last executing test programs: 2m50.929235956s ago: executing program 4 (id=612): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_EMATCHES={0x64, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x54, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x29, 0x5, "ad5fd42254ad28163d567ddbeeada802ae27432d20e5bdec7ba1d4353aa61445473cd1e658"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 2m50.440643513s ago: executing program 4 (id=615): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 2m48.309426941s ago: executing program 4 (id=623): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xf, 0x38032, r0, 0xfffff000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x25, "43720738300000000200000000000000476f8ea33299b631376f55617a34d392dc642f70aa"}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000007000)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000001e80)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0}}], 0x2, 0x24000844) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180002000301030000000000000000000200000804000180"], 0x18}}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000", @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xff92, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda3, 0x10, 0x0, 0x3d, 0x0, 0xffffffffffffffff, 0xfe45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) socket(0xf, 0x1, 0x9e) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0xa, 0x4) 2m47.869416621s ago: executing program 4 (id=626): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x10000, 0x40}, 0x18) renameat2(r1, &(0x7f0000000300)='./file0\x00', r3, &(0x7f00000003c0)='./file0\x00', 0x2) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) (rerun: 32) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/101) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000015", @ANYRES16=r8, @ANYBLOB="110c2abd7000fedbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00c7001402a53241106724"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) r9 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_DO_IT(r9, 0xab03) (async, rerun: 32) r10 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f4a653d30303030303030303030303030305bc6fd323030303034303030302c757365725f69643d4c01e8876bc0f99dfa91fda0d4e8141205066d480ff9b8ed9c8f4bfa922dd5b093005be190c7df2e728338b7dc47f967604e09e398cdb456d052afca0dd36b9fca4daad193e4ba72c4f693f75ee7b6b6", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRES16, @ANYRES32=0x0], 0x0, 0x0, 0x0) (async, rerun: 32) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r11, 0x40085112, &(0x7f00000001c0)=@v={0x93, 0x7, 0x80, 0x9, @generic=0x1, 0x2, 0x8}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) unshare(0x0) (async) r12 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r12, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) (async) open_tree(r10, &(0x7f0000000240)='./file0\x00', 0x88900) 2m46.353139918s ago: executing program 4 (id=632): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x420000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2m45.681192071s ago: executing program 4 (id=634): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x9}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = timerfd_create(0x6, 0x80000) timerfd_gettime(r2, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xa, 0x7}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={r1, 0xfffffffd}, &(0x7f0000000180)=0x8) getsockname$packet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r5 = open(&(0x7f0000000240)='./file0\x00', 0x4002, 0x118) r6 = accept4$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c, 0x180400) tee(r0, r6, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r1, 0x6}, &(0x7f0000000340)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x8, 0x4, 0x4}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000440)={r4, 0x5}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000004c0)={r1, 0x3}, &(0x7f0000000500)=0x8) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) r7 = accept4$inet(r5, 0x0, &(0x7f0000000540), 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x4, @mcast2, 0x26ba}, @in6={0xa, 0x4e20, 0x1, @mcast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x89b2, @local, 0x8}, @in6={0xa, 0x4e20, 0xc144, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xcc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000680)={r1, 0x7526}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x10100, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000700)) r8 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000780)={0x1, 0x6, [{r5, 0x0, 0x10000, 0xfffffffffffff000}, {r5, 0x0, 0xfefff000, 0x100000000}, {r5, 0x0, 0x1000000000000, 0x1000000}, {r5, 0x0, 0x100000000, 0xfffff000}, {r5, 0x0, 0xfffffffff0000000, 0x1000000}, {r5, 0x0, 0x8000, 0x100000000}]}) writev(r8, &(0x7f0000000a80)=[{&(0x7f0000000840)="f732f21f08cf0faab670c1120cb8beb6f0d33f98aeb1b624dff4db15e14db2477fd92b9e36989e9440b9a2a8fc03f085859ebe6bf69b3521c99023ab8022e07d41610aeee208dcc8541d1fc61852eb7c6bfc2fe5fe919ed294259362c4fcd039a6b362c21d3316c608d0c5377cc35dd98d62ccb03a4f4b495e390360c57884e19203a3c6669a254129c193079552502159ca36d65677713861e1e98e4cfb7248c78ec734fb11b8ef64becff5bfffa8451fb5e330861b7df0e6d861893fb46f80cd18e8121e8a82eaaca4b9b45584add42c4c09a9003464f7aae7e05eba266f00ccde9b8e93f9e52da14ceefc5f5db6277268744cb24dd8", 0xf7}, {&(0x7f0000000940)="fe266195c9beda1bed3b48db7056c78e3b88ad14a3a05e4a73b916333e051b21c114932f12d8c853a130321da5ace37cbe2aa3b2e71c76b80c6940bf940590a5c1529789b1273c8244f75c690550259e552311ed8431f57690dc863dd7b1c589ead9092b9c9e02d4f2ee4b19bc387bf64aabd9c1d70abf5658d810c80e9540767a71cebc70a5697e84725f4a23d0fde8a4574a018ab5a2fee8cac5dbca1f221b66556688f0e2ef0708df1269ff49", 0xae}, {&(0x7f0000000a00)="96eabc421888e19f42342c73b697a6bad4bb070aaf6d89130c6cf83ea436f577dffcfb8c1a47024fa0a827f625e3007fb3430c5c7408df57eb614954481429453b1da56f6f8c87a8de6f9a1a1c8556d240092611cfeb44f6a7af9864", 0x5c}], 0x3) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000015) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) io_uring_enter(r2, 0x2ff4, 0x8cfb, 0x44, &(0x7f0000000c00)={[0x7ff]}, 0x8) 2m44.410523301s ago: executing program 32 (id=634): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x9}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = timerfd_create(0x6, 0x80000) timerfd_gettime(r2, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xa, 0x7}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={r1, 0xfffffffd}, &(0x7f0000000180)=0x8) getsockname$packet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r5 = open(&(0x7f0000000240)='./file0\x00', 0x4002, 0x118) r6 = accept4$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c, 0x180400) tee(r0, r6, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r1, 0x6}, &(0x7f0000000340)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x8, 0x4, 0x4}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000440)={r4, 0x5}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000004c0)={r1, 0x3}, &(0x7f0000000500)=0x8) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) r7 = accept4$inet(r5, 0x0, &(0x7f0000000540), 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x4, @mcast2, 0x26ba}, @in6={0xa, 0x4e20, 0x1, @mcast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x89b2, @local, 0x8}, @in6={0xa, 0x4e20, 0xc144, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xcc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000680)={r1, 0x7526}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x10100, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000700)) r8 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000780)={0x1, 0x6, [{r5, 0x0, 0x10000, 0xfffffffffffff000}, {r5, 0x0, 0xfefff000, 0x100000000}, {r5, 0x0, 0x1000000000000, 0x1000000}, {r5, 0x0, 0x100000000, 0xfffff000}, {r5, 0x0, 0xfffffffff0000000, 0x1000000}, {r5, 0x0, 0x8000, 0x100000000}]}) writev(r8, &(0x7f0000000a80)=[{&(0x7f0000000840)="f732f21f08cf0faab670c1120cb8beb6f0d33f98aeb1b624dff4db15e14db2477fd92b9e36989e9440b9a2a8fc03f085859ebe6bf69b3521c99023ab8022e07d41610aeee208dcc8541d1fc61852eb7c6bfc2fe5fe919ed294259362c4fcd039a6b362c21d3316c608d0c5377cc35dd98d62ccb03a4f4b495e390360c57884e19203a3c6669a254129c193079552502159ca36d65677713861e1e98e4cfb7248c78ec734fb11b8ef64becff5bfffa8451fb5e330861b7df0e6d861893fb46f80cd18e8121e8a82eaaca4b9b45584add42c4c09a9003464f7aae7e05eba266f00ccde9b8e93f9e52da14ceefc5f5db6277268744cb24dd8", 0xf7}, {&(0x7f0000000940)="fe266195c9beda1bed3b48db7056c78e3b88ad14a3a05e4a73b916333e051b21c114932f12d8c853a130321da5ace37cbe2aa3b2e71c76b80c6940bf940590a5c1529789b1273c8244f75c690550259e552311ed8431f57690dc863dd7b1c589ead9092b9c9e02d4f2ee4b19bc387bf64aabd9c1d70abf5658d810c80e9540767a71cebc70a5697e84725f4a23d0fde8a4574a018ab5a2fee8cac5dbca1f221b66556688f0e2ef0708df1269ff49", 0xae}, {&(0x7f0000000a00)="96eabc421888e19f42342c73b697a6bad4bb070aaf6d89130c6cf83ea436f577dffcfb8c1a47024fa0a827f625e3007fb3430c5c7408df57eb614954481429453b1da56f6f8c87a8de6f9a1a1c8556d240092611cfeb44f6a7af9864", 0x5c}], 0x3) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000015) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) io_uring_enter(r2, 0x2ff4, 0x8cfb, 0x44, &(0x7f0000000c00)={[0x7ff]}, 0x8) 1m34.80032794s ago: executing program 5 (id=876): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x34, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4776, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'xfrm0\x00', 0x2020}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYBLOB="8e22c572"], 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0xffffffff, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) syz_usb_connect(0x2, 0x2ca, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c44d3010990407108fdf010203010902b80202000000000904ce02078d0e9901092406000152f5c3c005240002000d240f01090000000600bcf30306241a0600090c241b9060080053064000080424020005241502000c2407070000000001009b0f05240101080905060040001603817d03cd01496c5ea4e1b402464a4cd5f585899ad7e298090089e4f9aa823af7bd44c7f782edc8f2d93408bcd6a07ea219e3728a4c1062c30231048e9f3b4723719db5d079295d9895ebb777ef70408ad9d2011a47892a6daf274622d7449db47104f8a91ea3ae633682fa432ddf5a4f21bafef16268c07b0a52b677082609050b140004070d0209050416200079a3090725018005ff7f09050d02ff03800808970b2d417d0bfa9c4cf4f9257305743a28059aa66998af3cb2080a7860cd9b75eeaa34fb622b9f862c2222120497a7ae56e633f2aa861f0de9e5e7ff2f9ef052c11d9f6fdb45419c48d6fe090192e5431de191c61142fc8fcd4aa49889a2606218584e51975554f5650993efdb00ddc2f46421cdcba016cecba190e374c283f4d9412824c18177b613f099c5d1f8e5aa3b5b7b7c6b59410725010200050009058c03", @ANYRESHEX=0x0], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18100000000000000000000000000000811097000000000095000046aa242caa"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m33.223975178s ago: executing program 5 (id=882): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffcc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112180000000000bf201000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000"]) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r7, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xbaca}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="201701000000e1d079bfacb4e1c9fa9627e66159a636ea0be863723a18aa2522d76c3477dde5fc24c0a44408877d8df429797fca9b4e2e26ccf944b2830e5321319a184e3fc67cf76886e14d4575761e5381e00627446484d6a6752d10df6e840490f96ddd6af9b06e48a4c19336b2ed10759068faa1b1e4"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m28.601339575s ago: executing program 5 (id=900): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x10, 0x10, 0x7fffffffffffffff, 0x6, 0x1, 0xc152, 0x0, 0x6, 0x9, 0x90000000, 0x8, 0x3, 0x8, 0xfffffffffffff6c8, 0xabe, 0xdc], 0xf000, 0x8180}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_pidfd_open(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r4, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e71148a635dc49e0556303070426015a48a81290ab12168df214047a25c75c65b5d155ea64efdf376ecb9570223c9e356dc1864b237e404ff0030eb6b7cd4bf3b21028ebec9308c4ca66af8eac463d39c28ab158666fa1f573f0fd7aef24d9e6d72198e48046b8a6987a54eb53ee51403eb4f3b424120af0d1"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_emit_ethernet(0xf0, &(0x7f0000000380)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@llc={0x4, {@llc={0x4, 0xaa, '0', "322dd52b63fefd3ea9b1d1b19270feffda603b754e574a5192848b8edef6981ae70ea2afe7ec3a919cc887434d646beb1714ed54139d7a29010e78aeaaee02e4efa5dee31502c8deeeedadbaef4e93c8f25cc7829401047836df72c34e2dae12595abe3dce578ba73aa80a24c1acf02fe039f17c5bef1db147dcf2796b5c238be9974176d23bb5d717fc9b07300a15eefde09916495134d8c21d62089e0d763ea44a3889c8edf2c7b38078e89782baaec44bb911faada4c18ebd85f6a24049451c11e637669783325cf1d1e000e9e3e5570861ee177f3b623af7a7"}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x33, 0xfae, 0x8e2, 0x37e]}) 1m25.761596099s ago: executing program 5 (id=912): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) r3 = dup2(r2, r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async) read$nci(r3, &(0x7f0000000140)=""/126, 0x7e) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00', 0x46) io_uring_enter(r4, 0x3f11, 0x50a9, 0x58, &(0x7f00000001c0)={[0x1]}, 0x8) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='%\x00'/12, @ANYRES32, @ANYBLOB="5e246f6cf2c959c4dcae28bf3dbbfb4f9c80c7de4d8fba4efdea4970217816bde152182084491f54a95d02c8dfca8001000000f209ee93a8be94c7d3a26b3c115f6a78e0c33aaed8b9cb71db6d6ebd6638aa42ad8d3db2335010", @ANYRES64=0x0], 0x20) (async, rerun: 64) listen(r0, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000-0000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000162000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f0000000280)=0x81, 0x0, 0x4) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2100) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 1m25.608494015s ago: executing program 5 (id=913): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x9, 0x0, 0x5}, 0x0, &(0x7f0000000300)={0x1ff, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) syz_usb_disconnect(r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000008400000000faff001fc7ff0f0800c400"], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x5, 0xc, 0x3, 0x5}, &(0x7f0000000180)=0x10) syz_clone(0x442cf700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.304416627s ago: executing program 5 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff0000007b92706e1e078e748c", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028006000f000000000014000300fc0000000000000000000000000000000400130014000200fc02"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_EMATCHES={0x64, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x54, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x29, 0x5, "ad5fd42254ad28163d567ddbeeada802ae27432d20e5bdec7ba1d4353aa61445473cd1e658"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1m24.285617416s ago: executing program 33 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff0000007b92706e1e078e748c", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028006000f000000000014000300fc0000000000000000000000000000000400130014000200fc02"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_EMATCHES={0x64, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x54, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x29, 0x5, "ad5fd42254ad28163d567ddbeeada802ae27432d20e5bdec7ba1d4353aa61445473cd1e658"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 12.792739456s ago: executing program 3 (id=1158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) epoll_create(0x101) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_io_uring_complete(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9.961715773s ago: executing program 1 (id=1169): r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x8000) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000c80)) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000001c0)={r11}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "150e7c585de29208", "3698c876ce5f00", "240e1183"}, 0x28) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "eb00"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c) listen(r2, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) 9.817390686s ago: executing program 1 (id=1170): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x6c, [{{0x9, 0x4, 0x0, 0x60, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xb14}}, {{{0x9, 0x5, 0x81, 0x3, 0x260, 0x7, 0x7, 0x26}}}}}]}}]}}, 0x0) pipe2$watch_queue(&(0x7f0000000980), 0x80) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_usb_connect(0x5, 0x59, &(0x7f0000000080)=ANY=[], 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$alg(0x26, 0x5, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 9.605262535s ago: executing program 3 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400"}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@RTM_NEWNSID={0x24, 0x58, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8}]}, 0x24}}, 0x0) 8.431204165s ago: executing program 3 (id=1174): r0 = syz_open_dev$sndctrl(&(0x7f00000025c0), 0x2, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x3}, &(0x7f0000000180), &(0x7f00000001c0)) unshare(0x22020600) syz_io_uring_setup(0x5e2, &(0x7f00000004c0)={0x0, 0x0, 0x864, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4e55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000002640)={{0x9, 0x6, 0x1ff, 0x7, '\x00', 0x3}, 0x6, 0x200, 0x7, 0x0, 0x0, 0x1, 'syz0\x00', 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xf) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setreuid(r6, r7) 8.282357935s ago: executing program 1 (id=1176): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001c00)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x2d8, 0x0, 0x0, 0x208, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x19) write$binfmt_misc(r5, &(0x7f0000000dc0), 0x386) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x11a, 0x20, 0xfffffffe}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x30, 0x1, 0x7, [{@remote, 0x9}, {@remote, 0x8}, {@multicast1, 0x3}, {@rand_addr=0x64010102, 0x10}]}]}}}], 0x50}, 0xc1) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x11a, 0x20, 0xfffffffe}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x30, 0x1, 0x7, [{@remote, 0x9}, {@remote, 0x8}, {@multicast1, 0x3}, {@rand_addr=0x64010102, 0x10}]}]}}}], 0x50}, 0xc1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, &(0x7f0000000280)={0x20, r11, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) (async) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, &(0x7f0000000280)={0x20, r11, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) 8.221851848s ago: executing program 3 (id=1177): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000080)={0x98f907, 0x5, @value}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022220000008806e53f93b2938f8d0b42965f4d070900be0083000000"], 0x0}, 0x0) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) migrate_pages(r3, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x2}}, 0x10) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c240203010104030700ff070c240296bbbba4446780c9f858382c060002050502"], 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r13, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xdddd0000, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2000, 0xf, 0xfe, 0x3f, 0x0, 0x0, 0x0, 0x8, 0x2, 0x5}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, 0x3, 0xfe, 0x4}, {0x10001, 0xffff1000, 0xf, 0x0, 0xa8, 0x0, 0x0, 0x4}, {0x0, 0x100000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x10, 0x1, 0x7, 0x8}, {0x0, 0xeeee0000, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x80, 0x0, 0x3}, {0x4, 0x100000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {0x0, 0x400}, 0x9df8ffda, 0x0, 0xeeee8000, 0x100, 0x8, 0x8000, 0x2000, [0xd53f, 0x0, 0x2]}) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2010, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="85000000550000007b2000000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.861345084s ago: executing program 0 (id=1178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff580", 0x4, 0x1) (async) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xdb, 0x2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x20, 0x0, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xdb, 0x2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x20, 0x0, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r2, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80002, 0x0) (async) r5 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d40)=[{0x10, 0x9d4161a0676d4849}, {0x10, 0x1}], 0x20}}], 0x2, 0x40840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c00, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c00, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004600)=@deltfilter={0x24, 0x2d, 0x1, 0x20002, 0x4, {0x0, 0x0, 0x0, 0x0, {0x294a510e76df2c5b, 0x2}, {0x5}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @default, @random="2ab8f38b018f"}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @default, @random="2ab8f38b018f"}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x11, 0x6, @multicast}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'veth0_vlan\x00', 0x30c40000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) 7.847969632s ago: executing program 1 (id=1179): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = gettid() sigaltstack(&(0x7f0000000080)={&(0x7f0000002040)=""/4096, 0x0, 0x1000}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="408f0100912856"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x2042) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x5c}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0xf0bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xd}, {0xffff, 0xc}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) unshare(0x2040400) listen(0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setpriority(0x1, 0x0, 0x100000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.733073384s ago: executing program 6 (id=1180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x12}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e28, 0x0, @private1, 0x2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf983d2de94410300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(0xffffffffffffffff, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r9) 6.697865264s ago: executing program 6 (id=1181): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x1070bd25, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20050081}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000002}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 6.096854651s ago: executing program 2 (id=1183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x4c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r2, &(0x7f0000000000)='net/connector\x00') 5.799637605s ago: executing program 0 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400"}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@RTM_NEWNSID={0x24, 0x58, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8}]}, 0x24}}, 0x0) 5.03342123s ago: executing program 2 (id=1185): socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) (async) io_setup(0x2, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f00000002c0)={[0x2368e8ff]}, 0x8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x0, 0xfffffffffffffffd}, 0x10) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) symlink(&(0x7f0000002100)='./file0\x00', 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000600000029000000b90000000402020900000000ff020000190000000000470700200001"], 0x28}}], 0x1, 0x44010) (async) r4 = io_uring_setup(0x2c49, &(0x7f0000003c40)={0x0, 0xaaf5, 0x100, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400901db0a010a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fanotify_init(0x200, 0x0) syz_open_dev$media(&(0x7f0000000b40), 0x2e14, 0x80082) (async) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) 4.458736636s ago: executing program 6 (id=1186): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x60, 0x6c, [{{0x9, 0x4, 0x0, 0x60, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xb14}}, {{{0x9, 0x5, 0x81, 0x3, 0x260, 0x7, 0x7, 0x26}}}}}]}}]}}, 0x0) pipe2$watch_queue(&(0x7f0000000980), 0x80) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_usb_connect(0x5, 0x59, &(0x7f0000000080)=ANY=[], 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$alg(0x26, 0x5, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, 0x0, 0x0) 4.317241974s ago: executing program 2 (id=1187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x4000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r7 = msgget$private(0x0, 0x2) msgsnd(r7, 0x0, 0x0, 0x800) (async) msgsnd(r7, 0x0, 0x0, 0x800) msgrcv(r7, 0x0, 0x0, 0x3, 0x2000) msgrcv(r7, 0x0, 0x0, 0x3, 0x1000) (async) msgrcv(r7, 0x0, 0x0, 0x3, 0x1000) 4.035268776s ago: executing program 0 (id=1188): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b9376000000000000000000000000000000000000000000020000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x24040040) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff0000004000000000ffffffffffffffff1a00000100000000000000fbffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000100"/112], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.689006587s ago: executing program 0 (id=1189): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000b80)="b6bea955890fe6cf8648da472a4941bd67aee5a95b8a5e31254c09676e4825a514", 0x21}, {&(0x7f0000000bc0)="d9376c515c205a809fd4a2860ebd589dec780de6d628618202d86451e9f24460e5468855c6ea09c432dbbca420743e087670802cbf6ef171aadf3e7387e29ca2d1fcfd19e93f2021dc3b450dbd25040b48a839daf7cd207233bee72a0b1a125e9a0842610b75b050e96ce950733221ea034b1cf19c9e781438294f12dc6e1f8970a6bbffab14caa4c29b00a76dff32dc2e734d938eb1ca75f6e877e52477a0209eabba12a0499724233c7c70c07c91e87f4929453176207000f5e41c3b4938c41123a3f0e40e47836a3d3466b5e691a8bccae33e4c2fe96f810abd458f0f616ef174d43dc503e811", 0xe8}, {&(0x7f0000000cc0)="817975e2a47a5319b99419465b99ce2cd8799a927d599378bc05154902715c05a4855e397eb149ea05c7a6a374ce459afea690934b55b4e9f367903a6da14a3ae4e8b0dda98f170fc9a2c2d2083cb3cf7a5acd6ea9eacac906faed96ec12823a35fc6def07d427f2293ee0dea3fa3ef64bc6c6914a0c487d64da60ca64f3de4678d4dc8b2de702ff4e4506603cdf08b3b42070b0e5564575310ed9eba133ddbe1b26a91bd1077c5a0c83294b18d184aabb35d0a9ff893bde4b8b7f9f29d1e9b1eb48ffbaaa7c3c3948adce028b26071cbb70bdcb3113fff8b3bb90eb4e", 0xdd}, {&(0x7f0000000dc0)="fb73e83c40630f840718ea9636523db5de80a6461ab143b5174bf90ee43d0c13597abfc1702a5039f73e7965d3675c35238a557d91b89e138694c532c414e7c35a58c354e1dc62cbbb2debf57572d48a4774d673f39488e04d191531f914379dee066ffe87b2692f71566aa7abc9376cf1a3910567b976e695117c0afc517d7136293f77ca3448fbee530454043538274fa18c56c83f40794f4a98607e779cc404081e637dc3192e538d3be3cd3c5730306a183c70746f58c5394eca92179badd4285e792656d671349fff4b9680715045fdc34bedce0495444ba34b28531791", 0xe0}, {&(0x7f0000000ec0)="dcf1a7c315d618acf2d3e7b814bd065a5d55b2bf9e44be5d1febf80f5890ed91a7cf7c2ff1955233a523785c3abc6a9272ace61e0e2f1ce28f58", 0x3a}, {&(0x7f0000002300)="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", 0x1000}], 0x7}, 0x40004) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x15, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x405, 0x3abc4c, 0x2c8240}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.42965351s ago: executing program 3 (id=1190): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x4, 0x821a6114, 0x0, 'queue0\x00', 0xffffffff}) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x602600) write$sndseq(r3, &(0x7f0000000080), 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) sendfile(r5, r5, 0x0, 0xffffffff) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x800}], 0x1, 0x8001) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 3.201062504s ago: executing program 1 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa00000000ae5d3cafc9d7067ece35fa577d81d4834d9caecca553893aab5f1ce98efa03fa9f1194", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c4000502000000fd000000000002d58838068b91000000"], 0x4e) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x20, 0x101000) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x2, 0x7, 0xff, 0x2}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd8, 0x7f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x5, 0x9}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x407}}, {0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="3b0342e2721c411bb57e66a88a7021a774e2e0a70879b15c8958774a022dcf08cf5e68468f4204321c627e482a912a2d75840fd9da04a41a6c7e60"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}]}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) 2.921279179s ago: executing program 2 (id=1192): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000240)=""/28, 0xffd2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) keyctl$read(0x1d, r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) io_setup(0x0, 0x0) r3 = mq_open(&(0x7f00000000c0)='ip_vti0\x00', 0x1, 0x2, &(0x7f0000000100)={0x5, 0x8, 0x4, 0x100000001}) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) close_range(r3, r4, 0x96793ca3803d207e) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0x0) syz_emit_ethernet(0x219, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000001e33aff00000000000000000000000040210e2c45e4a5c700000000ff02000000000000000000000000000187009078fc00000000000000000000000000000000000038c2689f036b879d3ec8e5828f9e9ee2c640e89cf72223237dc800bb3b03f59c66f78aaa4b61d0836252526d17a84bc8c4cb0539beb9673170f145cae0f218813d04b2c1238f2e109d52153b954db922764dc773f7671b65accc3e2d57180deaeb2ebeec4db69270c643bc0b00411e7209b7fbcd4deae1d990b6b8fa09bbb6c7be2bfa631652d60f0ac9af0c96f091d469077bb0474e6af552d65b738a7368791b5e25f8db00bfd96c66edd80cce1b8bfee8a43267b1a3af2d7eb3301acfa4ef45348bebd2281d38a74811538a792766d75057da15f53d1c9525fbe1f0c34d4d2a00c180390a0016bd058f9c12eeaebc2abdcbe950634655191c3257f31482321e25c263868f9bddb0fe008399f2f9aabcf1d5a95e6349220e1b817151169861a3a25469c7f5e046d6cad595ad6df845c45754d9802776dbc69616eeb309a03d13d4160898878bfd21b3145e03de82ef7248679691e87ec2fd0b3da92c1c937f15939afc3d1b898ed85fcf01dd6729a908b532ded995cc52e25dee66e3bfec9ba84071ff8cf7f14b32dc809b4e953215d28d90c3315d20056341bfc714bb8ec31007318ac8ae962d8c417f2422adf71127c0f8bc04f3d4ac9ac1d3a40e0124fc"], 0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r10 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x408000, 0x0) 2.919587695s ago: executing program 6 (id=1193): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in6=@dev, 0x0, 0x2b}, 0x2, @in6=@dev, 0x0, 0xa937aa87ea6907a6, 0x0, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x6, 0x4, 0x0, 0x2, 0x0, 0x8, 0x0, 0xff, 0x43, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x8, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000041) 2.815626145s ago: executing program 6 (id=1194): io_uring_setup(0x6e0e, &(0x7f0000000280)={0x0, 0xe9f9, 0x2, 0x5, 0x396}) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000300)="3d5c4cb40ca57f947afeccba01813a8b827edd8196ce8833daf0b56834d9adf8f1e68e5f958e019b6e9e53774b7296990e4ef40de63e98281cc4814a52fcbb883ab52a8020e1355e7ae6b6bf", 0x4c}, {&(0x7f0000000380)="a3f34d5e89d1f5420e8e2a52112d068756b0e54dbfb56d5a6a77ae6ea224f68c8fd379cee5bf4ca4208321c853791e28cba0a09ebe70ab8bdc966a100f84d6ba8ec32f1d15ab5d550f4a312c9cbe349216b4e953cda8a3", 0x57}, {&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000500)="3a2a379291f9381a2cac6bf99366e140365d7f38db099e85f8554f11b7b9a56d63f75eb97c93f043ea8ecede80240a984f93bbe665704d8d6c1ff360144024d88a6b7ab94fe381c6f0f9a4756e3f647cf06a28bd3fec1976e29a99c6527905251c6fec9050f96370130e91fd0a14de05d9caa297efbaa19fa871e89c0fc3864c3c2ba8738c601106dcc2d15be31d3a3f74d027ed7930cc38f35c81ccb020b1a04ed6e93d428e58b9802f8da90df6f5acde1588d2e02ca99b6c1a33681f1daa697c42e81303f56a8ba5790d2068e4e89c8f8b815a17", 0xd5}, {&(0x7f0000000600)="63a1fe2f28a5d26f008bf36d5f788e7b33f06848051f0ec570c0a0ae8f930bf4d9dcce24ed4c5e244b1386af3273ed51a7f9980987c87eb30241b18e427746f7d09a06d57042d584642cea0e0b54d8834544fa6f94d881f8e7811f2a591d31afb4961aaa74eb341a1d254e4aaa958d6339ca7502aa456cc096bffd916d39374e6f9474ae743cc3e5ea8626741f92e9fac1e70550e2bf009d8cd104745145810155ed34d23e0eb198297e11107c85e92d6576a7409d85d9c3ead43154f2388abead49d05add41da2f069002", 0xcb}, {&(0x7f0000000700)="7072b6bd27785baa66118c628708a659a5413c127df849647336b57b405f36acbb94c5a76faf03281bd09afdf9b48a2c71254fcb5d095acc4b5e60b310b030d17a22d06ba61c5da42f95f6a9aa6ac166b1f97763db745a418761b2f663700a76f380a8ad81ed029cc71fd2d494fc3d3b8399d694878d3cbc2430876467b6f0ae455af464530d5369f7ede1387d14a879a28a53652e55fd0ef545de0dd6fd0bcdd72d487a098052d9", 0xa8}, {&(0x7f00000007c0)="296475d9726c92ba34c4132e4d1ba7eace518f8aa55363fada8e0714567cfa4369be017ebe18e14f11f8bd09882c6494eb8b810841886b9023cbb4f648a7002ce4647780ca12564d58", 0x49}, {&(0x7f0000000840)="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", 0x1000}], 0x8, &(0x7f00000018c0)=ANY=[@ANYBLOB="a8000000000000000c010000100000000c702885352c93a5cf638d2e7044270db0a05c0c7a86e590632578060d0354b08d604b6d755f72acbb3e55fd1dd7efa6539ee79e36094b5c37bf90dfed442a9c2521ada5dc3d4206d7f7dba9939ac0a559e87435e834924c566aee8c905a12691e60b9939f408a937816615a95944dcb512cb4f33000e219b3a19921249e4df6ac7aa3cff47f3ec5dafc5e8c46491452a47dde0000000000780000000000000010010000270d0000b1a98657c4d3fd069ef2c2516bc15d71118c388b51792473a637f5b55899128a9a6cb4d1c17ce4e3330c5ba6a0f83e1d7f6f2cab75743e48bfdcf7799474e8d25a2c0a0a61bd8358330e7a51cd6b0f184778b7eac33123fcc3e1d0e05702d63b6fae8dfce0bc0000780000000000000001010000fbffffff5676487c76e8c69972900f263c994de9555371407fe4f683be712800fb6329e67c92be9dc5f42eadf06617b54ccc6d25f5690c1423364d71beea5cda92300d457294f00b915322ee28ad674308b80731df537ddfd9530fb4f80e4a3e68c79b4e7fd4ebeac7000000f8000000000000000d010000ed2d0000fd26713b7c20c6bc030edfe5c9bf7608548f8cbdad0a25ad91ad0c3f830f2a5b4c7a37865c5d0c99a20319efbe5b5da3ee603eed0dcc026f6c1ff115ef56a14cb708062b303fb905915d0915a4f290aea3ab45c82076504a1b883502dea126485ba82392559cb33eac88bfddde7a03324db6e44ccedc713e1f3d8f74ce3bfae8fffa6b82dd60fb6b6aa84d65bacdd4e945f855676078bc9f8d9ad9f8f78438d979deb8d912c71e043f2aa54def5205f9467e24f46e07016c24a084ea9bc4552c95703bd48a8ab531a8289aa411986594d664b739d731df35d476253c7e6df7c91c9f000000000000300000000000000005010000020000004d931955fb99ed494b5d7323d535d9de53b93a80ffaaed1deb4983a80000000088000000000000000600000002000000655245969663b588b3b94851526628f745128fdec78ef14aea9cf4b46d374f78ee9f159816b7046e269703b9eb4241a34ad14d9a21b9cdc961dea4df53b69048c1842de2711fc47f02969330dbd980bc61a46b05e78aa63feafc0115ee718665d1c8064bbc823e912ddd007cafa10107c64c62236e12b900"], 0x348}, 0x4000000) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x80000000, 0x1, {0x0}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x101089, &(0x7f0000001c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESDEC=r3]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0000400000d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r8, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r7, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r3, r4, 0x6700000000000000) r9 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x10b66000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r10 = timerfd_create(0x7, 0x0) timerfd_settime(r10, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r10, &(0x7f0000000200)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.36572047s ago: executing program 0 (id=1195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioperm(0x0, 0x8, 0x4) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000100)='!sa\x84\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7, 0xd2}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xb0a82, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x83) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x2, 0x4, {0x0, 0x0, 0x0, r8, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, r10, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1200) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x18}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r12, 0x0, 0x20000023896) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r14, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x0, 0x7d0, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1.881711137s ago: executing program 6 (id=1196): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1/file0\x00'}) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904"], 0x0) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) 1.761485418s ago: executing program 3 (id=1197): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x21, 0x40000856, r3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x6, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 1.136001049s ago: executing program 2 (id=1198): r0 = getpid() ioprio_set$pid(0x2, r0, 0x4004) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3, 0x1, 0x4, 0xffffff00}, {0x9, 0x1, 0xc, 0x3}]}, 0x10) r1 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, r1, 0x10000) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x8, 0x0, 0x11f}, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) 880.096736ms ago: executing program 0 (id=1199): write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=r2, @ANYRESOCT=r1], 0x2000, 0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES8=r3], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000080), 0x8, 0x3, 0x2000) msgctl$IPC_RMID(0x0, 0x0) 588.315243ms ago: executing program 2 (id=1200): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x94600, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x5}}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/212, 0x4b, 0xd4, 0x0, 0x7, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc8f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x5, 0x9, 0x7, 0x0, 0xfffffffffffffffc}, @generic={0x8, 0x3, 0x2, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x40, 0x39, &(0x7f00000001c0)=""/57, 0x41000, 0x21, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0x1, 0x1}, {0x5, 0x5, 0xc, 0x4}, {0x1, 0x1, 0x5, 0x5}, {0x0, 0x4, 0xa, 0xc}, {0x4, 0x4, 0x9, 0x3}, {0x1, 0x5, 0xf, 0xb}, {0x2, 0x2, 0x1, 0x1}, {0x0, 0x5, 0x0, 0xb}], 0x10, 0x4800000, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40800, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000005c0)=0x1) r5 = syz_usb_connect$uac1(0x1, 0xe9, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x81, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x2, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x70, 0x4, 0x2b, "43ab8eca565e02"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xb, 0x2, 0x3, "6629e616"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x4, 0xfe, 0xfa, "", "feae3c"}, @as_header={0x7, 0x24, 0x1, 0xfd, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x0, 0x9, {0x7, 0x25, 0x1, 0x2, 0xe, 0x1625}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0x2, 0x5, 'We', 'T'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x40, 0x1, 0xfc, 0x9, "ba461169"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xe3, 0xe8c, 0x74, "bf96"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x5b, '+P', "8d05"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0x2, "", "e87551"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x1, 0x80, {0x7, 0x25, 0x1, 0x83, 0x0, 0x875}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0xa, 0x1, 0x1, 0x10, 0x6}, 0x13e, &(0x7f0000000740)={0x5, 0xf, 0x13e, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x90, 0x5, 0x0, 0x870f, 0x6, [0x3f30, 0xc00f, 0xc0, 0xff00, 0xffff3f]}, @generic={0xf9, 0x10, 0x1, "fe5d7b3261b4db2bfa85b8b11508519555968e76ac7145f2cc7fc9002afab53ba73b5ee57f1be7637f32d3e96f3c5567308cd30f104042a5974254058108e9dee74d1181f620bebc65e084634c77257d7d7902591273ee7f8b08c4d46caa317866039b0bec069194ae9610736b34dc756af0d60e0fbd98c755f52530ad72cc7c20e40ff4c25d2adbdd03627a06131f0c612469c6c1691df4da45fc2fef9f72d4a8aa182ce34e6ef37a2b8db48b691d0474e99b9d02dd68d7bc0af5f93922cdd4f2f9b7538d8d738001bd60ab9bef5a9a2397c8d6fc35e656854ffc547d1ed2ac79d7d78ce495833496ac38b43faa3db941d743f050f9"}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x9, 0xf00, 0x1, [0xc030, 0xf, 0xff0000, 0xff3f00, 0x3f]}]}, 0x6, [{0x84, &(0x7f0000000880)=@string={0x84, 0x3, "79652bec51b9e3ae1dcc27781315ed975c25dd8e4a8d563a269abde76caa90d95e6424389f8367c7efdf535299cc3c74658467ac65cff5a8c22f6e2012a7e8a16b0953e32fde5d42aab8ba991b3db4c7d7affaf843d7cbc998ba2e436337e44477c31c5258834c390f3497d9ac47c72429365c190a3ce822c3147e36e5fedc903d6e"}}, {0x57, &(0x7f0000000940)=@string={0x57, 0x3, "2525a6ada2299bb0295fe467422a6096ac82d40aff24514755510bd077eb2d881b4c97e7569a6a8c3407d1ad6cd4a255b6613244ffa8569d9c1e5d2692799bd0b093b9997f38a250bd681cec5416c463d45141fbf3"}}, {0x7e, &(0x7f00000009c0)=@string={0x7e, 0x3, "5fc144c0f2814220b3837c7187bdc040ad539ed8dea0c3ba1f161a8cea1bcf35e8c88d99835d380cebb36496703edc6254de2a7a343ee60f7a3d937999bd06e16d605c50d743853492990b1ad8cecf29c3ad47d3618e06b4f39affef93953e637fc96b066f9644b742ba43268fdecf0dc926cf55cb09ad5bd74504ca"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000cc0)={0x14, &(0x7f0000000b80)={0x20, 0x1, 0x25, {0x25, 0x30, "71739cbd495ae4cee6865ccc32b8d6db60c0dce0f2b7757948876d4a8e6c6e0c46908a"}}, &(0x7f0000000bc0)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "9c353f569a01ed4e9245c180dfc05ce00832fd05e735e9330341483ffdcae68fa17648af1985d18c1bd69e5a7f09c182d336f3485c8f96b51ef8d50c64716973e871dcac28cedf885072798c9775846a303a84f8f774cc6ac4a63c64d0bebf61786eaa3222099f5253c4e16d2a778cf4d85d8dd733986a7e89473339a6898f08d9746238968daad5c85a5ea3929fb1f788a69f4c966685bb962c44c5b45a934bd1f676f8ce7efed7da8516da9a30c6207e257be87876a6d8f6aef6862e52bba785ec5b78a36d7cde4375"}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d00)={0x40, 0xf, 0xaf, "13df65d144de7924cdd49695dd1c6370de20aee70242b0064a9ddc2f1efca0d9e982496247e9469aa557a6ca170349068949fb57621f560c9bba68fed711c9455086768a3944fc12b463556b0d397f0e957acb65727659e3f1cb89990bc497bbb68af867dbc8e4323d8ff95b9af5ffb931654858b973a79bca0995f3b1b627f231d0a5c4855d0f60b2f34b871bdf4d0f36f6f9ae0d113d9261b72ed0dd7622b1f5eff0e33e94bdf027c489f14670b3"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x81, 0x2, "b8a9"}, &(0x7f0000000e80)={0x20, 0x82, 0x1, "92"}, &(0x7f0000000ec0)={0x20, 0x83, 0x2, "23c8"}, &(0x7f0000000f00)={0x20, 0x84, 0x1, "d7"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, "38330e"}}) r6 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x1b, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0xf3f20c8faf2a23a3, 0x7, 0x7, 0xd}}]}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x310, 0xd9, 0x3, 0x0, 0xff}, 0x8, &(0x7f0000001080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x3e, &(0x7f00000010c0)=@string={0x3e, 0x3, "2756cbc49a721c7767d859933e5e7bc5fc43ea06630b00c1f0b8b4cdcb8938ff48ec8eb2a37685769126a445b9ef69e4f0506f51c98113783f39abd8"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x458}}, {0x21, &(0x7f0000001140)=@string={0x21, 0x3, "aecdcc8e4a62475540c45db8d14dd60668ef05a35315c1906e88c54859ee71"}}, {0x33, &(0x7f0000001180)=@string={0x33, 0x3, "323651956cbdc26ebea151979571b2e9b83bab5623efb0a2b9be3896b2adbcde887d9956f3288c82e66244c6b78d702ce9"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x16, &(0x7f0000001200)=@string={0x16, 0x3, "fd25b6f2cf9443c97531332bc9258bb3a8f7f53f"}}, {0xf3, &(0x7f0000001240)=@string={0xf3, 0x3, "ddd81ffdada94b8058afdae4d18c335ec8e134689ec20a3d976008fb2666ae1641dad1e69790ad2b217d99acba0355389b4d48a22eb54f5da18505cbde8019b0d059494021d7182fafdf9c5cf42ff01acb5fd3a5c5a6a845526c9d84f565daaec2a02de3b6228f1446330ced55fb1952d70ada6643a0fe20fd58f7f4fcfc00cb6aa0576e53bf50fd8aee5f5efcdedeb1b004bce998bd720ba2811efe39c5346a13477a93cfbdb952c74d9038cd385d5dc7bc5d5b771eb9f90f156345e35021b79460f61eb00ef5da809ea7cc67ac97c64de9e985a6de7396345a48a79dadc1c71157471bed16732dd2f797c45bb7dc39b9"}}, {0xad, &(0x7f0000001340)=@string={0xad, 0x3, "0c339301887fa0aa784d63b1c9c46765727fae7cafe438bb685fc0336b11530c39bfd893b318f48be1fb13c6fc9459c129d3388aa546edb07f6983c7ea61cb742cf846373e84d391e0e6e7bacf8fc78e95c7e0cd25805eaee7a8973d8234fc15a961490cbcd6a279795da187137f70331bc592a8759c553d847762c501b2d23569a0a03014aa9a1167b4fc6012060fbd3cd8619bb557113c68ede0f0ddec99f1a552cb2809c2e06713678d"}}, {0x2e, &(0x7f0000001400)=@string={0x2e, 0x3, "62bf133dcf3cf43b76a09e8efd51a5f558cc01a3592a5890f9bef0112b9246955ac00a48abb38ce9bc7576c5"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io$printer(r6, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x0, 0xbb9e57a6e6ef5ab1, 0xbc, {0xbc, 0x6, "bc5df97c0915742bf8230e67970b79a6e8c004d95f87caff0bf2fb4913875b66662104159c2afcdcaf9ef81d8687d52413d0461120972274a40a17565ac1f5c5f7f86e4561d5d2145f946ab92521dba88b17ff4233b71a991213e2079dc03964f9f66ced315467d4a95c19eefa59ec19486fd7c36511e3d6b686705d80e2a56029b9f8e6a0a72fadd82682bc7c1e333d585cf2b070c2bbeb9ab83d96e84963e394c11ecac0659d669f4f4aa9b534c40d997ae7a08036915519bd"}}, &(0x7f0000001640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}}, &(0x7f00000019c0)={0x34, &(0x7f00000016c0)={0x20, 0x1f, 0xe9, "6cc0e9a1504f602e2a355b18e8e047d66617ad8c1310c71c05f8893659e008a1a3a788e5bc40e06554bca41f529fea538ba81c98225896485b2f4edad0b15ede187b43dba8950b6b89fa67c932f8af0d94122dbf285cd2ae59a58ba515607637685a807a1e9343ffee3c3795cbfe946fedde8843ba3af1f300db01a0695c2b53b7edfe8293db70ebb1d512384ed55e0f97078e6ef7d3cbb8e09dbbcd6df7fa7eec8ddbccb5375a25de555fcc6cc7c51ebcfc207a4297e9f281b08c1b6438bd6d10db2c892ac09e2217153e470676e302399e2142256f62a39e625c755b29cb00a29d5145844e5a1ed9"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000001840)={0x20, 0x0, 0xe2, {0xe0, "52e1be8167e0306df9b5466cc1e40ef29daddb46c1fd6e19b31461e0fc6ac4b888115c80012815401071da2214b6c60fbb7bbdf8b4e4f0d39c31be52edad49721ec7f3156b0f3000b0d5a275e2910dee0e809bd354f1e47936925d117f5233cbd552d966240cebaf3a8765f4ef004bb05d0b29c35216f5f0e390904f4e3fd8f42f2add8fa7232f29fdda36a91d3aa65dc655a85ccd622a7ab7ead883bd4eb8200fd9386e1ed28e79e9ce15cc67f821338ffc0f1b168ab87c542f78ab652a83df3d0ed63f531e941e4dae404d43a652125ca703cee5ad40e8bf2b584839f0e6d2"}}, &(0x7f0000001940)={0x20, 0x1, 0x1, 0x67}, &(0x7f0000001980)={0x20, 0x0, 0x1, 0xf}}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000001a80)={0x9, &(0x7f0000001a00)=[{0x7, 0x10, 0x5, 0xffffffc0}, {0x0, 0x30, 0x5c, 0x1}, {0x1, 0xf, 0x1f, 0x9}, {0x9, 0x7, 0xfb, 0x5f}, {0x100, 0x0, 0x3, 0x8}, {0x7, 0x6, 0x10, 0x4}, {0x1, 0x9, 0xdd}, {0x9, 0xa, 0xc, 0x5}, {0x71c, 0x1, 0x4, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000001ac0)='fscache_active\x00', r3, 0x0, 0xb2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001b80)={'wg0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)=@newnexthop={0x90, 0x68, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x30}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_OIF={0x8, 0x5, r7}, @NHA_GROUP={0x34, 0x2, [{0x1, 0x3}, {0x1, 0x1}, {0x2, 0x10}, {0x1, 0xce}, {0x1, 0xc}, {0x0, 0x34}]}, @NHA_GROUP={0xc, 0x2, [{0x2, 0xfb}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x811}, 0x801) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001) r8 = syz_open_dev$vcsn(&(0x7f0000001d00), 0xfff, 0x440000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000002100)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000001dc0)={0x2e0, r9, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4a}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x2c0, 0x84, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xbee}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0xffffff01}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x22}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xd48}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xad45}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x77}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5b5eeacd}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2a882588}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="8cf64066b3530a79f819"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x25bdcaab}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffff7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7df2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa4a}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="c52414dc"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xea08}, @NL80211_BAND_60GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="5af0aa6dd0063a40e64a9f9c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e8c3d18fad34"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="1124"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="777696fae7d99e5295a735f5bd5d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="d05ea3b5307a33d81cfef533e039"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000000) syz_usb_connect$cdc_ecm(0x5, 0x73, &(0x7f0000002140)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x2, 0x20, 0xf9, [{{0x9, 0x4, 0x0, 0xd7, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "1cf33a7c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7c4, 0xa, 0x81}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xcc, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1f3, 0x3}, @obex={0x5, 0x24, 0x15, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xc, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0x0, 0x3ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xf7, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xa3, 0x5}}}}}]}}]}}, &(0x7f0000002300)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x110, 0x6, 0x0, 0xff, 0x10, 0x2}, 0xc, &(0x7f0000002200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x7, 0x100}]}, 0x2, [{0x6f, &(0x7f0000002240)=@string={0x6f, 0x3, "ce10ec9fd86f7493e90bba6c3b4cb7975ffdcb35c8e95244f6d253aa85fcfc3c62d300e1eacc8af0eb36915481639a679ec23a64fa798393ad43099f7261e83d5e85580b6871d117e81f6b8bd08f23dcfcb1b69b2bd9bcdd59d585fb4d440420216ed70d5b33dea8fd9e2e8f01"}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x804}}]}) r10 = openat(r8, &(0x7f0000002340)='./file0\x00', 0x800, 0x84) r11 = socket(0x2, 0xa, 0x7) syz_usb_connect(0x1, 0x104, &(0x7f0000002380)={{0x12, 0x1, 0x200, 0x80, 0x3b, 0x37, 0x40, 0xe41, 0x4250, 0x1751, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x1, 0x7, 0x98, 0x70, 0x0, [{{0x9, 0x4, 0x71, 0x6, 0x3, 0xb8, 0xaa, 0x5e, 0x5, [], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x4, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x8, 0x72}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0x3, 0x9, [@generic={0xb7, 0x1, "6f7a3369d971077e035421f7d75052a50b5a2cd8ab1fad59539aede26db89df969a6577f4e666faede1faed38860fbcb980736215db353872bfb6f9d560e1a16a03efd24f4863aada7eced0e4cf8f9dfd7146d2e0eda40e31eefa582ddb5061507340fadd2c5ee0b23695a5359a9d9d3028d75305e7bed6a4a1b9f82a74640076a6b95709f6a4a1dcecb8e3a522185f5352bd42a4e543d067ad223edf55aa0b67b6df84c75b600b6129f090be66a5a3baa9a8dd50b"}]}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f00000024c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x80, 0xff, 0x6}, 0xd6, &(0x7f0000002500)={0x5, 0xf, 0xd6, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x0, 0x73c}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6, 0x39}, @generic={0xc0, 0x10, 0x0, "30dce950b4a7d164f57e74aabfc68e23f5b7eb5ca06fd446bc3a528d7b85ff2a5a9ab9c3a9e23b01b5677372869aa0178d71aaba0f7f4f1231f17be866aa7ab43d761bd90d588f8c01485e784448a26fa2a64652e50f3cd7f0447d94fd64be7f538d2cc7ce3aafb85626e8545d845bcecf5da72132da523b6b65b18afc54d9ecd8bf6aecdbfc0c8e68e8782b11a4ccb4878a289424afadfd2031fa05edcfff2b2fcb0fc8ef19a24ef4267a021092f0faf1dcdf00087d5e5ffa738dfb5f"}]}, 0x1, [{0xa1, &(0x7f0000002600)=@string={0xa1, 0x3, "f958ae2fb500778339ecd9501ada480c23764ae2d39757081ba36d5ebf3a8acb7dae9c04c1974931caab3e00be70c898c49adf65c38b7acbee7a9417a88b57b8ca93637130142d8447d93c2a1dfc4defe43b3da85562d6a1f4cdc79375512437a29eb5b197b9a4aeb3040920bb4358241d4107b5142176e893a10f2d0f91c0db832b17fd536753e85238b84f860e6a4ec6f9bbb1e326ee2acc30e2420c16fa"}}]}) tee(r11, r3, 0x2, 0xa) r12 = openat$cgroup(r10, &(0x7f0000002700)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r12, &(0x7f0000002740)='memory.pressure\x00', 0x2, 0x0) write$tun(r4, &(0x7f0000002780)={@void, @val={0x1, 0x5, 0x5, 0x200, 0x3, 0x5d}, @mpls={[{0x7}, {0x1, 0x0, 0x1}, {0x7}, {0x2}, {0xc44, 0x0, 0x1}], @ipv6=@gre_packet={0xe, 0x6, "c3230a", 0x3de, 0x2f, 0xfe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x3b, 0x2, 0x4, 0x1, 0x2, 0x70, 0x200, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x21, 0x14, 0x4, 0xa, 0x4, 0x20, 0xc, [@empty, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, @empty, @local, @private2, @empty, @dev={0xfe, 0x80, '\x00', 0x31}, @local]}, @fragment={0x5c, 0x0, 0x30, 0x0, 0x0, 0x11, 0x68}, @routing={0x67, 0x6, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0xa}]}, @routing={0x2c, 0xa, 0x0, 0xd, 0x0, [@remote, @local, @private0, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @routing={0x88, 0x6, 0x0, 0x0, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x3b, 0x0, 0x2, 0x1, 0x0, 0x7, 0x67}, @dstopts={0x3a, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0x22, "cb44ed2bbada5a061220e9483ab3a9194be70cd4f67992f883b9dc76e219b88339ce"}, @enc_lim={0x4, 0x1, 0x22}, @jumbo={0xc2, 0x4, 0x3}]}, @routing={0x88, 0xc, 0x2, 0x3c, 0x0, [@private1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @mcast1, @empty]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x2b, 0x3, [0x3, 0x3ff], "74e7e85f09168d09ce68989cf77c14f9ccde2f31c36d160ea2732215a50ef363f9605830263f05be98ce6b"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x6, 0x3], "c417e0f976d08d427546d831a227452731563829294745d82b3ebd8bf07796c3f97426ea5840cdfaf0ec1a1ad2f6c3ce880cfb29d53117d2acee5ea84689694e3419fde3c6bba928d32b7d12000eb3ffa9271cedfb66048dc6caf7d520a00a1453cc07220979e6b1967a50e4d82a9b6968883d769719549eae65c9310f42082a77bf76f9a173b40ed099db9e0fe2116fd9246b4e0b6a0de3becdc5486e9aa35a9fdf82944a"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xef1, 0x40, 0xe000], "c7e89981c9c04ffc3b480fbd31283721a54478d6d188d170"}, {0x8, 0x88be, 0x1, {{0x3, 0x1, 0x4, 0x0, 0x0, 0x3, 0x0, 0xf}, 0x1, {0x101}}}, {0x8, 0x22eb, 0xfffffff1, {{0x1, 0x2, 0x69, 0x0, 0x0, 0x1, 0x2, 0x86}, 0x2, {0x7214, 0x8b1, 0x3, 0xc, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "abee754f41a3e07e5665610d26a85b22a90955ca6d60fafd6954d03c29b37e72612c53551d7176de9355a6775018727b1703b744d152f1e5eaed75962a6a3dd745b18b4d1f3b1f7c0a97e399acb1ac63852bda5836cf85ed9809efd4cd938c00d2546e5d"}}}}}}, 0x424) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000002c80)={&(0x7f0000002bc0)=""/175, 0x200000, 0x800, 0x7fffffff, 0x1}, 0x20) userfaultfd(0x80800) 0s ago: executing program 1 (id=1201): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x840) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x9, 0x4) (async) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0xfffffdfb) (async) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) unshare(0x8040600) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0xae44, 0xbf14) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x7ffb, 0x0}], 0x1, 0xd, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000480)={0x4, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}}}, 0x108) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20400}}, {{0xa, 0x4e24, 0x40000, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) kernel console output (not intermixed with test programs): ket: 32 [ 315.369673][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.391689][ T5948] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 315.404761][ T5836] usb 2-1: config 120 has an invalid interface number: 86 but max is 0 [ 315.424691][ T5836] usb 2-1: config 120 has an invalid descriptor of length 36, skipping remainder of the config [ 315.437737][ T5836] usb 2-1: config 120 has no interface number 0 [ 315.449134][ T5836] usb 2-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 315.464775][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.477045][ T5836] usb 2-1: Product: syz [ 315.481466][ T5836] usb 2-1: Manufacturer: 碡郘⎈ᅿ狱✱ﴚ朎㺎䴋Ǽ☕䰊慖è¯â¯°ò‚«Žç²¹ç£¥ê§äœ’韒펩걥鷸૗ᡊ嚂ṗ浪籄ဤ๺΅្죞ᖒ罻郩ã°è¡²è«Ÿí•‹èœä–ºì™…尶䠢亡彘ღ䴵篂䩡켗턨áœí”‡ì´åšŒëž±ä™Šéš»å‚¹î‰™邇ï¼à¤«gìŽœï”§å¶´á¨æ”Žì¸Ÿâžœå³¾í‰—액㯘堕꙰架鳗ꂚो挊뎂˿ [ 315.515650][ T5836] usb 2-1: SerialNumber: syz [ 315.570468][ T5948] usb 6-1: config 0 has an invalid interface number: 206 but max is 1 [ 315.590290][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.614690][ T5948] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 315.627924][ T5948] usb 6-1: config 0 has no interface number 0 [ 315.635454][ T5948] usb 6-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 315.646959][ T5948] usb 6-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 315.658658][ T5948] usb 6-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 30768, setting to 64 [ 315.680249][ T5948] usb 6-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 315.696458][ T978] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 315.709392][ T5948] usb 6-1: config 0 interface 206 has no altsetting 0 [ 315.720097][ T5948] usb 6-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 315.740046][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.743369][ T5836] huawei_cdc_ncm 2-1:120.86: CDC Union missing and no IAD found [ 315.755771][ T5948] usb 6-1: Product: syz [ 315.755832][ T5948] usb 6-1: Manufacturer: syz [ 315.771500][ T5948] usb 6-1: SerialNumber: syz [ 315.777790][ T5836] huawei_cdc_ncm 2-1:120.86: bind() failure [ 315.794026][ T5948] usb 6-1: config 0 descriptor?? [ 315.802036][ T5836] usb 2-1: USB disconnect, device number 61 [ 315.820257][ T9348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 315.850502][ T9360] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 315.863909][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.875176][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.886620][ T9360] kvm: pic: level sensitive irq not supported [ 315.886728][ T9360] kvm: pic: non byte read [ 315.899376][ T978] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 315.908944][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.928955][ T978] usb 4-1: config 0 descriptor?? [ 316.057351][ T5948] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.224843][ T5948] usb 6-1: USB disconnect, device number 21 [ 316.370201][ T978] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 316.412439][ T978] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 316.429159][ T978] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 316.565376][ C0] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 316.780457][ T5948] usb 4-1: USB disconnect, device number 68 [ 316.907453][ T9373] geneve2: entered promiscuous mode [ 317.001153][ T5898] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 317.047533][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054910][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.091162][ T5836] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 317.162464][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 317.175062][ T9379] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[9379] [ 317.189297][ T9379] netlink: 88 bytes leftover after parsing attributes in process `syz.2.885'. [ 317.205688][ T9379] netlink: 'syz.2.885': attribute type 21 has an invalid length. [ 317.213831][ T9379] netlink: 128 bytes leftover after parsing attributes in process `syz.2.885'. [ 317.225144][ T5898] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 317.234756][ T9379] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 317.242700][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 317.247951][ T5898] usb 6-1: config 0 has no interface number 0 [ 317.256078][ T9379] netlink: 3 bytes leftover after parsing attributes in process `syz.2.885'. [ 317.266341][ T5898] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 317.277202][ T5898] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 317.287574][ T5836] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 317.297515][ T5836] usb 2-1: config 0 has no interface number 0 [ 317.305206][ T5836] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 317.316385][ T5836] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 317.327850][ T5836] usb 2-1: config 0 interface 41 has no altsetting 0 [ 317.335556][ T5898] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 317.344881][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.352987][ T5898] usb 6-1: Product: syz [ 317.357148][ T5898] usb 6-1: Manufacturer: syz [ 317.368737][ T9379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 317.381072][ T5898] usb 6-1: SerialNumber: syz [ 317.390559][ T5836] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 317.399957][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.408079][ T5836] usb 2-1: Product: syz [ 317.422652][ T5836] usb 2-1: Manufacturer: syz [ 317.428926][ T5898] usb 6-1: config 0 descriptor?? [ 317.439371][ T5836] usb 2-1: SerialNumber: syz [ 317.450106][ T9369] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 317.457760][ T9369] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 317.477775][ T5836] usb 2-1: config 0 descriptor?? [ 317.488711][ T9371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 317.496257][ T9371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 317.720573][ T9371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 317.730177][ T9369] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 317.811160][ T9371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 317.818585][ T9369] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 318.035183][ T5836] Error reading MAC address [ 318.045369][ T9384] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 318.060284][ T9384] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 318.231065][ T6513] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 318.383581][ T9391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.394212][ T9391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.415732][ T9391] xt_TCPMSS: Only works on TCP SYN packets [ 318.663482][ T6513] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.672908][ T6513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.681091][ T6513] usb 4-1: Product: syz [ 318.685357][ T6513] usb 4-1: Manufacturer: syz [ 318.689966][ T6513] usb 4-1: SerialNumber: syz [ 318.704052][ T6513] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.721416][ T6511] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 318.775052][ T5836] sr9700 2-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 3e:1f:62:ac:65:c8 [ 318.804610][ T5836] usb 2-1: USB disconnect, device number 62 [ 318.833201][ T5836] sr9700 2-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 319.221224][ T5836] usb 4-1: USB disconnect, device number 69 [ 319.761234][ T6511] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 319.819868][ T6511] ath9k_htc: Failed to initialize the device [ 320.101763][ T5836] usb 4-1: ath9k_htc: USB layer deinitialized [ 321.261528][ T5898] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 321.322091][ T5898] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 321.351634][ T5898] asix 6-1:0.251: probe with driver asix failed with error -71 [ 321.393198][ T5898] usb 6-1: USB disconnect, device number 22 [ 321.532804][ T978] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 321.541340][ T5948] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 321.682914][ T5948] usb 2-1: device descriptor read/64, error -71 [ 321.702655][ T978] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 321.711473][ T978] usb 4-1: config 0 has no interface number 0 [ 321.718953][ T978] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.731042][ T5898] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 321.733931][ T978] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 321.748032][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.756666][ T978] usb 4-1: Product: syz [ 321.765662][ T978] usb 4-1: Manufacturer: syz [ 321.772481][ T978] usb 4-1: SerialNumber: syz [ 321.785105][ T978] usb 4-1: config 0 descriptor?? [ 321.798176][ T978] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 321.901110][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 321.910629][ T5898] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 321.921722][ T5948] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 321.940512][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.958175][ T5898] usb 6-1: config 0 descriptor?? [ 321.995369][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 322.061075][ T5948] usb 2-1: device descriptor read/64, error -71 [ 322.082165][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 322.171335][ T5948] usb usb2-port1: attempt power cycle [ 322.182137][ T5898] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 322.194797][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.222130][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 322.229656][ T5898] usb 6-1: media controller created [ 322.257145][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.283578][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.311095][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 322.347305][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.394033][ T5836] usb 4-1: USB disconnect, device number 70 [ 322.475644][ T5836] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 322.521093][ T5948] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 322.561950][ T5948] usb 2-1: device descriptor read/8, error -71 [ 322.612114][ T9454] netlink: 'syz.3.905': attribute type 21 has an invalid length. [ 322.620096][ T9454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.905'. [ 322.811696][ T5948] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 322.831841][ T5948] usb 2-1: device descriptor read/8, error -71 [ 322.926960][ T9469] ip6t_REJECT: ECHOREPLY is not supported [ 322.941158][ T5836] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 322.952049][ T5948] usb usb2-port1: unable to enumerate USB device [ 323.004613][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.015996][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.081096][ T5836] usb 4-1: device descriptor read/64, error -71 [ 323.181048][ T978] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 323.231048][ T5898] stb0899_attach: Driver disabled by Kconfig [ 323.243046][ T5898] az6027: no front-end attached [ 323.243046][ T5898] [ 323.252711][ T5898] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 323.272598][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 323.297345][ T5898] dvb-usb: schedule remote query interval to 400 msecs. [ 323.310041][ T5898] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 323.331188][ T5836] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 323.342835][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 323.350339][ T978] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 323.365846][ T978] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 323.377506][ T978] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1144, setting to 1024 [ 323.388937][ T978] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 323.398071][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.421497][ T9469] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 323.461239][ T5960] usb 6-1: USB disconnect, device number 23 [ 323.491378][ T5836] usb 4-1: device descriptor read/64, error -71 [ 323.605093][ T5960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 323.615571][ T5836] usb usb4-port1: attempt power cycle [ 323.632393][ T9469] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[9469] [ 323.646771][ T978] usb 3-1: string descriptor 0 read error: -71 [ 323.675748][ T9475] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 323.775615][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 323.832157][ T978] usb 3-1: USB disconnect, device number 50 [ 323.971020][ T5836] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 324.002312][ T5836] usb 4-1: device descriptor read/8, error -71 [ 324.260993][ T5836] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 324.312099][ T5836] usb 4-1: device descriptor read/8, error -71 [ 324.423379][ T5836] usb usb4-port1: unable to enumerate USB device [ 324.543066][ T9483] unknown channel width for channel at 909000KHz? [ 324.620417][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.690240][ T9485] macvlan2: entered promiscuous mode [ 324.701199][ T9485] macvlan2: entered allmulticast mode [ 324.707785][ T9485] batadv0: entered promiscuous mode [ 324.729309][ T9485] batadv0: entered allmulticast mode [ 324.755547][ T9485] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.793943][ T9485] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 324.865578][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.506546][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.690217][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.861555][ T978] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 326.021958][ T978] usb 2-1: device descriptor read/64, error -71 [ 326.285168][ T978] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 326.293818][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.306523][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.316247][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.328218][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.336475][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.514589][ T978] usb 2-1: device descriptor read/64, error -71 [ 326.604871][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.923'. [ 326.613946][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'. [ 326.651720][ T978] usb usb2-port1: attempt power cycle [ 326.665975][ T9511] netlink: 72 bytes leftover after parsing attributes in process `syz.2.923'. [ 327.127217][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.135947][ T978] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 327.149533][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.161701][ T978] usb 2-1: device descriptor read/8, error -71 [ 327.169693][ T49] bond0 (unregistering): Released all slaves [ 327.401101][ T978] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 327.485347][ T978] usb 2-1: device descriptor read/8, error -71 [ 327.535635][ T30] audit: type=1326 audit(1749475186.096:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 327.605499][ T978] usb usb2-port1: unable to enumerate USB device [ 327.623168][ T9516] IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20001 [ 327.641233][ T30] audit: type=1326 audit(1749475186.096:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 327.724974][ T30] audit: type=1326 audit(1749475186.126:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 327.811473][ T30] audit: type=1326 audit(1749475186.126:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 327.833682][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.869046][ T30] audit: type=1326 audit(1749475186.126:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 327.949786][ T30] audit: type=1326 audit(1749475186.126:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 328.006614][ T30] audit: type=1326 audit(1749475186.126:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 328.078956][ T49] hsr_slave_0: left promiscuous mode [ 328.084133][ T30] audit: type=1326 audit(1749475186.126:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 328.106872][ T30] audit: type=1326 audit(1749475186.126:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 328.110588][ T49] hsr_slave_1: left promiscuous mode [ 328.130002][ T30] audit: type=1326 audit(1749475186.126:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 328.164171][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.172097][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.190648][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.198237][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.237293][ T49] veth1_macvtap: left promiscuous mode [ 328.251462][ T49] veth0_macvtap: left promiscuous mode [ 328.257281][ T49] veth1_vlan: left promiscuous mode [ 328.262729][ T49] veth0_vlan: left promiscuous mode [ 328.401204][ T5152] Bluetooth: hci2: command tx timeout [ 329.856664][ T49] team0 (unregistering): Port device team_slave_1 removed [ 330.153826][ T49] team0 (unregistering): Port device team_slave_0 removed [ 330.481632][ T5152] Bluetooth: hci2: command tx timeout [ 331.087181][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 331.156932][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 332.250985][ T978] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 332.310333][ T9599] loop8: detected capacity change from 0 to 1 [ 332.334884][ T9599] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 332.351352][ T9599] loop8: p1 start 1482909309 is beyond EOD, truncated [ 332.358331][ T9599] loop8: p2 start 2084109568 is beyond EOD, truncated [ 332.381053][ T978] usb 4-1: device descriptor read/64, error -71 [ 332.391017][ T9599] loop8: p3 start 1127756402 is beyond EOD, truncated [ 332.459744][ T9599] loop8: p4 start 1701603686 is beyond EOD, truncated [ 332.511464][ T9599] loop8: p5 start 2980365259 is beyond EOD, truncated [ 332.518428][ T9599] loop8: p6 start 2249299709 is beyond EOD, truncated [ 332.561180][ T5152] Bluetooth: hci2: command tx timeout [ 332.640944][ T9599] loop8: p7 start 3318553971 is beyond EOD, truncated [ 332.647836][ T9599] loop8: p8 start 1873058888 is beyond EOD, truncated [ 332.655549][ T978] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 332.725602][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.743939][ T9599] loop8: p9 start 813315871 is beyond EOD, truncated [ 332.745257][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.785887][ T9509] bridge_slave_0: entered allmulticast mode [ 332.795101][ T9599] loop8: p10 start 1716473578 is beyond EOD, truncated [ 332.798607][ T9605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.813625][ T9605] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 332.822083][ T978] usb 4-1: device descriptor read/64, error -71 [ 332.831015][ T5836] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 332.861999][ T9599] loop8: p11 start 1653773230 is beyond EOD, truncated [ 332.863789][ T9509] bridge_slave_0: entered promiscuous mode [ 332.951544][ T978] usb usb4-port1: attempt power cycle [ 332.956066][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.975830][ T5836] usb 3-1: device descriptor read/64, error -71 [ 333.001959][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.009371][ T9509] bridge_slave_1: entered allmulticast mode [ 333.042574][ T9509] bridge_slave_1: entered promiscuous mode [ 333.251486][ T5836] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 333.263677][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.294119][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.331211][ T978] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 333.376119][ T978] usb 4-1: device descriptor read/8, error -71 [ 333.411645][ T5836] usb 3-1: device descriptor read/64, error -71 [ 333.416784][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'. [ 333.456717][ T9611] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 333.457447][ T9509] team0: Port device team_slave_0 added [ 333.498888][ T9509] team0: Port device team_slave_1 added [ 333.537002][ T5836] usb usb3-port1: attempt power cycle [ 333.641432][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.651245][ T978] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 333.658567][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.690484][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.697981][ T978] usb 4-1: device descriptor read/8, error -71 [ 333.727542][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.740296][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.766252][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.774522][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.811534][ T978] usb usb4-port1: unable to enumerate USB device [ 333.901071][ T5836] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 333.914826][ T9509] hsr_slave_0: entered promiscuous mode [ 333.939779][ T9509] hsr_slave_1: entered promiscuous mode [ 333.949085][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 333.949101][ T30] audit: type=1326 audit(1749475192.506:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 333.956940][ T5836] usb 3-1: device descriptor read/8, error -71 [ 333.999368][ T9509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.017535][ T30] audit: type=1326 audit(1749475192.506:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf318e929 code=0x7ffc0000 [ 334.055485][ T9509] Cannot create hsr debugfs directory [ 334.068834][ T30] audit: type=1326 audit(1749475192.506:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 334.096609][ T30] audit: type=1326 audit(1749475192.506:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 334.123857][ T30] audit: type=1326 audit(1749475192.506:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf318e929 code=0x7ffc0000 [ 334.158856][ T30] audit: type=1326 audit(1749475192.506:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 334.190405][ T30] audit: type=1326 audit(1749475192.506:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf318e929 code=0x7ffc0000 [ 334.218211][ T30] audit: type=1326 audit(1749475192.506:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 334.248002][ T30] audit: type=1326 audit(1749475192.506:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 334.271505][ T5836] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 334.295629][ T30] audit: type=1326 audit(1749475192.506:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bf312ab19 code=0x7ffc0000 [ 334.326827][ T5836] usb 3-1: device descriptor read/8, error -71 [ 334.357592][ T9632] input: syz1 as /devices/virtual/input/input33 [ 334.441298][ T5836] usb usb3-port1: unable to enumerate USB device [ 334.641014][ T5152] Bluetooth: hci2: command tx timeout [ 335.066721][ T9509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.083419][ T9509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.102994][ T9509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.113713][ T9509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 335.376259][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.427168][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.465472][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.472784][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.536269][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.543583][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.571529][ T5898] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 335.716334][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.723384][ T5898] usb 3-1: device descriptor read/64, error -71 [ 335.816790][ T9509] veth0_vlan: entered promiscuous mode [ 335.837785][ T9509] veth1_vlan: entered promiscuous mode [ 335.898308][ T9509] veth0_macvtap: entered promiscuous mode [ 335.918574][ T9509] veth1_macvtap: entered promiscuous mode [ 335.949278][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.974587][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.980981][ T5898] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 335.982387][ T5840] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 336.017721][ T9509] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.033350][ T9509] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.045493][ T9509] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.056096][ T9509] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.131296][ T5898] usb 3-1: device descriptor read/64, error -71 [ 336.182213][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 336.189829][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.203959][ T5840] usb 4-1: config 5 has an invalid interface number: 196 but max is 0 [ 336.220078][ T5840] usb 4-1: config 5 has no interface number 0 [ 336.222688][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.249008][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.257285][ T5840] usb 4-1: config 5 interface 196 has no altsetting 0 [ 336.274723][ T5898] usb usb3-port1: attempt power cycle [ 336.280406][ T5840] usb 4-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=18.36 [ 336.289864][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.298605][ T5840] usb 4-1: Product: syz [ 336.303618][ T5840] usb 4-1: Manufacturer: syz [ 336.308294][ T5840] usb 4-1: SerialNumber: syz [ 336.331869][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.340817][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.544625][ T5840] upd78f0730 4-1:5.196: upd78f0730 converter detected [ 336.575804][ T5840] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 336.586916][ T9689] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 336.594875][ T5840] usb 4-1: USB disconnect, device number 79 [ 336.606488][ T5840] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 336.626382][ T5898] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 336.627793][ T5840] upd78f0730 4-1:5.196: device disconnected [ 336.674014][ T5898] usb 3-1: device descriptor read/8, error -71 [ 336.820997][ T5948] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 336.923608][ T5898] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 336.961889][ T5898] usb 3-1: device descriptor read/8, error -71 [ 337.018493][ T5948] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 337.042053][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.050165][ T5948] usb 2-1: Product: syz [ 337.054442][ T5948] usb 2-1: Manufacturer: syz [ 337.067100][ T5948] usb 2-1: SerialNumber: syz [ 337.081207][ T5898] usb usb3-port1: unable to enumerate USB device [ 337.092047][ T5948] usb 2-1: config 0 descriptor?? [ 337.119716][ T5948] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 337.474303][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.6.956'. [ 337.712004][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.723972][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.156313][ T5898] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 338.219815][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.247506][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.342920][ T5898] usb 4-1: config 0 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 338.379656][ T5898] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.415877][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.422968][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 338.434089][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.446470][ T5898] usb 4-1: config 0 descriptor?? [ 338.452682][ T9721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.886718][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.903840][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.904727][ T5948] gspca_sunplus: reg_r err -71 [ 338.944425][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.971368][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.017749][ T5948] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 339.054744][ T5948] usb 2-1: USB disconnect, device number 71 [ 339.083823][ T5898] usbhid 4-1:0.0: can't add hid device: -71 [ 339.089895][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.146335][ T5898] usb 4-1: USB disconnect, device number 80 [ 339.618394][ T5898] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 339.659795][ T5898] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 339.814804][ T5898] hid-generic 0000:0003:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 340.029477][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 340.291191][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 340.337682][ T5836] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 340.376031][ T9767] fido_id[9767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 340.415132][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.561578][ T5836] usb 7-1: Product: syz [ 340.565781][ T5836] usb 7-1: Manufacturer: syz [ 340.570424][ T5836] usb 7-1: SerialNumber: syz [ 340.642958][ T5836] usb 7-1: config 0 descriptor?? [ 340.663672][ T5836] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 340.673633][ T5836] usb 7-1: Detected FT232H [ 341.214125][ T5836] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 341.226750][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.257774][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.711205][ T5836] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 342.711381][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 342.733020][ T5836] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 342.748713][ T5836] usb 7-1: USB disconnect, device number 2 [ 342.856664][ T10] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 342.880425][ T5836] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 342.922725][ T10] usb 1-1: USB disconnect, device number 41 [ 343.413325][ T5836] ftdi_sio 7-1:0.0: device disconnected [ 344.211422][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 344.226915][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 344.403034][ T5836] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.434656][ T5836] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.457572][ T5836] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.474152][ T30] kauditd_printk_skb: 444 callbacks suppressed [ 344.474169][ T30] audit: type=1326 audit(1749475203.036:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bf318e929 code=0x0 [ 344.521102][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.563125][ T9801] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.618191][ T5836] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.833849][ T5948] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 344.853655][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.885255][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.990977][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 345.002947][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 345.016024][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.022944][ T5836] usb 7-1: USB disconnect, device number 3 [ 345.076431][ T5948] usb 3-1: config 0 descriptor?? [ 345.105262][ T5948] usb 3-1: interface 1 not found [ 345.289947][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.301361][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.465191][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.978'. [ 345.574064][ T5836] usb 3-1: USB disconnect, device number 59 [ 345.665105][ T9846] macsec0: entered promiscuous mode [ 345.678116][ T9846] macsec0: entered allmulticast mode [ 345.773466][ T9846] veth1_macvtap: entered promiscuous mode [ 345.854206][ T9846] veth1_macvtap: entered allmulticast mode [ 345.865181][ T9850] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 345.873291][ T9846] macsec0: left promiscuous mode [ 345.881466][ T9846] macsec0: left allmulticast mode [ 345.886615][ T9846] veth1_macvtap: left allmulticast mode [ 346.295451][ T5898] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 346.610994][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 346.810702][ T5898] usb 2-1: config 4 has an invalid interface number: 8 but max is 0 [ 346.831245][ T5898] usb 2-1: config 4 has no interface number 0 [ 346.838672][ T5898] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 346.873599][ T5898] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 346.936055][ T5898] usb 2-1: config 4 interface 8 has no altsetting 0 [ 346.955983][ T5898] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 346.970862][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.987552][ T5898] usb 2-1: Product: syz [ 346.997658][ T5898] usb 2-1: Manufacturer: syz [ 347.009723][ T5898] usb 2-1: SerialNumber: syz [ 347.248919][ T5898] opticon 2-1:4.8: opticon converter detected [ 347.277515][ T5898] usb 2-1: opticon converter now attached to ttyUSB0 [ 347.307724][ T5898] usb 2-1: USB disconnect, device number 72 [ 347.358904][ T5898] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 347.413421][ T5898] opticon 2-1:4.8: device disconnected [ 348.485425][ T9894] loop8: detected capacity change from 0 to 1 [ 348.495306][ T9894] buffer_io_error: 407 callbacks suppressed [ 348.495345][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.512577][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.521297][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.529755][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.545605][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.558042][ T9895] futex_wake_op: syz.2.984 tries to shift op by -33; fix this program [ 348.566870][ T9894] ldm_validate_partition_table(): Disk read failed. [ 348.609713][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.653886][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.662840][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.674958][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.686885][ T9894] Dev loop8: unable to read RDB block 0 [ 348.727457][ T9894] Buffer I/O error on dev loop8, logical block 0, async page read [ 348.745018][ T9894] loop8: unable to read partition table [ 348.752887][ T9894] loop8: partition table beyond EOD, truncated [ 348.760115][ T9894] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 348.935595][ T9895] netdevsim netdevsim2: Direct firmware load for . [ 348.935595][ T9895] failed with error -2 [ 348.992387][ T9895] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 348.992387][ T9895] [ 349.132126][ T6511] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 349.297554][ T6511] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 349.321096][ T978] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 349.349964][ T6511] usb 7-1: config 150 has no interface number 0 [ 349.369622][ T6511] usb 7-1: config 150 interface 204 has no altsetting 0 [ 349.401069][ T6511] usb 7-1: config 150 interface 1 has no altsetting 0 [ 349.434469][ T6511] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 349.443896][ T6511] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.446681][ T9927] netlink: 'syz.1.995': attribute type 58 has an invalid length. [ 349.459958][ T6511] usb 7-1: Product: syz [ 349.470112][ T6511] usb 7-1: Manufacturer: syz [ 349.471860][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 349.480252][ T6511] usb 7-1: SerialNumber: syz [ 349.486435][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.501246][ T9927] sit0: left promiscuous mode [ 349.506020][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.535872][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.586622][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 349.601049][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.644411][ T978] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 349.654231][ T978] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.663289][ T978] usb 4-1: Manufacturer: syz [ 349.679304][ T978] usb 4-1: config 0 descriptor?? [ 349.709008][ T6511] xr_serial 7-1:150.204: xr_serial converter detected [ 349.901468][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 350.000981][ T978] rc_core: IR keymap rc-hauppauge not found [ 350.006966][ T978] Registered IR keymap rc-empty [ 350.019152][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.041053][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.071086][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 350.077460][ T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 350.104653][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.122269][ T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 350.138722][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.152537][ T5918] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 350.168250][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 350.183041][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 350.197476][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.211114][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 350.232119][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.254828][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 350.286329][ T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 350.297214][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.304670][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 350.331066][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 350.337542][ T10] usb 2-1: Product: syz [ 350.345123][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.355686][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.370985][ T10] usb 2-1: Manufacturer: syz [ 350.375663][ T10] usb 2-1: SerialNumber: syz [ 350.381242][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.402815][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.421870][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.432830][ T10] usb 2-1: config 0 descriptor?? [ 350.445965][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.462903][ T10] usb 2-1: no audio or video endpoints found [ 350.471617][ T5918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 350.489965][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.503247][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.541512][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.547708][ T6511] usb 7-1: xr_serial converter now attached to ttyUSB0 [ 350.557725][ T5918] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.576293][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.601268][ T5918] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.609309][ T5918] usb 1-1: Manufacturer: syz [ 350.634736][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.666117][ T5918] usb 1-1: config 0 descriptor?? [ 350.703710][ T978] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 350.734244][ T978] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 350.752569][ T9906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.991'. [ 350.778447][ T978] usb 4-1: USB disconnect, device number 81 [ 350.804833][ T9906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.991'. [ 350.910074][ T5836] usb 7-1: USB disconnect, device number 4 [ 350.947305][ T5836] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 350.972305][ T30] audit: type=1326 audit(1749475209.536:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.2.998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68bed8e929 code=0x0 [ 351.026288][ T5836] xr_serial 7-1:150.204: device disconnected [ 351.093757][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.137014][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.165697][ T5918] rc_core: IR keymap rc-hauppauge not found [ 351.182197][ T5918] Registered IR keymap rc-empty [ 351.198735][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.249439][ T30] audit: type=1326 audit(1749475209.806:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.251423][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.309619][ T30] audit: type=1326 audit(1749475209.806:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.343525][ T30] audit: type=1326 audit(1749475209.846:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.343935][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 351.365614][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.367926][ T30] audit: type=1326 audit(1749475209.846:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.395088][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 351.431754][ T30] audit: type=1326 audit(1749475209.846:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.472922][ T30] audit: type=1326 audit(1749475209.846:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.498925][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.506475][ T30] audit: type=1326 audit(1749475209.846:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.529903][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.545738][ T30] audit: type=1326 audit(1749475209.846:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.567926][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.581753][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.589247][ T978] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 351.613073][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.641098][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.650581][ T30] audit: type=1326 audit(1749475209.846:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 351.683754][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.741642][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.751779][ T978] usb 4-1: device descriptor read/64, error -71 [ 351.762181][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.789440][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.831869][ T5918] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.863266][ T5918] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 351.883979][ T5918] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 351.921252][ T5918] usb 1-1: USB disconnect, device number 43 [ 352.013407][ T978] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 352.041050][ T5948] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 352.171413][ T978] usb 4-1: device descriptor read/64, error -71 [ 352.191138][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 352.203152][ T5948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.218050][ T5948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.229724][ T5948] usb 7-1: config 1 interface 0 has no altsetting 0 [ 352.240240][ T5948] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 352.251950][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.299479][ T978] usb usb4-port1: attempt power cycle [ 352.485015][ T5948] usb 7-1: string descriptor 0 read error: -71 [ 352.500191][ T5948] hub 7-1:1.0: bad descriptor, ignoring hub [ 352.527632][ T5948] hub 7-1:1.0: probe with driver hub failed with error -5 [ 352.531283][ T5836] usb 2-1: USB disconnect, device number 73 [ 352.751015][ T978] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 352.842640][ T6511] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 352.855625][ T978] usb 4-1: device descriptor read/8, error -71 [ 352.858903][ T6511] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 352.885543][ T6511] hid-generic 0000:0003:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 352.913679][ T5960] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 353.028371][ T5948] usb 7-1: USB disconnect, device number 5 [ 353.075883][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.127024][ T5960] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 353.141169][ T978] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 353.173761][ T978] usb 4-1: device descriptor read/8, error -71 [ 353.186943][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.203783][ T9982] fido_id[9982]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 353.231741][ T5960] usb 1-1: config 0 descriptor?? [ 353.311410][ T978] usb usb4-port1: unable to enumerate USB device [ 353.491311][ T5948] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 353.656551][ T5948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.669640][ T5948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.737937][ T5948] usb 7-1: config 1 interface 0 has no altsetting 0 [ 353.788117][ T5960] lenovo 0003:17EF:60A3.0013: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 353.813587][ T5948] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 353.877233][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.027123][ T5960] usb 1-1: USB disconnect, device number 44 [ 355.203942][ T5948] usb 7-1: string descriptor 0 read error: -71 [ 355.228098][ T5948] hub 7-1:1.0: bad descriptor, ignoring hub [ 355.275815][ T5948] hub 7-1:1.0: probe with driver hub failed with error -5 [ 355.346499][ T5948] usb 7-1: USB disconnect, device number 6 [ 355.429625][ T5918] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 355.443253][ T5918] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 355.454080][T10020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.472067][ T5918] hid-generic 0000:0003:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 355.485867][T10020] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 355.709396][T10037] fido_id[10037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.953144][T10044] loop6: detected capacity change from 0 to 7 [ 355.960716][T10044] Dev loop6: unable to read RDB block 7 [ 355.966495][T10044] loop6: AHDI p4 [ 355.970167][T10044] loop6: partition table partially beyond EOD, truncated [ 356.127698][T10046] gretap1: entered allmulticast mode [ 356.350539][T10054] macvtap2: entered allmulticast mode [ 356.403963][T10054] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 356.453785][T10054] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 356.651190][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 356.691733][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 356.800996][ T5960] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 356.888927][T10057] fuse: Bad value for 'fd' [ 356.960990][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 356.968215][T10073] delete_channel: no stack [ 356.974900][ T5960] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 356.991297][ T5960] usb 4-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 357.008450][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.025786][ T5960] usb 4-1: Product: syz [ 357.031237][ T5948] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 357.041304][ T5960] usb 4-1: Manufacturer: syz [ 357.045937][ T5960] usb 4-1: SerialNumber: syz [ 357.249654][ T5948] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 357.286228][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.315920][ T5948] usb 1-1: config 0 descriptor?? [ 357.332846][ T5948] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 357.391183][ T5918] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 357.572757][ T5918] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 357.644743][ T6511] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 357.656352][ T6511] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 357.664239][ T5918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.691258][ T5918] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.718590][ T5948] gspca_stv06xx: I2C: Read error writing address: -71 [ 357.735122][ T6511] hid-generic 0000:0003:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 357.889006][T10083] fido_id[10083]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.911342][ T5948] usb 1-1: USB disconnect, device number 45 [ 357.919740][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.951536][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.029080][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.046984][ T5918] usb 3-1: invalid MIDI out EP 0 [ 358.203596][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.213497][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.290981][ T5948] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 358.299403][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.347287][ T5918] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 358.512305][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 358.669945][ T5948] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 358.817084][T10095] loop6: detected capacity change from 0 to 7 [ 358.824480][T10095] Dev loop6: unable to read RDB block 7 [ 358.830438][T10095] loop6: AHDI p4 [ 358.834678][T10095] loop6: partition table partially beyond EOD, truncated [ 358.851734][ T5918] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 359.029185][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 359.190494][ T5948] usb 1-1: Product: syz [ 359.244545][ T5960] ftdi_sio 4-1:64.0: Ignoring interface reserved for JTAG [ 359.261208][ T5960] usb 4-1: USB disconnect, device number 86 [ 359.419030][ T6511] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 359.419038][ T5948] usb 1-1: Manufacturer: syz [ 359.449940][ T5948] usb 1-1: SerialNumber: syz [ 359.461388][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 359.470358][ T5918] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 359.479658][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.534609][ T5948] usb 1-1: config 0 descriptor?? [ 359.542442][ T5918] usb 7-1: config 0 descriptor?? [ 359.572625][ T6511] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 359.581405][ T6511] usb 2-1: config 0 has no interface number 0 [ 359.600104][ T6511] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 359.639026][ T6511] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 359.661447][ T5918] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 359.690470][ T6511] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 359.713989][ T5918] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 359.734138][ T6511] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 359.752454][ T6511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.769062][ T6511] usb 2-1: Product: syz [ 359.786643][ T6511] usb 2-1: Manufacturer: syz [ 359.809250][ T6511] usb 2-1: SerialNumber: syz [ 359.827355][ T5960] usb 1-1: USB disconnect, device number 46 [ 359.881256][ T6511] usb 2-1: config 0 descriptor?? [ 359.907440][T10100] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 359.942591][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 359.956203][T10100] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 359.978737][T10093] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1029'. [ 359.994762][T10093] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1029'. [ 360.019305][ T6511] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 360.084165][ T6511] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 360.586954][ T5948] usb 3-1: USB disconnect, device number 60 [ 360.837550][ T6511] usb 7-1: USB disconnect, device number 7 [ 360.856429][ T5898] usb 2-1: USB disconnect, device number 75 [ 360.908937][ T5898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 360.959977][ T5898] cyberjack 2-1:0.69: device disconnected [ 361.159890][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 361.159907][ T30] audit: type=1326 audit(1749475219.716:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.1.1036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bf318e929 code=0x0 [ 362.074167][ T5948] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 362.283441][ T5948] usb 7-1: config 0 has an invalid interface number: 95 but max is 0 [ 362.292101][ T5948] usb 7-1: config 0 has no interface number 0 [ 362.318556][ T5948] usb 7-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 362.322093][ T6511] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 362.447486][ T5948] usb 7-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 362.472398][ T5898] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 362.501021][ T6511] usb 4-1: device descriptor read/64, error -71 [ 362.509611][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.662774][ T5948] usb 7-1: Product: syz [ 362.667928][ T5898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.687274][ T5948] usb 7-1: Manufacturer: syz [ 362.694876][ T5948] usb 7-1: SerialNumber: syz [ 362.703096][T10155] loop6: detected capacity change from 0 to 7 [ 362.719941][ T5898] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.741748][ T5948] usb 7-1: config 0 descriptor?? [ 362.747573][T10138] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.755522][ T6511] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 362.762952][T10155] Dev loop6: unable to read RDB block 7 [ 362.768787][T10155] loop6: AHDI p4 [ 362.771591][ T5898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.798507][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.835116][T10155] loop6: partition table partially beyond EOD, truncated [ 362.920999][ T6511] usb 4-1: device descriptor read/64, error -71 [ 362.977425][ T5948] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.021371][ T5948] usb 7-1: MIDIStreaming interface descriptor not found [ 363.039094][T10152] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 363.054191][ T6511] usb usb4-port1: attempt power cycle [ 363.266088][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.284570][ T5948] usb 7-1: USB disconnect, device number 8 [ 363.309536][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.422197][ T6511] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 363.436054][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.546287][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.561118][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.575829][ T6511] usb 4-1: device descriptor read/8, error -71 [ 363.831175][ T6511] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 363.881564][ T6511] usb 4-1: device descriptor read/8, error -71 [ 363.945440][ T978] usb 2-1: USB disconnect, device number 76 [ 364.021428][ T6511] usb usb4-port1: unable to enumerate USB device [ 364.074500][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1045'. [ 364.646043][T10184] loop6: detected capacity change from 0 to 7 [ 364.673454][T10184] Dev loop6: unable to read RDB block 7 [ 364.699014][T10184] loop6: unable to read partition table [ 364.746641][T10184] loop6: partition table beyond EOD, truncated [ 364.786194][T10184] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 365.094290][ T6511] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 365.141164][ T6511] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 365.193187][ T6511] hid-generic 0000:0003:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 365.410339][T10203] loop6: detected capacity change from 0 to 7 [ 365.424017][T10203] Dev loop6: unable to read RDB block 7 [ 365.435975][T10203] loop6: AHDI p4 [ 365.443074][T10203] loop6: partition table partially beyond EOD, truncated [ 366.039399][T10201] fido_id[10201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.260988][ T6511] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 366.481280][ T6511] usb 3-1: Using ep0 maxpacket: 8 [ 366.523526][ T6511] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 366.555935][ T6511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.595740][ T6511] usb 3-1: Product: syz [ 366.603425][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'. [ 366.618200][ T6511] usb 3-1: Manufacturer: syz [ 366.631488][ T978] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 366.642498][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'. [ 366.656208][ T6511] usb 3-1: SerialNumber: syz [ 366.678650][ T6511] usb 3-1: config 0 descriptor?? [ 366.871345][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 366.885382][ T978] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 366.923476][ T978] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 366.964550][ T6511] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 366.988233][ T978] usb 2-1: can't read configurations, error -61 [ 367.231101][ T978] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 367.325298][T10253] erspan0: entered promiscuous mode [ 367.331623][T10253] macsec1: entered allmulticast mode [ 367.339364][T10253] erspan0: entered allmulticast mode [ 367.345184][ T5948] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 367.360534][T10253] erspan0: left allmulticast mode [ 367.366420][T10253] erspan0: left promiscuous mode [ 367.393369][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.415301][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.425592][ T978] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 367.461948][ T978] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 367.470028][ T978] usb 2-1: can't read configurations, error -61 [ 367.482244][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.483579][ T978] usb usb2-port1: attempt power cycle [ 367.522064][ T5948] usb 1-1: config 0 has no interfaces? [ 367.531879][ T5948] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 367.572165][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.610754][ T5948] usb 1-1: Product: syz [ 367.630328][ T5948] usb 1-1: Manufacturer: syz [ 367.646581][ T5948] usb 1-1: SerialNumber: syz [ 367.673881][ T5948] usb 1-1: config 0 descriptor?? [ 367.839453][ T6511] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 367.919490][ T978] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 367.938882][ T6511] usb 3-1: USB disconnect, device number 61 [ 367.994063][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.026455][ T978] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 368.069346][ T978] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 368.095563][ T978] usb 2-1: can't read configurations, error -61 [ 368.119218][ T5918] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 368.161404][ T5918] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 368.179187][ T5918] hid-generic 0000:0003:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 368.321080][ T978] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 368.847490][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.862652][ T978] usb 2-1: too many configurations: 229, using maximum allowed: 8 [ 369.050219][ T978] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 369.070971][ T978] usb 2-1: can't read configurations, error -61 [ 369.077666][ T978] usb usb2-port1: unable to enumerate USB device [ 369.274032][T10277] fido_id[10277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 369.333545][T10283] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1070'. [ 369.608133][ T5918] usb 1-1: USB disconnect, device number 47 [ 369.784097][T10294] loop6: detected capacity change from 0 to 63 [ 369.799706][T10294] buffer_io_error: 18 callbacks suppressed [ 369.799719][T10294] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.819912][T10294] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.830102][T10294] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.849903][T10294] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.864619][T10294] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.883343][T10294] loop6: unable to read partition table [ 369.889285][T10296] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 369.889414][T10296] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 369.889561][T10296] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 369.889662][T10296] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 369.889765][T10296] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 369.933896][ T5898] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 369.971917][T10294] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 370.101567][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 370.118363][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 370.136002][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 370.140041][ T5918] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 370.156866][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.237231][ T5898] usb 2-1: config 0 descriptor?? [ 370.369677][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.411174][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.441044][ T5918] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.450164][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.469389][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.480051][ T5918] usb 1-1: SerialNumber: syz [ 370.491115][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.616039][T10309] loop6: detected capacity change from 0 to 32 [ 370.682766][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.691867][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.711113][ T5836] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 370.747737][ T5918] usb 1-1: 0:2 : does not exist [ 370.816471][ T5918] usb 1-1: USB disconnect, device number 48 [ 370.913602][ T5836] usb 3-1: unable to get BOS descriptor or descriptor too short [ 370.925484][ T5836] usb 3-1: config 1 has an invalid interface number: 43 but max is 1 [ 370.942997][ T8152] udevd[8152]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.943963][ T5836] usb 3-1: config 1 has no interface number 1 [ 371.042786][ T5836] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 371.233247][ T5836] usb 3-1: config 1 interface 0 has no altsetting 0 [ 371.252135][ T5836] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 371.265875][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.281008][ T5836] usb 3-1: Product: syz [ 371.285347][ T5836] usb 3-1: Manufacturer: syz [ 371.303581][ T5836] usb 3-1: SerialNumber: syz [ 371.588619][ T5836] smsusb:smsusb_probe: board id=8, interface number 0 [ 371.666936][ T5836] smsusb:smsusb_probe: board id=8, interface number 43 [ 371.734017][ T5836] usb 3-1: USB disconnect, device number 62 [ 372.670981][ T5918] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 372.800477][ T5898] usb 2-1: string descriptor 0 read error: -71 [ 372.869330][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 372.889116][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.929673][ T5918] usb 3-1: config 0 has no interfaces? [ 372.980665][ T5918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 373.027744][ T5187] bcm5974 2-1:0.0: could not read from device [ 373.030956][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.036182][ T5898] usb 2-1: USB disconnect, device number 81 [ 373.151681][T10267] syz.3.1067 (10267): drop_caches: 1 [ 373.211107][ T5918] usb 3-1: config 0 descriptor?? [ 373.259013][T10270] syz.3.1067 (10270): drop_caches: 1 [ 373.499419][T10321] block device autoloading is deprecated and will be removed. [ 373.508882][T10321] syz.6.1077: attempt to access beyond end of device [ 373.508882][T10321] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.570357][ T5898] usb 3-1: USB disconnect, device number 63 [ 373.769745][T10347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.946819][T10351] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 374.031113][ T5918] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 374.081204][ T5948] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 374.194892][ T5918] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 374.218289][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.231053][ T978] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 374.248760][ T5948] usb 4-1: device descriptor read/64, error -71 [ 374.262640][ T5918] usb 3-1: Product: syz [ 374.272452][ T5918] usb 3-1: Manufacturer: syz [ 374.287597][ T5918] usb 3-1: SerialNumber: syz [ 374.314310][ T5918] usb 3-1: config 0 descriptor?? [ 374.349107][T10338] delete_channel: no stack [ 374.411110][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 374.426318][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 374.438708][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 374.464603][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.489565][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 374.501182][ T5948] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 374.514850][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 374.529540][ T978] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 374.568892][ T5918] hso 3-1:0.0: Failed to find BULK IN ep [ 374.588040][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.605594][ T5918] usb-storage 3-1:0.0: USB Mass Storage device detected [ 374.637630][ T978] usb 1-1: Product: syz [ 374.643192][ T5948] usb 4-1: device descriptor read/64, error -71 [ 374.660029][ T978] usb 1-1: Manufacturer: syz [ 374.681715][ T978] usb 1-1: SerialNumber: syz [ 374.693650][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 374.730293][ T978] usb 1-1: config 0 descriptor?? [ 374.747570][ T978] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 374.778418][ T5948] usb usb4-port1: attempt power cycle [ 374.785477][ T978] cyphidcom ttyUSB0: required endpoint is missing [ 374.813825][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1082'. [ 374.828084][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1082'. [ 374.883097][ T9] usb 2-1: device descriptor read/64, error -71 [ 375.123318][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 375.131331][ T5948] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 375.151931][ T5948] usb 4-1: device descriptor read/8, error -71 [ 375.161742][ T5898] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 375.261125][ T9] usb 2-1: device descriptor read/64, error -71 [ 375.331020][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 375.343837][ T5898] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 375.353151][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.361325][ T5898] usb 7-1: Product: syz [ 375.366188][ T5898] usb 7-1: Manufacturer: syz [ 375.370947][ T5898] usb 7-1: SerialNumber: syz [ 375.380745][ T5898] usb 7-1: config 0 descriptor?? [ 375.386213][ T9] usb usb2-port1: attempt power cycle [ 375.388728][ T5898] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 375.392338][ T5948] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 375.432640][ T5948] usb 4-1: device descriptor read/8, error -71 [ 375.542681][ T5948] usb usb4-port1: unable to enumerate USB device [ 375.652049][ T30] audit: type=1326 audit(1749475234.216:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 375.679038][ T30] audit: type=1326 audit(1749475234.216:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 375.724451][ T30] audit: type=1326 audit(1749475234.236:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 375.746822][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.758876][ T30] audit: type=1326 audit(1749475234.236:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 375.781480][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.788905][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 375.800374][ T30] audit: type=1326 audit(1749475234.236:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 375.826929][ T9] usb 2-1: device descriptor read/8, error -71 [ 375.833333][ T30] audit: type=1326 audit(1749475234.236:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 376.018974][ T30] audit: type=1326 audit(1749475234.576:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 376.042596][ T30] audit: type=1326 audit(1749475234.576:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.6.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0067d8e929 code=0x7ffc0000 [ 376.071419][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 376.091610][ T9] usb 2-1: device descriptor read/8, error -71 [ 376.204361][ T9] usb usb2-port1: unable to enumerate USB device [ 376.780321][ T6511] usb 3-1: USB disconnect, device number 64 [ 376.902178][ T5898] usb 1-1: USB disconnect, device number 49 [ 376.912969][ T5898] cypress_m8 1-1:0.0: device disconnected [ 377.201210][ T6511] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 377.350988][ T5898] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 377.361192][ T6511] usb 3-1: Using ep0 maxpacket: 32 [ 377.373633][ T6511] usb 3-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.418680][ T6511] usb 3-1: config 1 interface 0 has no altsetting 0 [ 377.440458][ T6511] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 377.456968][ T6511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.468961][ T6511] usb 3-1: Product: syz [ 377.474701][ T6511] usb 3-1: Manufacturer: syz [ 377.482812][ T6511] usb 3-1: SerialNumber: syz [ 377.551106][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 377.585470][ T5898] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.600942][ T5898] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.614135][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.620836][ T5898] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 377.671223][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.694933][ T5898] usb 1-1: config 0 descriptor?? [ 377.729115][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.738125][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.774471][ T6511] usbhid 3-1:1.0: can't add hid device: -71 [ 377.787852][ T6511] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 377.801352][ T5948] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 377.825093][ T6511] usb 3-1: USB disconnect, device number 65 [ 377.938363][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.951065][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 377.963178][ T5836] usb 7-1: USB disconnect, device number 9 [ 377.969165][ T5948] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 377.980110][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.991210][ T5948] usb 2-1: Product: syz [ 377.995780][ T5948] usb 2-1: Manufacturer: syz [ 378.001449][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.038804][ T5948] usb 2-1: SerialNumber: syz [ 378.135176][ T5948] usb 2-1: config 0 descriptor?? [ 378.308712][ T5898] hid (null): usage index exceeded [ 378.371884][ T5948] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.490772][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502997][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.676125][ T5960] usb 1-1: USB disconnect, device number 50 [ 378.747323][ T5898] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 378.901172][ T5836] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 378.912147][ T5898] usb 7-1: device descriptor read/64, error -71 [ 379.071366][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 379.090673][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 379.110182][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 379.142064][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.174610][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 379.187140][ T5898] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 379.235431][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 379.261505][ T5836] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 379.275531][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.327069][ T5836] usb 3-1: Product: syz [ 379.332201][ T5898] usb 7-1: device descriptor read/64, error -71 [ 379.350678][ T5836] usb 3-1: Manufacturer: syz [ 379.374458][ T5836] usb 3-1: SerialNumber: syz [ 379.389921][ T5836] usb 3-1: config 0 descriptor?? [ 379.406686][ T5836] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 379.473616][ T5898] usb usb7-port1: attempt power cycle [ 379.601685][ T5948] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 379.821088][ T5898] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 379.851716][ T5898] usb 7-1: device descriptor read/8, error -71 [ 380.101740][ T5898] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 380.161100][ T5898] usb 7-1: device descriptor read/8, error -71 [ 380.271467][ T5898] usb usb7-port1: unable to enumerate USB device [ 380.426877][ T5898] usb 3-1: USB disconnect, device number 66 [ 380.579821][ T30] audit: type=1326 audit(1749475239.136:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 380.701874][ T5948] usb 2-1: USB disconnect, device number 86 [ 380.780983][ T30] audit: type=1326 audit(1749475239.136:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 380.861218][ T30] audit: type=1326 audit(1749475239.136:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 380.963775][ T30] audit: type=1326 audit(1749475239.136:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 381.108783][ T30] audit: type=1326 audit(1749475239.136:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 381.237128][ T30] audit: type=1326 audit(1749475239.136:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 381.378691][ T30] audit: type=1326 audit(1749475239.146:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 381.516993][T10413] loop6: detected capacity change from 0 to 7 [ 381.565673][ T30] audit: type=1326 audit(1749475239.146:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 381.601438][ T9509] Dev loop6: unable to read RDB block 7 [ 381.607192][ T9509] loop6: AHDI p4 [ 381.616576][ T9509] loop6: partition table partially beyond EOD, truncated [ 381.706395][T10413] Dev loop6: unable to read RDB block 7 [ 381.731506][T10413] loop6: AHDI p4 [ 381.735234][T10413] loop6: partition table partially beyond EOD, truncated [ 381.749156][ T30] audit: type=1326 audit(1749475239.146:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661b38e929 code=0x7ffc0000 [ 381.820953][ T30] audit: type=1326 audit(1749475239.146:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f661b3907bc code=0x7ffc0000 [ 381.942776][ T30] audit: type=1326 audit(1749475239.146:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f661b3906f4 code=0x7ffc0000 [ 382.251116][ T5918] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 382.431464][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 382.449325][ T5918] usb 7-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.491240][ T5836] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 382.508910][ T5918] usb 7-1: config 1 interface 0 has no altsetting 0 [ 382.535154][ T5918] usb 7-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 382.564989][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.608966][ T5918] usb 7-1: Product: syz [ 382.634155][ T5918] usb 7-1: Manufacturer: syz [ 382.641278][ T5836] usb 3-1: device descriptor read/64, error -71 [ 382.654674][ T5918] usb 7-1: SerialNumber: syz [ 382.721124][ T978] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 382.901189][ T5836] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 382.901221][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 382.924353][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 196, changing to 11 [ 382.940994][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34377, setting to 1024 [ 382.949834][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.970979][ T978] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.987205][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.999445][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.054738][ T978] usb 4-1: config 0 descriptor?? [ 383.054960][ T5836] usb 3-1: device descriptor read/64, error -71 [ 383.060897][T10439] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 383.097000][ T5918] usbhid 7-1:1.0: can't add hid device: -71 [ 383.105892][ T5918] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 383.134980][ T5918] usb 7-1: USB disconnect, device number 14 [ 383.193264][ T5836] usb usb3-port1: attempt power cycle [ 383.288430][ T978] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 383.513221][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.550623][ T5836] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 383.589706][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.641268][ T5836] usb 3-1: device descriptor read/8, error -71 [ 383.727016][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 383.741979][ T978] usb 4-1: USB disconnect, device number 95 [ 383.891134][ T5836] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 383.998495][ T5836] usb 3-1: device descriptor read/8, error -71 [ 384.121003][ T5898] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 384.129557][ T5836] usb usb3-port1: unable to enumerate USB device [ 384.271229][ T5898] usb 7-1: device descriptor read/64, error -71 [ 384.500976][ T5836] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 384.500979][ T5918] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 384.554036][ T5898] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 384.673648][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.673934][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.729365][ T5918] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 384.733407][ T5898] usb 7-1: device descriptor read/64, error -71 [ 384.739690][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.747665][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.782416][ T5918] usb 1-1: config 0 descriptor?? [ 384.787546][ T5836] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 384.806988][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.826321][ T5836] usb 2-1: config 0 descriptor?? [ 384.874706][ T5898] usb usb7-port1: attempt power cycle [ 385.231161][ T5898] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 385.355102][ T5898] usb 7-1: device descriptor read/8, error -71 [ 385.405917][T10469] binder: BINDER_SET_CONTEXT_MGR already set [ 385.412071][T10469] binder: 10459:10469 ioctl 4018620d 200000000040 returned -16 [ 385.424984][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.434672][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.478721][ T5836] uclogic 0003:5543:0042.0019: item fetching failed at offset 6/7 [ 385.514347][ T5836] uclogic 0003:5543:0042.0019: parse failed [ 385.523738][T10472] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 385.538593][ T5836] uclogic 0003:5543:0042.0019: probe with driver uclogic failed with error -22 [ 385.602600][T10472] netlink: 151 bytes leftover after parsing attributes in process `syz.3.1116'. [ 385.611841][ T5898] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 385.651898][ T5898] usb 7-1: device descriptor read/8, error -71 [ 385.700409][ T5836] usb 2-1: USB disconnect, device number 87 [ 385.763475][ T5898] usb usb7-port1: unable to enumerate USB device [ 385.881290][ T6511] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 386.070960][ T6511] usb 3-1: Using ep0 maxpacket: 16 [ 386.090717][ T6511] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 386.110555][ T6511] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 386.138154][ T6511] usb 3-1: config 8 has no interface number 0 [ 386.159070][ T6511] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 386.201241][ T6511] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 386.247824][T10477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.262233][ T6511] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 386.317737][T10477] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 386.318495][ T6511] usb 3-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.340957][ T6511] usb 3-1: config 8 interface 39 has no altsetting 0 [ 386.368501][ T6511] usb 3-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 386.407810][ T6511] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 386.423842][ T6511] usb 3-1: Product: syz [ 386.429001][ T6511] usb 3-1: Manufacturer: syz [ 386.469108][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 386.481601][T10480] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 386.501110][ T6511] usb 3-1: SerialNumber: syz [ 386.736550][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.752443][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.776685][ T6511] ipheth 3-1:8.39: Unable to find endpoints [ 386.799347][ T6511] usb 3-1: USB disconnect, device number 71 [ 386.901595][ T5836] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 387.061664][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 387.088043][ T5836] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 387.137952][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.150995][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 387.171179][ T5836] usb 4-1: Product: syz [ 387.203986][ T5836] usb 4-1: Manufacturer: syz [ 387.223780][ T5836] usb 4-1: SerialNumber: syz [ 387.251764][ T5836] usb 4-1: config 0 descriptor?? [ 387.286449][ T5836] gspca_main: se401-2.14.0 probing 047d:5003 [ 387.331722][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 387.347366][ T9] usb 2-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.362921][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 387.401797][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 387.412503][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.460241][ T9] usb 2-1: Product: syz [ 387.473588][ T9] usb 2-1: Manufacturer: syz [ 387.484429][ T9] usb 2-1: SerialNumber: syz [ 387.723309][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.831226][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.932652][ T5836] usb 4-1: reset high-speed USB device number 96 using dummy_hcd [ 388.044250][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 388.063071][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 388.078494][ T9] usb 2-1: USB disconnect, device number 88 [ 388.216286][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 388.255338][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 388.353025][ T5918] usb 1-1: USB disconnect, device number 51 [ 388.420662][ T5836] gspca_se401: read req failed req 0x06 error -71 [ 388.448217][ T5836] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 388.468826][ T5836] usb 4-1: USB disconnect, device number 96 [ 388.565600][T10511] input: syz0 as /devices/virtual/input/input39 [ 388.619253][T10511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1126'. [ 389.091467][ T5918] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 389.272275][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 389.303172][ T5918] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 389.328704][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.370850][ T5918] usb 2-1: config 0 has no interface number 0 [ 389.377245][ T5918] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 389.411124][ T5918] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.426835][ T5918] usb 2-1: config 0 interface 52 has no altsetting 0 [ 389.435748][ T5918] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 389.445392][ T5918] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 389.467670][ T5918] usb 2-1: Manufacturer: syz [ 389.484703][T10528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.520462][ T5918] usb 2-1: config 0 descriptor?? [ 389.789638][ T5918] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input40 [ 389.925564][T10524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.949689][T10524] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 389.964622][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.974362][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.001510][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 390.299674][ T9] usb 1-1: config 0 has no interfaces? [ 390.334119][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 390.356903][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.762226][ T9] usb 1-1: Product: syz [ 390.784337][ T9] usb 1-1: Manufacturer: syz [ 390.816179][ T9] usb 1-1: SerialNumber: syz [ 390.865453][ T9] usb 1-1: config 0 descriptor?? [ 391.201078][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 391.201100][ T30] audit: type=1326 audit(1749475249.696:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.375154][ T30] audit: type=1326 audit(1749475249.696:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.397441][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.421917][ T5898] usb 2-1: USB disconnect, device number 89 [ 391.422002][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 391.491153][ T6511] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 391.507546][ T30] audit: type=1326 audit(1749475249.696:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.529907][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.574739][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1135'. [ 391.586270][ T30] audit: type=1326 audit(1749475249.706:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.642208][ T30] audit: type=1326 audit(1749475249.706:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.664558][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.691011][ T6511] usb 4-1: Using ep0 maxpacket: 16 [ 391.700163][ T6511] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 391.710814][ T6511] usb 4-1: config 0 has no interface number 0 [ 391.710844][ T30] audit: type=1326 audit(1749475249.706:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.718233][ T6511] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 391.754587][ T6511] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 391.767457][ T30] audit: type=1326 audit(1749475249.706:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.793499][ T6511] usb 4-1: config 0 interface 41 has no altsetting 0 [ 391.804932][ T6511] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 391.817391][ T6511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.826050][ T6511] usb 4-1: Product: syz [ 391.826155][ T30] audit: type=1326 audit(1749475249.716:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.853828][ T6511] usb 4-1: Manufacturer: syz [ 391.858771][ T6511] usb 4-1: SerialNumber: syz [ 391.880242][ T6511] usb 4-1: config 0 descriptor?? [ 391.888065][T10541] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 391.897319][T10541] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 391.909641][ T30] audit: type=1326 audit(1749475249.716:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.932086][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.958704][ T30] audit: type=1326 audit(1749475249.726:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff639b8e929 code=0x7ffc0000 [ 391.981092][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.341128][ T6511] dm9601 4-1:0.41: probe with driver dm9601 failed with error -71 [ 392.357694][ T6511] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 392.386484][ T6511] usb 4-1: USB disconnect, device number 97 [ 392.581807][ T5898] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 392.653017][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 392.671278][ T9] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.713131][T10553] hid-generic 0000:0000:0000.001A: pid 10553 passed too short report [ 392.751227][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 392.834369][ T5898] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 392.877420][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.900934][ T5836] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 392.968839][ T5898] usb 2-1: config 0 descriptor?? [ 392.969010][ T9] usb 1-1: USB disconnect, device number 52 [ 393.019758][ T5898] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 393.050677][ T5898] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 393.111024][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 393.127545][ T5836] usb 3-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.194389][ T5836] usb 3-1: config 1 interface 0 has no altsetting 0 [ 393.225971][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 393.239893][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.257343][ T5836] usb 3-1: Product: syz [ 393.265000][ T5836] usb 3-1: Manufacturer: syz [ 393.269745][ T5836] usb 3-1: SerialNumber: syz [ 393.497301][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 393.513170][T10550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.602993][T10550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.827484][ T5836] usbhid 3-1:1.0: can't add hid device: -71 [ 393.836185][ T5836] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 393.925230][ T5836] usb 3-1: USB disconnect, device number 72 [ 395.051053][ T5836] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 395.068938][T10584] sctp: [Deprecated]: syz.0.1145 (pid 10584) Use of int in maxseg socket option. [ 395.068938][T10584] Use struct sctp_assoc_value instead [ 395.243589][ T5836] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 395.252022][ T5836] usb 3-1: config 0 has no interface number 0 [ 395.270642][ T5836] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 395.301536][T10586] loop6: detected capacity change from 0 to 7 [ 395.317850][ T5836] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.352332][T10586] Dev loop6: unable to read RDB block 7 [ 395.358119][T10586] loop6: unable to read partition table [ 395.366902][T10586] loop6: partition table beyond EOD, truncated [ 395.378671][ T5836] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 395.411109][T10586] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.454806][ T5836] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 395.488182][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.574029][ T5836] usb 3-1: config 0 descriptor?? [ 395.630635][ T5836] gspca_main: spca561-2.14.0 probing abcd:cdee [ 395.665713][ T5898] usb 2-1: USB disconnect, device number 90 [ 395.800687][ T5836] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 395.850453][ T5836] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.868018][ T5836] usb 3-1: MIDIStreaming interface descriptor not found [ 396.074901][ T5836] snd-usb-audio 3-1:0.156: probe with driver snd-usb-audio failed with error -12 [ 396.169312][ T5836] usb 3-1: USB disconnect, device number 73 [ 396.361541][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 396.531696][ T9] usb 1-1: device descriptor read/64, error -71 [ 396.561237][ T5898] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 396.580680][T10608] fuse: Bad value for 'fd' [ 396.719063][ T5898] usb 2-1: device descriptor read/64, error -71 [ 396.802143][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 396.919567][T10622] input: syz0 as /devices/virtual/input/input41 [ 396.951319][ T5918] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 396.959174][ T9] usb 1-1: device descriptor read/64, error -71 [ 396.991404][ T5898] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 397.081702][ T9] usb usb1-port1: attempt power cycle [ 397.111282][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 397.118173][ T5918] usb 3-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.132800][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 397.140255][ T5898] usb 2-1: device descriptor read/64, error -71 [ 397.150518][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 397.160775][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.170624][ T5918] usb 3-1: Product: syz [ 397.175276][ T5918] usb 3-1: Manufacturer: syz [ 397.179931][ T5918] usb 3-1: SerialNumber: syz [ 397.241618][ T5898] usb usb2-port1: attempt power cycle [ 397.400595][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.418005][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.426048][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 397.454504][ T9] usb 1-1: device descriptor read/8, error -71 [ 397.467249][ T5918] usbhid 3-1:1.0: can't add hid device: -71 [ 397.489893][ T5918] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 397.511352][ T5918] usb 3-1: USB disconnect, device number 74 [ 397.532872][ T978] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 397.660954][ T5898] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 397.683645][ T5898] usb 2-1: device descriptor read/8, error -71 [ 397.686077][ T978] usb 4-1: device descriptor read/64, error -71 [ 397.701321][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 397.778017][ T9] usb 1-1: device descriptor read/8, error -71 [ 397.831016][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1159'. [ 397.901330][ T9] usb usb1-port1: unable to enumerate USB device [ 397.961030][ T5898] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 397.961064][ T978] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 398.012547][ T5898] usb 2-1: device descriptor read/8, error -71 [ 398.122627][ T5898] usb usb2-port1: unable to enumerate USB device [ 398.171559][ T978] usb 4-1: device descriptor read/64, error -71 [ 398.283492][ T978] usb usb4-port1: attempt power cycle [ 398.381123][ T5898] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 398.526523][ T5898] usb 3-1: device descriptor read/64, error -71 [ 398.650985][ T978] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 398.683279][ T978] usb 4-1: device descriptor read/8, error -71 [ 398.781075][ T5898] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 398.922355][ T978] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 398.956795][ T5898] usb 3-1: device descriptor read/64, error -71 [ 398.957056][ T978] usb 4-1: device descriptor read/8, error -71 [ 399.082579][ T978] usb usb4-port1: unable to enumerate USB device [ 399.096678][ T5898] usb usb3-port1: attempt power cycle [ 399.251111][ T5948] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 399.390961][ T5948] usb 7-1: device descriptor read/64, error -71 [ 399.451120][ T5898] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 399.481821][ T5898] usb 3-1: device descriptor read/8, error -71 [ 399.497155][T10646] netdevsim netdevsim0 : renamed from netdevsim0 [ 399.641792][ T5948] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 399.752042][ T5898] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 399.781008][ T5948] usb 7-1: device descriptor read/64, error -71 [ 399.781889][ T5898] usb 3-1: device descriptor read/8, error -71 [ 399.891729][ T5948] usb usb7-port1: attempt power cycle [ 399.893669][ T5898] usb usb3-port1: unable to enumerate USB device [ 400.231485][ T5948] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 400.265999][ T5948] usb 7-1: device descriptor read/8, error -71 [ 400.376167][T10668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1171'. [ 400.401781][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 400.573075][ T5948] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 400.591071][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 400.602701][ T5948] usb 7-1: device descriptor read/8, error -71 [ 400.612265][ T9] usb 2-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.612290][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 400.614427][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 400.614457][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.614479][ T9] usb 2-1: Product: syz [ 400.614496][ T9] usb 2-1: Manufacturer: syz [ 400.614512][ T9] usb 2-1: SerialNumber: syz [ 400.711818][ T5948] usb usb7-port1: unable to enumerate USB device [ 400.845902][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.879729][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.971880][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 400.993939][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 401.044847][ T9] usb 2-1: USB disconnect, device number 95 [ 401.131376][T10672] veth1_to_batadv: entered promiscuous mode [ 401.148964][T10672] macsec1: entered promiscuous mode [ 401.275645][T10675] x_tables: duplicate underflow at hook 3 [ 401.655795][T10682] SET target dimension over the limit! [ 401.674573][T10683] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 401.674573][T10682] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 401.758535][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.788682][T10682] bond2: (slave gretap1): making interface the new active one [ 401.812077][T10682] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 402.214864][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 402.230994][ T6513] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 402.290940][ T5898] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 402.428767][ T6513] usb 4-1: Using ep0 maxpacket: 16 [ 402.471838][ T6513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.530941][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 402.546332][ T6513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.560244][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 402.579516][ T6513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.595828][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.626505][ T6513] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.642660][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 402.655892][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.664043][ T6513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.685712][ T5898] usb 2-1: Product: syz [ 402.701625][ T5898] usb 2-1: Manufacturer: syz [ 402.709526][ T6513] usb 4-1: config 0 descriptor?? [ 402.730926][ T5898] usb 2-1: SerialNumber: syz [ 402.767264][ T5898] usb 2-1: config 0 descriptor?? [ 402.786693][ T5898] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 402.804094][ T5898] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 403.306753][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.351155][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.389253][ T5898] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 403.399482][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.408078][ T5898] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 403.439438][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.477841][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.530133][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.547803][T10711] sctp: [Deprecated]: syz.2.1182 (pid 10711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.547803][T10711] Use struct sctp_sack_info instead [ 403.574506][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.581235][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.597294][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.609392][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.619606][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 403.619621][ T30] audit: type=1326 audit(1749475262.166:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bed8e929 code=0x7ffc0000 [ 403.645545][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.655921][ T6513] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 403.667393][ T5898] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 403.682230][ T6513] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 403.691915][ T5898] em28xx 2-1:0.0: No AC97 audio processor [ 403.757411][ T6513] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 403.778632][ T30] audit: type=1326 audit(1749475262.176:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f68bed8e929 code=0x7ffc0000 [ 403.825229][ T6513] microsoft 0003:045E:07DA.001B: no inputs found [ 403.858485][ T6513] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 403.887359][ T30] audit: type=1326 audit(1749475262.286:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bed8e929 code=0x7ffc0000 [ 403.987100][ T30] audit: type=1326 audit(1749475262.286:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bed8e929 code=0x7ffc0000 [ 404.061398][T10719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1183'. [ 404.534945][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 405.711075][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 405.786477][T10738] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[10738] [ 405.901295][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 405.910675][ T9] usb 7-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.948199][T10741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1188'. [ 405.970980][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 406.023301][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 406.046496][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.056824][ T9] usb 7-1: Product: syz [ 406.066250][ T9] usb 7-1: Manufacturer: syz [ 406.072251][ T9] usb 7-1: SerialNumber: syz [ 406.093760][ T5948] usb 4-1: USB disconnect, device number 102 [ 406.306505][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.323728][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.390511][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 406.396597][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 406.422174][ T9] usb 7-1: USB disconnect, device number 23 [ 406.667544][ T978] usb 2-1: USB disconnect, device number 96 [ 406.683390][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 406.693715][ T978] em28xx 2-1:0.0: Disconnecting em28xx [ 406.716855][ T978] em28xx 2-1:0.0: Freeing device [ 407.195618][T10763] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1190'. [ 407.205714][ T978] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 407.365183][ T978] usb 2-1: config index 0 descriptor too short (expected 25454, got 77) [ 407.374354][ T978] usb 2-1: config 115 has too many interfaces: 47, using maximum allowed: 32 [ 407.406881][ T978] usb 2-1: config 115 has an invalid descriptor of length 121, skipping remainder of the config [ 407.469336][ T978] usb 2-1: config 115 has 0 interfaces, different from the descriptor's value: 47 [ 407.593882][ T978] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 407.604312][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.612978][ T978] usb 2-1: Product: syz [ 407.618380][ T978] usb 2-1: Manufacturer: syz [ 407.663192][ T978] usb 2-1: SerialNumber: syz [ 407.929179][T10752] netlink: 'syz.1.1191': attribute type 7 has an invalid length. [ 407.939119][T10774] fuse: Bad value for 'fd' [ 408.871300][ T5898] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 409.035983][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.055916][ T5898] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 409.065734][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.077212][ T5898] usb 7-1: Product: syz [ 409.083483][ T5898] usb 7-1: Manufacturer: syz [ 409.088998][ T5898] usb 7-1: SerialNumber: syz [ 409.183362][ T5898] usb 7-1: config 0 descriptor?? [ 409.410516][ T5898] adutux 7-1:0.0: interrupt endpoints not found [ 409.753463][ T978] usb 2-1: USB disconnect, device number 97 [ 409.757112][ T5898] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 409.845939][ T31] INFO: task kworker/0:4:5841 blocked for more than 143 seconds. [ 409.878293][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 409.888386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.918735][ T31] task:kworker/0:4 state:D stack:19464 pid:5841 tgid:5841 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 409.930994][ T5898] usb 3-1: Invalid ep0 maxpacket: 16 [ 409.957296][ T31] Workqueue: usb_hub_wq hub_event [ 409.966632][ T31] Call Trace: [ 409.969999][ T31] [ 409.974834][ T31] __schedule+0x16f5/0x4d00 [ 409.979424][ T31] ? schedule+0x165/0x360 [ 409.988377][ T31] ? __pfx___schedule+0x10/0x10 [ 409.995184][ T31] ? schedule+0x91/0x360 [ 409.999509][ T31] schedule+0x165/0x360 [ 410.005284][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.018864][ T31] __mutex_lock+0x724/0xe80 [ 410.024668][ T31] ? __mutex_lock+0x51b/0xe80 [ 410.029420][ T31] ? hub_event+0x21cb/0x4a00 [ 410.061232][ T5898] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 410.080036][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.131374][ T31] ? usb_enable_endpoint+0x104/0x1b0 [ 410.154332][ T31] hub_event+0x21cb/0x4a00 [ 410.173682][ T31] ? __pfx_hub_event+0x10/0x10 [ 410.187516][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.200317][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.229224][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.256392][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.266534][ T5898] usb 3-1: Invalid ep0 maxpacket: 16 [ 410.276143][ T31] process_scheduled_works+0xae1/0x17b0 [ 410.291605][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.308578][ T31] worker_thread+0x8a0/0xda0 [ 410.330236][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 410.344669][ T31] ? __kthread_parkme+0x7b/0x200 [ 410.360943][ T31] kthread+0x70e/0x8a0 [ 410.370835][ T31] ? __pfx_worker_thread+0x10/0x10 [ 410.384812][ T31] ? __pfx_kthread+0x10/0x10 [ 410.397346][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.411270][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.428510][ T31] ? __pfx_kthread+0x10/0x10 [ 410.439919][ T31] ret_from_fork+0x3fc/0x770 [ 410.454073][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.466799][ T31] ? __switch_to_asm+0x39/0x70 [ 410.482639][ T31] ? __switch_to_asm+0x33/0x70 [ 410.495033][ T31] ? __pfx_kthread+0x10/0x10 [ 410.508425][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.520092][ T31] [ 410.530524][ T31] [ 410.530524][ T31] Showing all locks held in the system: [ 410.562114][ T31] 1 lock held by khungtaskd/31: [ 410.576945][ T5898] usb usb3-port1: attempt power cycle [ 410.602383][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 410.625062][ T31] 5 locks held by kworker/1:2/2156: [ 410.637280][ T31] #0: ffff8880212c5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.660151][ T31] #1: ffffc90005327bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.704520][ T31] #2: ffff888144fed198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 410.736330][ T31] #3: ffff88814532e510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 410.776289][ T31] #4: ffff888144749168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 410.806831][ T31] 2 locks held by getty/5592: [ 410.816317][ T31] #0: ffff88814d4680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.845327][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 410.875215][ T31] 5 locks held by kworker/0:4/5841: [ 410.888900][ T31] #0: ffff8880212c5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.918180][ T31] #1: ffffc9000428fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.946856][ T31] #2: ffff88823beb2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 411.021061][ T5898] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 411.037138][ T31] #3: ffff888029293510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 411.056963][ T31] #4: ffff888144749168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 411.069738][ T5898] usb 3-1: Invalid ep0 maxpacket: 16 [ 411.070469][ T31] 10 locks held by kworker/1:6/5898: [ 411.080725][ T31] #0: ffff8880212c5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.097132][ T31] #1: ffffc9000455fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.109558][ T31] #2: ffff8880283c2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 411.123085][ T31] #3: ffff8880283f4510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 411.138421][ T31] #4: ffff888143f57668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 411.153630][ T31] #5: ffffffff8eddbc90 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 411.167137][ T31] #6: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 411.179899][ T31] #7: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 411.194158][ T31] #8: ffff8880b873a858 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x7b0/0xfe0 [ 411.206128][ T31] #9: ffff88801d68e428 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 411.216336][ T5898] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 411.219300][ T31] 1 lock held by syz.6.1196/10779: [ 411.230232][ T31] [ 411.238701][ T31] ============================================= [ 411.238701][ T31] [ 411.248261][ T5898] usb 3-1: Invalid ep0 maxpacket: 16 [ 411.254038][ T5898] usb usb3-port1: unable to enumerate USB device [ 411.266430][ T31] NMI backtrace for cpu 0 [ 411.266451][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 411.266471][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.266482][ T31] Call Trace: [ 411.266490][ T31] [ 411.266497][ T31] dump_stack_lvl+0x189/0x250 [ 411.266529][ T31] ? __wake_up_klogd+0xd9/0x110 [ 411.266553][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.266580][ T31] ? __pfx__printk+0x10/0x10 [ 411.266612][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 411.266640][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 411.266662][ T31] ? _printk+0xcf/0x120 [ 411.266686][ T31] ? __pfx__printk+0x10/0x10 [ 411.266708][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.266735][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 411.266768][ T31] watchdog+0xfee/0x1030 [ 411.266826][ T31] ? watchdog+0x1de/0x1030 [ 411.266861][ T31] kthread+0x70e/0x8a0 [ 411.266887][ T31] ? __pfx_watchdog+0x10/0x10 [ 411.266913][ T31] ? __pfx_kthread+0x10/0x10 [ 411.266945][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.266984][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.267011][ T31] ? __pfx_kthread+0x10/0x10 [ 411.267033][ T31] ret_from_fork+0x3fc/0x770 [ 411.267063][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.267097][ T31] ? __switch_to_asm+0x39/0x70 [ 411.267116][ T31] ? __switch_to_asm+0x33/0x70 [ 411.267134][ T31] ? __pfx_kthread+0x10/0x10 [ 411.267157][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.267192][ T31] [ 411.267814][ T31] Sending NMI from CPU 0 to CPUs 1: [ 411.426199][ C1] NMI backtrace for cpu 1 [ 411.426214][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 411.426231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.426250][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 411.426278][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 25 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 411.426291][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 411.426305][ C1] RAX: 1c4f0227e316c700 RBX: ffffffff81976058 RCX: 1c4f0227e316c700 [ 411.426317][ C1] RDX: 0000000000000001 RSI: ffffffff8d9810bf RDI: ffffffff8be282c0 [ 411.426328][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 411.426339][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa108f0 [ 411.426350][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 411.426360][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 411.426372][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.426382][ C1] CR2: 0000200000307030 CR3: 00000000244a0000 CR4: 00000000003526f0 [ 411.426395][ C1] DR0: 0000000000000081 DR1: 2000000000000006 DR2: 0800001000000002 [ 411.426406][ C1] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.426416][ C1] Call Trace: [ 411.426422][ C1] [ 411.426427][ C1] default_idle+0x13/0x20 [ 411.426442][ C1] default_idle_call+0x74/0xb0 [ 411.426459][ C1] do_idle+0x1e8/0x510 [ 411.426475][ C1] ? __pfx_do_idle+0x10/0x10 [ 411.426487][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.426517][ C1] cpu_startup_entry+0x44/0x60 [ 411.426531][ C1] start_secondary+0x101/0x110 [ 411.426550][ C1] common_startup_64+0x13e/0x147 [ 411.426573][ C1] [ 411.442754][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 411.442775][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 411.442804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.442818][ T31] Call Trace: [ 411.442829][ T31] [ 411.442839][ T31] dump_stack_lvl+0x99/0x250 [ 411.442884][ T31] ? __asan_memcpy+0x40/0x70 [ 411.442919][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.442956][ T31] ? __pfx__printk+0x10/0x10 [ 411.443008][ T31] panic+0x2db/0x790 [ 411.443046][ T31] ? __pfx_panic+0x10/0x10 [ 411.443079][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 411.443105][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 411.443136][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 411.443175][ T31] watchdog+0x102d/0x1030 [ 411.443208][ T31] ? watchdog+0x1de/0x1030 [ 411.443246][ T31] kthread+0x70e/0x8a0 [ 411.443276][ T31] ? __pfx_watchdog+0x10/0x10 [ 411.443304][ T31] ? __pfx_kthread+0x10/0x10 [ 411.443333][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.443363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.443395][ T31] ? __pfx_kthread+0x10/0x10 [ 411.443421][ T31] ret_from_fork+0x3fc/0x770 [ 411.443457][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.443494][ T31] ? __switch_to_asm+0x39/0x70 [ 411.443517][ T31] ? __switch_to_asm+0x33/0x70 [ 411.443538][ T31] ? __pfx_kthread+0x10/0x10 [ 411.443566][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.443614][ T31] [ 411.758249][ T31] Kernel Offset: disabled [ 411.762586][ T31] Rebooting in 86400 seconds..