926c0d73c013c6e2d4a360dc645c11843565c72fc3e9baac91f12b7431c1d5375b0932f08279c38220865e28bdebcd1", 0x8b}, {&(0x7f00000016c0)="2b65f6e14e3038f425328979afb0994a1c4940fc889569463da1e492e0d2ea1196c1448754c5487c8506f43e2e237352fc87d4997ef9924125002304ea2b640291702d40e63443647379d1c716c48c0b3eb6fae64d00721d797f893cfaf66082c727c443e7d33b80616ce35107a8fb99272a314e9e51a9ffe346", 0x7a}, {&(0x7f0000001740)="09106031171c2cb9e978f43c2e6b005e1495ce4272833ab7bb5f11bc00ddffc9faf67506e5f4d7024bdc4547d963f2b667264f0e966f72dc8d7b6ecf936969fac41ffa0ab7560ec12535c7322c1ab07976ff8039539b802ca2a965a9423665762e01f8d517456e034b4ec84e07935789b4434bab708470f45d56535619c1525619deffbc0527aaa104fb28b4d6198ba50d0a00283c5986a920b4ad82dba92efda813d97310e6caa52e53e45869c7cd49a61875ac676d8b304068314ad1583f68796942446f8b2189f7", 0xc9}, {&(0x7f0000001840)="0f0a307988ce426fddb14dcd42db408df503054c7b27aba8d1522ccbfe3b0d3f04ff93cadd5200010261a58b39820e", 0x2f}, {&(0x7f0000001880)="bddb427521845edd0a4b3becfd6b897c292f97d2bf5a37eea462a3379122c7749583578c6f46242611eaa38e6cabf78d910a5aedd1f107ba795db8fbc52002670babf940d959a412ce58fe2baefa447511da3e5bcf851bd45cb730636657cf2e3f11284b02", 0x65}, {&(0x7f0000001900)="01bdd7d2ffbcfe8a90f9827f8e270e9bbeaaad63a7a2ec4faee9ce55ab9045f2fe537f6799a6a71368206691a8e42c8353ddefee57f158953f733e85388b07180c2fedd2e2faa45a23172468ea16754c", 0x50}], 0x7, 0x0, 0x0, 0x40c0}}], 0x4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000002000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20040001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r5, @ANYRES32=r4], 0x37a0}, 0x1, 0x0, 0x0, 0x40045}, 0x20004000) unshare(0x50000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) 52.745878458s ago: executing program 3 (id=1238): syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc, 0x0, 0xb49, 0x2, 0xc, 0x53, 0x80000003}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff3}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x858, 0x2, [@TCA_FW_POLICE={0x854, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x8, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x108, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x9, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x8, 0x645, 0x2, 0x80000800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0xfffffffd, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0x7f, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x4, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0xfd8, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0x34, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x3, 0xa5, 0x80, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x3, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x1, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x4009366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8002, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x4, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xc, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x9, 0x10001, 0xda, 0x689, 0x7fffffff, 0x6, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x7ffe, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0x101, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x9, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x23, 0x2, 0xff, 0xfffffffb, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0xffffffff, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x3c5, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x2, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x3, 0x8, 0x81, 0x80000001, 0x102, 0x10000, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0x8, 0x3, 0x10001, 0x4ed, 0x8, 0x9e, 0x9, 0x3, 0xfffffff8, 0x800e58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x100, 0x9, 0xfc, 0x3, 0x5, 0x8002, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x47, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xffff0002}, 0x1, 0xf, 0x1}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x18, r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 52.141825785s ago: executing program 5 (id=1239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) r3 = syz_clone(0x820000, &(0x7f0000000700), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000800)="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") sched_setattr(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 51.632970646s ago: executing program 6 (id=1240): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x3) (async) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 47.833779487s ago: executing program 4 (id=1241): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x9, {}, {0xb289d58468e4db09, 0x0, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) 47.80116531s ago: executing program 6 (id=1242): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a9", 0x12, 0x4c000, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 31.867085019s ago: executing program 34 (id=1231): socket$can_raw(0x1d, 0x3, 0x1) r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0xf657, 0x34324d59, 0x1, @discrete={0x8, 0x83b6}}) madvise(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x5, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x9}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3}]}, 0x48}}, 0x0) syz_io_uring_setup(0x3978, &(0x7f0000000300)={0x0, 0xfefc, 0x1000, 0x2, 0x1af, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', r1}) mmap(&(0x7f000050d000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x7dc5a000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000)="9327ef4d8a900222bf31cc58e4407f11ab1207f1c0fcd0aa4fe4eb080fd175bdae472859a9ca55cb9312d61d160c889627daf4daef805c9d39fc4a55efe68192cd4d6dfd267d1fa53482385129da02f712eeddc40a90dc6c984e160fe14457537809285f66a8ae9618729784419a96e254f5b5be904a72d80845d9bec44a1325e67eb478c004aec8f6c77cc9332edb", &(0x7f0000000180)=""/181, 0x4}, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000780)={{0x7, 0x1, 0x9, 0x2, 'syz1\x00', 0x1}, 0x0, [0xc, 0x9, 0x53c, 0x0, 0xff, 0x9, 0x7, 0x40, 0x4, 0x0, 0x1, 0x8000, 0x2d1, 0x9, 0x2, 0xd474, 0x7, 0x4, 0x3, 0x48a0, 0x8, 0x0, 0x400, 0x8, 0x5, 0x7, 0x14b, 0x2, 0x3, 0x1, 0x1, 0x200, 0x8000, 0x3999f186, 0x0, 0x4d, 0x0, 0x1, 0x7, 0x2, 0x0, 0x400, 0x0, 0xbbe3, 0xffffffff7fffffff, 0xf83, 0x5, 0x40, 0x8000000000000001, 0x8000000000000000, 0x10001, 0x94, 0x0, 0x5, 0x1, 0x6, 0x800, 0x6, 0x4, 0x5, 0x1, 0x1, 0x7fffffff, 0x1c, 0x13c0, 0x0, 0x6, 0x9, 0x5, 0x31, 0x8, 0xec47, 0x7, 0x7, 0xb8, 0xa, 0x8, 0xdde, 0x5864, 0x5, 0x9, 0x5800000, 0x5, 0x0, 0x1ff, 0x8, 0xd800000000000000, 0x5, 0x6, 0xa4, 0xff, 0x6, 0x8, 0x3, 0x7, 0x4, 0x2697, 0x5, 0x3, 0x7fffffffffffffff, 0x7f, 0x400, 0xe, 0x100, 0xfffffffffffffff7, 0x9, 0x10000, 0x1, 0xb615, 0x2, 0x4, 0x80000000, 0x10001, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x0, 0x6, 0x1, 0xe, 0x6, 0x5, 0x7a0e, 0x4, 0xf8, 0x9, 0x6, 0x7, 0x6]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000700000008001240000a0000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000180)={0xfffffffffffffff9, 0xbe}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x4) unshare(0x22030500) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r7, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) 0s ago: executing program 35 (id=1239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) r3 = syz_clone(0x820000, &(0x7f0000000700), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000800)="41f55fc7dbe7598b533fdae858d1d24d566794edb136ef54d9f8cd9a5949ee2374c13f4b8cdd663573050224b803604f3b032388adde5d7e62b1dd672675b991e091a3ba021991818c32e7789635b2e865f5379606add74157a61222803f55fbd3f9d2edb117e3194f291499de8599c796ccd5c4daff76cf0ce3a565b2972bf4cfdd650f495227d04273908ac6beaffa9627abca89d23a9d6a40f569375c835986aef5dd28ca30019e9d5792339752e4df500bbe044e371115f8bcebc9971f1f68d957d90f8b5c4b41b801dcdf58b1b311481ec3cbba65241ed69e9a370a15beaf3d285f4b7eb129423454bdff4184ee834788eb7a0f2df2413053593f49f0") sched_setattr(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) kernel console output (not intermixed with test programs): med from eth3 [ 309.854904][ T8903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 310.056698][ C0] syz_tun: tun_net_xmit 86 [ 310.117817][ T8910] fuse: Unknown parameter 'n' [ 310.376410][ C0] syz_tun: tun_net_xmit 90 [ 310.459971][ T8714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.578078][ T8714] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.619995][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.627201][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.634943][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 310.695341][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.702544][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.798023][ T9] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 310.811534][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.896801][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 310.913241][ T8714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.950728][ T9] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 310.971749][ T9] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 310.986780][ T8714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.017123][ T9] usb 4-1: Product: syz [ 311.031112][ T9] usb 4-1: Manufacturer: syz [ 311.056197][ T9] usb 4-1: SerialNumber: syz [ 311.079368][ T9] usb 4-1: config 0 descriptor?? [ 311.129491][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.158659][ T8714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.335756][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.378191][ T8714] veth0_vlan: entered promiscuous mode [ 311.397239][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.416429][ C0] syz_tun: tun_net_xmit 90 [ 311.433084][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 311.454863][ T8714] veth1_vlan: entered promiscuous mode [ 311.505365][ T8714] veth0_macvtap: entered promiscuous mode [ 311.525069][ T8714] veth1_macvtap: entered promiscuous mode [ 311.594564][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.618934][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.633288][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.670014][ T8714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.683901][ T8714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.695029][ T8714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.712910][ T8714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.741571][ T65] syz_tun: tun_net_xmit 86 [ 311.931786][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.951401][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.021383][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.078668][ T8939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.081608][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.439439][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.454038][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.466515][ C0] syz_tun: tun_net_xmit 90 [ 312.467549][ T8950] trusted_key: encrypted_key: master key parameter '' is invalid [ 312.786669][ C0] syz_tun: tun_net_xmit 86 [ 312.974370][ T30] audit: type=1326 audit(1750386355.113:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f642c18e929 code=0x0 [ 313.400781][ T9] usb 4-1: USB disconnect, device number 45 [ 313.496389][ C0] syz_tun: tun_net_xmit 90 [ 313.816649][ C0] syz_tun: tun_net_xmit 86 [ 313.936484][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 314.218813][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 314.231821][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.256827][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.327539][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 314.342755][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.366695][ T9] usb 4-1: Product: syz [ 314.370902][ T9] usb 4-1: Manufacturer: syz [ 314.383810][ T9] usb 4-1: SerialNumber: syz [ 314.398832][ T9] usb 4-1: config 0 descriptor?? [ 314.429086][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 314.454204][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 314.505901][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 314.536447][ C0] syz_tun: tun_net_xmit 90 [ 314.548516][ T1335] usb 4-1: Failed to submit usb control message: -71 [ 314.586798][ T5951] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.601819][ T1335] usb 4-1: unable to send the bmi data to the device: -71 [ 314.610720][ T1335] usb 4-1: unable to get target info from device [ 314.617914][ T1335] usb 4-1: could not get target info (-71) [ 314.624125][ T1335] usb 4-1: could not probe fw (-71) [ 314.756464][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 314.781811][ T5951] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 314.810106][ T5951] usb 6-1: config 0 has no interface number 0 [ 314.836533][ T5951] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 314.866419][ T5951] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 314.896934][ T5951] usb 6-1: config 0 interface 41 has no altsetting 0 [ 314.919411][ T5951] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 314.950840][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.982220][ T5951] usb 6-1: Product: syz [ 314.996560][ T5951] usb 6-1: Manufacturer: syz [ 315.015631][ T5951] usb 6-1: SerialNumber: syz [ 315.079153][ T5951] usb 6-1: config 0 descriptor?? [ 315.085186][ T8998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 315.096900][ T8998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 315.345310][ T8998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 315.358632][ T8998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 315.576379][ C0] syz_tun: tun_net_xmit 90 [ 315.828073][ T8998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.860097][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.915275][ T5951] Error reading MAC address [ 315.945356][ T8998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 315.991043][ T8998] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 316.130765][ T9035] syz_tun: tun_net_xmit 62 [ 316.232690][ T5951] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 316.280806][ T5951] usb 6-1: USB disconnect, device number 3 [ 316.542285][ T9043] Cannot find add_set index 0 as target [ 316.599657][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.616392][ C0] syz_tun: tun_net_xmit 90 [ 316.636996][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.674306][ T9047] netlink: 'syz.2.816': attribute type 2 has an invalid length. [ 316.693523][ T9048] netlink: 'syz.2.816': attribute type 2 has an invalid length. [ 316.867489][ T30] audit: type=1326 audit(1750386359.023:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.0.817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f642c18e929 code=0x0 [ 316.867549][ T1335] syz_tun: tun_net_xmit 86 [ 316.944767][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.952847][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.019930][ T9060] loop6: detected capacity change from 0 to 7 [ 317.030188][ T9060] Dev loop6: unable to read RDB block 7 [ 317.063838][ T9060] loop6: unable to read partition table [ 317.099104][ T9060] loop6: partition table beyond EOD, truncated [ 317.137415][ T5951] usb 4-1: USB disconnect, device number 46 [ 317.140593][ T9060] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 317.515412][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.632907][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.656395][ C0] syz_tun: tun_net_xmit 90 [ 317.906548][ C0] syz_tun: tun_net_xmit 86 [ 318.187371][ T9099] Cannot find add_set index 0 as target [ 318.218407][ T9101] loop6: detected capacity change from 0 to 7 [ 318.262006][ T9101] Dev loop6: unable to read RDB block 7 [ 318.279305][ T9101] loop6: unable to read partition table [ 318.299475][ T9101] loop6: partition table beyond EOD, truncated [ 318.346654][ T9101] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 318.696407][ C0] syz_tun: tun_net_xmit 90 [ 318.863596][ T9111] vivid-000: ================= START STATUS ================= [ 318.917555][ T9111] vivid-000: Test Pattern: 75% Colorbar [ 318.931214][ T9111] vivid-000: Fill Percentage of Frame: 100 [ 318.942623][ T9111] vivid-000: Horizontal Movement: No Movement [ 318.946610][ C0] syz_tun: tun_net_xmit 86 [ 318.953725][ T9111] vivid-000: Vertical Movement: No Movement [ 318.960909][ T9111] vivid-000: OSD Text Mode: All [ 318.974024][ T9111] vivid-000: Show Border: false [ 318.993065][ T9111] vivid-000: Show Square: false [ 319.004402][ T9111] vivid-000: Sensor Flipped Horizontally: false [ 319.024947][ T9111] vivid-000: Sensor Flipped Vertically: false [ 319.042754][ T9111] vivid-000: Insert SAV Code in Image: false [ 319.068492][ T9111] vivid-000: Insert EAV Code in Image: false [ 319.093185][ T9111] vivid-000: Insert Video Guard Band: false [ 319.243524][ T9111] vivid-000: Reduced Framerate: false [ 319.283998][ T9111] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 319.301498][ T9111] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 319.309594][ T9111] vivid-000: Enable Capture Cropping: true [ 319.317420][ T9111] vivid-000: Enable Capture Composing: true [ 319.336939][ T9111] vivid-000: Enable Capture Scaler: true [ 319.344987][ T9111] vivid-000: Timestamp Source: End of Frame [ 319.354103][ T9111] vivid-000: Colorspace: sRGB [ 319.362336][ T9111] vivid-000: Transfer Function: Default [ 319.371143][ T9111] vivid-000: Y'CbCr Encoding: Default [ 319.387187][ T9111] vivid-000: HSV Encoding: Hue 0-179 [ 319.396120][ T9111] vivid-000: Quantization: Default [ 319.402984][ T9111] vivid-000: Apply Alpha To Red Only: true [ 319.410851][ T9111] vivid-000: Standard Aspect Ratio: 4x3 [ 319.417825][ T9111] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 319.431592][ T9111] vivid-000: DV Timings: 640x480p59 inactive [ 319.439324][ T9111] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 319.448801][ T9111] vivid-000: Maximum EDID Blocks: 2 [ 319.456703][ T9111] vivid-000: Limited RGB Range (16-235): false [ 319.465655][ T9111] vivid-000: Rx RGB Quantization Range: Automatic [ 319.480127][ T9111] vivid-000: Power Present: 0x00000001 [ 319.488220][ T9111] tpg source WxH: 320x240 (Y'CbCr) [ 319.495956][ T9111] tpg field: 1 [ 319.500624][ T9111] tpg crop: (0,0)/320x240 [ 319.508434][ T9111] tpg compose: (0,0)/320x240 [ 319.516572][ T9111] tpg colorspace: 8 [ 319.520615][ T9111] tpg transfer function: 0/0 [ 319.526815][ T9111] tpg Y'CbCr encoding: 0/0 [ 319.533062][ T9111] tpg quantization: 0/0 [ 319.538455][ T9111] tpg RGB range: 0/2 [ 319.543481][ T9111] vivid-000: ================== END STATUS ================== [ 319.736402][ C0] syz_tun: tun_net_xmit 90 [ 320.140915][ T1335] syz_tun: tun_net_xmit 86 [ 320.776413][ C0] syz_tun: tun_net_xmit 90 [ 320.871912][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.924872][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.134056][ T9156] loop6: detected capacity change from 0 to 7 [ 321.163704][ T9156] Dev loop6: unable to read RDB block 7 [ 321.176577][ C0] syz_tun: tun_net_xmit 86 [ 321.193828][ T9156] loop6: unable to read partition table [ 321.210769][ T9156] loop6: partition table beyond EOD, truncated [ 321.231597][ T9156] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 321.391259][ T9159] Cannot find add_set index 0 as target [ 321.774976][ T9167] syz_tun: tun_net_xmit 42 [ 321.816375][ C0] syz_tun: tun_net_xmit 90 [ 321.975631][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.985456][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.197577][ T9167] raw_sendmsg: syz.0.842 forgot to set AF_INET. Fix it! [ 322.216604][ C0] syz_tun: tun_net_xmit 86 [ 322.256609][ T5975] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 322.476554][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 322.483915][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 322.495106][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 322.551901][ T5975] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 322.561819][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.600917][ T5975] usb 4-1: Product: syz [ 322.655955][ T5975] usb 4-1: Manufacturer: syz [ 322.677574][ T5975] usb 4-1: SerialNumber: syz [ 322.708982][ T5975] usb 4-1: config 0 descriptor?? [ 322.740188][ T5975] hub 4-1:0.0: bad descriptor, ignoring hub [ 322.746152][ T5975] hub 4-1:0.0: probe with driver hub failed with error -5 [ 322.776472][ C0] syz_tun: tun_net_xmit 42 [ 322.790415][ T5975] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 322.856411][ C0] syz_tun: tun_net_xmit 90 [ 322.930154][ T5975] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 323.054959][ T5975] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 323.816441][ C0] syz_tun: tun_net_xmit 42 [ 323.896408][ C0] syz_tun: tun_net_xmit 90 [ 323.959189][ T9] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 324.126508][ T9] usb 5-1: device descriptor read/64, error -71 [ 324.366580][ T9] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 324.506548][ T9] usb 5-1: device descriptor read/64, error -71 [ 324.636991][ T9] usb usb5-port1: attempt power cycle [ 324.810764][ T30] audit: type=1326 audit(1750386366.963:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7fc00000 [ 324.936465][ C0] syz_tun: tun_net_xmit 90 [ 325.057243][ T48] usb 4-1: USB disconnect, device number 47 [ 325.068881][ T9] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 325.133601][ T9] usb 5-1: device descriptor read/8, error -71 [ 325.427022][ T9] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 325.477429][ T9] usb 5-1: device descriptor read/8, error -71 [ 325.597384][ T9] usb usb5-port1: unable to enumerate USB device [ 325.826610][ T5975] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 325.897035][ T13] syz_tun: tun_net_xmit 86 [ 325.976423][ C0] syz_tun: tun_net_xmit 90 [ 325.996517][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 326.030466][ T5975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 326.062902][ T5975] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 326.101256][ T5975] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.121276][ T5975] usb 6-1: config 1 interface 0 has no altsetting 0 [ 326.145098][ T5975] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 326.160678][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.169117][ T5975] usb 6-1: Product: syz [ 326.173475][ T5975] usb 6-1: Manufacturer: syz [ 326.183017][ T5975] usb 6-1: SerialNumber: syz [ 326.233096][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 326.502806][ T6368] tipc: Resetting bearer [ 326.544645][ T6368] tipc: Disabling bearer [ 326.742453][ T9] usb 3-1: USB disconnect, device number 4 [ 326.742518][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 326.756946][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 326.801337][ T9] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 326.936573][ C1] syz_tun: tun_net_xmit 86 [ 327.976548][ C1] syz_tun: tun_net_xmit 86 [ 328.051831][ T9257] netlink: 48 bytes leftover after parsing attributes in process `syz.4.860'. [ 328.127178][ T1335] dummy0: left allmulticast mode [ 328.155031][ T1335] bridge0: port 1(dummy0) entered disabled state [ 328.210424][ T1335] bridge_slave_1: left allmulticast mode [ 328.223814][ T1335] bridge_slave_1: left promiscuous mode [ 328.277372][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.512530][ T5975] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 328.560974][ T5975] usb 6-1: USB disconnect, device number 4 [ 328.717550][ T48] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 328.780437][ T9274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.863'. [ 328.791999][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.804115][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.824859][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.835522][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.844378][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.889373][ T48] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 328.906503][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.927351][ T48] usb 5-1: config 0 descriptor?? [ 328.949318][ T48] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 329.174003][ T1335] dvmrp1 (unregistering): left allmulticast mode [ 329.345339][ T48] gspca_cpia1: usb_control_msg 03, error -32 [ 329.353960][ T48] gspca_cpia1: usb_control_msg 03, error -71 [ 329.374941][ T48] gspca_cpia1: usb_control_msg 01, error -71 [ 329.390656][ T48] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 329.421785][ T48] usb 5-1: USB disconnect, device number 57 [ 329.534465][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.544838][ T1335] bond_slave_0: left promiscuous mode [ 329.552704][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.561816][ T1335] bond_slave_1: left promiscuous mode [ 329.568244][ T1335] bond0 (unregistering): Released all slaves [ 329.723809][ T1335] tipc: Left network mode [ 330.559814][ T1335] batadv_slave_0: left promiscuous mode [ 330.662280][ T1335] hsr_slave_0: left promiscuous mode [ 330.728058][ T1335] hsr_slave_1: left promiscuous mode [ 330.742477][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.799656][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.993883][ T5836] Bluetooth: hci3: command tx timeout [ 331.577422][ T49] syz_tun: tun_net_xmit 86 [ 332.015937][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 332.261038][ T1335] team_slave_1 (unregistering): left promiscuous mode [ 332.273768][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 332.323793][ T1335] team_slave_0 (unregistering): left promiscuous mode [ 332.327274][ T5834] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 332.338986][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 332.506519][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 332.513715][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.528013][ T5834] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 332.545943][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.568342][ T5834] usb 5-1: Product: syz [ 332.575963][ T5834] usb 5-1: Manufacturer: syz [ 332.587372][ T5834] usb 5-1: SerialNumber: syz [ 332.614886][ T5834] usb 5-1: config 0 descriptor?? [ 332.620313][ C0] syz_tun: tun_net_xmit 86 [ 332.643316][ T5834] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 332.867281][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'. [ 332.876218][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.875'. [ 332.909493][ T24] usb 5-1: USB disconnect, device number 58 [ 333.022390][ T5836] Bluetooth: hci3: command tx timeout [ 333.258173][ T9349] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 333.352693][ T9285] chnl_net:caif_netlink_parms(): no params data found [ 333.656558][ C0] syz_tun: tun_net_xmit 86 [ 333.931495][ T9285] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.964805][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.992841][ T9285] bridge_slave_0: entered allmulticast mode [ 334.025142][ T9285] bridge_slave_0: entered promiscuous mode [ 334.052551][ T9285] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.073884][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.092811][ T9285] bridge_slave_1: entered allmulticast mode [ 334.106499][ T9285] bridge_slave_1: entered promiscuous mode [ 334.251963][ T48] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 334.334168][ T9285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.390206][ T9285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.476503][ T5951] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 334.498878][ T48] usb 5-1: Invalid ep0 maxpacket: 32 [ 334.601908][ T9285] team0: Port device team_slave_0 added [ 334.632137][ T9285] team0: Port device team_slave_1 added [ 334.648302][ T48] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 334.789144][ T5951] usb 4-1: config 0 has no interfaces? [ 334.834533][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.855920][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.866432][ T5951] usb 4-1: Product: syz [ 334.870746][ T5951] usb 4-1: Manufacturer: syz [ 334.889057][ T5951] usb 4-1: SerialNumber: syz [ 334.926411][ T48] usb 5-1: Invalid ep0 maxpacket: 32 [ 334.954327][ T5951] usb 4-1: config 0 descriptor?? [ 334.960740][ T48] usb usb5-port1: attempt power cycle [ 334.988184][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.036421][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.099080][ T5836] Bluetooth: hci3: command tx timeout [ 335.259553][ T9285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.283404][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.283422][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.283461][ T9285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.316548][ T48] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 335.447930][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.470421][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.891'. [ 335.471069][ T48] usb 5-1: Invalid ep0 maxpacket: 32 [ 335.606389][ T48] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 335.627582][ T48] usb 5-1: Invalid ep0 maxpacket: 32 [ 335.655691][ T9285] hsr_slave_0: entered promiscuous mode [ 335.675367][ T48] usb usb5-port1: unable to enumerate USB device [ 335.710863][ T9285] hsr_slave_1: entered promiscuous mode [ 335.730051][ T9285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.780391][ T9285] Cannot create hsr debugfs directory [ 336.697389][ T12] syz_tun: tun_net_xmit 86 [ 336.807785][ T9285] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.837776][ T9285] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.901890][ T9285] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.949064][ T9285] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.176555][ T5836] Bluetooth: hci3: command tx timeout [ 337.245684][ T48] usb 4-1: USB disconnect, device number 48 [ 337.275536][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.282423][ T5975] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 337.378137][ T9285] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.407520][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.414720][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.509227][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 337.529908][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 337.641185][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 337.729570][ T5975] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 337.736604][ C1] syz_tun: tun_net_xmit 86 [ 337.773974][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.781185][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.799220][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.828684][ T5975] usb 5-1: Product: syz [ 337.838374][ T5975] usb 5-1: Manufacturer: syz [ 337.883454][ T5975] usb 5-1: SerialNumber: syz [ 337.966906][ T5975] usb 5-1: config 0 descriptor?? [ 337.988315][ T9285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.008156][ T9442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 338.021806][ T9442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 338.051141][ T5975] usb 5-1: ucan: probing device on interface #0 [ 338.066737][ T1211] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 338.205446][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.245979][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 338.300181][ T1211] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 338.336781][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.344878][ T1211] usb 4-1: Product: syz [ 338.357936][ T1211] usb 4-1: Manufacturer: syz [ 338.362626][ T1211] usb 4-1: SerialNumber: syz [ 338.399818][ T1211] usb 4-1: config 0 descriptor?? [ 338.422718][ T9285] veth0_vlan: entered promiscuous mode [ 338.528301][ T9285] veth1_vlan: entered promiscuous mode [ 338.561579][ T1211] viperboard 4-1:0.0: version 0.00 found at bus 004 address 049 [ 338.635971][ T5975] usb 5-1: ucan: failed to retrieve device info [ 338.656431][ T1211] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 338.689808][ T5975] usb 5-1: ucan: probe failed; try to update the device firmware [ 338.692748][ T9285] veth0_macvtap: entered promiscuous mode [ 338.720743][ T1211] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 338.761990][ T9285] veth1_macvtap: entered promiscuous mode [ 338.767012][ T5975] usb 5-1: USB disconnect, device number 63 [ 338.776652][ C1] syz_tun: tun_net_xmit 86 [ 338.930352][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.033335][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.084548][ T9285] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.129838][ T9285] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.169782][ T9285] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.244916][ T9285] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.262292][ T9468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.356108][ T48] usb 4-1: USB disconnect, device number 49 [ 339.552063][ T9477] loop3: detected capacity change from 0 to 1 [ 339.564358][ T9473] input: syz1 as /devices/virtual/input/input22 [ 339.589972][ T9477] Dev loop3: unable to read RDB block 1 [ 339.637332][ T9477] loop3: unable to read partition table [ 339.714672][ T9477] loop3: partition table beyond EOD, truncated [ 339.828081][ T9477] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 340.038258][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.139699][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.381240][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.422341][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.194298][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 341.426699][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 341.460619][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.489417][ T24] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 341.672848][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.772231][ T24] usb 6-1: config 0 descriptor?? [ 341.964121][ T5951] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 342.229630][ T24] aquacomputer_d5next 0003:0C70:F003.000E: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.5-1/input0 [ 342.273970][ T5951] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 342.336390][ T5951] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 342.396604][ T5951] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 342.459698][ T9527] netlink: 92 bytes leftover after parsing attributes in process `syz.5.904'. [ 342.650584][ T5951] usb 5-1: config 220 has no interface number 2 [ 342.672506][ T5951] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 342.786797][ T5951] usb 5-1: config 220 interface 0 has no altsetting 0 [ 342.835017][ T5951] usb 5-1: config 220 interface 76 has no altsetting 0 [ 342.895913][ T5951] usb 5-1: config 220 interface 1 has no altsetting 0 [ 342.998635][ T5951] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 343.068947][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.167256][ T9] usb 6-1: USB disconnect, device number 5 [ 343.218114][ T5951] usb 5-1: Product: syz [ 343.231917][ T5951] usb 5-1: Manufacturer: syz [ 343.240449][ T5951] usb 5-1: SerialNumber: syz [ 343.480746][ T5951] usb 5-1: selecting invalid altsetting 0 [ 343.542378][ T5951] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 343.616211][ T5951] usb 5-1: No valid video chain found. [ 343.697499][ T5951] usb 5-1: selecting invalid altsetting 0 [ 343.722999][ T5951] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 343.734048][ T9540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.907'. [ 343.797045][ T5951] usb 5-1: USB disconnect, device number 64 [ 344.106853][ T9540] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 344.176564][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 344.349293][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 344.397755][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.457946][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 344.728116][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.791528][ T9] usb 6-1: config 0 descriptor?? [ 344.838299][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 345.038217][ T9] gspca_vc032x: reg_r err -71 [ 345.046493][ T9] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 345.071142][ T9] usb 6-1: USB disconnect, device number 6 [ 345.158197][ T13] syz_tun: tun_net_xmit 86 [ 345.664798][ T9581] tipc: Enabled bearer , priority 10 [ 345.805866][ T9585] netlink: 20 bytes leftover after parsing attributes in process `syz.6.915'. [ 345.830074][ T9587] ptrace attach of "./syz-executor exec"[8714] was attempted by "./syz-executor exec"[9587] [ 345.929913][ T9585] openvswitch: netlink: Flow key attr not present in new flow. [ 346.011225][ T9595] sctp: [Deprecated]: syz.3.918 (pid 9595) Use of int in max_burst socket option. [ 346.011225][ T9595] Use struct sctp_assoc_value instead [ 346.216561][ C0] syz_tun: tun_net_xmit 86 [ 346.777081][ T5887] tipc: Node number set to 1 [ 347.266557][ C0] syz_tun: tun_net_xmit 86 [ 347.466522][ T9627] TCP: TCP_TX_DELAY enabled [ 348.782941][ T3024] syz_tun: tun_net_xmit 86 [ 348.986420][ T5975] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 349.201218][ T5975] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 349.229794][ T5975] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 349.286198][ T5975] usb 4-1: config 220 has no interface number 2 [ 349.308361][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.926'. [ 349.312337][ T5975] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 349.317366][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.926'. [ 349.401910][ T5975] usb 4-1: config 220 interface 0 has no altsetting 0 [ 349.451670][ T5975] usb 4-1: config 220 interface 76 has no altsetting 0 [ 349.501380][ T5975] usb 4-1: config 220 interface 1 has no altsetting 0 [ 349.542346][ T5975] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 349.554774][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.574699][ T5975] usb 4-1: Product: syz [ 349.585985][ T5975] usb 4-1: Manufacturer: syz [ 349.595001][ T5975] usb 4-1: SerialNumber: syz [ 349.826580][ C0] syz_tun: tun_net_xmit 86 [ 349.927470][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 350.089524][ T9] usb 5-1: device descriptor read/64, error -71 [ 350.389880][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 350.556518][ T9] usb 5-1: device descriptor read/64, error -71 [ 350.686974][ T9] usb usb5-port1: attempt power cycle [ 350.857019][ C0] syz_tun: tun_net_xmit 86 [ 350.956253][ T5975] usb 4-1: selecting invalid altsetting 0 [ 350.992194][ T5975] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 351.012666][ T5975] usb 4-1: No valid video chain found. [ 351.052051][ T5975] usb 4-1: selecting invalid altsetting 0 [ 351.098611][ T5975] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 351.107045][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 351.176934][ T5975] usb 4-1: USB disconnect, device number 50 [ 351.387899][ T10] usb 7-1: config 0 has no interfaces? [ 351.402446][ T10] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 351.421444][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.476384][ T10] usb 7-1: Product: syz [ 351.496759][ T10] usb 7-1: Manufacturer: syz [ 351.556367][ T10] usb 7-1: SerialNumber: syz [ 351.668721][ T10] usb 7-1: config 0 descriptor?? [ 352.059913][ T3024] syz_tun: tun_net_xmit 86 [ 352.524174][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.906960][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 353.096560][ C1] syz_tun: tun_net_xmit 86 [ 353.101978][ T9] usb 4-1: config 0 has an invalid interface number: 178 but max is 12 [ 353.119706][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 353.134870][ T9] usb 4-1: config 0 has no interface number 0 [ 353.144762][ T9] usb 4-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 353.155954][ T9] usb 4-1: config 0 interface 178 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.171647][ T9] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 353.192857][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.209242][ T9] usb 4-1: config 0 descriptor?? [ 353.237099][ T9710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 353.500245][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.514958][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.532535][ T9] usb 4-1: string descriptor 0 read error: -71 [ 353.563768][ T9] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 353.620353][ T9] usb 4-1: USB disconnect, device number 51 [ 354.049116][ T9] usb 7-1: USB disconnect, device number 2 [ 354.136540][ C1] syz_tun: tun_net_xmit 86 [ 354.236521][ T48] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 354.406660][ T48] usb 5-1: device descriptor read/64, error -71 [ 354.596484][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 354.710671][ T48] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 354.756690][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 354.773945][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 354.802028][ T9] usb 7-1: config 4 interface 0 has no altsetting 0 [ 354.821664][ T9] usb 7-1: string descriptor 0 read error: -22 [ 354.828631][ T9] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 354.840135][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.878121][ T9761] usb usb8: usbfs: process 9761 (syz.3.946) did not claim interface 0 before use [ 354.887444][ T48] usb 5-1: device descriptor read/64, error -71 [ 354.935177][ T9] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 355.020627][ T48] usb usb5-port1: attempt power cycle [ 355.037364][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.066968][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 355.091044][ T9764] netlink: 'syz.5.947': attribute type 2 has an invalid length. [ 355.096507][ T9] usb 7-1: media controller created [ 355.206166][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.586480][ T48] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 355.607208][ T48] usb 5-1: device descriptor read/8, error -71 [ 355.848865][ T48] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 355.896151][ T48] usb 5-1: device descriptor read/8, error -71 [ 355.961727][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.999599][ T12] syz_tun: tun_net_xmit 86 [ 356.008558][ T48] usb usb5-port1: unable to enumerate USB device [ 356.029561][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.037312][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.124734][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.197859][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.307155][ T9] usb 7-1: USB disconnect, device number 3 [ 356.575508][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.951'. [ 357.016575][ C0] syz_tun: tun_net_xmit 86 [ 358.056510][ C0] syz_tun: tun_net_xmit 86 [ 358.445026][ T9823] libceph: resolve '4..' (ret=-3): failed [ 358.562733][ T5927] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 358.965874][ T5927] usb 7-1: config 0 has no interfaces? [ 358.996478][ T5927] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 359.021570][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.047025][ T5927] usb 7-1: Product: syz [ 359.074759][ T5927] usb 7-1: Manufacturer: syz [ 359.104636][ T5927] usb 7-1: SerialNumber: syz [ 359.130796][ T5927] usb 7-1: config 0 descriptor?? [ 359.723268][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 359.724347][ T9840] vlan2: entered promiscuous mode [ 359.807749][ T9840] vlan2: entered allmulticast mode [ 359.826961][ T9840] hsr_slave_1: entered allmulticast mode [ 359.861902][ T9846] openvswitch: netlink: Tunnel attr 16131 out of range max 16 [ 359.909107][ T9846] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 360.098030][ T9848] syz_tun: tun_net_xmit 54 [ 360.366831][ T48] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 360.416419][ T5887] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 360.521342][ T48] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 360.530739][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.549313][ T48] usb 6-1: Product: syz [ 360.568455][ T5887] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 360.577682][ T5887] usb 5-1: config 0 has no interface number 0 [ 360.589194][ T48] usb 6-1: Manufacturer: syz [ 360.601391][ T48] usb 6-1: SerialNumber: syz [ 360.607708][ T5887] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 360.622327][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.637376][ T48] usb 6-1: config 0 descriptor?? [ 360.652599][ T5887] usb 5-1: Product: syz [ 360.664624][ T5887] usb 5-1: Manufacturer: syz [ 360.671599][ T5887] usb 5-1: SerialNumber: syz [ 360.691178][ T5887] usb 5-1: config 0 descriptor?? [ 360.874933][ T48] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 360.918119][ T5951] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 360.956199][ T5951] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.298650][ T2983] syz_tun: tun_net_xmit 86 [ 361.451289][ T5927] usb 7-1: USB disconnect, device number 4 [ 361.495627][ T48] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 361.704938][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.723259][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.778695][ T9] usb 6-1: USB disconnect, device number 7 [ 361.876439][ T5927] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 362.058559][ T5927] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.093553][ T5927] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.120270][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.124227][ T5927] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.166805][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.168757][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.253155][ T9883] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.284187][ T5927] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.365055][ T9889] netlink: 'syz.3.969': attribute type 12 has an invalid length. [ 362.376808][ C0] syz_tun: tun_net_xmit 86 [ 362.384149][ T9889] netlink: 'syz.3.969': attribute type 29 has an invalid length. [ 362.437766][ T9889] netlink: 148 bytes leftover after parsing attributes in process `syz.3.969'. [ 362.440000][ T9891] loop6: detected capacity change from 0 to 7 [ 362.461294][ T9891] Dev loop6: unable to read RDB block 7 [ 362.468397][ T9889] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 362.474613][ T10] usb 7-1: USB disconnect, device number 5 [ 362.489794][ T9889] netlink: 47 bytes leftover after parsing attributes in process `syz.3.969'. [ 362.490149][ T9891] loop6: unable to read partition table [ 362.507590][ T9891] loop6: partition table beyond EOD, truncated [ 362.514506][ T9891] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 363.249215][ T5887] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 363.270117][ T5887] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 363.300119][ T5887] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 363.333502][ T5887] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 363.360201][ T5887] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 363.416769][ C0] syz_tun: tun_net_xmit 86 [ 363.452895][ T5887] usb 5-1: USB disconnect, device number 72 [ 363.500347][ T5887] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 363.570537][ T5951] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 363.587886][ T5887] keyspan 5-1:0.133: device disconnected [ 363.778658][ T5951] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 363.787703][ T5951] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 363.810122][ T5951] usb 4-1: config 8 has no interface number 0 [ 363.852683][ T5951] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.054645][ T9936] program syz.6.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.086707][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.979'. [ 364.399911][ T5951] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 364.423427][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.509991][ T5951] usb 4-1: Product: syz [ 364.749765][ T5951] usb 4-1: Manufacturer: syz [ 364.754436][ T5951] usb 4-1: SerialNumber: syz [ 364.937833][ T2983] syz_tun: tun_net_xmit 86 [ 365.123159][ T5951] usb 4-1: USB disconnect, device number 52 [ 365.954603][ T9952] loop6: detected capacity change from 0 to 7 [ 365.976594][ C0] syz_tun: tun_net_xmit 86 [ 366.036575][ T9952] Dev loop6: unable to read RDB block 7 [ 366.042380][ T9952] loop6: unable to read partition table [ 366.057683][ T9952] loop6: partition table beyond EOD, truncated [ 366.071195][ T9952] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 366.091308][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 366.271010][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 366.305110][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.325856][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.351284][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 366.370487][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.392294][ T10] usb 4-1: config 0 descriptor?? [ 366.466983][ T5927] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 366.616761][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 366.642103][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 366.667192][ T5927] usb 5-1: config 8 has an invalid interface number: 6 but max is 1 [ 366.683620][ T5927] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 366.695541][ T5927] usb 5-1: config 8 has an invalid interface number: 167 but max is 1 [ 366.730828][ T5927] usb 5-1: config 8 has no interface number 0 [ 366.770537][ T5927] usb 5-1: config 8 has no interface number 1 [ 366.784583][ T5927] usb 5-1: config 8 interface 6 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 366.831531][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 366.838483][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 366.857776][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 366.865719][ T5927] usb 5-1: config 8 interface 6 altsetting 3 endpoint 0x6 has invalid maxpacket 584, setting to 64 [ 366.885330][ T9] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 366.916674][ T10] usb 4-1: USB disconnect, device number 53 [ 366.924766][ T9] usb 7-1: config 1 has no interface number 0 [ 366.931092][ T5927] usb 5-1: config 8 interface 6 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 366.986209][ T9] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 367.005373][ T5927] usb 5-1: config 8 interface 6 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 367.026574][ C0] syz_tun: tun_net_xmit 86 [ 367.040303][ T9] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 367.050739][ T5927] usb 5-1: config 8 interface 6 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 367.066408][ T9] usb 7-1: config 1 interface 105 has no altsetting 0 [ 367.075558][ T9] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 367.104240][ T5927] usb 5-1: config 8 interface 167 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 367.119195][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.128357][ T9] usb 7-1: Product: syz [ 367.132567][ T9] usb 7-1: Manufacturer: syz [ 367.137396][ T5927] usb 5-1: config 8 interface 167 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 367.151863][ T9] usb 7-1: SerialNumber: syz [ 367.176453][ T5927] usb 5-1: config 8 interface 167 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 367.204404][ T9959] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 367.214847][ T9972] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.254220][ T9959] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 367.261981][ T5927] usb 5-1: config 8 interface 167 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 367.334462][ T5927] usb 5-1: config 8 interface 167 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 367.368758][ T5927] usb 5-1: config 8 interface 6 has no altsetting 0 [ 367.375514][ T5927] usb 5-1: config 8 interface 167 has no altsetting 0 [ 367.395895][ T5927] usb 5-1: New USB device found, idVendor=05c6, idProduct=9077, bcdDevice=e3.3a [ 367.412013][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.421788][ T5927] usb 5-1: Product: ࠺ [ 367.426049][ T5927] usb 5-1: Manufacturer: 、 [ 367.431073][ T5927] usb 5-1: SerialNumber: ឈ싇釉蠟퍆膺誣㣂纾垛勦ὕᶎ䮻虯䪏㼰ꍂ糯蜔꒿乙⁍ꏻ濐헠␆륓㹰桜븬䶩㑼᫧վ㞤왞룖⛠㔃૘渿ژ䪵涉外ᄣ橾 [ 367.519932][ T9955] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 367.546878][ T5951] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 367.717966][ T5951] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 367.728504][ T9959] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 367.737086][ T9959] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 367.857894][ T5951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.881694][ T5927] usbhid 5-1:8.167: couldn't find an input interrupt endpoint [ 367.890525][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 367.975714][ T5951] usb 6-1: config 1 has no interface number 0 [ 367.985573][ T5927] usb 5-1: USB disconnect, device number 73 [ 367.996680][ T5951] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 368.038351][ T5951] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 368.063849][ T9] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 368.081178][ T9] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 368.119427][ T5951] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.141250][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.161453][ T9] usb 7-1: USB disconnect, device number 6 [ 368.177257][ T5951] usb 6-1: Product: syz [ 368.193789][ T5951] usb 6-1: Manufacturer: syz [ 368.205245][ T5951] usb 6-1: SerialNumber: syz [ 368.435992][ T9997] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 368.537312][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.548195][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.698230][ T5951] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 368.728773][ T5951] usb 6-1: USB disconnect, device number 8 [ 368.779271][ T13] syz_tun: tun_net_xmit 86 [ 369.199403][T10012] loop6: detected capacity change from 0 to 7 [ 369.286664][ T5961] Dev loop6: unable to read RDB block 7 [ 369.292312][ T5961] loop6: unable to read partition table [ 369.332542][ T5961] loop6: partition table beyond EOD, truncated [ 369.347585][T10012] Dev loop6: unable to read RDB block 7 [ 369.393599][T10012] loop6: unable to read partition table [ 369.427826][T10012] loop6: partition table beyond EOD, truncated [ 369.443103][T10012] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 369.636531][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 369.776073][T10029] openvswitch: netlink: IP tunnel dst address not specified [ 369.808641][ T9] usb 6-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 369.819394][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.826583][ C1] syz_tun: tun_net_xmit 86 [ 369.856432][ T9] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 369.884329][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.933884][ T9] usb 6-1: config 0 descriptor?? [ 369.952288][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 370.237265][T10042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1000'. [ 370.291350][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1000'. [ 370.856797][ C1] syz_tun: tun_net_xmit 86 [ 371.378682][T10060] loop6: detected capacity change from 0 to 7 [ 371.396047][ T5206] Dev loop6: unable to read RDB block 7 [ 371.405341][T10062] netlink: 'syz.0.1005': attribute type 21 has an invalid length. [ 371.408539][ T5206] loop6: unable to read partition table [ 371.435524][ T5206] loop6: partition table beyond EOD, truncated [ 371.456821][T10060] Dev loop6: unable to read RDB block 7 [ 371.462812][T10060] loop6: unable to read partition table [ 371.469894][T10060] loop6: partition table beyond EOD, truncated [ 371.487446][T10060] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 371.512803][T10064] xt_hashlimit: max too large, truncated to 1048576 [ 371.529108][ T5206] Dev loop6: unable to read RDB block 7 [ 371.534541][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1006'. [ 371.541449][ T5206] loop6: unable to read partition table [ 371.558576][ T5206] loop6: partition table beyond EOD, truncated [ 371.701820][ T5887] usb 6-1: USB disconnect, device number 9 [ 371.787769][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 371.940761][ T9] usb 7-1: device descriptor read/64, error -71 [ 372.196485][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 372.286526][ T48] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 372.329126][ T9] usb 7-1: device descriptor read/64, error -71 [ 372.376402][ T5927] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 372.436984][ T9] usb usb7-port1: attempt power cycle [ 372.460824][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 372.470258][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.478071][ T48] usb 5-1: too many configurations: 169, using maximum allowed: 8 [ 372.489860][ T48] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 372.497525][ T48] usb 5-1: can't read configurations, error -61 [ 372.536584][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 372.543932][ T5927] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 372.552294][ T5927] usb 4-1: config 0 has no interface number 0 [ 372.558657][ T5927] usb 4-1: config 0 interface 29 has no altsetting 0 [ 372.573412][ T5927] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 372.582885][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.591201][ T5927] usb 4-1: Product: syz [ 372.595882][ T5927] usb 4-1: Manufacturer: syz [ 372.600582][ T5927] usb 4-1: SerialNumber: syz [ 372.608430][ T5927] usb 4-1: config 0 descriptor?? [ 372.626497][ T48] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 372.787828][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 372.795256][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.796599][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 372.803353][ T48] usb 5-1: too many configurations: 169, using maximum allowed: 8 [ 372.820959][ T5927] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 372.831685][ T48] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 372.839488][ T48] usb 5-1: can't read configurations, error -61 [ 372.848686][ T48] usb usb5-port1: attempt power cycle [ 372.852391][ T9] usb 7-1: device descriptor read/8, error -71 [ 373.021729][ T5927] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 373.028808][ T5927] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 373.036196][ T5927] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 373.098455][ T5927] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 373.107019][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 373.137139][ T9] usb 7-1: device descriptor read/8, error -71 [ 373.186715][ T48] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 373.207454][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 373.214549][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.222530][ T48] usb 5-1: too many configurations: 169, using maximum allowed: 8 [ 373.232316][ T48] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 373.245289][ T48] usb 5-1: can't read configurations, error -61 [ 373.263683][ T9] usb usb7-port1: unable to enumerate USB device [ 373.348194][ T9] usb 4-1: USB disconnect, device number 54 [ 373.376532][ T48] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 373.398880][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 373.407582][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.415537][ T48] usb 5-1: too many configurations: 169, using maximum allowed: 8 [ 373.431362][ T48] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 373.439212][ T48] usb 5-1: can't read configurations, error -61 [ 373.445791][ T48] usb usb5-port1: unable to enumerate USB device [ 374.610561][T10106] loop6: detected capacity change from 0 to 7 [ 374.619035][T10106] Dev loop6: unable to read RDB block 7 [ 374.624623][T10106] loop6: unable to read partition table [ 374.632312][T10106] loop6: partition table beyond EOD, truncated [ 374.639940][T10106] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 374.747290][T10109] kvm: emulating exchange as write [ 375.535033][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 376.031794][ T48] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 376.217021][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 376.314554][ T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.351951][ T48] usb 7-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 376.398881][ T48] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=24 [ 376.418151][ T48] usb 7-1: Product: syz [ 376.422371][ T48] usb 7-1: SerialNumber: syz [ 376.454520][ T48] usb 7-1: config 0 descriptor?? [ 376.460633][ T13] syz_tun: tun_net_xmit 86 [ 376.484222][ T48] redrat3 7-1:0.0: Couldn't find all endpoints [ 376.546858][ T5920] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 376.686684][ T48] usb 7-1: USB disconnect, device number 11 [ 376.707649][ T5920] usb 6-1: config 0 has no interfaces? [ 376.727610][ T5920] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.750648][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.783646][ T5920] usb 6-1: Product: syz [ 376.841965][ T5920] usb 6-1: Manufacturer: syz [ 376.859013][ T5920] usb 6-1: SerialNumber: syz [ 376.894623][ T5920] usb 6-1: config 0 descriptor?? [ 377.305929][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 377.316069][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1026'. [ 377.496550][ C1] syz_tun: tun_net_xmit 86 [ 377.534265][T10156] loop6: detected capacity change from 0 to 7 [ 377.583786][T10156] Dev loop6: unable to read RDB block 7 [ 377.614059][T10156] loop6: unable to read partition table [ 377.642893][T10156] loop6: partition table beyond EOD, truncated [ 377.654685][T10156] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 377.804341][T10159] vivid-000: disconnect [ 377.832740][T10159] vivid-000: reconnect [ 378.326439][T10163] netlink: 'syz.4.1031': attribute type 1 has an invalid length. [ 378.383894][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.390504][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.536490][ C1] syz_tun: tun_net_xmit 86 [ 378.672570][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1031'. [ 378.676741][ T5927] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 378.847525][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1031'. [ 379.191568][ T5927] usb 7-1: config 0 has no interfaces? [ 379.231536][ T5927] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 379.252282][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.276473][ T5927] usb 7-1: Product: syz [ 379.280728][ T5927] usb 7-1: Manufacturer: syz [ 379.306382][ T5927] usb 7-1: SerialNumber: syz [ 379.324663][ T5927] usb 7-1: config 0 descriptor?? [ 379.343540][T10178] syz_tun: tun_net_xmit 42 [ 379.647812][ T5927] usb 6-1: USB disconnect, device number 10 [ 379.659701][ T12] syz_tun: tun_net_xmit 86 [ 380.696552][ C1] syz_tun: tun_net_xmit 86 [ 381.356711][ T5951] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 381.423442][ T9] usb 7-1: USB disconnect, device number 12 [ 381.466830][ T5927] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 381.551227][ T5951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.582448][ T5951] usb 4-1: not running at top speed; connect to a high speed hub [ 381.643357][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.657731][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 381.696360][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.718236][ T5951] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 381.736717][ C1] syz_tun: tun_net_xmit 86 [ 381.746501][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.762322][ T5951] usb 4-1: config 1 has no interface number 1 [ 381.782713][ T5951] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 381.800289][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 381.871505][ T5927] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 381.889237][ T5951] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 381.919783][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.950614][ T5951] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.965704][ T5927] usb 6-1: config 0 descriptor?? [ 382.052894][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.106548][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 382.220834][ T5951] usb 4-1: Product: syz [ 382.245918][ T5951] usb 4-1: Manufacturer: syz [ 382.266450][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 382.267518][ T5951] usb 4-1: SerialNumber: syz [ 382.274177][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.306263][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.341758][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.382148][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.455673][ T10] usb 7-1: config 0 descriptor?? [ 382.484681][ T10] hub 7-1:0.0: USB hub found [ 382.573859][ T5927] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0010/input/input23 [ 382.661242][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.679012][ T5927] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0010/input/input24 [ 382.713636][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.802399][ T10] hub 7-1:0.0: 1 port detected [ 382.875502][ T5951] hub 4-1:1.0: Invalid hub with more than one config or interface [ 382.903459][ T5951] hub 4-1:1.0: probe with driver hub failed with error -22 [ 382.926223][ T5951] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 382.989463][ T5927] kye 0003:0458:5011.0010: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 383.273444][ T5951] usb 4-1: USB disconnect, device number 55 [ 383.487164][T10237] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1041'. [ 383.730720][T10241] loop6: detected capacity change from 0 to 7 [ 383.738477][ C1] kye 0003:0458:5011.0010: usb_submit_urb(ctrl) failed: -1 [ 383.800709][ T5961] Dev loop6: unable to read RDB block 7 [ 383.822411][ T5961] loop6: unable to read partition table [ 383.838633][ T5961] loop6: partition table beyond EOD, truncated [ 383.857529][T10243] veth0_to_bond: entered allmulticast mode [ 383.871357][T10241] Dev loop6: unable to read RDB block 7 [ 383.883469][T10241] loop6: unable to read partition table [ 383.893844][T10243] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 383.930872][T10241] loop6: partition table beyond EOD, truncated [ 383.938629][T10241] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 383.946381][ T10] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 383.954546][ T10] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 384.030134][ T10] usbhid 7-1:0.0: can't add hid device: -32 [ 384.036204][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 384.136969][ T1335] syz_tun: tun_net_xmit 86 [ 384.504731][ T5834] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 384.611141][ T5920] usb 6-1: USB disconnect, device number 11 [ 384.736842][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.806222][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.821649][T10265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.833598][ T10] usb 7-1: USB disconnect, device number 13 [ 384.879316][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.021852][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.072055][ T5951] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 385.176553][ C0] syz_tun: tun_net_xmit 86 [ 385.192624][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.316723][ T5951] usb 5-1: config index 0 descriptor too short (expected 9447, got 36) [ 385.319850][ T5834] usb 4-1: config 0 descriptor?? [ 385.326030][ T5951] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.346556][ T5920] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 385.534598][ T5951] usb 5-1: config 1 has no interfaces? [ 385.607568][ T5920] usb 6-1: config 0 has no interfaces? [ 385.628534][ T5951] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 385.705409][ T5920] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 385.742941][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.762619][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.800251][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.845837][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.868008][ T5920] usb 6-1: Product: syz [ 385.910482][ T5834] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 385.961201][ T5834] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 385.999676][ T5834] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 386.048198][ T5920] usb 6-1: Manufacturer: syz [ 386.075264][ T5920] usb 6-1: SerialNumber: syz [ 386.200793][ T5887] usb 4-1: USB disconnect, device number 56 [ 386.216596][ C0] syz_tun: tun_net_xmit 86 [ 386.362977][ T5951] usb 5-1: string descriptor 0 read error: -71 [ 386.370609][ T5920] usb 6-1: config 0 descriptor?? [ 386.504775][ T5951] usb 5-1: USB disconnect, device number 78 [ 387.974090][T10350] libceph: resolve '4..' (ret=-3): failed [ 388.456843][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 388.527973][ T5951] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 388.636365][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 388.686096][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 388.695938][ T5920] usb 6-1: USB disconnect, device number 12 [ 388.696806][ T10] usb 4-1: config 0 has no interface number 0 [ 388.748780][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 388.756816][ T5951] usb 7-1: Using ep0 maxpacket: 8 [ 388.782102][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 388.877489][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 388.892677][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.910994][ T10] usb 4-1: Product: syz [ 388.915264][ T10] usb 4-1: Manufacturer: syz [ 388.940253][ T10] usb 4-1: SerialNumber: syz [ 388.964248][ T10] usb 4-1: config 0 descriptor?? [ 388.991834][ T10] smsc75xx v1.0.0 [ 388.995542][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 388.995553][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 389.051452][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 389.069760][ T5951] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 389.188096][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.194116][T10354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.203637][ T5951] usb 7-1: Product: syz [ 389.207937][ T5951] usb 7-1: Manufacturer: syz [ 389.212743][ T5951] usb 7-1: SerialNumber: syz [ 389.220945][ T5951] usb 7-1: config 0 descriptor?? [ 389.231275][ T5951] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 389.247283][T10354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.250220][T10372] binder: 10348:10372 ioctl c0306201 200000000100 returned -11 [ 389.336524][ T5834] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 389.444290][ T5951] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 389.462814][ T5951] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 389.508427][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.520867][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.524399][ T5951] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 389.605135][ T5834] usb 6-1: config 1 interface 1 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.693584][ T5834] usb 6-1: config 1 interface 1 has no altsetting 1 [ 389.730837][ T5834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 389.743050][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.752105][ T5834] usb 6-1: Product: syz [ 389.756497][ T5834] usb 6-1: Manufacturer: syz [ 389.761208][ T5834] usb 6-1: SerialNumber: syz [ 389.781642][ T5834] usb 6-1: selecting invalid altsetting 1 [ 389.996515][ T5834] cdc_ncm 6-1:1.0: bind() failure [ 390.005168][ T5834] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 390.018090][ T5834] cdc_ncm 6-1:1.1: bind() failure [ 390.026431][ T5834] usb 6-1: USB disconnect, device number 13 [ 390.766799][ T1544] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 390.926638][ T1544] usb 5-1: Using ep0 maxpacket: 32 [ 390.935705][ T1544] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 390.947629][ T1544] usb 5-1: config 0 has no interface number 0 [ 390.953910][ T1544] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 390.956871][T10401] fuse: Unknown parameter 'rhotm7& J4 4O00000100000M' [ 390.974764][ T1544] usb 5-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 391.026479][ T1544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.038180][ T1544] usb 5-1: Product: syz [ 391.055154][ T1544] usb 5-1: Manufacturer: syz [ 391.063870][ T1544] usb 5-1: SerialNumber: syz [ 391.105959][ T1544] usb 5-1: config 0 descriptor?? [ 391.133128][T10386] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 391.159925][ T1544] ftdi_sio 5-1:0.151: FTDI USB Serial Device converter detected [ 391.184782][ T1544] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 391.234588][ T5834] usb 4-1: USB disconnect, device number 57 [ 391.364748][ T1544] usb 5-1: USB disconnect, device number 79 [ 391.367643][ T1544] ftdi_sio 5-1:0.151: device disconnected [ 392.616533][ T5951] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 392.821616][ T5951] usb 5-1: config 0 has no interfaces? [ 392.841191][ T5951] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 392.863956][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.888003][T10448] syzkaller1: entered promiscuous mode [ 392.905173][ T5951] usb 5-1: Product: syz [ 392.913621][T10448] syzkaller1: entered allmulticast mode [ 392.925888][ T5951] usb 5-1: Manufacturer: syz [ 393.025798][ T5951] usb 5-1: SerialNumber: syz [ 393.047303][ T5951] usb 5-1: config 0 descriptor?? [ 393.105302][T10341] syz_tun: tun_net_xmit 86 [ 393.187610][ T10] usb 7-1: USB disconnect, device number 14 [ 393.796781][ T5951] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 393.852670][ T5834] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 393.951872][ T5951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.964146][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.992861][ T5951] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 394.003294][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 394.015726][ T5951] usb 6-1: SerialNumber: syz [ 394.038753][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.071904][ T5834] usb 7-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 394.110346][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.146492][ C1] syz_tun: tun_net_xmit 86 [ 394.166750][ T5834] usb 7-1: config 0 descriptor?? [ 394.215876][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 394.245209][T10475] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 394.269485][T10455] ip6tnl1: entered promiscuous mode [ 394.275185][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'. [ 394.313084][ T5951] usb 6-1: 0:2 : does not exist [ 394.321163][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 394.340578][ T5951] usb 6-1: unit 5: unexpected type 0x09 [ 394.374007][T10475] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1074'. [ 394.391086][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.405384][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.429195][ T5951] usb 6-1: USB disconnect, device number 14 [ 394.489370][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.657210][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 394.828678][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 394.843356][ T5887] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 394.855325][ T5834] usbhid 7-1:0.0: can't add hid device: -71 [ 394.871912][ T5834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 394.903639][ T5834] usb 7-1: USB disconnect, device number 15 [ 394.910030][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.937996][ T5887] usb 4-1: Product: syz [ 394.942451][ T5887] usb 4-1: Manufacturer: syz [ 394.948058][ T5887] usb 4-1: SerialNumber: syz [ 394.955476][ T5887] usb 4-1: config 0 descriptor?? [ 394.969082][ T5887] gspca_main: sq930x-2.14.0 probing 2770:930c [ 395.176587][ C1] syz_tun: tun_net_xmit 86 [ 395.551395][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 395.560457][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 395.606974][ T5887] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 395.612927][ T5887] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 395.627442][ T5887] usb 4-1: USB disconnect, device number 58 [ 396.067328][ T5834] usb 5-1: USB disconnect, device number 80 [ 396.310097][ T5920] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 396.456538][ T5920] usb 6-1: device descriptor read/64, error -71 [ 396.594465][T10514] sctp: [Deprecated]: syz.6.1084 (pid 10514) Use of int in maxseg socket option. [ 396.594465][T10514] Use struct sctp_assoc_value instead [ 396.736640][ T5920] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 396.966667][ T5920] usb 6-1: device descriptor read/64, error -71 [ 397.096164][ T5920] usb usb6-port1: attempt power cycle [ 397.738663][ T5920] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 397.776406][ T5920] usb 6-1: device descriptor read/8, error -71 [ 397.887077][T10528] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1088'. [ 398.037866][ T5920] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 398.077111][ T5920] usb 6-1: device descriptor read/8, error -71 [ 398.156956][ T5887] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 398.217574][ T5920] usb usb6-port1: unable to enumerate USB device [ 398.225775][ T3024] syz_tun: tun_net_xmit 86 [ 398.296707][ T5887] usb 4-1: device descriptor read/64, error -71 [ 398.546453][ T5887] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 398.747825][ T5887] usb 4-1: device descriptor read/64, error -71 [ 398.776975][ T5920] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 398.857661][ T5887] usb usb4-port1: attempt power cycle [ 398.967305][ T5920] usb 7-1: config 0 has no interfaces? [ 399.110091][ T5920] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 399.124359][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.159040][ T5920] usb 7-1: Product: syz [ 399.166091][ T5920] usb 7-1: Manufacturer: syz [ 399.172574][ T5920] usb 7-1: SerialNumber: syz [ 399.202846][ T5920] usb 7-1: config 0 descriptor?? [ 399.208829][ T5887] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 399.251375][T10551] loop6: detected capacity change from 0 to 7 [ 399.256579][ C0] syz_tun: tun_net_xmit 86 [ 399.263378][ T5887] usb 4-1: device descriptor read/8, error -71 [ 399.311011][T10551] Dev loop6: unable to read RDB block 7 [ 399.318114][T10551] loop6: AHDI p1 p2 p3 p4 [ 399.344122][T10551] loop6: partition table partially beyond EOD, truncated [ 399.365866][T10551] loop6: p1 start 926365495 is beyond EOD, truncated [ 399.402286][T10551] loop6: p2 size 47 extends beyond EOD, truncated [ 399.426647][T10551] loop6: p3 start 1886353253 is beyond EOD, truncated [ 399.555457][ T5887] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 399.586890][ T5887] usb 4-1: device descriptor read/8, error -71 [ 399.696859][ T5887] usb usb4-port1: unable to enumerate USB device [ 400.095654][ T5920] usb 7-1: USB disconnect, device number 16 [ 400.219751][ T5206] Dev loop6: unable to read RDB block 7 [ 400.225628][ T5206] loop6: AHDI p1 p2 p3 p4 [ 400.232081][ T5206] loop6: partition table partially beyond EOD, truncated [ 400.244558][ T5206] loop6: p1 start 926365495 is beyond EOD, truncated [ 400.267980][ T5206] loop6: p2 size 47 extends beyond EOD, truncated [ 400.296544][ C0] syz_tun: tun_net_xmit 86 [ 400.302905][ T5206] loop6: p3 start 1886353253 is beyond EOD, truncated [ 400.574793][T10561] pim6reg: entered allmulticast mode [ 400.587940][T10561] pim6reg: left allmulticast mode [ 400.608311][ T5834] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 400.777163][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 400.787512][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.798647][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.818711][ T5834] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.832912][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.843550][ T5834] usb 5-1: Product: syz [ 400.853789][ T5834] usb 5-1: Manufacturer: syz [ 400.864230][ T5834] usb 5-1: SerialNumber: syz [ 401.116713][ T5834] usb 5-1: 0:2 : does not exist [ 401.234634][ T5834] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 401.264153][T10565] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 401.375533][ T5834] usb 5-1: USB disconnect, device number 81 [ 401.473249][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.503352][T10569] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1099'. [ 401.586456][ T5975] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 401.761102][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 401.801158][ T5975] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.862152][ T5975] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.935647][ T5975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 401.957662][ T5975] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 402.021584][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.089229][T10575] @: renamed from hsr0 (while UP) [ 402.099216][ T5975] usb 6-1: config 0 descriptor?? [ 402.380629][T10588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 402.538553][ T5975] hkems 0003:2006:0118.0012: bogus close delimiter [ 402.556069][ T5975] hkems 0003:2006:0118.0012: item 0 4 2 10 parsing failed [ 402.596661][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 402.607135][ T5975] hkems 0003:2006:0118.0012: parse failed [ 402.623764][ T5975] hkems 0003:2006:0118.0012: probe with driver hkems failed with error -22 [ 402.795089][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 402.806006][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.846524][ T9] usb 5-1: config 0 descriptor?? [ 402.860869][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 403.056650][ T9] gspca_spca508: reg_read err -32 [ 403.365387][ T9] gspca_spca508: reg_read err -71 [ 403.382604][ T9] gspca_spca508: reg_read err -71 [ 403.412638][ T9] gspca_spca508: reg_read err -71 [ 403.448987][ T9] gspca_spca508: reg_read err -71 [ 403.491692][ T9] gspca_spca508: reg write: error -71 [ 403.522931][ T9] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 403.561002][ T9] usb 5-1: USB disconnect, device number 82 [ 404.748507][ T5887] usb 6-1: USB disconnect, device number 19 [ 405.170648][T10624] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 405.605915][T10627] syzkaller0: entered promiscuous mode [ 405.736374][T10627] syzkaller0: entered allmulticast mode [ 405.906458][ T5834] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 406.035324][T10645] netlink: 'syz.0.1115': attribute type 9 has an invalid length. [ 406.067533][T10646] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.1114'. [ 406.084405][T10645] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 406.138427][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 406.203867][ T5834] usb 7-1: config 0 has no interfaces? [ 406.250299][ T5834] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 406.260944][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.269090][ T5834] usb 7-1: Product: syz [ 406.273398][ T5834] usb 7-1: Manufacturer: syz [ 406.290535][ T5834] usb 7-1: SerialNumber: syz [ 406.298376][ T5834] usb 7-1: config 0 descriptor?? [ 406.553668][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.597288][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.816434][ T5887] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 408.583990][T10675] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 408.609886][ T5975] usb 7-1: USB disconnect, device number 17 [ 409.496945][ T5920] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 409.692649][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 409.705345][ T5920] usb 5-1: config 5 has an invalid interface number: 72 but max is 0 [ 409.738485][ T5920] usb 5-1: config 5 has no interface number 0 [ 409.744627][ T5920] usb 5-1: config 5 interface 72 has no altsetting 0 [ 409.748883][ T49] syz_tun: tun_net_xmit 86 [ 409.797336][ T5920] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 409.846332][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.875936][ T5920] usb 5-1: Product: syz [ 409.904236][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1128'. [ 409.914567][ T5920] usb 5-1: Manufacturer: syz [ 409.925950][ T5920] usb 5-1: SerialNumber: syz [ 410.014100][T10699] delete_channel: no stack [ 410.106536][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 410.173901][ T5951] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 410.268745][ T5920] ftdi_sio 5-1:5.72: FTDI USB Serial Device converter detected [ 410.276382][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 410.281932][ T5920] usb 5-1: Detected FT4232H [ 410.291319][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.296823][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 410.324439][ T5920] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 410.329033][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.345352][ T5920] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 410.353518][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 410.353547][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 410.353572][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.355213][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 410.364210][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 410.409982][ T5951] usb 6-1: config 5 has an invalid interface number: 72 but max is 0 [ 410.411094][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 410.427728][ T5951] usb 6-1: config 5 has no interface number 0 [ 410.429800][ T9] usb 7-1: Manufacturer: syz [ 410.438668][ T5951] usb 6-1: config 5 interface 72 has no altsetting 0 [ 410.458620][ T9] usb 7-1: config 0 descriptor?? [ 410.482704][ T5920] usb 5-1: USB disconnect, device number 83 [ 410.513480][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 410.543923][ T5920] ftdi_sio 5-1:5.72: device disconnected [ 410.557019][ T5951] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 410.577949][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.596362][ T5951] usb 6-1: Product: syz [ 410.606481][ T5951] usb 6-1: Manufacturer: syz [ 410.611350][ T5951] usb 6-1: SerialNumber: syz [ 410.696467][ T5887] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 410.776518][ C0] syz_tun: tun_net_xmit 86 [ 410.856516][ T9] rc_core: IR keymap rc-hauppauge not found [ 410.856925][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 410.879817][ T9] Registered IR keymap rc-empty [ 410.905471][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.919222][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 410.929547][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.957346][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 410.973659][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 411.011205][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 411.019156][ T5887] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 411.045410][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.057803][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 411.078530][ T5887] usb 4-1: config 0 descriptor?? [ 411.079080][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.166569][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.201562][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.226804][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.257444][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.276470][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.296562][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.318016][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.336451][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.356422][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 411.382151][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 411.399370][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 411.414660][ T9] usb 7-1: USB disconnect, device number 18 [ 411.557938][ T5887] input: HID 0458:501a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:501A.0013/input/input27 [ 411.781574][ T5887] input: HID 0458:501a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:501A.0013/input/input28 [ 411.816480][ C0] syz_tun: tun_net_xmit 86 [ 411.899659][ T5887] kye 0003:0458:501A.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 411.940341][ T5920] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 412.223343][ T5920] usb 5-1: config 0 has no interfaces? [ 412.444086][T10728] loop6: detected capacity change from 0 to 7 [ 412.491179][ T5951] ftdi_sio 6-1:5.72: FTDI USB Serial Device converter detected [ 412.511786][ T5206] Dev loop6: unable to read RDB block 7 [ 412.533184][ T5206] loop6: unable to read partition table [ 412.539901][ T5920] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 412.550164][ T5951] usb 6-1: Detected FT4232H [ 412.604456][ T5951] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 412.630678][ T5206] loop6: partition table beyond EOD, truncated [ 412.644890][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.655771][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1137'. [ 412.756478][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1137'. [ 412.778229][ T5951] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 412.786717][ T5920] usb 5-1: Product: syz [ 412.790917][ T5920] usb 5-1: Manufacturer: syz [ 412.796579][ T9] usb 4-1: reset high-speed USB device number 63 using dummy_hcd [ 412.808137][ T5951] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 412.816262][T10728] Dev loop6: unable to read RDB block 7 [ 412.822128][ T5920] usb 5-1: SerialNumber: syz [ 412.839354][T10728] loop6: unable to read partition table [ 412.888453][ T5951] usb 6-1: USB disconnect, device number 21 [ 412.914427][ T5920] usb 5-1: config 0 descriptor?? [ 412.934065][T10728] loop6: partition table beyond EOD, truncated [ 412.951682][ T5951] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 412.976636][ T9] usb 4-1: device descriptor read/64, error -32 [ 412.989369][T10728] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 413.033057][ T5951] ftdi_sio 6-1:5.72: device disconnected [ 413.052101][ T5206] Dev loop6: unable to read RDB block 7 [ 413.072265][ T5206] loop6: unable to read partition table [ 413.090798][ T5206] loop6: partition table beyond EOD, truncated [ 413.176602][ T5887] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 413.250876][ T9] usb 4-1: reset high-speed USB device number 63 using dummy_hcd [ 413.430229][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.501199][ T5887] usb 7-1: config 0 has no interfaces? [ 413.506902][ T5951] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 413.527942][ T5887] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.542629][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.565923][ T5887] usb 7-1: Product: syz [ 413.571524][ T5887] usb 7-1: Manufacturer: syz [ 413.576534][ T5887] usb 7-1: SerialNumber: syz [ 413.593516][ T5887] usb 7-1: config 0 descriptor?? [ 413.686358][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 413.696980][ T5951] usb 6-1: too many configurations: 41, using maximum allowed: 8 [ 413.712747][ T5951] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 413.721963][ T5951] usb 6-1: can't read configurations, error -61 [ 413.828925][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1136'. [ 413.942366][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.956987][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.993758][ T5951] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 414.277734][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 414.284377][ T5951] usb 6-1: too many configurations: 41, using maximum allowed: 8 [ 414.295055][ T5951] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 414.308384][ T5951] usb 6-1: can't read configurations, error -61 [ 414.334625][ T5951] usb usb6-port1: attempt power cycle [ 414.526429][ T9] usb 4-1: device descriptor read/64, error -71 [ 414.601397][ T5920] usb 5-1: USB disconnect, device number 84 [ 414.707414][ T5951] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 414.786386][ T9] usb 4-1: reset high-speed USB device number 63 using dummy_hcd [ 414.898263][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 414.900207][ T9] usb 4-1: device reset changed ep0 maxpacket size! [ 414.913182][ T5951] usb 6-1: too many configurations: 41, using maximum allowed: 8 [ 414.913789][ T5834] usb 4-1: USB disconnect, device number 63 [ 414.929020][ T5951] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 414.943291][ T5951] usb 6-1: can't read configurations, error -61 [ 415.076757][ T5951] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 415.110200][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 415.116024][ T5951] usb 6-1: too many configurations: 41, using maximum allowed: 8 [ 415.134000][ T5951] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 415.143294][ T5951] usb 6-1: can't read configurations, error -61 [ 415.151251][ T5951] usb usb6-port1: unable to enumerate USB device [ 415.166457][ T5834] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 415.319528][ T5834] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.332749][ T5834] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.352600][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 415.360683][ T5834] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 415.373270][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.388567][ T5834] usb 4-1: config 0 descriptor?? [ 415.497220][T10341] syz_tun: tun_net_xmit 86 [ 415.498529][T10756] delete_channel: no stack [ 415.602979][T10749] input: syz0 as /devices/virtual/input/input29 [ 415.782074][ T5951] usb 7-1: USB disconnect, device number 19 [ 415.827492][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.856874][T10763] libceph: resolve '4..' (ret=-3): failed [ 415.870489][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.932130][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.941085][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.988772][ T5834] corsair-psu 0003:1B1C:1C09.0014: item fetching failed at offset 4/7 [ 416.021154][ T5834] corsair-psu 0003:1B1C:1C09.0014: probe with driver corsair-psu failed with error -22 [ 416.206038][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.225588][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.275795][ T5834] usb 4-1: USB disconnect, device number 64 [ 416.536500][ C0] syz_tun: tun_net_xmit 86 [ 416.550603][T10772] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1147'. [ 416.567038][ T5951] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 416.706690][ T5951] usb 6-1: device descriptor read/64, error -71 [ 416.936067][T10783] loop6: detected capacity change from 0 to 7 [ 416.947376][T10783] Dev loop6: unable to read RDB block 7 [ 416.953466][T10783] loop6: unable to read partition table [ 416.962782][T10783] loop6: partition table beyond EOD, truncated [ 416.983870][T10783] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 416.985305][ T5951] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 417.135085][T10791] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 417.156984][ T5951] usb 6-1: device descriptor read/64, error -71 [ 417.271224][T10796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1154'. [ 417.287504][ T5951] usb usb6-port1: attempt power cycle [ 417.368298][ T5887] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 417.536437][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 417.544533][ T5887] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 417.558475][ T5887] usb 4-1: config 0 has no interface number 0 [ 417.574036][ T5887] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 417.576553][ C0] syz_tun: tun_net_xmit 86 [ 417.607997][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.628788][ T5887] usb 4-1: Product: syz [ 417.633018][ T5887] usb 4-1: Manufacturer: syz [ 417.638045][ T5887] usb 4-1: SerialNumber: syz [ 417.651509][ T5887] usb 4-1: config 0 descriptor?? [ 417.662436][ T5887] asix 4-1:0.251: probe with driver asix failed with error -22 [ 417.670612][ T5951] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 417.698253][ T5951] usb 6-1: device descriptor read/8, error -71 [ 417.864435][ T5887] usb 4-1: USB disconnect, device number 65 [ 417.946683][ T5951] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 418.065155][ T5951] usb 6-1: device descriptor read/8, error -71 [ 418.186597][ T5951] usb usb6-port1: unable to enumerate USB device [ 418.366261][T10807] Cannot find add_set index 0 as target [ 418.696916][T10807] libceph: resolve '4..' (ret=-3): failed [ 418.762972][T10818] binder: 10815:10818 ioctl 40284504 200000000040 returned -22 [ 418.770831][T10819] binder: 10815:10819 ioctl 40284504 200000000040 returned -22 [ 419.450853][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1161'. [ 419.459937][T10825] netlink: 'syz.6.1161': attribute type 9 has an invalid length. [ 419.559783][T10827] loop6: detected capacity change from 0 to 7 [ 419.567267][T10825] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 419.746444][T10827] Dev loop6: unable to read RDB block 7 [ 419.847624][T10827] loop6: unable to read partition table [ 419.862986][T10825] macvlan2: entered allmulticast mode [ 419.870653][T10827] loop6: partition table beyond EOD, truncated [ 419.892265][T10827] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 419.945572][T10825] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 420.167333][T10831] loop6: detected capacity change from 0 to 7 [ 420.218473][T10831] Dev loop6: unable to read RDB block 7 [ 420.276514][T10831] loop6: unable to read partition table [ 420.287314][T10831] loop6: partition table beyond EOD, truncated [ 420.298440][T10831] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 420.636530][T10838] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 420.643285][T10838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.655535][T10838] vhci_hcd vhci_hcd.0: Device attached [ 420.736399][T10840] vhci_hcd: connection closed [ 420.780748][T10334] vhci_hcd: stop threads [ 420.790317][T10334] vhci_hcd: release socket [ 420.812850][T10334] vhci_hcd: disconnect device [ 420.846554][ T5975] vhci_hcd: vhci_device speed not set [ 421.038213][ T5834] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 421.240822][T10859] @: renamed from vlan0 (while UP) [ 421.264702][ T9484] syz_tun: tun_net_xmit 86 [ 421.291501][ T5834] usb 6-1: config 0 has no interfaces? [ 421.328843][ T5834] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 421.379948][T10862] syz_tun: entered allmulticast mode [ 421.393332][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.395668][T10858] syz_tun: left allmulticast mode [ 421.410779][ T5834] usb 6-1: Product: syz [ 421.416581][ C1] syz_tun: tun_net_xmit 54 [ 421.420173][ T5834] usb 6-1: Manufacturer: syz [ 421.424613][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 421.483453][ T5834] usb 6-1: SerialNumber: syz [ 421.526568][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 421.570386][ T5834] usb 6-1: config 0 descriptor?? [ 421.686345][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 421.716486][ C1] syz_tun: tun_net_xmit 54 [ 421.724210][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.735367][ T9] usb 4-1: config 2 has an invalid interface number: 78 but max is 0 [ 421.849165][ T9] usb 4-1: config 2 has no interface number 0 [ 421.953444][ T9] usb 4-1: config 2 interface 78 has no altsetting 0 [ 422.009614][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=3121, bcdDevice=cd.e8 [ 422.053475][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.068931][ T9] usb 4-1: Manufacturer: Э [ 422.076521][ T9] usb 4-1: SerialNumber: ⯬䕴䉌﹤⧭鞡꩷̟尝徔妣퇆菫㜘鹹ᡍ흽虺蔎ſt﹇嘜자頧㍓꼭㵕ਟ熘 [ 422.162505][T10848] netlink: 'syz.5.1166': attribute type 2 has an invalid length. [ 422.296489][ C1] syz_tun: tun_net_xmit 86 [ 422.393380][ T9] usb 4-1: USB disconnect, device number 66 [ 422.466427][ T5975] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 422.618529][ T5975] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 422.629090][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.643749][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.670729][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.691158][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.701755][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.737785][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.753841][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.766464][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.792776][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.805539][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.814948][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.831309][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.839926][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.852022][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.864032][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.865176][T10877] loop6: detected capacity change from 0 to 7 [ 422.872680][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.880896][T10877] Dev loop6: unable to read RDB block 7 [ 422.886665][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.937102][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 422.945222][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.981019][T10877] loop6: unable to read partition table [ 422.989405][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.997123][T10877] loop6: partition table beyond EOD, [ 423.001004][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 423.016187][ T5975] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.030795][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 423.042558][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 423.042700][T10877] truncated [ 423.054679][ T5975] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 423.065848][ T5975] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 423.076200][ T5975] usb 7-1: Product: syz [ 423.082671][ T5975] usb 7-1: Manufacturer: syz [ 423.087647][ T5975] usb 7-1: SerialNumber: syz [ 423.100852][ T5975] usb 7-1: config 0 descriptor?? [ 423.111240][T10877] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 423.116257][T10879] xt_cgroup: path and classid specified [ 423.135443][ T5975] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 423.337101][ C1] syz_tun: tun_net_xmit 86 [ 423.609863][T10885] libceph: resolve '4..' (ret=-3): failed [ 423.870901][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 423.879200][ T5834] usb 7-1: USB disconnect, device number 21 [ 423.893934][ T5834] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 423.993916][T10892] loop6: detected capacity change from 0 to 7 [ 424.012124][T10892] Dev loop6: unable to read RDB block 7 [ 424.022283][T10892] loop6: unable to read partition table [ 424.033929][T10892] loop6: partition table beyond EOD, truncated [ 424.053189][T10892] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 424.472105][T10863] delete_channel: no stack [ 424.538267][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 424.802054][ T5834] usb 6-1: USB disconnect, device number 30 [ 424.907169][ T1544] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 425.079825][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.114067][ T1544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.175850][ T1544] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.225404][ T1544] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 425.265776][ T1544] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.294170][ T1544] usb 7-1: config 0 descriptor?? [ 425.334583][T10924] loop6: detected capacity change from 0 to 7 [ 425.358215][ T5961] Dev loop6: unable to read RDB block 7 [ 425.719813][T10907] xt_connbytes: Forcing CT accounting to be enabled [ 425.727136][T10907] Cannot find set identified by id 0 to match [ 425.744931][ T5961] loop6: unable to read partition table [ 425.751973][ T5961] loop6: partition table beyond EOD, truncated [ 425.777784][T10924] Dev loop6: unable to read RDB block 7 [ 425.783500][T10924] loop6: unable to read partition table [ 425.790735][T10924] loop6: partition table beyond EOD, truncated [ 425.812298][T10924] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 425.936236][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.951116][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.992459][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.027893][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.429256][ T1544] usbhid 7-1:0.0: can't add hid device: -71 [ 426.466472][ T1544] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 426.501657][ T1544] usb 7-1: USB disconnect, device number 22 [ 426.539153][T10940] xt_TCPMSS: Only works on TCP SYN packets [ 427.034208][T10339] syz_tun: tun_net_xmit 86 [ 427.070742][ T30] audit: type=1326 audit(1750386469.153:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.136366][ T30] audit: type=1326 audit(1750386469.153:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.196021][ T30] audit: type=1326 audit(1750386469.153:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.257806][T10940] QAT: Device 127 not found [ 427.277343][ T30] audit: type=1326 audit(1750386469.163:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.330490][ T30] audit: type=1326 audit(1750386469.163:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.493049][ T30] audit: type=1326 audit(1750386469.163:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.591500][ T30] audit: type=1326 audit(1750386469.163:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.711431][ T30] audit: type=1326 audit(1750386469.163:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 427.851086][ T30] audit: type=1326 audit(1750386469.163:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 428.056508][ C1] syz_tun: tun_net_xmit 86 [ 428.070007][ T30] audit: type=1326 audit(1750386469.163:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f144e18e929 code=0x7ffc0000 [ 428.101119][T10964] loop6: detected capacity change from 0 to 7 [ 428.119987][T10964] Dev loop6: unable to read RDB block 7 [ 428.142903][T10964] loop6: unable to read partition table [ 428.165553][T10964] loop6: partition table beyond EOD, truncated [ 428.172601][T10964] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 429.056658][ T5951] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 429.106508][ C1] syz_tun: tun_net_xmit 86 [ 429.226451][ T5951] usb 7-1: Using ep0 maxpacket: 8 [ 429.235306][ T5951] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 429.245932][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.258482][ T5951] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.346414][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.371673][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 429.381820][ T5887] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 429.396343][ T5951] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 429.397617][T10994] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1203'. [ 429.415757][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.546341][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 429.637930][ T5951] usb 7-1: config 0 descriptor?? [ 429.643937][T10974] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.687202][T10991] xt_hashlimit: max too large, truncated to 1048576 [ 429.702463][T10991] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 429.733092][ T51] Bluetooth: hci5: urb ffff888027bf2200 submission failed (90) [ 429.744270][ T5887] usb 5-1: config 252 has an invalid interface number: 165 but max is 0 [ 429.754620][ T5887] usb 5-1: config 252 has no interface number 0 [ 429.763799][ T5887] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 429.773328][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.819298][ T5887] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 429.838256][ T5887] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 430.106827][ T5834] usb 7-1: USB disconnect, device number 23 [ 430.154085][ T5975] usb 5-1: USB disconnect, device number 85 [ 432.621423][T11014] loop6: detected capacity change from 0 to 7 [ 432.649376][T11014] Dev loop6: unable to read RDB block 7 [ 432.654966][T11014] loop6: unable to read partition table [ 432.677904][T10967] syz.5.1198 (10967): drop_caches: 1 [ 432.698670][T11014] loop6: partition table beyond EOD, truncated [ 432.713874][T11014] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 432.779331][T10966] syz.5.1198 (10966): drop_caches: 1 [ 432.787295][T10339] syz_tun: tun_net_xmit 86 [ 432.970632][T11020] binder: 11019:11020 ioctl c0306201 2000000003c0 returned -22 [ 433.226444][ T5834] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 433.307141][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 433.316161][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1219'. [ 433.325474][T11044] netlink: 'syz.5.1219': attribute type 14 has an invalid length. [ 433.393986][ T5834] usb 7-1: string descriptor 0 read error: -22 [ 433.412208][ T5834] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 433.436184][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.455980][ T5834] usb 7-1: config 0 descriptor?? [ 433.684780][ T5834] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 433.734150][ T5887] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 433.816558][ C0] syz_tun: tun_net_xmit 86 [ 433.876458][ T5887] usb 4-1: device descriptor read/64, error -71 [ 433.877485][ T5834] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 433.896182][ T5834] dib0700: firmware download failed at 7 with -22 [ 433.906223][ T5834] usb 7-1: USB disconnect, device number 24 [ 434.416480][ T5887] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 434.612363][ T5887] usb 4-1: device descriptor read/64, error -71 [ 434.853869][T11066] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 434.864003][ C0] syz_tun: tun_net_xmit 86 [ 434.905853][ T5887] usb usb4-port1: attempt power cycle [ 434.928920][T11065] loop6: detected capacity change from 0 to 7 [ 435.057151][T11065] Dev loop6: unable to read RDB block 7 [ 435.073411][T11065] loop6: unable to read partition table [ 435.095580][T11065] loop6: partition table beyond EOD, truncated [ 435.128482][T11065] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 435.326400][ T5887] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 435.377032][ T5887] usb 4-1: device descriptor read/8, error -71 [ 436.064584][ T5887] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 436.274951][ T5887] usb 4-1: device descriptor read/8, error -71 [ 437.270024][ T5887] usb usb4-port1: unable to enumerate USB device [ 437.614439][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 437.614457][ T30] audit: type=1326 audit(1750386479.743:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 437.806704][ T30] audit: type=1326 audit(1750386479.743:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 438.554570][T10339] syz_tun: tun_net_xmit 86 [ 438.687047][ T30] audit: type=1326 audit(1750386479.743:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 439.055883][ T30] audit: type=1326 audit(1750386479.743:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 439.576914][ C0] syz_tun: tun_net_xmit 86 [ 440.001059][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.016994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.060792][ T30] audit: type=1326 audit(1750386479.743:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 440.083420][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 440.103177][ T30] audit: type=1326 audit(1750386479.743:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 440.130117][ T30] audit: type=1326 audit(1750386479.743:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 440.246459][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 440.344916][ T30] audit: type=1326 audit(1750386479.743:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 440.392396][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.616632][ C0] syz_tun: tun_net_xmit 86 [ 441.044806][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.162827][ T30] audit: type=1326 audit(1750386479.743:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11072 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae68f8e929 code=0x7ffc0000 [ 441.195484][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 441.269305][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 441.291404][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.384847][ T9] usb 7-1: config 0 descriptor?? [ 442.502145][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 442.542663][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 442.645777][ T9] usb 7-1: USB disconnect, device number 25 [ 443.226485][T11107] loop6: detected capacity change from 0 to 7 [ 443.285188][ T5840] Dev loop6: unable to read RDB block 7 [ 443.314018][ T5840] loop6: unable to read partition table [ 443.342794][ T5840] loop6: partition table beyond EOD, truncated [ 443.425629][T11107] Dev loop6: unable to read RDB block 7 [ 443.446835][T11107] loop6: unable to read partition table [ 443.482017][T11107] loop6: partition table beyond EOD, truncated [ 443.665083][ T49] syz_tun: tun_net_xmit 86 [ 443.692520][T11107] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 443.876696][ T5975] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 444.441850][ T5975] usb 5-1: config 0 has no interfaces? [ 444.451665][ T5975] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 444.696619][ C0] syz_tun: tun_net_xmit 86 [ 444.932912][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.166670][ T5975] usb 5-1: Product: syz [ 445.170883][ T5975] usb 5-1: Manufacturer: syz [ 445.334162][ T5975] usb 5-1: SerialNumber: syz [ 445.457243][ T5975] usb 5-1: config 0 descriptor?? [ 445.736530][ C0] syz_tun: tun_net_xmit 86 [ 446.984488][ T3024] syz_tun: tun_net_xmit 86 [ 448.003896][ T5975] usb 5-1: can't set config #0, error -71 [ 448.056643][ C0] syz_tun: tun_net_xmit 86 [ 448.261085][ T5975] usb 5-1: USB disconnect, device number 86 [ 449.096540][ C0] syz_tun: tun_net_xmit 86 [ 451.679635][ T3024] syz_tun: tun_net_xmit 86 [ 452.696559][ C0] syz_tun: tun_net_xmit 86 [ 453.736528][ C0] syz_tun: tun_net_xmit 86 [ 459.264732][ T18] sched: DL replenish lagged too much [ 459.326418][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 464.235261][T10334] syz_tun: tun_net_xmit 86 [ 465.256523][ C0] syz_tun: tun_net_xmit 86 [ 466.296575][ C0] syz_tun: tun_net_xmit 86 [ 503.216700][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.223145][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.901751][ T1335] syz_tun: tun_net_xmit 86 [ 505.976502][ C0] syz_tun: tun_net_xmit 86 [ 507.026463][ C0] syz_tun: tun_net_xmit 86 [ 512.490400][ T13] syz_tun: tun_net_xmit 86 [ 513.496488][ C0] syz_tun: tun_net_xmit 86 [ 514.536577][ C0] syz_tun: tun_net_xmit 86 [ 617.346241][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 617.353257][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5823/1:b..l [ 617.361709][ C0] rcu: (detected by 0, t=10503 jiffies, g=57145, q=1010615 ncpus=2) [ 617.369898][ C0] task:syz-executor state:R running task stack:20520 pid:5823 tgid:5823 ppid:5822 task_flags:0x400100 flags:0x00004002 [ 617.384374][ C0] Call Trace: [ 617.387683][ C0] [ 617.390636][ C0] __schedule+0x16f5/0x4d00 [ 617.395187][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 617.400510][ C0] ? __pfx___schedule+0x10/0x10 [ 617.405402][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 617.410647][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 617.415965][ C0] preempt_schedule_irq+0xb5/0x150 [ 617.421102][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 617.426854][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 617.432699][ C0] irqentry_exit+0x6f/0x90 [ 617.437152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 617.443164][ C0] RIP: 0010:unwind_next_frame+0x676/0x2390 [ 617.449018][ C0] Code: 48 8b 44 24 58 80 3c 28 00 74 11 4c 89 ff e8 c1 39 b1 00 48 8b 34 24 48 8b 54 24 08 4d 8b 27 48 8d 5a 01 48 89 d0 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 45 19 00 00 48 89 d8 48 c1 e8 03 0f b6 04 [ 617.468657][ C0] RSP: 0018:ffffc9000409f5f8 EFLAGS: 00000a02 [ 617.474759][ C0] RAX: 1ffffffff207eefe RBX: ffffffff903f77f3 RCX: ffffffff8fbefad0 [ 617.482763][ C0] RDX: ffffffff903f77f2 RSI: ffffffff903f77f6 RDI: ffffffff8be28b20 [ 617.490768][ C0] RBP: dffffc0000000000 R08: 000000000000000b R09: ffffffff81729af5 [ 617.498757][ C0] R10: ffffc9000409f718 R11: ffffffff81acf690 R12: ffffc9000409fc60 [ 617.506753][ C0] R13: ffffc9000409f718 R14: ffffc9000409f6c8 R15: ffffc9000409f700 [ 617.514747][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.520928][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.526089][ C0] ? unwind_next_frame+0xd4/0x2390 [ 617.531245][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.536389][ C0] ? d_alloc_pseudo+0x1f/0xb0 [ 617.541095][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.547270][ C0] arch_stack_walk+0x11c/0x150 [ 617.552066][ C0] ? d_alloc_pseudo+0x1f/0xb0 [ 617.556794][ C0] stack_trace_save+0x9c/0xe0 [ 617.561493][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 617.566898][ C0] save_stack+0xf5/0x1f0 [ 617.571173][ C0] ? __pfx_save_stack+0x10/0x10 [ 617.576046][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 617.581362][ C0] ? __put_partials+0x161/0x1c0 [ 617.586241][ C0] ? put_cpu_partial+0x17c/0x250 [ 617.591205][ C0] ? __slab_free+0x2f7/0x400 [ 617.595855][ C0] ? qlist_free_all+0x97/0x140 [ 617.600643][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 617.606310][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 617.611352][ C0] ? kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 617.617355][ C0] ? __d_alloc+0x31/0x6f0 [ 617.621723][ C0] ? d_alloc_pseudo+0x1f/0xb0 [ 617.626586][ C0] ? page_ext_put+0x97/0xc0 [ 617.631121][ C0] __reset_page_owner+0x71/0x1f0 [ 617.636080][ C0] __free_frozen_pages+0xc71/0xe70 [ 617.641221][ C0] __put_partials+0x161/0x1c0 [ 617.645930][ C0] put_cpu_partial+0x17c/0x250 [ 617.650724][ C0] ? put_cpu_partial+0x6d/0x250 [ 617.655610][ C0] __slab_free+0x2f7/0x400 [ 617.660074][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 617.665996][ C0] ? __phys_addr+0xd3/0x180 [ 617.670528][ C0] qlist_free_all+0x97/0x140 [ 617.675148][ C0] kasan_quarantine_reduce+0x148/0x160 [ 617.680640][ C0] __kasan_slab_alloc+0x22/0x80 [ 617.685517][ C0] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 617.691351][ C0] ? __d_alloc+0x31/0x6f0 [ 617.695709][ C0] __d_alloc+0x31/0x6f0 [ 617.699916][ C0] d_alloc_pseudo+0x1f/0xb0 [ 617.704447][ C0] alloc_file_pseudo+0xcc/0x210 [ 617.709332][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 617.714826][ C0] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 617.720237][ C0] create_pipe_files+0x32b/0x760 [ 617.725215][ C0] __do_pipe_flags+0x4c/0x2d0 [ 617.729922][ C0] do_pipe2+0x9c/0x170 [ 617.734022][ C0] ? __pfx_do_pipe2+0x10/0x10 [ 617.738743][ C0] __x64_sys_pipe2+0x5a/0x70 [ 617.743366][ C0] do_syscall_64+0xfa/0x3b0 [ 617.747897][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.754014][ C0] ? asm_common_interrupt+0x26/0x40 [ 617.759242][ C0] ? clear_bhb_loop+0x60/0xb0 [ 617.763947][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.769866][ C0] RIP: 0033:0x7faa3cf8d649 [ 617.774307][ C0] RSP: 002b:00007ffc3ea59458 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 617.782745][ C0] RAX: ffffffffffffffda RBX: 00005555740cfc70 RCX: 00007faa3cf8d649 [ 617.790740][ C0] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00007ffc3ea59468 [ 617.798727][ C0] RBP: 00007ffc3ea59820 R08: 0000000000000007 R09: 00005555740d9790 [ 617.806737][ C0] R10: 9976b0a129a352e9 R11: 0000000000000246 R12: 00005555740cca80 [ 617.814729][ C0] R13: 00005555740d1468 R14: 00007ffc3ea595a0 R15: 00005555740cf018 [ 617.822763][ C0] [ 617.825824][ C0] rcu: rcu_preempt kthread starved for 10049 jiffies! g57145 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 617.837034][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 617.847020][ C0] rcu: RCU grace-period kthread stack dump: [ 617.852926][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 617.866463][ C0] Call Trace: [ 617.869760][ C0] [ 617.872719][ C0] __schedule+0x16f5/0x4d00 [ 617.877282][ C0] ? schedule+0x165/0x360 [ 617.881643][ C0] ? __pfx___schedule+0x10/0x10 [ 617.886530][ C0] ? schedule+0x91/0x360 [ 617.890801][ C0] schedule+0x165/0x360 [ 617.894995][ C0] schedule_timeout+0x12b/0x270 [ 617.899871][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 617.905266][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 617.911199][ C0] ? __pfx_process_timeout+0x10/0x10 [ 617.916522][ C0] ? prepare_to_swait_event+0x341/0x380 [ 617.922100][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 617.927006][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 617.933191][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 617.938604][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 617.943869][ C0] rcu_gp_kthread+0x99/0x390 [ 617.948503][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 617.953738][ C0] ? __kthread_parkme+0x7b/0x200 [ 617.958714][ C0] ? __kthread_parkme+0x1a1/0x200 [ 617.963781][ C0] kthread+0x70e/0x8a0 [ 617.967879][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 617.973106][ C0] ? __pfx_kthread+0x10/0x10 [ 617.977728][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.982962][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.988201][ C0] ? __pfx_kthread+0x10/0x10 [ 617.992822][ C0] ret_from_fork+0x3f9/0x770 [ 617.997451][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 618.002603][ C0] ? __switch_to_asm+0x39/0x70 [ 618.007430][ C0] ? __switch_to_asm+0x33/0x70 [ 618.012218][ C0] ? __pfx_kthread+0x10/0x10 [ 618.016854][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.021653][ C0] [ 618.024707][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 618.031065][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 618.042721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.052804][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 618.058599][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 d6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 618.078233][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 618.084328][ C0] RAX: b34058681a94e500 RBX: ffffffff81975d58 RCX: b34058681a94e500 [ 618.092325][ C0] RDX: 0000000000000001 RSI: ffffffff8d9823c9 RDI: ffffffff8be28b80 [ 618.100318][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 618.108330][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa10df0 [ 618.116321][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 618.124399][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 618.133353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.139982][ C0] CR2: 000055556cb75350 CR3: 0000000075a78000 CR4: 00000000003526f0 [ 618.147976][ C0] Call Trace: [ 618.151268][ C0] [ 618.154219][ C0] default_idle+0x13/0x20 [ 618.158577][ C0] default_idle_call+0x74/0xb0 [ 618.163363][ C0] do_idle+0x1e8/0x510 [ 618.167461][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 618.173658][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.178902][ C0] ? __pfx_do_idle+0x10/0x10 [ 618.183532][ C0] ? do_idle+0x5/0x510 [ 618.187629][ C0] cpu_startup_entry+0x44/0x60 [ 618.192411][ C0] rest_init+0x2de/0x300 [ 618.196681][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 618.202252][ C0] start_kernel+0x47d/0x500 [ 618.206782][ C0] x86_64_start_reservations+0x24/0x30 [ 618.212286][ C0] x86_64_start_kernel+0x143/0x1c0 [ 618.217429][ C0] common_startup_64+0x13e/0x147 [ 618.222402][ C0] [ 618.556703][ T31] INFO: task syz.0.1231:11096 blocked for more than 154 seconds. [ 618.564502][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 618.572223][ T31] Blocked by coredump. [ 618.576900][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.585592][ T31] task:syz.0.1231 state:D stack:25576 pid:11096 tgid:11091 ppid:5843 task_flags:0x40054c flags:0x00004006 [ 618.597620][ T31] Call Trace: [ 618.600918][ T31] [ 618.603887][ T31] __schedule+0x16f5/0x4d00 [ 618.609698][ T31] ? unwind_get_return_address+0x4d/0x90 [ 618.615399][ T31] ? __lock_acquire+0xa91/0xd20 [ 618.620334][ T31] ? schedule+0x165/0x360 [ 618.624728][ T31] ? __pfx___schedule+0x10/0x10 [ 618.629910][ T31] ? schedule+0x91/0x360 [ 618.634200][ T31] schedule+0x165/0x360 [ 618.638434][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.643929][ T31] __mutex_lock+0x724/0xe80 [ 618.648472][ T31] ? __mutex_lock+0x51b/0xe80 [ 618.653219][ T31] ? raw_release+0x1bb/0x960 [ 618.657902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.662955][ T31] ? do_raw_spin_lock+0x121/0x290 [ 618.668083][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 618.673321][ T31] raw_release+0x1bb/0x960 [ 618.677830][ T31] sock_close+0xc3/0x240 [ 618.682106][ T31] ? __pfx_sock_close+0x10/0x10 [ 618.687019][ T31] __fput+0x44c/0xa70 [ 618.691057][ T31] task_work_run+0x1d1/0x260 [ 618.695687][ T31] ? __pfx_task_work_run+0x10/0x10 [ 618.700896][ T31] do_exit+0x6ad/0x22e0 [ 618.705104][ T31] ? do_raw_spin_lock+0x121/0x290 [ 618.711301][ T31] ? __pfx_do_exit+0x10/0x10 [ 618.715919][ T31] ? raw_ioctl+0x251b/0x3c90 [ 618.720800][ T31] do_group_exit+0x21c/0x2d0 [ 618.725431][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.731015][ T31] get_signal+0x1286/0x1340 [ 618.735584][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 618.741444][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 618.747703][ T31] ? __fget_files+0x2a/0x420 [ 618.752328][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 618.757899][ T31] exit_to_user_mode_loop+0x75/0x110 [ 618.763240][ T31] do_syscall_64+0x2bd/0x3b0 [ 618.767905][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.773140][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.779462][ T31] ? clear_bhb_loop+0x60/0xb0 [ 618.784178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.790128][ T31] RIP: 0033:0x7f642c18e52b [ 618.794562][ T31] RSP: 002b:00007f642cf38f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.803057][ T31] RAX: fffffffffffffffc RBX: 000000000000000c RCX: 00007f642c18e52b [ 618.812104][ T31] RDX: 00007f642cf39fe0 RSI: 0000000080085502 RDI: 000000000000000c [ 618.820171][ T31] RBP: 00007f642cf39fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 618.828295][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 618.836350][ T31] R13: 0000000800000000 R14: 0000200000000000 R15: 00007f642c21bb7c [ 618.844361][ T31] [ 618.847468][ T31] INFO: task syz.6.1242:11133 blocked for more than 154 seconds. [ 618.855205][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 618.862954][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.871680][ T31] task:syz.6.1242 state:D stack:26824 pid:11133 tgid:11131 ppid:9285 task_flags:0x400040 flags:0x00004004 [ 618.883702][ T31] Call Trace: [ 618.887493][ T31] [ 618.890450][ T31] __schedule+0x16f5/0x4d00 [ 618.894994][ T31] ? stack_trace_save+0x9c/0xe0 [ 618.900024][ T31] ? __lock_acquire+0xa91/0xd20 [ 618.904923][ T31] ? schedule+0x165/0x360 [ 618.909339][ T31] ? __pfx___schedule+0x10/0x10 [ 618.915081][ T31] ? schedule+0x91/0x360 [ 618.919417][ T31] schedule+0x165/0x360 [ 618.923620][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.929174][ T31] __mutex_lock+0x724/0xe80 [ 618.933704][ T31] ? __mutex_lock+0x51b/0xe80 [ 618.938555][ T31] ? rtnl_dumpit+0x92/0x200 [ 618.943108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.948232][ T31] ? __build_skb_around+0x257/0x3e0 [ 618.953467][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 618.958937][ T31] rtnl_dumpit+0x92/0x200 [ 618.963302][ T31] netlink_dump+0x62a/0xe20 [ 618.967918][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 618.972991][ T31] ? netlink_lookup+0x30/0x200 [ 618.978043][ T31] ? netlink_lookup+0x30/0x200 [ 618.982835][ T31] ? netlink_lookup+0x30/0x200 [ 618.987696][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 618.992937][ T31] rtnetlink_rcv_msg+0x9eb/0xb70 [ 618.997962][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 619.003367][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 619.008555][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.014807][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 619.021334][ T31] ? __pfx_rtnl_dumpit+0x10/0x10 [ 619.026361][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 619.031771][ T31] netlink_rcv_skb+0x205/0x470 [ 619.036636][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.042121][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.047517][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.052748][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.058019][ T31] netlink_unicast+0x758/0x8d0 [ 619.062824][ T31] netlink_sendmsg+0x805/0xb30 [ 619.067708][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.073040][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 619.078274][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.083596][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.088955][ T31] __sock_sendmsg+0x21c/0x270 [ 619.093675][ T31] __sys_sendto+0x3bd/0x520 [ 619.098294][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 619.103360][ T31] ? do_futex+0x333/0x420 [ 619.107800][ T31] ? rcu_is_watching+0x15/0xb0 [ 619.112617][ T31] __x64_sys_sendto+0xde/0x100 [ 619.118250][ T31] do_syscall_64+0xfa/0x3b0 [ 619.122840][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.137159][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.143490][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.326364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.332507][ T31] ? clear_bhb_loop+0x60/0xb0 [ 619.363455][ T49] syz_tun: tun_net_xmit 86 [ 619.626375][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.633264][ T31] RIP: 0033:0x7efd20b8e929 [ 620.217267][ T31] RSP: 002b:00007efd21945038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 620.225747][ T31] RAX: 0000000000000012 RBX: 00007efd20db5fa0 RCX: 00007efd20b8e929 [ 620.386590][ C0] syz_tun: tun_net_xmit 86 [ 621.422932][ C0] syz_tun: tun_net_xmit 86 [ 622.412620][ T31] RDX: 0000000000000012 RSI: 0000200000000740 RDI: 0000000000000004 [ 622.566284][ T31] RBP: 00007efd20c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 622.574321][ T31] R10: 000000000004c000 R11: 0000000000000246 R12: 0000000000000000 [ 622.774379][ T5206] udevd[5206]: worker [11137] /devices/virtual/bluetooth/hci3/hci3:200 is taking a long time [ 623.026266][ T31] R13: 0000000000000000 R14: 00007efd20db5fa0 R15: 00007efd20edfa28 [ 623.034317][ T31] [ 623.256394][ T31] [ 623.256394][ T31] Showing all locks held in the system: [ 623.264205][ T31] 1 lock held by kthreadd/2: [ 624.508802][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.796339][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.032786][ T31] 1 lock held by kworker/R-kvfre/6: [ 625.186289][ T31] #0: ffffffff8dfe5948 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 626.906328][ T31] 4 locks held by kworker/0:0/9: [ 626.911325][ T31] 4 locks held by kworker/0:1/10: