last executing test programs: 7m51.84458385s ago: executing program 4 (id=1147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x780080}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 7m51.560889087s ago: executing program 4 (id=1150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a3200000000090001d873797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 7m51.203362161s ago: executing program 4 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)='a', 0x1}], 0x1}, 0x4000001) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40, 0x0) close(r4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0xfffffda9, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xfffffffd, 0x5, 0x5, 0x9, 0x4, 0x9, 0xd, 0x1, 0x1, {0xffff3c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) r10 = socket(0xa, 0x3, 0xff) accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) setsockopt$inet6_int(r10, 0x29, 0x5, &(0x7f00000000c0)=0x80, 0x4) recvmmsg(r10, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m50.767346583s ago: executing program 4 (id=1154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) pread64(r1, 0x0, 0x0, 0x7) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x7, 0x300) close(r0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x3, 0x44002) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000480)={0x0, 0x2}, 0x8) sendmmsg$sock(r3, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0, 0x0, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8845) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="992e4b6b29e2aa6c0100000000fe54699b2c8f5faeff30f17032ea9a045e67f5"]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="100000000000000000000000000000001fe7ab460cf30eca767551ca50c2b0831936ebad93b717d42a0e8b73b955b95d3ad097635bcef16e60cdd665b90b312841b542e67baf64a986c120edbefe98f8806f30837f5408f58bde80ae4e54b3a3fdb12ae0f3e8cdba0bea7c35233e2bd0123e9930275e5b46d858212fc6259cc3a75fb5a1987f6b47703b20557c12b5ad69efe836cb6a5c82eec4b36f35ac4275e36fe22c732d0e5dec0cc45c8670f65db58f9d781096e0eaa51078823a6503a3ce5e38719b3cbbf2b0021ac5aad75dd207dddfc1d481e5"], 0x10}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000180)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010b525020004000000000000002400010109000409fb0e09058103ff030509ee00"/54], 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x13) ioctl$SIOCSIFHWADDR(r0, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 7m50.140022227s ago: executing program 4 (id=1159): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000280)="3fe35b4ed8bc5195d4759ed9876eca65e1c917e08ec8ba1d6c18709bb11f69d4be4fa5be30f66ac42960cbd739134b6a3f3964db811f825a9b9058be8caf8c2f202918868a37130301f180bb2c07d32413d6016aa6a69287409a4b88e5461d5ffc6b63fd945bda093ead6c9c3b31d9a57e14942889f4a8b39fee7da94c65c33b56e83c20ec3fa9c4", 0x88, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="27828da5eba558fed604ed06d023171c955c3e6fd005cee4fa732ca4af75555eca65619d00ac8ad673f611026a7ba585775528ebfa6e5bb0314aafad28599ba8617ea21ed23d7931da50e2d115bcbcac8380bbc8bb4fd63ad2e3b066bd9bccfce5ccf4c34bd9ed94f575408651ab7dbe02a5ba77ce3cfb41c2462de633b6e2a6d758c375cc275d17a87dba624411708c843005ad8a6a61d10cf34694ea1153f56d982c4b69062c33d720538003a7", 0xae}, {&(0x7f00000005c0)="919c4fd0e70a129298cfb4e937f9a75ad1862263dc22492053d5f3321cecda13b9737481", 0x24}], 0x2, 0x0, 0x0, 0x24000014}], 0x1, 0x20040811) socket$pppoe(0x18, 0x1, 0x0) 7m49.663364779s ago: executing program 4 (id=1164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x400}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000100), 0x4) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r2, 0x0) 7m48.931144573s ago: executing program 32 (id=1164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x400}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000100), 0x4) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r2, 0x0) 2m34.899289753s ago: executing program 5 (id=2667): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(0x0, 0x29, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) (async) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) (async) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mknod$loop(0x0, 0x1, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) (async) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) (async) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2m34.756911338s ago: executing program 5 (id=2670): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8000000204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x1, 0x0}) (async) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 2m33.739301923s ago: executing program 5 (id=2672): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f0000000940)={0xf010000, @sdr={0x20343059, 0x37f8}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(r6, r6, 0x80000) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) syz_emit_ethernet(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9, 0x1}, &(0x7f0000000300), &(0x7f0000000280)) 2m31.831517432s ago: executing program 5 (id=2679): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x3, r3}) 2m30.001405596s ago: executing program 5 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r6, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x4008010}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x400, 0x40, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/172, 0xac}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x1f, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x9082}, {r1, 0x800}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x2c, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0xd}, {0x10, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x44004) 2m27.999956096s ago: executing program 5 (id=2686): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4f, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x8}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) r2 = syz_clone(0x4000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0xe, &(0x7f0000000080)={0x7, 0x4, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0xcce01000) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000280)=""/245, 0xf5}, {0x0}], 0x2) read$usbmon(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x14) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x2, 0x35, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff7079000824d17a210126ff09058503"], 0x0) 2m12.602254124s ago: executing program 33 (id=2686): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4f, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x8}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) r2 = syz_clone(0x4000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0xe, &(0x7f0000000080)={0x7, 0x4, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0xcce01000) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000280)=""/245, 0xf5}, {0x0}], 0x2) read$usbmon(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x14) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x2, 0x35, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff7079000824d17a210126ff09058503"], 0x0) 38.86162921s ago: executing program 1 (id=3053): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) (async) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x4d) getdents(r1, &(0x7f0000000080)=""/255, 0xff) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x2b15, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000040), &(0x7f0000000280)) (async) r2 = syz_io_uring_setup(0x2b15, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1800010a}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3e8, 0x200, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000089}, 0x4000040) (async) sendmsg$AUDIT_GET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1800010a}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3e8, 0x200, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000089}, 0x4000040) io_uring_enter(r2, 0x3596, 0x0, 0x49, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000020010ac057302000000000001095686654300fd000009e4ff2001830002020921fe03000122050009058103ff03000003"], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000020010ac057302000000000001095686654300fd000009e4ff2001830002020921fe03000122050009058103ff03000003"], 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010118000057c25e3fb436426b855200000000001800000018000000040000000300000000000010040000000600dc92cb833fe1fa240000002e0000"], &(0x7f0000000ac0)=""/4096, 0x34, 0x1000, 0x0, 0x7, 0x10000}, 0x28) r8 = socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r9, &(0x7f00000004c0)=0x100000002eb4, 0x7ff) r10 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r10) fcntl$setstatus(r10, 0x4, 0x2c00) (async) fcntl$setstatus(r10, 0x4, 0x2c00) r11 = gettid() fcntl$setown(r10, 0x8, r11) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000010e4ffff0000000005ebff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffff8520000001010000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x205, 0xa1, &(0x7f0000000500)=""/161, 0x41100, 0x1c, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000680)={0x2006, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r9, r2, r10], &(0x7f0000000740)=[{0x5, 0x1, 0xa, 0xc}, {0x4, 0x5, 0x9, 0x7}, {0x4, 0x4, 0x10, 0x4}, {0x5, 0x8, 0xe, 0x8}, {0x0, 0x5, 0xc, 0xa}], 0x10, 0x7}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000380)) syz_usb_connect(0x5, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102100708"], 0x0) 37.498968468s ago: executing program 1 (id=3061): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x0, 0x5, 0xe, 0xf3, 0x2}], &(0x7f0000000080)='GPL\x00', 0x3, 0x64, &(0x7f00000000c0)=""/100, 0x41100, 0xd793e1e452cf553f, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x0, 0x2, 0xf, 0x9}, {0x2, 0x3, 0xf, 0x7}, {0x5, 0x1, 0xd, 0x5}, {0x2, 0x2, 0xa, 0x5}]}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000300)={0x7, 0x6, 0x2, {0x3, 0x3}, 0xdff6, 0x1}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x8a000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7c23, 0x1, 0x2, 0x531c032b93974408, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x1, 0x0, 0x1, 0x8, @void, @value, @value=r3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7c23, 0x1, 0x2, 0x531c032b93974408, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x1, 0x0, 0x1, 0x8, @void, @value, @value=r3}, 0x50) ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) (async) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000480)={0x0, 0x2, r4, 0x5033}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r3, 0x58, &(0x7f00000004c0)}, 0x10) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d04, &(0x7f0000000580)=0x49) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d04, &(0x7f0000000580)=0x49) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600), &(0x7f0000000640)=""/6, 0x6}) (async) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600), &(0x7f0000000640)=""/6, 0x6}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000006c0)={0xd6d1, 0x101, {}, {0x0}, 0xf0, 0x6f6}) ioprio_get$uid(0x0, r5) syz_open_dev$loop(&(0x7f0000000700), 0x8, 0x89901) (async) r6 = syz_open_dev$loop(&(0x7f0000000700), 0x8, 0x89901) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/vmcoreinfo', 0x181041, 0xd) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/vmcoreinfo', 0x181041, 0xd) r7 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key(&(0x7f0000000780)='id_resolver\x00', &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, r7) recvmsg(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000880)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000900)}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/1, 0x1}], 0x4}, 0x40010102) (async) recvmsg(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000880)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000900)}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/1, 0x1}], 0x4}, 0x40010102) io_uring_enter(r3, 0x1ba1, 0x5a2e, 0x12, &(0x7f0000001a40)={[0x9]}, 0x8) add_key(&(0x7f0000001a80)='ceph\x00', &(0x7f0000001ac0)={'syz', 0x0}, &(0x7f0000001b00), 0x0, r8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001b40)=@assoc_value, &(0x7f0000001b80)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x4a0, &(0x7f0000001bc0)={{0x12, 0x1, 0x110, 0x17, 0x69, 0x3b, 0x20, 0x124a, 0x4023, 0x3bd9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48e, 0x2, 0x8, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x4, 0xf, 0x9c, 0xa2, 0x27, 0xbc, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0x9, "e7969f"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x101, 0xfa44, 0x20, "841c3ebac59a9f12"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x30, 0x1, 0xcf, 0x3, "5d149e"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xb899, 0x7, 0x80, "7718408f9edd"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x40, 0x3, 0x6, 0x92, "d7"}]}, @hid_hid={0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x758}}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x2, 0x40, 0x1}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x7, 0xa, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x10, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x81, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3df, 0x4, 0x25, 0xbf}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xb3, 0x30, 0xff}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x0, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x9, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xaa, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd6, 0x550}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x3a, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x10}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xd3, 0x0, 0x7, [@generic={0xf1, 0x3, "e3cdb4ab811ca8308a0c0c9f5659b1172b268f0c3bb16ead24e244815a7c0f052048974390617ea6166639f5e66bb2c0803a494266006548d3707ca8300532a4921577f87e76f35369fa064613ddb37a2eb146aee4907594c8da6c39a7924063e0f8f5340b8de9371445bd1956ef9e912ab8bda432664f7321e2c9902d89bb72aa031b95c661e7739c626db6d19e82c456d7597a9d66e48775ae95340fe40ad856fceddd6a86ccd858d0324f017fd6de89b4a21babf90769215baf29d809d07f8d663da98a290ea4f3d2a7d8d16e56c71e7a8c5a4da8bd7d39d0135963ddc3fff998944fb1ebe27c3ba8fb7f1f9e02"}, @generic={0x85, 0x22, "67ee27251797b7dbd71bd7252fe7db0c879b139a59e38fdb77fd9de42cc6c5f019baec2a25c666901ef497ae4fcf0dbb48538c6089fc58d40467625da07c720b49500ad855d750a4dbac1f8dcc690562d2584c32b8f3b0e9633e7abb35f97e2d37bccf314a56ad6ec7ef03a39ae0cf88046a2bb730de1d8a8c750de3c77281d9763da6"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x0, 0x7d, 0x5, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x6, 0x80, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x4}]}}]}}, {{0x9, 0x4, 0xac, 0x1, 0x3, 0xe, 0x7f, 0x38, 0x0, [], [{{0x9, 0x5, 0x3, 0xc, 0x40, 0x0, 0x1, 0x1, [@generic={0xae, 0x21, "f739bdd083f0e0e9584107aa317e55744c11c484b818d819c40d415976b2772ac378328927337bb0a6b7d4669c4f2cb6da9ce1cd80e89322111c7b3312e8c0bfaa5acd30f2253c51a2afb744c86f87a308c599ed7e0fdf4b4f7dade6afad11adee23abd40d507329f127efdc779c9baa4476dd5c81304c9156697de42e4db96ab7c1c4c67cd4abdfc959593d1331e4d9ec0d10e05919f704c57ede3631523dbc3e71fa8a56e45bad10a04c22"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x9, 0xd2, 0x1, [@generic={0xbb, 0x30, "ead2a16a73eafe2bd7576b3e6c6e6fc92ab35188db99e2a8e1d034db098618be4a2a738b4203c1be6fd3c9d1f4b7bd0496da3cc25e7bf64a15f46b69fa3394db5abf57385cde3e88a7d57bd8be8ae233384c0b5c1908c9c4fb4048ea55f6d1162c71c7005b729d055f0da6fc8bb3e6e491b2b7b9f2afd06e2e99b78ecd6bcc4f9a22576a151eec0142bb69a36fed35ee3326b9309ccedeec0698d03a4739a96982f28a0d31aecce6343b77fab4cc73eb4f1f23fcea4e9952f3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1, 0x3a, 0xff, [@generic={0x56, 0xf, "47cae7076d1e57dc8686ddf2d7008c6ba18b8ee8cd3c7286c4cbb5390f33e398f5ecee1cdc538dcfecd576266cf29b63c019e50c7de73ae741331c84d4966c7ee2bc1400d8fbc04ae0bed4153a5e50de8e7a1950"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x3}]}}]}}]}}]}}, &(0x7f0000002500)={0xa, &(0x7f0000002080)={0xa, 0x6, 0x200, 0x2, 0x4, 0x9, 0x8, 0xff}, 0xd7, &(0x7f00000020c0)={0x5, 0xf, 0xd7, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0xe, 0x7}, @generic={0xcb, 0x10, 0xa, "f508444349669b22c4618200f8ab724875e7a3fa47f247ecbf636ce2b57cb141ac5e729d09a11449e1834e8731eca3e57d70ab6e6e5cd4b2d6a6ebc4214cf264be0370d9c445dd98f6019157e0a17b22623f49443ab199b7ff101e7ef29ff457e14748047662558f72abd1e27ee70f181acdc8ef42afe486c99e9b5abab26bf0873256284512895751cb8871d0f93f2574eb00651f6a4dd71253aaefdc466be433a8d0ea2ce19510eea4b9358862c5d122106352c59aa8f49af1711ddcf1941890f6b85523eb747a"}]}, 0x7, [{0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0xc07}}, {0xe6, &(0x7f0000002200)=@string={0xe6, 0x3, "ea761922a86cd5707e4c1660b6e5fd91d3e220061952b448728f54b2d7e049db76a646ea9d8b0f1dd0b032041d5ecc15522ee647e516c983e0904fba9a7eb01abf22242504f79acf0b55c57b1239e3e34231473ebed590dea9b5d824deb2be8044052cc830c615003eebdf52b5ec9f4426fd29407e26410d1c8b621150bf452c4367b4cbcee435b811113e49014f45e21574f9d26168931109ffd1a224c77b837c701721025efbf0057ad15db26cc1f1b10cc5cbc732f2b75af9341cbeb13f573d6d80e7e0e3133c6ee37c331f3b78ca4e2a58b0076d9a74d6e3b4893b102f56c81fb896"}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x480a}}, {0xd0, &(0x7f0000002340)=@string={0xd0, 0x3, "2e07feaadcd833e75d0cf8cde8a560e28dcc495766169eda9f5ad5d434ed7e8edb816f4aaf8e274e92857f25112001c5bc65e91c7f57f7e02f61c24d4bbe27115db40dc57421d12651c730772b2a09471c93699721e3873db65ca82a718ba8fde8c7745bc7d0c2255e09d3290198d3d9e9fac232dba9dcd594f058cbf9fee55f93d377e5b342735a02d4c811f30ad6d365313a4e64af42af9900f7e7571a95038f92de8a792d51e42d64835ab331a4498dd45d61b835ce4a488ebb417e019765852491baf8a550e52cdda8604fce"}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xfffe, 0xfa, 0x1, {0x22, 0x8ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x8, 0x5}}]}}}]}}]}}, &(0x7f0000002700)={0xa, &(0x7f00000025c0)={0xa, 0x6, 0x200, 0xf, 0x11, 0xd3, 0x40, 0x5}, 0x77, &(0x7f0000002600)={0x5, 0xf, 0x77, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xe, 0x2, 0x80}, @generic={0x50, 0x10, 0x3, "20f08229fe6ded14888cbf1b9b1f8ec6adf3fd66df1f30bf18a98a5159ebbfba512417bdfb153b6ea3012c77c63dc3b3c0139f655eafb2655bce6b52e6d45a1d2a4c051c33082fb84b952875b9"}, @ss_container_id={0x14, 0x10, 0x4, 0xc2, "9115d03fb1893d5f413ffd323cb690fd"}]}, 0x1, [{0x74, &(0x7f0000002680)=@string={0x74, 0x3, "6c2ae89c4594a7075953c6951f3d818d45da7d8e15cc1a8598b832d89d804eca9caded0f8d799f68e847b411569197656855f1dac128d718314f81d5a238da944ef0fbfb1044ee68046f2bb45f6dfa70160956dbe3dd47404c0d9057aa90262a8237b824d03154e1ac52c996e89920430d8d"}}]}) syz_clone(0x20000, &(0x7f0000002740)="835465a3585b2a32f73798f37e8f2b3964bbb730223854c03c2ad4b377370c7ed451972529c3ac2a9740c6fe824ff2f744fb645b9e4cc960de048f53eb2170059b5e19bd25ec29b005eb0ed3d43b7bdb767f724dc00b87bd7845b6f4edadf5cb13263f4a8ed060cf65ad794620f2892eef130b9cc6b0cd626ff8c2d22b22cfc9e4026e693dea9f4d019b91c04ad0", 0x8e, &(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)="802e35fb38b4d6925df0e29b9625f3c939b86795f53e84054b341abbf44074b629c1b84b234a237d8e01d1c081d306a22c82c5640bf7e3b0482d6c5a16b34e22f00173e4655feaf12b0f8155089f9980c1a2efd62dfc3524fa53609d07925f41ad10a88828eb45cd9eefc490f4bc316f771eac9fe1ecea43c19dd1e660f4164368e6b4a43254d99703fa8573fe75ceb7be3ecb93167f6f39bc1258ce10") 33.127689459s ago: executing program 1 (id=3073): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaabaaaaaa0806000608000604"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34774b70f9327f4e42b5e1040080006800010026bd7000ffffffff0a000000000000001800228014000500fe8000000000000000000000000000aa04000400"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40040d0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 32.854515179s ago: executing program 1 (id=3074): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400fbc935a095b94fa2434fdd7a968c93a4e0ade4e801000000000000001bc24e77aacbb4c1b30500d036763b96c7d631f21569991e13b069423fca419807f7552a1bf7c103d8298390909f1c29a05f5c84111e93def7b629f537e52f33668bf4af88a8f1bccaceb1bdd7f5404000006dca30828f5a069bd7c7454dc55ad19262565810dde895007fa8ac2bb85e02d1e93feb8b069c44b613a2a2a24ca00d47489c94f3cdf162f1de05de3ce7663df49704e31343565c9ae8df5a4d007e78571011c253da"], 0x0) socket(0x2, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\t', 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x802, r5, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) io_uring_setup(0xd3, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 30.303271802s ago: executing program 1 (id=3081): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000180)=0x100402, 0x4) recvmsg(r4, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000041000701fcffffff07000200000000000000fc8004000180"], 0x1c}}, 0x448d0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000003840)={0x18, 0x0, {0x1, @random, 'veth0_to_hsr\x00'}}, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000223803001c00128009000100766c616e000000000c000280060001001100000008000500", @ANYRES32=r8, @ANYBLOB="08191f0056c2f6954a", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2a05}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x83f5, 0x0, 0x3, 0x7e2}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x49, 0x1, 0x0, "4749570000000000000000000e00000008000000000000001400", 0x64737664}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x2c, @multicast2, 0x4e23, 0x3, 'dh\x00', 0x13, 0x400, 0x8006d}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) 27.679283316s ago: executing program 1 (id=3091): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04000400000000002c00128008000100677470002000028014000800200100000000000000000000000e00020500050000000000"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0x100c3}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = getpgrp(0xffffffffffffffff) sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6a6, 0x400, 0x94f, 0xfa11, 0xffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6700000100303afffe8000000000000000000000000000aaff02000000000000000000000000000102009078000000036d50a2a800052c01fe7d00000000000000000000000000aa00000000000000000000ffffac1e0001"], 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x80) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000004060a0b0400000000000000010000000000000080280001800d00010073796e70726f787900000000140002800600014000010000080003400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000002070601010000000000000000070000030500010007000000080006400000000377497575b3801b18a98ccb01b2a47723b81c184fddc766c95a9599352c00307bf0b9df6b008656a91b0870852aeab72ef0dd31db04da9ba28b4548bda102a2ee97dab43651e8f6fe2a542a0ed90032b84503d995bee96ab8e32e24e8bb37161bb0949fca148d5abee3c444394b6ceabb2204071357ee957a0789fb5d5472ba51414ca15ce60ab2f749639b4ddaaaf64bdefa1eb3377a157297"], 0x24}, 0x1, 0x0, 0x0, 0x58040}, 0x0) 12.252963318s ago: executing program 34 (id=3091): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04000400000000002c00128008000100677470002000028014000800200100000000000000000000000e00020500050000000000"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0x100c3}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = getpgrp(0xffffffffffffffff) sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6a6, 0x400, 0x94f, 0xfa11, 0xffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd6700000100303afffe8000000000000000000000000000aaff02000000000000000000000000000102009078000000036d50a2a800052c01fe7d00000000000000000000000000aa00000000000000000000ffffac1e0001"], 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x80) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000004060a0b0400000000000000010000000000000080280001800d00010073796e70726f787900000000140002800600014000010000080003400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000002070601010000000000000000070000030500010007000000080006400000000377497575b3801b18a98ccb01b2a47723b81c184fddc766c95a9599352c00307bf0b9df6b008656a91b0870852aeab72ef0dd31db04da9ba28b4548bda102a2ee97dab43651e8f6fe2a542a0ed90032b84503d995bee96ab8e32e24e8bb37161bb0949fca148d5abee3c444394b6ceabb2204071357ee957a0789fb5d5472ba51414ca15ce60ab2f749639b4ddaaaf64bdefa1eb3377a157297"], 0x24}, 0x1, 0x0, 0x0, 0x58040}, 0x0) 11.432559902s ago: executing program 0 (id=3148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100009}, {0xa, 0x4e1f, 0x0, @mcast1, 0x5}, r2, 0x80}}, 0x48) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x10, 0x6, 0x6}, {0x0, 0x3, 0x1, 0x8ec}, {0x7fff, 0x2, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x1fd, 0x0, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) 10.955192795s ago: executing program 0 (id=3150): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2e99}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7cd9}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x100}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x20000002) poll(0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x24c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x0, 0x3, 0x0, {0x100000001, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x8f3, 0x9}}, @NL80211_ATTR_KEYS={0x208, 0x51, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x9, 0x4, "a232f68d94"}, @NL80211_KEY_SEQ={0x6, 0x4, "34e4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "294100e20f"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "e704c351a98ed3bd"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cbc2e4ad44c296ca72b9af73ed"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4532ced439"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xe, 0x4, "86182a0cb388d5a10ddb"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "4c487a1c00bd6ee861"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3fe94b8507e6c9b8bcf70833ca"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d6f7cc93a895700c77cae91d7a"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xa, 0x4, "0f63c633932b"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "70cd77d5d2f2bc65128e16a148"}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8050}, 0x4044840) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc) 8.354525112s ago: executing program 0 (id=3157): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0), 0x1a000}}], 0x48}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x49, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x2}, {0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x0, 0x800003}], 0x9, 0xbe, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) 8.139232467s ago: executing program 0 (id=3159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x78, 0x53, 0x24, 0x20, 0x2013, 0x8461, 0x4dc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd2, 0x1, 0x2, 0xb9, 0x98, 0xe2, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x84, 0x2, 0x10, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x81a, 0x0, 0x476, 0x9}, 0x14) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '/dev/input/event#\x00', 0x20, 0x3, 0x20, [0x62, 0x38, 0x64, 0x31, 0x61, 0x64, 0x34]}, 0x46, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x11, 0x2}, @cond=[{0x1ff, 0x5388, 0x10, 0x800, 0xc7, 0x7}, {0x2, 0x5, 0x8, 0x4a, 0x6, 0x7}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 8.000885828s ago: executing program 2 (id=3160): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x4, {{0xa, 0x4e20, 0x8, @mcast1, 0x1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x200000}}, {{0xa, 0x4e20, 0xffffffee, @empty}}}, 0x108) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x80, 0x5, 0x3}) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) 6.691192855s ago: executing program 3 (id=3165): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009000)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/17, 0x11}], 0x1, &(0x7f0000000500)=""/11, 0xb}, 0x10}, {{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000680)=""/146, 0x92}, {&(0x7f0000000740)=""/95, 0x5f}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x5}, 0x1ff}, {{&(0x7f0000003900)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003980)=""/142, 0x8e}, {&(0x7f0000003a40)=""/119, 0x77}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000003ac0)}, {&(0x7f0000003b00)=""/176, 0xb0}, {&(0x7f0000003bc0)=""/110, 0x6e}], 0x6, &(0x7f0000003cc0)=""/161, 0xa1}, 0x3}, {{&(0x7f0000003d80)=@nl, 0x80, &(0x7f00000040c0), 0x0, &(0x7f0000004100)=""/173, 0xad}, 0xfffffff8}, {{&(0x7f00000041c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/129, 0x81}], 0x1}, 0xfffffb83}, {{&(0x7f0000004340)=@xdp, 0x80, &(0x7f0000006880)=[{&(0x7f0000009200)=""/4106, 0x100a}, {&(0x7f00000053c0)=""/151, 0x97}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/189, 0xbd}, {&(0x7f0000006540)=""/192, 0xc0}, {&(0x7f0000006600)=""/136, 0x88}, {&(0x7f00000066c0)=""/222, 0xde}, {&(0x7f00000067c0)=""/133, 0x85}], 0x8, &(0x7f0000006900)=""/119, 0x7b}, 0x1ff}, {{&(0x7f0000006980), 0xffffffffffffffa8, &(0x7f0000007d00)=[{&(0x7f0000006a00)=""/105, 0x69}, {&(0x7f0000006a80)=""/239, 0xef}, {&(0x7f0000006b80)=""/212, 0xd4}, {&(0x7f0000006c80)=""/4086, 0x1000}, {&(0x7f0000007c80)=""/22, 0x16}, {&(0x7f0000007cc0)=""/49, 0x31}], 0x6, &(0x7f0000007d80)=""/190, 0xbe}, 0x1}, {{&(0x7f0000007e40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007ec0)=""/168, 0xa8}, {&(0x7f0000007f80)=""/57, 0x39}], 0x2, &(0x7f0000008000)=""/4096, 0x1000}, 0x3}], 0x8, 0x10002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x21, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x300, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x10}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.787502755s ago: executing program 3 (id=3168): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31032abd4e000000000009000000080041bf", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x60008001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c104) 5.724708556s ago: executing program 3 (id=3169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0xb7, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fc942010402080c0e6a9010203010902a50001014000000904140200fcaca0fd0724060000f02405240005000d240f015d488213c0ff0100694424130898971bcde74e231f41f3897dcfcc0876ece62cbe06f0711307b27c5dfb62dee0f43123c7acf903f838bb32fb167cba2f3df7c30ac5fbe0c713903111f297a8a936246d6f612d8e6981d2e0bc05972e823dde133c048d0226cd0459a249dc51b99c1c84a3f83487c67d3244b76612a5d20c830253b8f4"], 0x0) ioctl$EVIOCGBITSW(r0, 0x80085502, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4000010, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000040)=0x5734, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3d5}, 0x1c) sendto$inet6(r8, &(0x7f0000000440)="2fd8", 0x2, 0x24000000, 0x0, 0x0) recvfrom(r6, 0x0, 0x0, 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r3, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @time={0x6, 0x80}, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 5.594066904s ago: executing program 6 (id=3170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="f081550100a000000f0100650f011f45000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f20c035f70000000f22c067420f01c3460f79c20cb8c09787678eef66ba64450f6b020ced45c194710a00000005c68244bcae009066ba420066ed", 0x67}], 0x1, 0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000001400)={0x28, 0x0, 0x0, @host}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x874fd42a7836ef6f, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = accept4$inet(r5, &(0x7f0000000080), &(0x7f0000000140)=0x10, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000, 0x0, &(0x7f0000001340)=""/161, 0xa1}, 0x0) 5.18659679s ago: executing program 6 (id=3172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 4.769682713s ago: executing program 0 (id=3173): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000033c0)={0x480, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x2, {{0xa, 0x4e23, 0xfe39, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e20, 0x3, @loopback, 0x48a}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}, 0x338}], 0x1, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "9d828640e9a3d6a01f2a925e53fa6df96549aaed9f7cc1112960755b257bea21", "5e223921bd72c162fae94cc048db4fa0", {"04bc2f5475fde18bcc4cefcbbddc13a8", "f8a33bdf9b6d38a195f092e8a8c26ac4"}}}}}}}, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r3, 0x0, 0x3a) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) fcntl$setpipe(r6, 0x407, 0x95ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x91, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.667381471s ago: executing program 2 (id=3174): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) (async) madvise(&(0x7f00004e1000/0x3000)=nil, 0x3000, 0x12) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES64=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)=r3}, 0x20) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x13) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004011) 4.504807742s ago: executing program 6 (id=3175): fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000004, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.061035656s ago: executing program 6 (id=3176): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600240, 0x0) 4.005374425s ago: executing program 7 (id=3177): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020800000400000001000000090001000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.850126862s ago: executing program 6 (id=3178): r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000480)={'\x00', 0x2e9, 0x3, 0x0, 0x3, 0x80000001, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000002000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"/288], 0x254}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x2, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 3.46317887s ago: executing program 2 (id=3179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newtaction={0xb4, 0x32, 0x1, 0x70bd2b, 0x255fdbfb, {}, [{0xa0, 0x1, [@m_gact={0x9c, 0x1, 0x0, 0x0, {{0x9, 0x20}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0x10000, 0xe4, 0x2, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x5, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x0, 0x8, 0x2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x1d1, 0x8, 0x0, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20d2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2000c804) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[0x0, 0x0]}, 0x0, 0x0) getpgrp(0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) syz_io_uring_setup(0x1437, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x0, 0x40000333}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r11 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r11, 0x5646, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000380)=0x14) 3.2203022s ago: executing program 3 (id=3180): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="c4c1792e5b00b93d030000b80f00000066baf80cb814468282ef66bafc0cec0f30c4e3f917d3223e0f0766baf80cb8f12a7d82ef66bafc0cecfafaf54fb0b97c0ac4c37d1d61a2000832660fe08afcffffff0fc76e000fc73a", 0x59}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000b0000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.053864766s ago: executing program 7 (id=3181): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.053053375s ago: executing program 3 (id=3182): syz_open_dev$video(0x0, 0x3ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40025b0c, 0x0) 2.719421136s ago: executing program 7 (id=3183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$setperm(0x5, r2, 0x4000200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, 0x0) 2.392032333s ago: executing program 2 (id=3184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r7 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) read$FUSE(r10, &(0x7f0000002640)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.359471844s ago: executing program 7 (id=3185): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 1.943304966s ago: executing program 7 (id=3186): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, &(0x7f0000002a40)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x0, 0x80800) pselect6(0x40, &(0x7f0000000080)={0x9692, 0x0, 0x0, 0x0, 0x800, 0x3, 0x3f9, 0x49}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{0x0, 0x10000, 0x3, 0x0, 0x6, 0x3, 0xff, 0x4, 0xf2, 0x0, 0x7}, {0x2, 0xeeee0000, 0x0, 0x7, 0x3, 0x6, 0xb, 0x0, 0x2d, 0x41, 0x3, 0x81}, {0x80a0000, 0x9bb5544131412ca5, 0xa, 0xac, 0x0, 0x2, 0x5, 0x57, 0x9, 0x1, 0x80, 0x10}, {0xffff1000, 0x10000, 0xf, 0xd5, 0x6, 0x4, 0x0, 0x96, 0xfd, 0x1, 0x1f, 0x5}, {0x10000, 0x3000, 0x0, 0x4, 0x7, 0x6, 0xfa, 0x6, 0x9, 0x7, 0x9, 0x2}, {0xffff1004, 0x2000, 0x14, 0xd, 0x6, 0x7, 0x8, 0xe7, 0xfa, 0x8, 0x3, 0x5}, {0x4, 0xeeee8000, 0xb, 0x23, 0x5, 0x6, 0x5, 0x65, 0xc, 0x8, 0xc1, 0x1}, {0x2, 0xeeee8000, 0x8, 0x9, 0x7, 0x4, 0xeb, 0x4, 0x3, 0x0, 0x8, 0xec}, {0x8000000, 0x401}, {0xffff1000, 0x401}, 0xe001003c, 0x0, 0x5000, 0x10000, 0xd, 0x4000, 0x8080000, [0xc, 0x2, 0x6, 0x1000]}) 1.786524584s ago: executing program 6 (id=3187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910", @ANYRES16=r0], 0x0) 976.022327ms ago: executing program 0 (id=3188): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x3f4, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x7c}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_TX_RATES={0x3a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x2}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x3}, {0x4, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x49, 0x8, 0x7f, 0x5, 0xfb79, 0x0, 0xd00, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb0, 0x8001, 0x20, 0x5, 0x79, 0x1ff, 0x7, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x7}, {0x3}, {0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x6}, {0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {}, {0x5, 0x6}, {0x4, 0x6}, {0x5, 0xa}, {0x0, 0x3}, {0x2, 0x7}, {0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x5, 0x48, 0x48, 0x16, 0x56, 0x3, 0x5, 0x2, 0x8a51038e8b7b3eba, 0x16, 0x2, 0x1b, 0x18, 0xc, 0x30, 0x3, 0x36, 0x2, 0x30, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xfff8, 0x1, 0x9, 0x3, 0xfb, 0x6, 0x4]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xffff, 0x8, 0xb, 0x8, 0x7f, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x831, 0x6, 0x4, 0x6, 0x400, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x5}, {0x6, 0x6}, {0x3, 0x8}, {0x5, 0x7}, {0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x2, 0x9}, {0x3, 0x2}, {0x5, 0x8}, {0x7, 0xa}, {0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x3}, {0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xde, 0x0, 0x9, 0x9, 0x8, 0x3ff, 0x3]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x7fff, 0x8000, 0x0, 0x64, 0x5, 0x80]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x0, 0x0, 0x5, 0x9, 0x18, 0xb1d3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xa2, 0x1, 0x7, 0x6, 0x1, 0x1ff, 0xf800]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x1, 0x6, 0x6, 0x7, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x2}, {0x7}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x6}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x6, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x7}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2}, {0x1, 0x6}, {0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x3, 0x8, 0x2, 0x6, 0x48]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x99, 0x85, 0x4, 0x7, 0xd]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x8}, {0x4, 0x1}, {0x5, 0x4}, {0x2, 0x2}, {0x7, 0x15}, {0x0, 0x1}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe242, 0x100, 0x8, 0x7ff, 0x3, 0x9dd3, 0x7, 0x6]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8a55, 0x1ce, 0x0, 0x3ff, 0x2, 0xc, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x2, 0x5, 0x4, 0x915, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x96, 0x7, 0x5, 0x6, 0x0, 0x2b1, 0x6, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x6}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x18, 0xb, 0x7a, 0xc, 0x4, 0x49121a2edf42d179, 0x0, 0x16, 0xf, 0x12, 0x30, 0x16, 0x6c, 0x1, 0x1b, 0xc, 0x71, 0x16, 0x16, 0x2, 0x6, 0x2, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x48, 0x5c, 0x8fb36a04b39eee22, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7fff, 0x4, 0xfff, 0x7, 0x9, 0x80, 0x7fff]}}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xd, 0x24, [{0x1, 0x1}, {0x16, 0x1}, {0xb}, {0x3}, {0x9}, {0xb}, {0x36}, {0xb, 0x1}, {0xc, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000008}, 0x24082859) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xa6) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x9, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) close_range(r1, r0, 0x2) sendfile(r1, r1, 0x0, 0x9) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}]}}}]}, 0x4c}}, 0x40000) 905.09278ms ago: executing program 2 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, {[0x7, 0xbb, 0x7, 0x1, 0x6, 0x2, 0x9, 0x5]}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)=@arm64) 763.338837ms ago: executing program 2 (id=3190): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) close_range(0xffffffffffffffff, r5, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write(r10, &(0x7f0000000480)="13e58b1d19968e2371f140e885025118d901dfa9927a6c842062c1056392f2724c4dd028cd0472b7aba47c18117fe264910b60f4c241b2abd9030b296fa44c63c1b0163bef8c4bc234538b4d22dfcac9674563ed5e143ff1941c09b58535a14d022c50ab31118b8251607b8027ba9f23c3489ba2f17f37425b50ca050351e376c0a95977e89a1f491e72decec5eeed61d0d655923886e855ca7b81311f94a979d48433198099631e0f1575e4631f7d0dd573e716a9ea4c686dd2c126ad9df96aa37b24f2af1a1ed61e0a24b913339af69aff5a46ae82e22b960f2be4a90c5512acaa1f97cce235a004", 0xe9) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 473.944316ms ago: executing program 3 (id=3191): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x543802) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000140)={0xdd8, 0x3, 0x1, 0x7, 0x5, 0xffff0072, "d416aec2f81946b43656adcd4a02ed9d", 0x4, 0x0, 0xf, 0x81, 0x3, 0x61, 0x2}) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x4000080) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0xec9}, 0x44}, 0x10) 0s ago: executing program 7 (id=3193): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): [T16543] ? aa_sock_msg_perm+0xf1/0x1d0 [ 713.832033][T16543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.832055][T16543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.832073][T16543] __sock_sendmsg+0x21c/0x270 [ 713.832099][T16543] ____sys_sendmsg+0x52d/0x830 [ 713.832123][T16543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.832150][T16543] ? import_iovec+0x74/0xa0 [ 713.832176][T16543] ___sys_sendmsg+0x21f/0x2a0 [ 713.832215][T16543] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.832266][T16543] ? __fget_files+0x2a/0x420 [ 713.832283][T16543] ? __fget_files+0x3a0/0x420 [ 713.832308][T16543] __sys_sendmmsg+0x227/0x430 [ 713.832330][T16543] ? __pfx___sys_sendmmsg+0x10/0x10 [ 713.832357][T16543] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 713.832397][T16543] ? ksys_write+0x22a/0x250 [ 713.832423][T16543] ? __pfx_ksys_write+0x10/0x10 [ 713.832452][T16543] __x64_sys_sendmmsg+0xa0/0xc0 [ 713.832472][T16543] do_syscall_64+0xfa/0xfa0 [ 713.832493][T16543] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.832515][T16543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.832531][T16543] ? clear_bhb_loop+0x60/0xb0 [ 713.832550][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.832567][T16543] RIP: 0033:0x7fdf3298efc9 [ 713.832583][T16543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.832598][T16543] RSP: 002b:00007fdf338e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 713.832626][T16543] RAX: ffffffffffffffda RBX: 00007fdf32be5fa0 RCX: 00007fdf3298efc9 [ 713.832640][T16543] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 713.832653][T16543] RBP: 00007fdf338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 713.832665][T16543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.832676][T16543] R13: 00007fdf32be6038 R14: 00007fdf32be5fa0 R15: 00007fdf32d0fa28 [ 713.832706][T16543] [ 714.200453][ T983] usb 4-1: 0:2 : does not exist [ 714.202553][ T6015] usb 2-1: USB disconnect, device number 110 [ 714.250676][ T983] usb 4-1: unit 5: unexpected type 0x0c [ 714.364231][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.401858][ T983] usb 4-1: USB disconnect, device number 111 [ 714.593740][ T7024] udevd[7024]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 714.596177][T16550] netlink: 'syz.0.2792': attribute type 2 has an invalid length. [ 714.633658][T16550] netlink: 'syz.0.2792': attribute type 1 has an invalid length. [ 714.679027][T16550] netlink: 'syz.0.2792': attribute type 1 has an invalid length. [ 714.706224][T16550] netlink: 'syz.0.2792': attribute type 3 has an invalid length. [ 714.715604][T16554] support for the xor transformation has been removed. [ 714.723632][T16550] netlink: 'syz.0.2792': attribute type 3 has an invalid length. [ 714.773603][T16550] netlink: 'syz.0.2792': attribute type 2 has an invalid length. [ 714.792877][T16550] netlink: 'syz.0.2792': attribute type 1 has an invalid length. [ 714.805614][T16550] netlink: 'syz.0.2792': attribute type 2 has an invalid length. [ 715.184853][ T983] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 715.295011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.303694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.312286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.320865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.329484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.338091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.346566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.355067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.363538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.372512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.393520][ T983] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 715.404960][ T983] usb 2-1: config 0 has no interface number 0 [ 715.411486][ T983] usb 2-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 715.514415][ T983] usb 2-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 715.548661][ T983] usb 2-1: config 0 interface 49 has no altsetting 0 [ 715.587883][ T983] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 715.747599][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.798222][ T983] usb 2-1: config 0 descriptor?? [ 716.037858][ T983] usb 2-1: string descriptor 0 read error: -32 [ 716.052470][ T983] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 716.294449][ T983] gspca_stv06xx: I2C: Read error writing address: -71 [ 716.349063][ T983] usb 2-1: USB disconnect, device number 111 [ 716.889214][T16578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.036934][T16578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.195209][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.203427][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.436731][ T983] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 717.618512][ T983] usb 4-1: config 13 has an invalid interface number: 100 but max is 1 [ 717.630140][ T983] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 718.285669][ T6015] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 718.313783][ T983] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 718.385528][ T983] usb 4-1: config 13 has no interface number 0 [ 718.391828][ T983] usb 4-1: config 13 interface 100 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 718.509700][ T983] usb 4-1: config 13 interface 100 has no altsetting 0 [ 718.554996][T16183] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 718.754750][T16183] usb 3-1: Using ep0 maxpacket: 32 [ 718.766243][T16183] usb 3-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 718.775800][T16183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.784097][T16183] usb 3-1: Product: syz [ 718.797816][T16183] usb 3-1: Manufacturer: syz [ 718.826701][T16183] usb 3-1: SerialNumber: syz [ 718.871424][T16183] usb 3-1: config 0 descriptor?? [ 719.070072][ T983] usb 4-1: string descriptor 0 read error: -22 [ 719.083547][ T983] usb 4-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 719.094408][T16611] FAULT_INJECTION: forcing a failure. [ 719.094408][T16611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.125232][T16611] CPU: 1 UID: 0 PID: 16611 Comm: syz.6.2811 Not tainted syzkaller #0 PREEMPT(full) [ 719.125261][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 719.125273][T16611] Call Trace: [ 719.125281][T16611] [ 719.125290][T16611] dump_stack_lvl+0x189/0x250 [ 719.125320][T16611] ? __pfx____ratelimit+0x10/0x10 [ 719.125345][T16611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.125368][T16611] ? __pfx__printk+0x10/0x10 [ 719.125388][T16611] ? __might_fault+0xb0/0x130 [ 719.125422][T16611] should_fail_ex+0x414/0x560 [ 719.125452][T16611] _copy_from_iter+0x1de/0x1790 [ 719.125479][T16611] ? rcu_is_watching+0x15/0xb0 [ 719.125504][T16611] ? kmalloc_reserve+0xbd/0x290 [ 719.125530][T16611] ? __pfx__copy_from_iter+0x10/0x10 [ 719.125551][T16611] ? __build_skb_around+0x262/0x3f0 [ 719.125579][T16611] ? netlink_sendmsg+0x642/0xb30 [ 719.125595][T16611] ? skb_put+0x11b/0x210 [ 719.125615][T16611] netlink_sendmsg+0x6b2/0xb30 [ 719.125642][T16611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.125662][T16611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 719.125688][T16611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 719.125706][T16611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.125724][T16611] __sock_sendmsg+0x21c/0x270 [ 719.125750][T16611] ____sys_sendmsg+0x52d/0x830 [ 719.125774][T16611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.125802][T16611] ? import_iovec+0x74/0xa0 [ 719.125827][T16611] ___sys_sendmsg+0x21f/0x2a0 [ 719.125848][T16611] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.125906][T16611] ? __fget_files+0x2a/0x420 [ 719.125923][T16611] ? __fget_files+0x3a0/0x420 [ 719.125949][T16611] __sys_sendmmsg+0x227/0x430 [ 719.125973][T16611] ? __pfx___sys_sendmmsg+0x10/0x10 [ 719.126001][T16611] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 719.126042][T16611] ? ksys_write+0x22a/0x250 [ 719.126069][T16611] ? __pfx_ksys_write+0x10/0x10 [ 719.126097][T16611] __x64_sys_sendmmsg+0xa0/0xc0 [ 719.126118][T16611] do_syscall_64+0xfa/0xfa0 [ 719.126137][T16611] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.126158][T16611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.126176][T16611] ? clear_bhb_loop+0x60/0xb0 [ 719.126196][T16611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.126213][T16611] RIP: 0033:0x7f23a278efc9 [ 719.126229][T16611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.126245][T16611] RSP: 002b:00007f23a3683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 719.126262][T16611] RAX: ffffffffffffffda RBX: 00007f23a29e6090 RCX: 00007f23a278efc9 [ 719.126274][T16611] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 719.126286][T16611] RBP: 00007f23a3683090 R08: 0000000000000000 R09: 0000000000000000 [ 719.126298][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.126310][T16611] R13: 00007f23a29e6128 R14: 00007f23a29e6090 R15: 00007f23a2b0fa28 [ 719.126340][T16611] [ 719.420609][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.462269][ T983] option 4-1:13.100: GSM modem (1-port) converter detected [ 719.579654][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 719.595384][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 719.605779][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 719.614930][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 719.639420][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 719.756563][T13707] bond0 (unregistering): Released all slaves [ 719.775999][ T5836] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 719.898051][T11345] @ (unregistering): left allmulticast mode [ 719.941378][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.957124][ T5836] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 719.982583][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 720.013131][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.027476][ T5836] usb 2-1: config 0 descriptor?? [ 720.471447][T16615] chnl_net:caif_netlink_parms(): no params data found [ 720.495200][ C1] net_ratelimit: 92 callbacks suppressed [ 720.495222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.649337][ T5836] usbhid 2-1:0.0: can't add hid device: -71 [ 720.933488][T16183] usb 3-1: USB disconnect, device number 51 [ 721.113071][ T5836] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 721.243353][ T5836] usb 2-1: USB disconnect, device number 112 [ 721.320885][T16615] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.328279][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.337122][T16615] bridge_slave_0: entered allmulticast mode [ 721.344108][T16183] usb 4-1: USB disconnect, device number 112 [ 721.353527][T16183] option 4-1:13.100: device disconnected [ 721.393664][T16615] bridge_slave_0: entered promiscuous mode [ 721.406140][T16632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2816'. [ 721.426082][T16615] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.433469][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.465128][T16615] bridge_slave_1: entered allmulticast mode [ 721.489886][T16615] bridge_slave_1: entered promiscuous mode [ 721.497026][T16631] netlink: 'syz.2.2815': attribute type 10 has an invalid length. [ 721.590398][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 721.639654][T16631] bridge0: port 3(macsec0) entered disabled state [ 721.646460][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.654066][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.678572][T16631] bridge0: port 3(macsec0) entered blocking state [ 721.685176][T16631] bridge0: port 3(macsec0) entered forwarding state [ 721.693043][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.700256][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.707660][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.714896][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.776156][ T5832] Bluetooth: hci6: command tx timeout [ 721.939925][T16631] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 721.965525][T16636] macsec0: left allmulticast mode [ 721.973262][T16636] veth1_macvtap: left allmulticast mode [ 721.980017][T16636] macsec0: left promiscuous mode [ 721.985787][T16636] bridge0: port 3(macsec0) entered disabled state [ 722.045056][T16636] bridge_slave_1: left allmulticast mode [ 722.069589][T16636] bridge_slave_1: left promiscuous mode [ 722.086893][T16636] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.174296][T16636] bridge_slave_0: left allmulticast mode [ 722.186737][T16636] bridge_slave_0: left promiscuous mode [ 722.215961][T16636] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.451011][T16636] bond0: (slave bridge0): Releasing backup interface [ 722.458748][ T30] audit: type=1326 audit(1761723639.511:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 722.687180][ T30] audit: type=1326 audit(1761723639.511:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 722.735374][ T30] audit: type=1326 audit(1761723639.511:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 722.878455][ T30] audit: type=1326 audit(1761723639.511:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 722.881351][T16615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.981433][ T30] audit: type=1326 audit(1761723639.521:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 723.043108][T16615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.356069][ T30] audit: type=1326 audit(1761723639.521:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 723.483726][ T30] audit: type=1326 audit(1761723639.521:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 723.597392][T16615] team0: Port device team_slave_0 added [ 723.616286][T16615] team0: Port device team_slave_1 added [ 723.705023][ T30] audit: type=1326 audit(1761723639.521:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 723.748399][ T30] audit: type=1326 audit(1761723639.521:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 723.804935][ T30] audit: type=1326 audit(1761723639.521:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.1.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 723.836266][T16657] FAULT_INJECTION: forcing a failure. [ 723.836266][T16657] name failslab, interval 1, probability 0, space 0, times 0 [ 723.855092][ T5832] Bluetooth: hci6: command tx timeout [ 723.864901][T16657] CPU: 0 UID: 0 PID: 16657 Comm: syz.2.2822 Not tainted syzkaller #0 PREEMPT(full) [ 723.864926][T16657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 723.864938][T16657] Call Trace: [ 723.864945][T16657] [ 723.864955][T16657] dump_stack_lvl+0x189/0x250 [ 723.864984][T16657] ? __pfx____ratelimit+0x10/0x10 [ 723.865007][T16657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.865031][T16657] ? __pfx__printk+0x10/0x10 [ 723.865054][T16657] ? __lock_acquire+0xab9/0xd20 [ 723.865079][T16657] should_fail_ex+0x414/0x560 [ 723.865110][T16657] should_failslab+0xa8/0x100 [ 723.865131][T16657] kmem_cache_alloc_noprof+0x74/0x6e0 [ 723.865155][T16657] ? skb_clone+0x212/0x3a0 [ 723.865180][T16657] skb_clone+0x212/0x3a0 [ 723.865204][T16657] __netlink_deliver_tap+0x404/0x850 [ 723.865243][T16657] ? netlink_deliver_tap+0x2e/0x1b0 [ 723.865269][T16657] netlink_deliver_tap+0x19c/0x1b0 [ 723.865295][T16657] netlink_unicast+0x7fa/0x9e0 [ 723.865326][T16657] ? __pfx_netlink_unicast+0x10/0x10 [ 723.865351][T16657] ? netlink_sendmsg+0x642/0xb30 [ 723.865367][T16657] ? skb_put+0x11b/0x210 [ 723.865394][T16657] netlink_sendmsg+0x805/0xb30 [ 723.865472][T16657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.865493][T16657] ? aa_sock_msg_perm+0xf1/0x1d0 [ 723.865520][T16657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.865537][T16657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.865556][T16657] __sock_sendmsg+0x21c/0x270 [ 723.865583][T16657] ____sys_sendmsg+0x52d/0x830 [ 723.865608][T16657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.865636][T16657] ? import_iovec+0x74/0xa0 [ 723.865661][T16657] ___sys_sendmsg+0x21f/0x2a0 [ 723.865682][T16657] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.865732][T16657] ? __fget_files+0x2a/0x420 [ 723.865749][T16657] ? __fget_files+0x3a0/0x420 [ 723.865777][T16657] __sys_sendmmsg+0x227/0x430 [ 723.865803][T16657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 723.865831][T16657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 723.865874][T16657] ? ksys_write+0x22a/0x250 [ 723.865900][T16657] ? __pfx_ksys_write+0x10/0x10 [ 723.865930][T16657] __x64_sys_sendmmsg+0xa0/0xc0 [ 723.865951][T16657] do_syscall_64+0xfa/0xfa0 [ 723.865973][T16657] ? lockdep_hardirqs_on+0x9c/0x150 [ 723.865995][T16657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.866012][T16657] ? clear_bhb_loop+0x60/0xb0 [ 723.866034][T16657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.866053][T16657] RIP: 0033:0x7fdf3298efc9 [ 723.866070][T16657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.866086][T16657] RSP: 002b:00007fdf338c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 723.866105][T16657] RAX: ffffffffffffffda RBX: 00007fdf32be6090 RCX: 00007fdf3298efc9 [ 723.866119][T16657] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 723.866133][T16657] RBP: 00007fdf338c6090 R08: 0000000000000000 R09: 0000000000000000 [ 723.866144][T16657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.866155][T16657] R13: 00007fdf32be6128 R14: 00007fdf32be6090 R15: 00007fdf32d0fa28 [ 723.866187][T16657] [ 724.190154][T16615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.197270][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.223512][T16615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.366452][T16615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.373534][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.401753][T16615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.526361][T16615] hsr_slave_0: entered promiscuous mode [ 724.533057][T16615] hsr_slave_1: entered promiscuous mode [ 724.539775][T16615] debugfs: 'hsr0' already exists in 'hsr' [ 724.545709][T16615] Cannot create hsr debugfs directory [ 725.643494][T16615] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.745291][ T6015] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 725.830939][T16615] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.934873][ T5832] Bluetooth: hci6: command tx timeout [ 725.943030][ T6015] usb 2-1: config index 0 descriptor too short (expected 56569, got 18) [ 725.974867][ T6015] usb 2-1: config 80 has too many interfaces: 179, using maximum allowed: 32 [ 726.028245][T16615] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.058676][ T6015] usb 2-1: config 80 has an invalid descriptor of length 0, skipping remainder of the config [ 726.094887][ T6015] usb 2-1: config 80 has 0 interfaces, different from the descriptor's value: 179 [ 726.131614][ T6015] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 8.ad [ 726.173402][ T6015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.239160][T16615] .`: (slave netdevsim0): Releasing backup interface [ 726.318488][T16615] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.428345][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2830'. [ 726.444869][ T6015] usb 2-1: string descriptor 0 read error: -71 [ 726.507122][ T6015] usb 2-1: USB disconnect, device number 113 [ 726.876942][T16615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 726.899372][T16615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 726.963956][T16615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.135581][T16695] binder: 16692:16695 ioctl c0306201 2000000001c0 returned -14 [ 727.248482][T16615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.355656][T16700] IPVS: set_ctl: invalid protocol: 50 172.20.20.51:20002 [ 728.015255][ T5832] Bluetooth: hci6: command tx timeout [ 728.020927][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 728.020939][ T30] audit: type=1326 audit(1761723645.161:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 728.325490][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.364499][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.412610][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.419814][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.490974][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.498205][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.724403][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.749032][ T30] audit: type=1326 audit(1761723645.901:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 728.906009][T16615] veth0_vlan: entered promiscuous mode [ 728.933438][T16615] veth1_vlan: entered promiscuous mode [ 728.974818][ T30] audit: type=1326 audit(1761723645.901:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.062623][T16615] veth0_macvtap: entered promiscuous mode [ 729.121654][ T30] audit: type=1326 audit(1761723645.901:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.125773][T16615] veth1_macvtap: entered promiscuous mode [ 729.214301][T16730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.249042][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.252318][ T30] audit: type=1326 audit(1761723645.901:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.281017][T16730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.321429][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.369032][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.397782][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.422334][ T30] audit: type=1326 audit(1761723645.901:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.463934][T16183] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 729.488126][ T30] audit: type=1326 audit(1761723645.901:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.529599][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.565549][ T30] audit: type=1326 audit(1761723645.901:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.640148][ T30] audit: type=1326 audit(1761723645.901:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.663312][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.700605][T16183] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 729.713307][ T30] audit: type=1326 audit(1761723645.901:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16721 comm="syz.6.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 729.757759][T16183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.803293][T16183] usb 4-1: config 0 descriptor?? [ 729.821059][T16183] usb 4-1: selecting invalid altsetting 1 [ 729.870637][T16183] flexcop_usb: set interface failed. [ 729.897278][T16183] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 730.035252][T16183] usb 4-1: USB disconnect, device number 113 [ 730.085105][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.156856][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.324192][T13706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.333603][T13706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.425675][T16733] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 730.601118][T16733] usb 7-1: Using ep0 maxpacket: 8 [ 730.631684][T16733] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 730.658638][T16733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.674518][T16750] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2844' sets config #0 [ 730.757797][T16733] usb 7-1: config 0 descriptor?? [ 730.822172][T16733] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 730.856973][T16733] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 731.140813][T16733] usb-storage 7-1:0.0: USB Mass Storage device detected [ 731.194004][T16733] usb-storage 7-1:0.0: device ignored [ 732.005100][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2846'. [ 732.848685][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 733.352628][T16769] binder: 16766:16769 ioctl c0306201 200000004a40 returned -22 [ 733.763104][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 733.763150][ T30] audit: type=1326 audit(1761723650.921:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 733.800845][ T30] audit: type=1326 audit(1761723650.961:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 733.823283][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.833208][ T30] audit: type=1326 audit(1761723650.961:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 733.855701][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.954956][ T30] audit: type=1326 audit(1761723650.961:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 734.085144][ T30] audit: type=1326 audit(1761723650.961:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 734.172461][ T30] audit: type=1326 audit(1761723651.091:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 734.235255][ T24] usb 7-1: USB disconnect, device number 4 [ 734.498768][T16788] netlink: 'syz.6.2854': attribute type 29 has an invalid length. [ 734.515433][T16788] netlink: 'syz.6.2854': attribute type 29 has an invalid length. [ 734.532478][T16788] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2854'. [ 734.532686][ T30] audit: type=1326 audit(1761723651.091:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 734.751838][ T30] audit: type=1326 audit(1761723651.091:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 734.794783][ T30] audit: type=1326 audit(1761723651.091:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 734.869640][ T30] audit: type=1326 audit(1761723651.091:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16775 comm="syz.1.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 737.155399][T16820] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2861' sets config #0 [ 737.984920][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 738.165020][ T24] usb 3-1: device descriptor read/64, error -71 [ 738.481436][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 738.490634][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 738.624758][ T24] usb 3-1: device descriptor read/64, error -71 [ 738.735110][ T24] usb usb3-port1: attempt power cycle [ 738.771196][ T5903] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 738.933827][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 738.933845][ T30] audit: type=1326 audit(1761723656.091:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 738.999567][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 739.016603][ T30] audit: type=1326 audit(1761723656.091:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.016721][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 739.039258][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.064717][ T30] audit: type=1326 audit(1761723656.121:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.074809][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 739.087171][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.087632][ T30] audit: type=1326 audit(1761723656.121:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.131832][ T5903] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 739.142076][ T5903] usb 2-1: config 0 has no interface number 0 [ 739.149843][ T24] usb 3-1: device descriptor read/8, error -71 [ 739.188981][ T5903] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 739.189015][ T5903] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 739.189037][ T5903] usb 2-1: config 0 interface 88 has no altsetting 0 [ 739.193458][ T5903] usb 2-1: language id specifier not provided by device, defaulting to English [ 739.219138][ T5903] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 739.219167][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 739.219187][ T5903] usb 2-1: Product: syz [ 739.219203][ T5903] usb 2-1: SerialNumber: syz [ 739.234429][ T5903] usb 2-1: config 0 descriptor?? [ 739.235531][ T30] audit: type=1326 audit(1761723656.121:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.235583][ T30] audit: type=1326 audit(1761723656.121:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.235961][ T30] audit: type=1326 audit(1761723656.121:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.236061][ T30] audit: type=1326 audit(1761723656.121:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.236102][ T30] audit: type=1326 audit(1761723656.121:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.236175][ T30] audit: type=1326 audit(1761723656.121:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.6.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 739.385603][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.440981][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 739.457420][ T24] usb 3-1: device descriptor read/8, error -71 [ 739.561310][ T5903] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input39 [ 739.565898][ T24] usb usb3-port1: unable to enumerate USB device [ 739.581012][ T5903] usb 2-1: USB disconnect, device number 114 [ 739.978762][T16855] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 739.978762][T16855] program syz.0.2870 not setting count and/or reply_len properly [ 740.330739][T16853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.371051][T16853] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2869'. [ 740.788855][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 741.844866][ T5910] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 742.147947][T16883] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.2876' sets config #0 [ 742.235821][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 742.251975][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.320993][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 110, changing to 10 [ 742.484730][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26466, setting to 1024 [ 742.569043][ T5910] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 742.599716][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.610191][T16888] binder: 16884:16888 ioctl c0306201 200000000080 returned -14 [ 742.632011][ T5910] usb 3-1: Product: syz [ 742.647047][ T5910] usb 3-1: Manufacturer: syz [ 742.662060][ T5910] usb 3-1: SerialNumber: syz [ 742.718500][ T5910] usb 3-1: config 0 descriptor?? [ 742.734221][T16868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.998831][ T5910] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 743.098872][ T5910] usb 3-1: USB disconnect, device number 56 [ 743.882859][T16897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.944533][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2876'. [ 743.964902][T16897] batadv_slave_0: entered promiscuous mode [ 744.550968][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 744.550985][ T30] audit: type=1326 audit(1761723661.711:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.576435][T16183] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 744.630800][ T5910] IPVS: starting estimator thread 0... [ 744.650686][ T30] audit: type=1326 audit(1761723661.741:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.685777][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2883'. [ 744.704498][ T30] audit: type=1326 audit(1761723661.761:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.738005][ T30] audit: type=1326 audit(1761723661.761:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.762861][T16911] IPVS: using max 31 ests per chain, 74400 per kthread [ 744.770896][ T30] audit: type=1326 audit(1761723661.761:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.774695][T16183] usb 3-1: Using ep0 maxpacket: 32 [ 744.796737][ T30] audit: type=1326 audit(1761723661.781:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.828019][ T30] audit: type=1326 audit(1761723661.781:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.854475][T16183] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 744.854820][ T30] audit: type=1326 audit(1761723661.781:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.864940][T16733] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 744.891184][ T30] audit: type=1326 audit(1761723661.781:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.904531][T16183] usb 3-1: config 0 has no interface number 0 [ 744.923909][ T30] audit: type=1326 audit(1761723661.781:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 744.933636][T16183] usb 3-1: config 0 interface 184 has no altsetting 0 [ 744.976972][T16183] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 744.996434][T16183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.014859][T16183] usb 3-1: Product: syz [ 745.020425][T16183] usb 3-1: Manufacturer: syz [ 745.031967][T16183] usb 3-1: SerialNumber: syz [ 745.048790][T16183] usb 3-1: config 0 descriptor?? [ 745.069735][T16183] smsc75xx v1.0.0 [ 745.107037][T16733] usb 4-1: config 0 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 745.118327][T16733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.128606][T16733] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 745.154755][T16733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.169396][T16733] usb 4-1: config 0 descriptor?? [ 745.180421][T16910] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 745.638029][T16943] fuse: Unknown parameter 'gr/up_id' [ 745.894827][ T24] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 746.066394][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 746.077537][ T24] usb 2-1: config 0 has no interface number 0 [ 746.093895][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 746.115685][T12323] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 746.123743][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 746.135147][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 746.144255][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.198013][ T24] usb 2-1: config 0 descriptor?? [ 746.204174][T16943] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 746.231737][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 746.390574][T12323] usb 7-1: Using ep0 maxpacket: 32 [ 746.407375][T12323] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 746.428146][T12323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.439451][T12323] usb 7-1: Product: syz [ 746.549282][T12323] usb 7-1: Manufacturer: syz [ 746.561476][T12323] usb 7-1: SerialNumber: syz [ 746.569171][ T5903] usb 2-1: USB disconnect, device number 115 [ 746.575352][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 746.591617][T12323] usb 7-1: config 0 descriptor?? [ 746.629960][T12323] gspca_main: mars-2.14.0 probing 093a:050f [ 746.796320][T16943] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2891'. [ 746.959197][T16183] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 747.009003][T16183] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 747.220102][T16183] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 747.242511][T16183] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 747.263258][T16183] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 747.313106][T16183] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 747.378898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.386149][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.405173][T16183] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 747.436422][T16973] loop6: detected capacity change from 0 to 524288000 [ 747.460106][T16183] usb 3-1: USB disconnect, device number 57 [ 747.615079][T16972] support for the xor transformation has been removed. [ 747.625358][T16973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2898'. [ 747.789505][T16733] usbhid 4-1:0.0: can't add hid device: -71 [ 747.835082][T16733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 747.900678][T16733] usb 4-1: USB disconnect, device number 114 [ 748.904905][T12323] usb 7-1: USB disconnect, device number 5 [ 748.912697][T16183] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 749.092284][T17000] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2905'. [ 749.104784][T16183] usb 4-1: Using ep0 maxpacket: 16 [ 749.119744][T16183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.135868][T16999] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2905'. [ 749.148115][T16183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.199806][T16183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.251074][T16183] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 749.265270][T16183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.282879][T16183] usb 4-1: Product: syz [ 749.294954][T16183] usb 4-1: Manufacturer: syz [ 749.321148][T16183] usb 4-1: SerialNumber: syz [ 749.342717][T16183] usb 4-1: config 0 descriptor?? [ 749.579410][T16183] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 749.602250][T16183] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8) [ 749.676401][T16183] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 749.734969][T12323] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 749.748086][T16183] usb 4-1: USB disconnect, device number 115 [ 749.904728][T12323] usb 7-1: Using ep0 maxpacket: 8 [ 749.923014][T12323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.936774][T12323] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 749.975013][T12323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.991921][T12323] usb 7-1: config 0 descriptor?? [ 750.224757][T12323] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 750.269413][T12323] usb 7-1: USB disconnect, device number 6 [ 750.532377][T17022] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3 (24 ns) > initial count (8 ns). Using initial count to start timer. [ 750.598843][T17022] kvm: pic: non byte write [ 750.616449][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 750.616466][ T30] audit: type=1326 audit(1761723667.781:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.665429][ T30] audit: type=1326 audit(1761723667.781:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.676011][T16183] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 750.702470][ T30] audit: type=1326 audit(1761723667.781:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.726644][ T30] audit: type=1326 audit(1761723667.821:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.749005][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.762431][ T30] audit: type=1326 audit(1761723667.851:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.784961][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.820507][ T30] audit: type=1326 audit(1761723667.851:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.847175][ T30] audit: type=1326 audit(1761723667.851:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.870918][ T30] audit: type=1326 audit(1761723667.851:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 750.991721][T16183] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 751.001465][T16183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.027519][T16183] usb 2-1: Product: syz [ 751.159216][T16183] usb 2-1: Manufacturer: syz [ 751.164040][ T30] audit: type=1326 audit(1761723667.851:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 751.219790][T16183] usb 2-1: SerialNumber: syz [ 751.290822][T16183] usb 2-1: config 0 descriptor?? [ 751.301214][ T30] audit: type=1326 audit(1761723667.851:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17019 comm="syz.2.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf3298efc9 code=0x7ffc0000 [ 751.362339][T16183] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 752.163777][ T6015] usb 2-1: USB disconnect, device number 116 [ 753.895932][T17085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.943156][T17085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.124911][T12323] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 754.394496][T12323] usb 7-1: Using ep0 maxpacket: 32 [ 754.418885][T12323] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.449071][T12323] usb 7-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 754.468789][T12323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.504683][T12323] usb 7-1: Product: syz [ 754.509587][T12323] usb 7-1: Manufacturer: syz [ 754.514210][T12323] usb 7-1: SerialNumber: syz [ 754.545709][T12323] usb 7-1: config 0 descriptor?? [ 754.595947][T12323] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 754.605611][T17092] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2930' sets config #0 [ 754.822324][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'. [ 754.897009][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'. [ 755.054122][T12323] usb 7-1: qt2_attach - failed to power on unit: -71 [ 755.073231][T12323] quatech2 7-1:0.0: probe with driver quatech2 failed with error -71 [ 755.129384][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2933'. [ 755.138796][T12323] usb 7-1: USB disconnect, device number 7 [ 755.156732][ T1320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 755.496359][ T5910] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 755.686297][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.783299][ T5910] usb 2-1: config 0 has no interfaces? [ 755.811776][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.825996][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 755.867595][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.899761][ T5910] usb 2-1: Product: syz [ 755.904077][ T5910] usb 2-1: Manufacturer: syz [ 756.123833][ T5910] usb 2-1: SerialNumber: syz [ 756.181349][ T5910] usb 2-1: config 0 descriptor?? [ 756.704847][ T5910] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 756.928013][ T24] usb 2-1: USB disconnect, device number 117 [ 756.985528][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 757.002086][ T5910] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 757.076427][ T5910] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 757.092882][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.101071][ T5910] usb 4-1: Product: syz [ 757.105963][ T5910] usb 4-1: Manufacturer: syz [ 757.110644][ T5910] usb 4-1: SerialNumber: syz [ 757.138486][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input41 [ 757.394763][ T24] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 757.530350][ T5185] bcm5974 4-1:1.0: could not read from device [ 757.543010][ T5185] bcm5974 4-1:1.0: could not read from device [ 757.556915][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.577498][ T5910] usb 4-1: USB disconnect, device number 116 [ 757.578303][ T5185] bcm5974 4-1:1.0: could not read from device [ 757.594774][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 757.626843][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.655087][ T24] usb 2-1: config 0 descriptor?? [ 757.834880][T12323] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 757.996770][T12323] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 758.005219][T12323] usb 7-1: can't read configurations, error -22 [ 758.116670][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2946'. [ 758.163945][T17150] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.167581][T12323] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 758.357759][T12323] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 758.368396][T12323] usb 7-1: can't read configurations, error -22 [ 758.389850][T12323] usb usb7-port1: attempt power cycle [ 758.726147][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2948'. [ 758.749334][T12323] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 758.798187][T12323] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 758.806995][T12323] usb 7-1: can't read configurations, error -22 [ 758.944790][T12323] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 758.978630][T12323] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 758.997281][T12323] usb 7-1: can't read configurations, error -22 [ 759.020953][T12323] usb usb7-port1: unable to enumerate USB device [ 759.054890][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.526486][T17172] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2952'. [ 760.275053][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 760.281493][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 760.322743][ T24] usb 2-1: USB disconnect, device number 118 [ 760.724452][T17185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 760.743167][T17185] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 761.023274][T17185] dummy0: entered promiscuous mode [ 761.418510][T17185] vlan2: entered promiscuous mode [ 762.214729][T12323] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 762.454721][T12323] usb 2-1: Using ep0 maxpacket: 16 [ 762.512124][T12323] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 762.563496][T12323] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 762.574287][T12323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.590200][T12323] usb 2-1: Product: syz [ 762.608542][T12323] usb 2-1: Manufacturer: syz [ 762.613279][T12323] usb 2-1: SerialNumber: syz [ 762.624522][T12323] usb 2-1: config 0 descriptor?? [ 762.715303][T16733] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 762.893143][T16733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.910090][T16733] usb 7-1: config 0 interface 0 has no altsetting 0 [ 762.972019][T16733] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 762.986265][T16733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.994921][T16733] usb 7-1: Product: syz [ 762.999140][T16733] usb 7-1: Manufacturer: syz [ 763.036805][T16733] usb 7-1: SerialNumber: syz [ 763.051997][T12323] usb 2-1: USB disconnect, device number 119 [ 763.058018][T16733] usb 7-1: config 0 descriptor?? [ 763.061584][T16733] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 763.109156][T16733] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 763.175954][T16733] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 763.196048][T16733] usb 7-1: media controller created [ 763.282409][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 763.291852][T17226] netlink: 'syz.2.2965': attribute type 30 has an invalid length. [ 763.383868][T16733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.407339][ T1320] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.419257][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 763.433526][ T1320] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.459692][ T1320] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.472707][T17226] netlink: 'syz.2.2965': attribute type 30 has an invalid length. [ 763.490093][ T1320] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.993123][T16733] DVB: Unable to find symbol tda10046_attach() [ 764.105636][T16733] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 764.151381][T16733] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 764.395534][ T5903] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 764.452747][T17251] netlink: 58 bytes leftover after parsing attributes in process `syz.0.2972'. [ 764.554949][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 764.569009][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 764.589951][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 764.617578][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 764.812082][ T5903] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 764.853420][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.884272][ T5903] usb 4-1: Product: syz [ 764.904902][ T5903] usb 4-1: Manufacturer: syz [ 764.921195][ T5903] usb 4-1: SerialNumber: syz [ 765.157780][ T5903] usb 4-1: config 0 descriptor?? [ 765.282361][T17243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 765.402457][ T5903] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 765.411436][ T5903] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 765.450882][ T5903] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 765.465562][ T5903] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 765.481523][ T5903] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 766.652834][T16733] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 766.747921][T16733] usb 7-1: USB disconnect, device number 12 [ 766.852867][T17290] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 766.913821][T17290] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 767.125049][T17296] tipc: Started in network mode [ 767.130134][T17296] tipc: Node identity , cluster identity 4711 [ 767.136569][T17296] tipc: Failed to obtain node identity [ 767.145946][T17296] tipc: Enabling of bearer rejected, failed to enable media [ 767.214914][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.051892][ T5903] usb 4-1: USB disconnect, device number 117 [ 768.090002][ T5903] mcba_usb 4-1:0.0 can0: device disconnected [ 771.362678][T17362] fuse: Unknown parameter 'bd' [ 771.954771][ T24] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 772.178838][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 772.181844][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 772.184885][ T24] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 772.233024][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 772.249907][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 772.280723][T17374] netlink: 'syz.0.2999': attribute type 21 has an invalid length. [ 772.280751][T17374] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2999'. [ 772.280862][T17374] netlink: 'syz.0.2999': attribute type 5 has an invalid length. [ 772.280882][T17374] netlink: 'syz.0.2999': attribute type 6 has an invalid length. [ 772.280896][T17374] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2999'. [ 772.291318][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.291370][ T24] usb 7-1: Product: syz [ 772.291385][ T24] usb 7-1: Manufacturer: syz [ 772.291400][ T24] usb 7-1: SerialNumber: syz [ 772.320902][T17366] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 772.537189][ T24] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input43 [ 772.539383][ T5185] bcm5974 7-1:1.0: could not read from device [ 772.547136][ T5185] bcm5974 7-1:1.0: could not read from device [ 772.568797][ T5185] bcm5974 7-1:1.0: could not read from device [ 772.674118][ T5185] bcm5974 7-1:1.0: could not read from device [ 772.680073][ T24] usb 7-1: USB disconnect, device number 13 [ 772.729218][T17374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 772.740488][T17374] block device autoloading is deprecated and will be removed. [ 773.037380][ T5841] udevd[5841]: Error opening device "/dev/input/event4": No such file or directory [ 773.142822][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 773.163093][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 773.184401][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 773.330715][ T5841] udevd[5841]: Unable to EVIOCGABS device "/dev/input/event4" [ 773.678851][T17395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 773.685420][T17395] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 773.698871][T17395] vhci_hcd vhci_hcd.0: Device attached [ 773.714457][T17395] random: crng reseeded on system resumption [ 773.738601][T17395] veth0_to_hsr: entered allmulticast mode [ 773.750362][T17396] vhci_hcd: connection closed [ 773.750878][T13704] vhci_hcd: stop threads [ 773.754774][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 773.767710][T13704] vhci_hcd: release socket [ 773.772296][T13704] vhci_hcd: disconnect device [ 774.004970][ T24] usb 3-1: device descriptor read/64, error -71 [ 774.094951][ T5903] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 774.287711][ T5903] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 774.315003][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 774.336959][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.350996][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.364227][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 774.389490][ T5903] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 774.401224][ T5903] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 774.411428][ T5903] usb 7-1: Manufacturer: syz [ 774.435233][ T5903] usb 7-1: config 0 descriptor?? [ 774.454905][ T24] usb 3-1: device descriptor read/64, error -71 [ 774.567052][ T24] usb usb3-port1: attempt power cycle [ 774.851382][T17404] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3008'. [ 774.876962][ T5903] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 774.891156][ T5903] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 774.924891][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 774.945595][ T24] usb 3-1: device descriptor read/8, error -71 [ 775.041943][T17421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3012'. [ 775.145757][T16183] usb 7-1: USB disconnect, device number 14 [ 775.211075][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 775.211093][ T30] audit: type=1326 audit(1761723692.371:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.216086][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 775.219619][ T30] audit: type=1326 audit(1761723692.371:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.271496][ T30] audit: type=1326 audit(1761723692.401:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.295040][ T30] audit: type=1326 audit(1761723692.401:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.318001][ T30] audit: type=1326 audit(1761723692.401:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.341152][ T24] usb 3-1: device descriptor read/8, error -71 [ 775.354097][ T30] audit: type=1326 audit(1761723692.431:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.384840][ T30] audit: type=1326 audit(1761723692.451:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.408409][ T30] audit: type=1326 audit(1761723692.461:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.431202][ T30] audit: type=1326 audit(1761723692.461:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.456469][ T30] audit: type=1326 audit(1761723692.461:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.1.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76338efc9 code=0x7ffc0000 [ 775.457975][ T24] usb usb3-port1: unable to enumerate USB device [ 775.674346][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 775.913016][T17439] syz.6.3017(17439): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 777.024900][ T5910] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 777.186909][ T5910] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 777.238226][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 777.253346][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.264853][ T5910] usb 3-1: Product: syz [ 777.269091][ T5910] usb 3-1: Manufacturer: syz [ 777.273854][ T5910] usb 3-1: SerialNumber: syz [ 777.474763][T16183] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 777.574942][T12323] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 777.596138][T17461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.607323][T17461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.624890][T16183] usb 2-1: Using ep0 maxpacket: 16 [ 777.633129][T16183] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 777.650316][T16183] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 777.670364][T16183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.720109][T16183] usb 2-1: Product: syz [ 777.732133][T16183] usb 2-1: Manufacturer: syz [ 777.738444][T16183] usb 2-1: SerialNumber: syz [ 777.739036][T12323] usb 7-1: Using ep0 maxpacket: 8 [ 777.752817][T12323] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 777.771151][T16183] usb 2-1: config 0 descriptor?? [ 777.776640][T12323] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.777946][T17455] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 777.804553][T12323] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 777.843132][T12323] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 777.876455][T16183] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 777.885309][T12323] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.898684][T12323] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 777.908762][T12323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.004719][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 778.011018][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 778.038874][T16183] usb 2-1: USB disconnect, device number 120 [ 778.113194][T16183] mcba_usb 2-1:0.0 can0: device disconnected [ 778.191100][T17459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3024'. [ 778.209247][T12323] usb 7-1: GET_CAPABILITIES returned 0 [ 778.248158][T12323] usbtmc 7-1:16.0: can't read capabilities [ 778.540911][T17474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.568771][T17474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.829372][T17479] bridge1: entered promiscuous mode [ 778.844758][T17479] bridge1: entered allmulticast mode [ 779.062344][T17487] fuse: Unknown parameter '0 --' [ 779.758053][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input44 [ 779.793520][ T5185] bcm5974 3-1:1.0: could not read from device [ 779.808787][ T5910] usb 3-1: USB disconnect, device number 62 [ 779.820367][ T5185] bcm5974 3-1:1.0: could not read from device [ 779.846573][ T5185] bcm5974 3-1:1.0: could not read from device [ 780.026186][T12323] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 780.044563][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 780.064211][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 780.081066][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'. [ 780.184945][T12323] usb 2-1: device descriptor read/64, error -71 [ 780.435715][T12323] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 780.474529][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 780.483831][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3034'. [ 780.630474][T12323] usb 2-1: device descriptor read/64, error -71 [ 780.762939][T12323] usb usb2-port1: attempt power cycle [ 781.147140][T12323] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 781.231253][T12323] usb 2-1: device descriptor read/8, error -71 [ 781.604812][T12323] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 781.966204][T12323] usb 2-1: device descriptor read/8, error -71 [ 782.082644][T12323] usb usb2-port1: unable to enumerate USB device [ 782.621189][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 782.621208][ T30] audit: type=1326 audit(1761723699.781:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 782.661550][ T30] audit: type=1326 audit(1761723699.781:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 782.684432][ T30] audit: type=1326 audit(1761723699.781:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 782.706899][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.723538][ T30] audit: type=1326 audit(1761723699.781:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.003938][ T30] audit: type=1326 audit(1761723699.781:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.214896][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.223515][ T30] audit: type=1326 audit(1761723699.811:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.345198][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 783.373799][ T30] audit: type=1326 audit(1761723699.811:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.515084][T17459] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 783.537430][ T30] audit: type=1326 audit(1761723699.811:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.652494][ T30] audit: type=1326 audit(1761723699.811:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.675667][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.724763][ T24] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 783.744816][ T24] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 783.765084][ T30] audit: type=1326 audit(1761723699.811:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8553b8efc9 code=0x7ffc0000 [ 783.788109][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.795789][ T24] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 783.824807][ T24] usb 2-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.868645][ T24] usb 2-1: config 16 interface 0 has no altsetting 0 [ 783.895280][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 783.934792][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.937985][T12323] usb 7-1: USB disconnect, device number 15 [ 784.204298][T17553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.249071][T17553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.305596][T17553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.357912][T17553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.406698][ T24] usb 2-1: string descriptor 0 read error: -71 [ 784.543441][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 784.566338][ T24] imon 2-1:16.0: unable to initialize intf0, err -19 [ 784.575419][ T24] imon:imon_probe: failed to initialize context! [ 784.586962][ T24] imon 2-1:16.0: unable to register, err -19 [ 784.598292][ T24] usb 2-1: USB disconnect, device number 125 [ 784.599453][T12323] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 784.628366][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'. [ 784.849117][T12323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.862208][T12323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.879537][T12323] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 784.892458][T12323] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 784.930499][T12323] usb 4-1: Manufacturer: syz [ 784.987168][T12323] usb 4-1: config 0 descriptor?? [ 785.084752][T16183] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 785.111114][T17579] netlink: 'syz.6.3049': attribute type 322 has an invalid length. [ 785.325071][T16183] usb 3-1: Using ep0 maxpacket: 16 [ 785.365683][T16183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 785.373446][T16183] usb 3-1: can't read configurations, error -61 [ 785.594804][T16183] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 785.989125][T12323] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input45 [ 786.017879][T16183] usb 3-1: Using ep0 maxpacket: 16 [ 786.034758][T16183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 786.036552][T12323] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input46 [ 786.053195][T16183] usb 3-1: can't read configurations, error -61 [ 786.088451][T16183] usb usb3-port1: attempt power cycle [ 786.102413][T12323] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input47 [ 786.168265][T17568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 786.225933][T12323] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0015/input/input48 [ 786.247200][T17568] netlink: 'syz.3.3045': attribute type 10 has an invalid length. [ 786.298939][T12323] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 786.319326][T17568] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 786.378253][T17568] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 786.455112][T16183] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 786.480325][T16183] usb 3-1: Using ep0 maxpacket: 16 [ 786.555502][T16183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 786.603464][T16183] usb 3-1: can't read configurations, error -61 [ 786.785994][T16183] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 786.845575][T16183] usb 3-1: Using ep0 maxpacket: 16 [ 786.854787][T16183] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 786.863497][T16183] usb 3-1: can't read configurations, error -61 [ 786.914448][T16183] usb usb3-port1: unable to enumerate USB device [ 787.068636][ T5903] usb 4-1: USB disconnect, device number 118 [ 787.413631][T17608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.497278][T17608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.624733][ T5836] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 787.934851][ T5903] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 788.114928][ T5903] usb 7-1: device descriptor read/64, error -71 [ 788.365081][ T5903] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 788.524720][ T5903] usb 7-1: device descriptor read/64, error -71 [ 788.653155][ T5903] usb usb7-port1: attempt power cycle [ 788.917310][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3062'. [ 788.964055][T17637] pim6reg: entered allmulticast mode [ 788.985068][T17637] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3063'. [ 789.104701][ T5903] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 789.138300][ T5903] usb 7-1: device descriptor read/8, error -71 [ 789.191850][ T5836] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 789.398347][ T5836] usb 2-1: config 8 has an invalid interface number: 237 but max is 1 [ 789.439668][ T5836] usb 2-1: config 8 has an invalid interface number: 172 but max is 1 [ 789.465202][ T5836] usb 2-1: config 8 has no interface number 0 [ 789.471330][ T5836] usb 2-1: config 8 has no interface number 1 [ 789.477972][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 789.582420][ T5903] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 789.656572][ T5836] usb 2-1: config 8 interface 237 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 789.672661][ T5836] usb 2-1: config 8 interface 237 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 789.690978][ T5903] usb 7-1: device descriptor read/8, error -71 [ 789.731265][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 789.745503][ T5836] usb 2-1: config 8 interface 237 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 789.778621][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 790.164701][ T5903] usb usb7-port1: unable to enumerate USB device [ 790.173043][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 790.198406][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 790.224090][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 790.238995][ T5836] usb 2-1: config 8 interface 237 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 790.249962][ T5836] usb 2-1: config 8 interface 237 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 790.315370][ T5836] usb 2-1: config 8 interface 172 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 790.414788][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 790.418333][ T5836] usb 2-1: config 8 interface 172 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 790.483643][ T5836] usb 2-1: config 8 interface 172 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 790.502239][ T5836] usb 2-1: config 8 interface 237 has no altsetting 0 [ 790.515009][ T5836] usb 2-1: config 8 interface 172 has no altsetting 0 [ 790.530499][ T5836] usb 2-1: New USB device found, idVendor=124a, idProduct=4023, bcdDevice=3b.d9 [ 790.543946][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.560585][ T5836] usb 2-1: Product: 䠊 [ 790.569233][ T5836] usb 2-1: Manufacturer: 盪∙沨烕䱾怖釽ؠ则䢴轲뉔ꙶ讝ᴏ냐в帝ᗌ⹒䟦ᛥ菉郠멏纚᪰⊿┤쾚唋篅㤒ㅂ㹇햾떩ⓘ닞肾Մ젬옰募䒟ﴦ䀩♾ു謜ᅢ뽐ⱅ权쮴렵ᄑ䤾企琕틹桡ᆓ）ꋑ윤荻灼℗市稅巑沲ಱ쯅㋇럲讀ᰴ놾圿洽㰓㍼㬟쩸⩎끘洇璚覴ျ嘯Ὲ隸 [ 790.644230][ T5836] usb 2-1: SerialNumber: ܮ꫾ౝ췸ꗨ첍坉ᙦ媟퓕蹾臛䩯躯丧薒╿‑씁於ᳩ坿愯䷂빋ᄧ둝씍ⅴ⛑응眰⨫䜉錜革㶇岶⪨譱ﶨ쟨孴탇◂फ़⧓頁﫩㋂꧛헜쭘ﻹ忥펓䊳婳퐂ᇈ૳폖ㅥ为꽤꽂™ᩗΕ銏諞⵹搭媃ㆳ䦤풍慝㖸䫎蹈䆻ž斗⒅몑ꗸ您칏 [ 791.070499][T17626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 791.078410][T17626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 791.149446][T17626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 791.445684][T17626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.572339][T17626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.644953][ T5910] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 792.175226][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 792.193643][ T5910] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 792.226115][ T5910] usb 3-1: config 1 interface 0 has no altsetting 0 [ 792.233466][ T5836] usb 2-1: USB disconnect, device number 127 [ 792.241981][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 792.275879][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.306356][ T5910] usb 3-1: Product: syz [ 792.326037][ T5910] usb 3-1: Manufacturer: syz [ 792.349071][ T5910] usb 3-1: SerialNumber: syz [ 792.647351][T17653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.656758][T17653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.673595][ T5910] usbhid 3-1:1.0: can't add hid device: -71 [ 792.689890][ T5910] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 792.725835][ T5910] usb 3-1: USB disconnect, device number 67 [ 793.005965][T17676] syzkaller0: entered promiscuous mode [ 793.019626][T17676] syzkaller0: entered allmulticast mode [ 793.484764][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 793.514959][T16183] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 793.684790][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 793.696647][ T5910] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 793.705044][ T5910] usb 2-1: config 0 has no interface number 0 [ 793.857712][ T5910] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 793.864738][T16183] usb 7-1: Using ep0 maxpacket: 16 [ 793.875696][T16183] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 793.911130][T16183] usb 7-1: can't read configurations, error -61 [ 793.920063][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.921777][T17689] hsr0: entered promiscuous mode [ 793.954262][T17689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 793.963999][T17689] hsr_slave_0: left promiscuous mode [ 793.975513][T17689] hsr_slave_1: left promiscuous mode [ 794.043941][T17689] hsr0 (unregistering): left promiscuous mode [ 794.065610][ T5910] usb 2-1: Product: syz [ 794.065632][ T5910] usb 2-1: Manufacturer: syz [ 794.065649][ T5910] usb 2-1: SerialNumber: syz [ 794.081047][T16183] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 794.213809][ T5910] usb 2-1: config 0 descriptor?? [ 794.253084][ T5910] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 794.264857][T16183] usb 7-1: Using ep0 maxpacket: 16 [ 794.336685][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3077'. [ 794.503759][T16183] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 794.521915][ T5910] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 794.539353][T16183] usb 7-1: can't read configurations, error -61 [ 794.548535][ T5910] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 794.569218][T16183] usb usb7-port1: attempt power cycle [ 795.018658][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 795.019618][ T24] usb 2-1: USB disconnect, device number 2 [ 795.040012][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 795.074832][T16183] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 795.098329][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 795.114820][T16183] usb 7-1: Using ep0 maxpacket: 16 [ 795.208994][T16183] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 795.220337][T16183] usb 7-1: can't read configurations, error -61 [ 795.331941][ T24] quatech2 2-1:0.51: device disconnected [ 795.455069][T16183] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 795.485449][T16183] usb 7-1: Using ep0 maxpacket: 16 [ 795.495247][T16183] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 795.503663][T16183] usb 7-1: can't read configurations, error -61 [ 795.513857][T16183] usb usb7-port1: unable to enumerate USB device [ 795.836242][T17711] fuse: Bad value for 'fd' [ 796.381946][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 796.381958][ T30] audit: type=1326 audit(1761723713.541:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.412114][ T30] audit: type=1326 audit(1761723713.571:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.444154][ T30] audit: type=1326 audit(1761723713.571:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.476958][ T30] audit: type=1326 audit(1761723713.571:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.500088][ T30] audit: type=1326 audit(1761723713.601:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.522558][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.530290][ T30] audit: type=1326 audit(1761723713.601:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.552901][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.581480][ T30] audit: type=1326 audit(1761723713.601:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.604027][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.616371][ T30] audit: type=1326 audit(1761723713.601:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.638848][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.650129][ T30] audit: type=1326 audit(1761723713.601:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.672589][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.750011][ T30] audit: type=1326 audit(1761723713.601:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 796.772491][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.015889][T17718] batadv_slave_0: entered promiscuous mode [ 797.048056][T17718] batman_adv: batadv0: Adding interface: macsec1 [ 797.054963][T17718] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.113213][T17718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.144468][T17718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.170910][T17718] batman_adv: batadv0: Interface activated: macsec1 [ 797.304961][ T983] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 797.486102][ T983] usb 3-1: not running at top speed; connect to a high speed hub [ 797.494210][ T983] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 797.890067][ T983] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 797.918138][ T983] usb 3-1: can't read configurations, error -61 [ 798.079734][ T983] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 798.285845][ T983] usb 3-1: not running at top speed; connect to a high speed hub [ 798.301707][ T983] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 798.311810][ T983] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 798.343839][ T983] usb 3-1: can't read configurations, error -61 [ 798.365263][ T983] usb usb3-port1: attempt power cycle [ 798.745085][ T983] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 798.779665][ T983] usb 3-1: not running at top speed; connect to a high speed hub [ 798.796439][ T983] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 798.901149][ T983] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 798.984683][ T983] usb 3-1: can't read configurations, error -61 [ 799.136830][T17750] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.144882][T17750] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.155189][ T983] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 799.305291][ T983] usb 3-1: not running at top speed; connect to a high speed hub [ 799.324872][ T983] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 799.336521][ T983] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 799.349793][ T983] usb 3-1: can't read configurations, error -61 [ 799.358977][ T983] usb usb3-port1: unable to enumerate USB device [ 799.652095][T17750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.694778][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 801.078354][T17787] x_tables: duplicate underflow at hook 2 [ 801.808850][T17778] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 802.047927][T17778] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 802.196026][T17765] bond0: (slave syz_tun): Releasing backup interface [ 802.245166][T17778] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.267077][T17778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.315897][T17765] bridge_slave_0: left allmulticast mode [ 802.318458][T17778] usb 3-1: Product: syz [ 802.321678][T17765] bridge_slave_0: left promiscuous mode [ 802.331951][T17765] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.339300][T17778] usb 3-1: Manufacturer: ⁉ [ 802.344047][T17778] usb 3-1: SerialNumber: syz [ 803.053425][T17765] bridge_slave_1: left allmulticast mode [ 803.064132][T17765] bridge_slave_1: left promiscuous mode [ 803.079853][T17765] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.119064][T17765] bond0: (slave c1): Releasing backup interface [ 803.139675][T17765] bond0: (slave bond_slave_1): Releasing backup interface [ 803.162299][T17765] team0: Port device team_slave_0 removed [ 803.176143][T17765] team0: Port device team_slave_1 removed [ 803.202612][T17765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.218800][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.246152][T17778] cdc_ncm 3-1:1.0: bind() failure [ 803.255205][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.274085][T17778] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 803.284938][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.298151][T17778] cdc_ncm 3-1:1.1: bind() failure [ 803.310481][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.329679][T17778] usb 3-1: USB disconnect, device number 72 [ 803.672544][T17807] FAULT_INJECTION: forcing a failure. [ 803.672544][T17807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.688070][T17807] CPU: 1 UID: 0 PID: 17807 Comm: syz.6.3103 Not tainted syzkaller #0 PREEMPT(full) [ 803.688095][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 803.688106][T17807] Call Trace: [ 803.688114][T17807] [ 803.688122][T17807] dump_stack_lvl+0x189/0x250 [ 803.688156][T17807] ? __pfx____ratelimit+0x10/0x10 [ 803.688179][T17807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.688202][T17807] ? __pfx__printk+0x10/0x10 [ 803.688221][T17807] ? __might_fault+0xb0/0x130 [ 803.688256][T17807] should_fail_ex+0x414/0x560 [ 803.688287][T17807] _copy_from_user+0x2d/0xb0 [ 803.688310][T17807] __sys_bpf+0x1e3/0x860 [ 803.688330][T17807] ? __pfx___sys_bpf+0x10/0x10 [ 803.688362][T17807] ? ksys_write+0x22a/0x250 [ 803.688389][T17807] ? __pfx_ksys_write+0x10/0x10 [ 803.688419][T17807] __x64_sys_bpf+0x7c/0x90 [ 803.688444][T17807] do_syscall_64+0xfa/0xfa0 [ 803.688472][T17807] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.688495][T17807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.688513][T17807] ? clear_bhb_loop+0x60/0xb0 [ 803.688534][T17807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.688552][T17807] RIP: 0033:0x7f23a278efc9 [ 803.688570][T17807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.688587][T17807] RSP: 002b:00007f23a36a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.688608][T17807] RAX: ffffffffffffffda RBX: 00007f23a29e5fa0 RCX: 00007f23a278efc9 [ 803.688623][T17807] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 803.688636][T17807] RBP: 00007f23a36a4090 R08: 0000000000000000 R09: 0000000000000000 [ 803.688648][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.688659][T17807] R13: 00007f23a29e6038 R14: 00007f23a29e5fa0 R15: 00007f23a2b0fa28 [ 803.688691][T17807] [ 804.241260][T17818] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 804.629927][T17822] hub 9-0:1.0: USB hub found [ 804.645367][T17822] hub 9-0:1.0: 1 port detected [ 804.975877][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3109'. [ 805.549852][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 805.720662][T17846] FAULT_INJECTION: forcing a failure. [ 805.720662][T17846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.736777][T17846] CPU: 0 UID: 0 PID: 17846 Comm: syz.2.3117 Not tainted syzkaller #0 PREEMPT(full) [ 805.736805][T17846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.736816][T17846] Call Trace: [ 805.736825][T17846] [ 805.736834][T17846] dump_stack_lvl+0x189/0x250 [ 805.736854][T17846] ? __pfx____ratelimit+0x10/0x10 [ 805.736872][T17846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.736895][T17846] ? __pfx__printk+0x10/0x10 [ 805.736926][T17846] should_fail_ex+0x414/0x560 [ 805.736957][T17846] _copy_to_user+0x31/0xb0 [ 805.736974][T17846] simple_read_from_buffer+0xe1/0x170 [ 805.736992][T17846] proc_fail_nth_read+0x1b3/0x220 [ 805.737007][T17846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.737021][T17846] ? rw_verify_area+0x2a6/0x4d0 [ 805.737052][T17846] ? __lock_acquire+0xab9/0xd20 [ 805.737067][T17846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.737090][T17846] vfs_read+0x200/0xa30 [ 805.737110][T17846] ? fdget_pos+0x247/0x320 [ 805.737129][T17846] ? __pfx___mutex_lock+0x10/0x10 [ 805.737152][T17846] ? __pfx_vfs_read+0x10/0x10 [ 805.737177][T17846] ? __fget_files+0x2a/0x420 [ 805.737198][T17846] ? __fget_files+0x3a0/0x420 [ 805.737214][T17846] ? __fget_files+0x2a/0x420 [ 805.737241][T17846] ksys_read+0x145/0x250 [ 805.737274][T17846] ? __pfx_ksys_read+0x10/0x10 [ 805.737293][T17846] ? do_syscall_64+0xbe/0xfa0 [ 805.737308][T17846] do_syscall_64+0xfa/0xfa0 [ 805.737319][T17846] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.737333][T17846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.737347][T17846] ? clear_bhb_loop+0x60/0xb0 [ 805.737369][T17846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.737387][T17846] RIP: 0033:0x7fdf3298d9dc [ 805.737405][T17846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 805.737421][T17846] RSP: 002b:00007fdf338e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 805.737438][T17846] RAX: ffffffffffffffda RBX: 00007fdf32be5fa0 RCX: 00007fdf3298d9dc [ 805.737446][T17846] RDX: 000000000000000f RSI: 00007fdf338e70a0 RDI: 0000000000000003 [ 805.737452][T17846] RBP: 00007fdf338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 805.737458][T17846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.737464][T17846] R13: 00007fdf32be6038 R14: 00007fdf32be5fa0 R15: 00007fdf32d0fa28 [ 805.737481][T17846] [ 806.462549][T17854] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.3120' sets config #0 [ 806.752608][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'. [ 807.035043][T17863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3123'. [ 807.425110][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 808.024858][T17778] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 808.084731][T17780] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 808.177765][T17778] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 808.186037][T17778] usb 3-1: config 0 has no interface number 0 [ 808.192165][T17778] usb 3-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 808.208837][T17778] usb 3-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 808.218000][T17778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.226442][T17778] usb 3-1: Product: syz [ 808.230627][T17778] usb 3-1: Manufacturer: syz [ 808.235462][T17778] usb 3-1: SerialNumber: syz [ 808.240128][T17780] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 808.242898][T17778] usb 3-1: config 0 descriptor?? [ 808.249643][T17780] usb 7-1: can't read configurations, error -61 [ 808.394757][T17780] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 808.483218][T17877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.493313][T17877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.545472][T17778] usb 3-1: USB disconnect, device number 73 [ 808.567810][T17780] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 808.583985][T17780] usb 7-1: can't read configurations, error -61 [ 808.591604][T17780] usb usb7-port1: attempt power cycle [ 808.618919][ T7024] udevd[7024]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.827743][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.837968][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.934797][T17780] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 808.968418][T17780] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 808.976684][T17780] usb 7-1: can't read configurations, error -61 [ 809.170624][T17780] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 809.204240][T17780] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 809.212229][T17780] usb 7-1: can't read configurations, error -61 [ 809.219567][T17780] usb usb7-port1: unable to enumerate USB device [ 809.504944][ T5903] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 809.676314][ T5903] usb 3-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 809.688428][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.743166][ T5903] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.753330][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.855814][ T5903] usb 3-1: Product: syz [ 809.860230][ T5903] usb 3-1: Manufacturer: syz [ 809.899166][ T5903] usb 3-1: SerialNumber: syz [ 810.149050][ T5903] usb 3-1: 0:2 : does not exist [ 810.169009][ T5903] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 810.250105][ T5903] usb 3-1: USB disconnect, device number 74 [ 810.351120][ T7024] udevd[7024]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.785008][T17905] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3134'. [ 810.882358][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 810.882377][ T30] audit: type=1326 audit(1761723728.041:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 810.921379][ T30] audit: type=1326 audit(1761723728.071:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 810.977341][ T30] audit: type=1326 audit(1761723728.081:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 810.999827][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.045485][ T30] audit: type=1326 audit(1761723728.081:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.067951][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.106343][ T30] audit: type=1326 audit(1761723728.081:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.155984][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 811.160251][ T30] audit: type=1326 audit(1761723728.081:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.211936][ T30] audit: type=1326 audit(1761723728.081:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.244247][ T30] audit: type=1326 audit(1761723728.081:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.283933][ T30] audit: type=1326 audit(1761723728.081:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.307201][ T30] audit: type=1326 audit(1761723728.081:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.6.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 811.952737][T17934] vim2m vim2m.0: vidioc_s_fmt queue busy [ 811.963530][T17934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.514805][T17780] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 812.714954][T17780] usb 3-1: Using ep0 maxpacket: 8 [ 812.847544][T17780] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 812.884925][T17780] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 813.043811][T17780] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.099068][T17780] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.163929][T17780] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 813.994746][T17780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.311312][T17780] usb 3-1: GET_CAPABILITIES returned 0 [ 814.369357][T17780] usbtmc 3-1:16.0: can't read capabilities [ 815.328977][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.361983][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.371398][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.383034][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.391861][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.782959][T17960] chnl_net:caif_netlink_parms(): no params data found [ 816.120191][T17960] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.147563][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.157660][ T24] usb 3-1: USB disconnect, device number 75 [ 816.198907][T17960] bridge_slave_0: entered allmulticast mode [ 816.218360][T17960] bridge_slave_0: entered promiscuous mode [ 816.229047][T17960] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.240025][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.248918][T17960] bridge_slave_1: entered allmulticast mode [ 816.260261][T17960] bridge_slave_1: entered promiscuous mode [ 816.354705][ T6015] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 816.388587][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.402903][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.463123][T17960] team0: Port device team_slave_0 added [ 816.474080][T17960] team0: Port device team_slave_1 added [ 816.504967][ T6015] usb 7-1: Using ep0 maxpacket: 32 [ 816.513765][ T6015] usb 7-1: config 0 has an invalid interface number: 13 but max is 0 [ 816.522485][ T6015] usb 7-1: config 0 has no interface number 0 [ 816.528987][ T6015] usb 7-1: config 0 interface 13 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 816.531100][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.552073][ T6015] usb 7-1: config 0 interface 13 altsetting 128 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 816.552403][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.591140][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.592162][ T6015] usb 7-1: config 0 interface 13 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 816.605014][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.615719][ T6015] usb 7-1: config 0 interface 13 has no altsetting 0 [ 816.620018][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.658421][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 816.666237][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.678755][ T6015] usb 7-1: New USB device found, idVendor=2100, idProduct=9e54, bcdDevice=53.5e [ 816.688076][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.697423][ T6015] usb 7-1: Product: syz [ 816.701683][ T6015] usb 7-1: Manufacturer: syz [ 816.706470][ T6015] usb 7-1: SerialNumber: syz [ 816.715508][ T6015] usb 7-1: config 0 descriptor?? [ 816.764855][T17960] hsr_slave_0: entered promiscuous mode [ 816.772191][T17960] hsr_slave_1: entered promiscuous mode [ 816.779894][T17960] debugfs: 'hsr0' already exists in 'hsr' [ 816.786054][T17960] Cannot create hsr debugfs directory [ 816.814826][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 816.823512][ T24] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 816.833024][ T24] usb 3-1: config 0 has no interface number 0 [ 816.841279][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.853082][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.863602][ T24] usb 3-1: config 0 interface 85 has no altsetting 0 [ 816.876728][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 816.886526][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.895340][ T24] usb 3-1: Product: syz [ 816.900342][ T24] usb 3-1: Manufacturer: syz [ 816.905671][ T24] usb 3-1: SerialNumber: syz [ 816.915678][ T24] usb 3-1: config 0 descriptor?? [ 816.942595][ T6015] ftdi_sio 7-1:0.13: FTDI USB Serial Device converter detected [ 816.956847][ T6015] ftdi_sio ttyUSB0: unknown device type: 0x535e [ 816.973391][ T6015] usb 7-1: USB disconnect, device number 28 [ 817.018997][ T6015] ftdi_sio 7-1:0.13: device disconnected [ 817.130917][T17960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 817.153004][T17960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 817.167623][T17960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 817.179660][T17960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 817.279963][T17960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.306940][T17960] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.321714][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.329006][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.349412][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.356580][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.437622][ T24] appletouch 3-1:0.85: Failed to request geyser raw mode [ 817.455284][ T5832] Bluetooth: hci1: command tx timeout [ 817.478376][ T24] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 817.555669][ T24] usb 3-1: USB disconnect, device number 76 [ 817.622723][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.742574][T17960] veth0_vlan: entered promiscuous mode [ 817.759576][T17960] veth1_vlan: entered promiscuous mode [ 817.774965][ T6015] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 817.814512][T17960] veth0_macvtap: entered promiscuous mode [ 817.848775][T17960] veth1_macvtap: entered promiscuous mode [ 817.881597][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.912983][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.954838][ T6015] usb 4-1: Using ep0 maxpacket: 8 [ 817.960792][ T3574] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.976137][ T6015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.980823][ T3574] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.004982][ T6015] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 818.024559][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.037499][ T3574] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.048133][ T6015] usb 4-1: config 0 descriptor?? [ 818.077019][ T3574] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.208398][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.224669][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.270046][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.279045][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.345278][ T983] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 818.396304][T18009] Invalid option length (1008) for dns_resolver key [ 818.489906][ T983] usb 3-1: device descriptor read/64, error -71 [ 818.494420][ T6015] wacom 0003:056A:0045.0016: unknown main item tag 0x0 [ 818.507214][ T6015] wacom 0003:056A:0045.0016: unknown main item tag 0x0 [ 818.516339][ T6015] wacom 0003:056A:0045.0016: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 818.561967][ T6015] wacom 0003:056A:0045.0016: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.3-1/input0 [ 818.610499][ T6015] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.0016/input/input51 [ 818.716542][ T6015] usb 4-1: USB disconnect, device number 119 [ 818.754792][ T983] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 818.884719][ T983] usb 3-1: device descriptor read/64, error -71 [ 818.995743][ T983] usb usb3-port1: attempt power cycle [ 819.334721][ T983] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 819.356182][ T983] usb 3-1: device descriptor read/8, error -71 [ 819.421606][T18023] hub 9-0:1.0: USB hub found [ 819.427596][T18023] hub 9-0:1.0: 1 port detected [ 819.534834][ T5832] Bluetooth: hci1: command tx timeout [ 819.604818][ T983] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 819.627679][ T983] usb 3-1: device descriptor read/8, error -71 [ 819.746983][ T983] usb usb3-port1: unable to enumerate USB device [ 820.217515][T18034] tipc: Enabled bearer , priority 0 [ 820.554832][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 820.554852][ T30] audit: type=1326 audit(1761723737.701:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 820.654306][ T30] audit: type=1326 audit(1761723737.701:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 820.681468][ T30] audit: type=1326 audit(1761723737.701:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 820.708627][ T30] audit: type=1326 audit(1761723737.701:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 820.798037][ T983] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 820.806510][ T30] audit: type=1326 audit(1761723737.711:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 821.042671][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 821.069729][ T983] usb 4-1: config 1 has an invalid interface number: 20 but max is 0 [ 821.120251][ T983] usb 4-1: config 1 has no interface number 0 [ 821.138130][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 821.152375][ T30] audit: type=1326 audit(1761723737.711:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 821.220308][ T983] usb 4-1: config 1 interface 20 has no altsetting 0 [ 821.271181][ T983] usb 4-1: New USB device found, idVendor=2040, idProduct=c080, bcdDevice=a9.e6 [ 821.333269][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.379886][ T30] audit: type=1326 audit(1761723737.711:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 821.414736][ T983] usb 4-1: Product: syz [ 821.418956][ T983] usb 4-1: Manufacturer: syz [ 821.439910][ T983] usb 4-1: SerialNumber: syz [ 821.555082][ T30] audit: type=1326 audit(1761723737.711:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 821.626249][ T5831] Bluetooth: hci1: command tx timeout [ 821.651947][ T30] audit: type=1326 audit(1761723737.711:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 821.680490][T18036] binder: BINDER_SET_CONTEXT_MGR already set [ 821.689389][T18036] binder: 18035:18036 ioctl 4018620d 200000004a80 returned -16 [ 821.699748][ T30] audit: type=1326 audit(1761723737.731:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a278efc9 code=0x7ffc0000 [ 821.820800][ T983] smsusb:smsusb_probe: board id=8, interface number 20 [ 821.954754][ T983] usb 4-1: USB disconnect, device number 120 [ 822.376694][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3178'. [ 823.694705][ T5831] Bluetooth: hci1: command tx timeout [ 824.253164][T18093] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.3186' sets config #0 [ 824.763900][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3186'. [ 824.964756][ T5910] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 825.180883][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 825.212402][ T5910] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.249139][ T5910] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 825.292987][ T5910] usb 7-1: config 1 has no interface number 1 [ 825.364070][ T5910] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 825.399448][ T5910] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 825.544709][ T5910] usb 7-1: config 1 interface 2 has no altsetting 0 [ 825.574464][T18106] geneve3: entered promiscuous mode [ 825.575899][ T5910] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.609990][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.634753][ T5910] usb 7-1: Product: syz [ 825.638966][ T5910] usb 7-1: Manufacturer: syz [ 825.719349][ T5910] usb 7-1: SerialNumber: syz [ 825.782322][T18104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 826.023957][ T5910] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 826.042477][ T5910] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 826.100112][ T31] INFO: task syz.5.2686:16067 blocked for more than 143 seconds. [ 826.114792][ T31] Not tainted syzkaller #0 [ 826.115780][ T5910] usb 7-1: selecting invalid altsetting 0 [ 826.135404][ T5910] usb 7-1: selecting invalid altsetting 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 826.144715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.227805][ T31] task:syz.5.2686 state:D stack:26856 pid:16067 tgid:16066 ppid:10446 task_flags:0x400140 flags:0x00080002 [ 826.374724][ T31] Call Trace: [ 826.378122][ T31] [ 826.381107][ T31] __schedule+0x1798/0x4cc0 [ 826.438204][ T31] ? __pfx___schedule+0x10/0x10 [ 826.443198][ T31] ? schedule+0x91/0x360 [ 826.447843][ T5910] usb 7-1: USB disconnect, device number 29 [ 826.547208][ T31] schedule+0x165/0x360 [ 826.551431][ T31] schedule_preempt_disabled+0x13/0x30 [ 826.597610][ T31] __mutex_lock+0x7e6/0x1350 [ 826.602318][ T31] ? __mutex_lock+0x5bb/0x1350 [ 826.634204][ T31] ? usbdev_open+0x16e/0x760 [ 826.649093][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.674832][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 826.680393][ T31] ? bus_find_device+0x273/0x2b0 [ 826.752354][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 826.764649][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.769642][ T31] usbdev_open+0x16e/0x760 [ 826.774113][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 826.834813][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 826.840367][ T31] chrdev_open+0x4cc/0x5e0 [ 826.894782][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 826.914739][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 826.921172][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 826.936389][ T31] do_dentry_open+0x953/0x13f0 [ 826.941233][ T31] vfs_open+0x3b/0x340 [ 826.947658][ T31] ? path_openat+0x2ecd/0x3830 [ 826.964768][ T31] path_openat+0x2ee5/0x3830 [ 826.969508][ T31] ? __pfx_path_openat+0x10/0x10 [ 826.974479][ T31] do_filp_open+0x1fa/0x410 [ 826.979846][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.984791][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 826.995108][ T31] ? _raw_spin_unlock+0x28/0x50 [ 827.000030][ T31] ? alloc_fd+0x64c/0x6c0 [ 827.004395][ T31] do_sys_openat2+0x121/0x1c0 [ 827.010191][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 827.015739][ T31] ? rcu_is_watching+0x15/0xb0 [ 827.020526][ T31] __x64_sys_openat+0x138/0x170 [ 827.036513][ T31] do_syscall_64+0xfa/0xfa0 [ 827.041088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.048304][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.054447][ T31] ? clear_bhb_loop+0x60/0xb0 [ 827.059830][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.067066][ T31] RIP: 0033:0x7f9e7d98d810 [ 827.071521][ T31] RSP: 002b:00007f9e7e7f7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 827.081153][ T31] RAX: ffffffffffffffda RBX: 0000000000080100 RCX: 00007f9e7d98d810 [ 827.090176][ T31] RDX: 0000000000080100 RSI: 00007f9e7e7f7c10 RDI: 00000000ffffff9c [ 827.101570][ T31] RBP: 00007f9e7e7f7c10 R08: 0000000000000000 R09: 0000000000000000 [ 827.110206][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 827.119108][ T31] R13: 00007f9e7dbe6038 R14: 00007f9e7dbe5fa0 R15: 00007f9e7dd0fa28 [ 827.127758][ T31] [ 827.175548][ T31] [ 827.175548][ T31] Showing all locks held in the system: [ 827.183361][ T31] 2 locks held by ksoftirqd/1/23: [ 827.190339][ T31] 3 locks held by kworker/1:0/24: [ 827.198198][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 827.210551][ T31] #1: ffffc900001e7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 827.221426][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 827.235177][ T31] 1 lock held by khungtaskd/31: [ 827.240073][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 827.397443][ T31] 5 locks held by kworker/1:1/43: [ 827.402610][ T31] #0: ffff8881442da148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 827.555342][ T31] #1: ffffc90000b37ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 827.568295][ T31] #2: ffff888027b4e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 827.579415][ T31] #3: ffff88807dafc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 827.591105][ T31] #4: ffff8880297bc160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 827.602844][ T31] 3 locks held by kworker/u8:3/50: [ 827.608632][ T31] #0: ffff88814c49b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 827.628013][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 827.641751][ T31] #2: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 827.659155][ T31] 2 locks held by getty/5592: [ 827.663977][ T31] #0: ffff888033d9b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 827.675018][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 827.685812][ T31] 4 locks held by udevd/7022: [ 827.690626][ T31] #0: ffff88806c512e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 827.700679][ T31] #1: ffff888028c67488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 827.714647][ T31] #2: ffff888058efb1e8 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 827.724309][ T31] #3: ffff88807dafc198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 827.737028][ T31] 3 locks held by kworker/u8:11/13707: [ 827.742613][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 827.754970][ T31] #1: ffffc9000be9fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 827.766271][ T31] #2: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 827.779248][ T31] 1 lock held by syz.3.2117/13999: [ 827.784409][ T31] #0: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 827.793809][ T31] 2 locks held by syz-executor/15835: [ 827.801562][ T31] #0: ffff888055d74dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 827.813927][ T31] #1: ffff888055d740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 827.824106][ T31] 1 lock held by syz.5.2686/16067: [ 827.829333][ T31] #0: ffff888027b4e198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 827.838559][ T31] 3 locks held by syz-executor/16615: [ 827.844006][ T31] #0: ffff88802e52cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 827.857229][ T31] #1: ffff88802e52c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 827.867226][ T31] #2: ffffffff8f435268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 827.878483][ T31] 1 lock held by syz.1.3091/17756: [ 827.883621][ T31] #0: ffff888027b4e198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 827.892690][ T31] 4 locks held by syz-executor/17960: [ 827.898112][ T31] #0: ffff888044490dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 827.910666][ T31] #1: ffff8880444900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 827.920452][ T31] #2: ffffffff8f435268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 827.930554][ T31] #3: ffff88807e446b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 827.940298][ T31] 1 lock held by syz.6.3187/18095: [ 827.945536][ T31] #0: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 827.955073][ T31] 1 lock held by syz.2.3190/18101: [ 827.960590][ T31] #0: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 827.970235][ T31] [ 827.972661][ T31] ============================================= [ 827.972661][ T31] [ 827.981256][ T31] NMI backtrace for cpu 0 [ 827.981275][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 827.981294][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 827.981304][ T31] Call Trace: [ 827.981312][ T31] [ 827.981320][ T31] dump_stack_lvl+0x189/0x250 [ 827.981351][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.981374][ T31] ? __pfx__printk+0x10/0x10 [ 827.981402][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 827.981423][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 827.981443][ T31] ? __pfx__printk+0x10/0x10 [ 827.981463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.981491][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 827.981512][ T31] watchdog+0xf60/0xfa0 [ 827.981534][ T31] ? watchdog+0x1e2/0xfa0 [ 827.981555][ T31] kthread+0x711/0x8a0 [ 827.981578][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.981594][ T31] ? __pfx_kthread+0x10/0x10 [ 827.981616][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.981638][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.981658][ T31] ? __pfx_kthread+0x10/0x10 [ 827.981679][ T31] ret_from_fork+0x4bc/0x870 [ 827.981698][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.981721][ T31] ? __switch_to_asm+0x39/0x70 [ 827.981735][ T31] ? __switch_to_asm+0x33/0x70 [ 827.981749][ T31] ? __pfx_kthread+0x10/0x10 [ 827.981772][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.981803][ T31] [ 827.981810][ T31] Sending NMI from CPU 0 to CPUs 1: [ 828.132191][ C1] NMI backtrace for cpu 1 [ 828.132214][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 828.132232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 828.132243][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 828.132269][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 828.132283][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 828.132299][ C1] RAX: 4e5519b66c353900 RBX: ffffffff81967be7 RCX: 4e5519b66c353900 [ 828.132319][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bf53 RDI: ffffffff8bbf05e0 [ 828.132335][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 828.132347][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd470 [ 828.132360][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58 [ 828.132370][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 828.132384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 828.132395][ C1] CR2: 0000200000404030 CR3: 0000000075742000 CR4: 00000000003526f0 [ 828.132410][ C1] Call Trace: [ 828.132419][ C1] [ 828.132426][ C1] default_idle+0x13/0x20 [ 828.132447][ C1] default_idle_call+0x73/0xb0 [ 828.132470][ C1] do_idle+0x1e7/0x510 [ 828.132487][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 828.132505][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 828.132524][ C1] ? __pfx_do_idle+0x10/0x10 [ 828.132546][ C1] ? do_idle+0x4ed/0x510 [ 828.132563][ C1] cpu_startup_entry+0x44/0x60 [ 828.132580][ C1] start_secondary+0x101/0x110 [ 828.132601][ C1] common_startup_64+0x13e/0x147 [ 828.132630][ C1] [ 828.823896][ T3574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.877699][ T3574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 829.031077][ T3574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.043703][ T3574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 829.140147][ T3574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.150760][ T3574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 829.201753][ T3574] bond0: (slave netdevsim0): Releasing backup interface [ 829.214529][ T3574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.225956][ T3574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 830.509364][ T3574] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 830.527501][ T3574] bond0 (unregistering): Released all slaves [ 830.737638][ T3574] bond1 (unregistering): Released all slaves [ 830.844352][ T3574] tipc: Disabling bearer [ 830.861944][ T3574] tipc: Left network mode [ 831.222263][ T3574] hsr_slave_0: left promiscuous mode [ 831.229337][ T3574] hsr_slave_1: left promiscuous mode [ 831.263495][ T3574] veth1_macvtap: left promiscuous mode [ 831.271875][ T3574] veth0_macvtap: left promiscuous mode [ 831.277886][ T3574] veth1_vlan: left promiscuous mode [ 831.283245][ T3574] veth0_vlan: left promiscuous mode [ 831.412249][ T3574] pim6reg (unregistering): left allmulticast mode [ 832.770179][ T3574] IPVS: stop unused estimator thread 0... [ 832.896819][ T3574] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.012872][ T3574] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.131341][ T3574] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.221873][ T3574] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.431605][ T3574] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.532648][ T3574] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.624402][ T3574] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.696879][ T3574] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.925916][ T3574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.011447][ T3574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.108506][ T3574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.205380][ T3574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.411335][ T3574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.425702][ T3574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.548149][ T3574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.565983][ T3574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.642789][ T3574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.658465][ T3574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.777469][ T3574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.788384][ T3574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.089573][ T3574] bridge_slave_1: left allmulticast mode [ 835.095752][ T3574] bridge_slave_1: left promiscuous mode [ 835.103893][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.116326][ T3574] bridge_slave_0: left allmulticast mode [ 835.122008][ T3574] bridge_slave_0: left promiscuous mode [ 835.128300][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.141663][ T3574] bridge_slave_1: left allmulticast mode [ 835.147542][ T3574] bridge_slave_1: left promiscuous mode [ 835.153368][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.162857][ T3574] bridge_slave_0: left allmulticast mode [ 835.168610][ T3574] bridge_slave_0: left promiscuous mode [ 835.174363][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.186023][ T3574] bridge_slave_1: left allmulticast mode [ 835.191713][ T3574] bridge_slave_1: left promiscuous mode [ 835.197715][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.207569][ T3574] bridge_slave_0: left allmulticast mode [ 835.213221][ T3574] bridge_slave_0: left promiscuous mode [ 835.219991][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.051402][ T3574] .` (unregistering): Released all slaves [ 836.066939][ T3574] bond1 (unregistering): Released all slaves