last executing test programs: 11m33.677755767s ago: executing program 0 (id=672): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aef", 0x10}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0x18, 0x3, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}, 0x431b}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x1, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x3}}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000880) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000100)=0x1fffffb, 0x7ffffffc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=@random={'user.', '/dev/ttyS3\x00'}) r5 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x800, 0x5, 0x34a}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11m31.961494855s ago: executing program 0 (id=676): gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="487ea1fa82b81ac4e8e0cb1206b66237ed5ee1a5d80ceba86ad6794ad8ba1afbb9d1d4d210d28f8b555bf5467175cb3463f66507ced9fa7bb5e69b094f484a849781fdf2b9ed469f96b23ac367b757d67c522017ed31438a20b7cca1850c35d9d409e865e5d4ff74b034b734430370383ae97267d9072f790395a5e0592b2d52bf723889dde9d40eedd02a30d1223a46da024771a127d58f30ddd40e2994833c41eb821e38e175fded392ba2efbb32", &(0x7f00000000c0)="af6365ee5e544f25087c65c239deb87a7c928d4da0aa7283fe8f602c135b3bfbfbf22f5bda01acfa2dfa836264e9bf84cc79dd78b3b2f0e93f9b6a015567606876051e3c258ae69c756f5a4a5b5a0b117ef4b7af5a5b8f194e52de474ea9f8c6db62f6155fbe67f02115404283711223fc130060e6f4f16a9b2973cb9ee72a422900881bff9a59db5e7020977d60328e1f736f884b831988105be12308b81def292cc67524800c6a5642cce1b59e5f7fb0a13579f3dcb7857dda302c621c76442c670202c2"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000300000007010000554531f09e24ea4f233dd6d4c6b5358f25441792bb731eb42715e93924af5fd8f50b1603598bd5fe8cd4dd7463a4a483f5ba39c92291940cf7ccdb6275e4395344"], 0xc) (async) mq_open(&(0x7f0000000880)='GPL\x00', 0x40, 0x13, &(0x7f00000008c0)={0x101, 0x4, 0x2, 0x80}) (async) clock_gettime(0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x40c00, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x0, {0x39}}, 0x14}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 11m31.636096571s ago: executing program 0 (id=679): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc26, @empty, 0x3ff}], 0x1c) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0xfffd}], 0x1, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30, 0x8000}, 0x2800c051) 11m30.289418279s ago: executing program 0 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 11m29.954768096s ago: executing program 0 (id=684): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000080)=0x5, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="f00320000400140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000026c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002680)={&(0x7f0000002700)=ANY=[], 0x1e0}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='vlan1\x00', 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000000300080800000014000100fe880000000000000000000000000001"], 0x30}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00010000002d2deb06f0e8a8b499e7ffaf03ae83c23be19b7283b57981c898cb99becd5b210f33e2391e5a9aa19d9c004d08072d"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 11m29.340638833s ago: executing program 0 (id=686): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002600)={0xe, {{0xa, 0x4e21, 0x9, @mcast1, 0x8001}}, {{0xa, 0x4e21, 0xfff, @local, 0x6}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 11m28.415063135s ago: executing program 32 (id=686): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002600)={0xe, {{0xa, 0x4e21, 0x9, @mcast1, 0x8001}}, {{0xa, 0x4e21, 0xfff, @local, 0x6}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 6m33.620011117s ago: executing program 2 (id=1691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) getpid() r2 = socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000010) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000000), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 6m30.49719753s ago: executing program 2 (id=1699): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x6040c2, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x6040c2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) timer_create(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0xb8, 0x320, 0x238, 0x150, 0x320, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'lo\x00', 'veth0_macvtap\x00', {0xff}, {}, 0xff, 0x0, 0x50}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x620e, {0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xffffffff, 0xff, 'veth0_to_batadv\x00', 'bond0\x00', {0xff}, {}, 0x84, 0x1, 0x17}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x94}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0xff000000, 'dummy0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x0, 0x42}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x2, 0x3}, {0x3, 0x3, 0x7}}}}, {{@ip={@local, @remote, 0x0, 0xffffffff, 'ipvlan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "ea56"}}, @common=@icmp={{0x28}, {0x11, "ab25", 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0xb8, 0x320, 0x238, 0x150, 0x320, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'lo\x00', 'veth0_macvtap\x00', {0xff}, {}, 0xff, 0x0, 0x50}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x620e, {0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xffffffff, 0xff, 'veth0_to_batadv\x00', 'bond0\x00', {0xff}, {}, 0x84, 0x1, 0x17}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x94}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0xff000000, 'dummy0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x0, 0x42}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x2, 0x3}, {0x3, 0x3, 0x7}}}}, {{@ip={@local, @remote, 0x0, 0xffffffff, 'ipvlan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "ea56"}}, @common=@icmp={{0x28}, {0x11, "ab25", 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x19) write$binfmt_misc(r5, &(0x7f0000000dc0), 0x386) close(0x3) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x3, 0x3, 0x2000b46, 0x9, 0x5eef, 0x4, 0x3}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x48}}, 0x0) socket$inet6(0xa, 0x4, 0xb) 6m28.069328299s ago: executing program 2 (id=1712): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000400)={0x101200000, &(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000100), {0x22}, &(0x7f0000000140)=""/131, 0x83, &(0x7f0000000300)=""/203, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x0, 0x8000019, 0xfff, 0xe, 0x0, 0x7, 0x5, 0xffffffff, 0x9}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xc2e01, 0x1, 0x2d}, 0x18) dup2(r0, r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15060000000000000000010000002800018014000400ff02000000000000000000000000000108000700", @ANYRES32=r2, @ANYBLOB="0000000000000000f13b1c1ff7e9c5f4e281caecfa202f97dff83112aa11e0f93ea6ef55a4ef61d5611c3b91ec84fd67ec03361b697dcdae330f77f5d6a76c539ccb4e004a541d584611d7e1ce4419a5be5b23c33a8a3ab2ce293ac71e4cbcb06237afd4e11fdcf92bc682bcd44500941f550527f6a90bc797a1d4c3547ee7c57e1f9747000641543a9227e2152d4fd97999576bb8e48e7f34a99300239783c9f50bdbe6611bb57dabc9b002ca124f53b92bf0edc82157a5f12203b5b6eef88f026076aba595ba47bf60ec9292cfb48adca32a81ed08baac8673b92d85ff5c6ea83a78b95790f1833d1fb977435f63"], 0x3c}, 0x5, 0x0, 0x0, 0x4000}, 0x0) 6m27.176067092s ago: executing program 2 (id=1714): unshare(0x2040400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 6m26.913260219s ago: executing program 2 (id=1716): symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou`cid=', @ANYRESDEC=0x0]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7b1250b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r2) io_setup(0x4, &(0x7f00000014c0)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffff9, 0x0, 0xb59}) 6m25.226570204s ago: executing program 2 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x13e8, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x13bc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0xfc, 0x4, 0x0, 0x0, 0x8, 0xff, 0xfffffffb, [{0xcffd, 0x7fff, 0x9, 0x5}, {0x8, 0x8, 0x4, 0x5}, {0x8, 0xffff9eff, 0xcd, 0x5}, {0x1, 0x1000, 0x0, 0x1}]}}, @TCA_U32_ACT={0x1350, 0x7, [@m_mpls={0xe4, 0xf, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa, 0x5, 0x20000000, 0x1ff, 0x5}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x84, 0x6, "3ea72c113ee12337a8b3177c524f82f4c9312cf9c50de8f8a32304c044df0e03402c7a34d79288527c87d8b16fb084a7ce4ab1466b7cef000beebb8ff35cd2b8b78da5c1a6b52bb712d5f6aa22b2849180aadee427575babca8fe88cf705cdb14da41a9e46b8b7579bacf1b8e7d2549caa1de79adafdd469ac8a1f803b592fe5"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ctinfo={0xd0, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x9b, 0x6, "1b2e75107060edc0d6084e76b4490476e8d606e2554f98b001b74313a0c8252c1020bfb05fbada806215250b4b0314c57a7b56234e4c3b64136d87d129d150e067d862e27455ca41552d00550bc7509bbbcdf7cf4ebb1605099e1067e8d411712654d26dee85c18df5e33bb0deb7912e5b9c6fffca7a0065209f67127946a2cf5900dce89b777b571d047eb3eff7c0771f74d662363cc0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x144, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x80000001, 0x5, 0x7, 0x74}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x20000000, 0x8, 0x7}, 0x1, r3}}]}, {0xd8, 0x6, "480e05bad20acd594171d0c0dca3e0ca024bf09a6f0840a6167e19ab3510dbe4d4778d5b0a1826932ca701ccb7257fe492e285238d0e8871c5e6118ff426979f56b18f867e77e5fa6f47bcb3b1c51da0011ae10eea0aec16d5495d28ad330e3605cb6fe5f0dcfe9f0af958d56e49e5882d9ecce9bc7bdce51c562ce195949fadce6bcec6c56547459e403dfceebb7bd72117a5470392140e2e2dbacc16cfd593fc52eca842802af177575a3d3d439a7c9f31ebf401b89a679c31eb993475a1874e0fc9a5d4a4d0f36f72b5593601e28085fb3823"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x1054, 0x2, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xff, 0x8, 0x7, 0x7, 0x80000001}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x8848}, 0x24000000) 6m24.16575221s ago: executing program 33 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x13e8, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x13bc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0xfc, 0x4, 0x0, 0x0, 0x8, 0xff, 0xfffffffb, [{0xcffd, 0x7fff, 0x9, 0x5}, {0x8, 0x8, 0x4, 0x5}, {0x8, 0xffff9eff, 0xcd, 0x5}, {0x1, 0x1000, 0x0, 0x1}]}}, @TCA_U32_ACT={0x1350, 0x7, [@m_mpls={0xe4, 0xf, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa, 0x5, 0x20000000, 0x1ff, 0x5}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x84, 0x6, "3ea72c113ee12337a8b3177c524f82f4c9312cf9c50de8f8a32304c044df0e03402c7a34d79288527c87d8b16fb084a7ce4ab1466b7cef000beebb8ff35cd2b8b78da5c1a6b52bb712d5f6aa22b2849180aadee427575babca8fe88cf705cdb14da41a9e46b8b7579bacf1b8e7d2549caa1de79adafdd469ac8a1f803b592fe5"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ctinfo={0xd0, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x9b, 0x6, "1b2e75107060edc0d6084e76b4490476e8d606e2554f98b001b74313a0c8252c1020bfb05fbada806215250b4b0314c57a7b56234e4c3b64136d87d129d150e067d862e27455ca41552d00550bc7509bbbcdf7cf4ebb1605099e1067e8d411712654d26dee85c18df5e33bb0deb7912e5b9c6fffca7a0065209f67127946a2cf5900dce89b777b571d047eb3eff7c0771f74d662363cc0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x144, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x80000001, 0x5, 0x7, 0x74}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x20000000, 0x8, 0x7}, 0x1, r3}}]}, {0xd8, 0x6, "480e05bad20acd594171d0c0dca3e0ca024bf09a6f0840a6167e19ab3510dbe4d4778d5b0a1826932ca701ccb7257fe492e285238d0e8871c5e6118ff426979f56b18f867e77e5fa6f47bcb3b1c51da0011ae10eea0aec16d5495d28ad330e3605cb6fe5f0dcfe9f0af958d56e49e5882d9ecce9bc7bdce51c562ce195949fadce6bcec6c56547459e403dfceebb7bd72117a5470392140e2e2dbacc16cfd593fc52eca842802af177575a3d3d439a7c9f31ebf401b89a679c31eb993475a1874e0fc9a5d4a4d0f36f72b5593601e28085fb3823"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x1054, 0x2, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xff, 0x8, 0x7, 0x7, 0x80000001}, 0x1}}]}, {0x1004, 0x6, "6d8e818f82af063e5a76ccbaa93cfe813546ff4fcb2fe5150bfa93fd674decddc4975563b37c61b4a1e2073bfb2aacc6350437a81049334150ce84ab6b5854c25945943a81b76d59576f1cc923543fc791abf623ebc2a003d9331e6180333e14ecfc5301f75a8c3f0aebb7b82ae6e67c1cb37b590cb21143db097ed69e1c9af141d15aa25ee2028f19788dc35ab9764f37a966f0527a1f3a3d068a1cf419a655a5af767b333b60534cc0230ba603b21618d71b6c6e7fa8122402e98ddaf10311da42cf53fd1aaace8627e1f3c9f588aff5078ef0c56a5522d6ffa237fe1a217d8622cd64b7218d827a94c4ab1b7daa34abc091cefa0dfa9b93ed692337c96202f6535affdfa1e7d39255269de78a6f9d9dc06e86b573d6f9ba016f10d7fc37e4564e4bcfeb9f77f41ac5cd9ecac08f5eae8573f9447d7faca43b520f7ba1412ae0e0394883f51daaceabd99dd2fe84fbc425fdb9b9654a50df7afd2a52941925d9209f1dbb8a18529260b295467aa286d19fad181f985ba62119d6c1a540bc30d94460af6842b8dcb3c1fa5bd43e27934a173fa488e610a05b033409a03fd6cc7b193ffb90ff488b0803cbef643ab7e793a19d32f60b5d77f994c4b61fb432dfd0e5eeea42017cfaffcc456ab8cc685a6b187f13ed7abadcb97b289a8d3091b99a8e3c04914cb864eb7bd44707f2899433e058ce4638a789bb9e3cd8119a0113335a176774a27d843623d0a8ddd75f0bb2b4951957d0374e2965eb57853439bf3cc4b0f97c934cd041d353863b8f2a2e9e9413dabe07af1a3205226d952b740aefcd81331cc9120a7fedb8ad202a861e54715b3bcece652a439ee5fc7686caf28a46b57f68bfa4a5c6ab35a76750164f6cd9706a4ca1a0234d265e1ae33358671d27036095804cfd892854d1eb5107f13411ed71f89b8409ab386c65b3290180d9de51c15cf53f671077cc585ddf076777723d2abd310322bf27644c23a34ea3e3e7a3958d834a6763b04dee9c06314f924b3efa9d534558047ea2e38752bdaa2bc6baddf5ef09d454473f83530480c963007f8f7eb187f66a7598c960ad482e43a95b8c09a78cf349dfa9e2dcc3b01aea4ec685e71cb5a18620b0aa9ae0e93a4d81079334029ebe750a58b44d0de32fc7cbb47563d2b622d0e30b52a05d0db1516cf8cafb4c892aaef6b13eea406020ca819c7c411664a5f7e811ef77822d7d71ae703adcb6a1f87f693bcd87e52468b3f8cd6af23fb95fa736bb0da39e346c9db7a95b09c495bbe91ac429da729106ec912047de142df139dc38d0722d7be8d16e5a7066154653b585d53e633824c5a6d6970b26a7451ee20ea21fed7604e1881790f8b5d683958372bdabc7c529204391ffc22ee9296b813971f22f58360a94f3fba63d5630f919fed97721aee607c26b6b42c3068f64d78950dfc329d0fbe3a3fc108ec63c8ff93665fc031794dbd0e0dc5297661f85870e95c9970ea380ffd83909866317b56dcc8a6977033b5552cd94f40defde58399ea5e6e5dfc77ebd03cf46c11c36a29ea52a124429f14091a93a3f03a3d545c9ebcfc2d8ec53937ae1e9111fbe9a9ac9c891efc7d78ddf3107c8c70b1404ca5d6bc1c001c0a5612c63f14afe3f10fb32fabdf79ccecdd301b1926762b9dfc7c10c875a544f7d81d36ec43c10f01faddff18958faf94bd0592caa293ecc3f8af19b824bc52e2aaf0c5b56ffcbca4c0cc917b5097003c570bbf881dc9a56fad0bbe18ca0de1f2c474747f195437be6b394d50b5d4336496b1b8164f342c15fdc3186638da0222ec0e5142cc738036d9fdba4e1adbeca91486e21ceba4191e9fcb75e8388a051bb78c2737669d5e1ce8235d4fd31cfc85d35cc3ed2d75ccbbb1b3310af11bc34ad671b0daa8ae316c4339f7821f9ea65a92b7f3d934ef74812a117366e8bc08d5834eaed3544e68f961f2472ceab8689073ee24167d02ed46021ba79722ccfb011db60389afccaaad27ad5b61f0fcee5f06c2ce1d8551cb461e0de3e4d5d55a97f1e3ff97b8eb4ece48dbe724a729ab470470270ea055375961795f1e101db2876bd7ec96786dfe0c4bff42d680931ea96dda8d9c6483e8429f343852458a8a470632865548ba12f12e4eb800a6712702518d8678fcfaa706c208fcda67d8bbf1f1bda76f2ca088915156207c5c6c6c5e8d4967d1f536e7e214fad7ec4ce24c3ac195ffe1a8390c5276c6e740a4a4ec972ff09c235a452ff4d4fbca7c72c8a06d3f129c7e5102d8dc5d5190d88d1c0a23c70d2864f6e90737a9bbcef58e523bb618cce7b4e211433d80cd87d3371a354682815c63fcdab05141e2eb93c65ba290907161c4aed334589ceed45e3ea2f0a0564a8f42da7eba8020c197b9c04ee9664ae70fb279a71525600860950928746ea10c87a397e318931ad798e34225fee48ea29ec8209c4ed0f5fdf27e0a9d86907a7c44691729be4aa212ab6ee6acad64bc2419a23c4884e7f5cee007dc02776787114baccb64480f7d3f073da5fb68ff1f9869da3a0c0ca1d4b121926a176d68f7847849f3196481407b0e4538af4f175f530ed7cea1ebb8aeb67628834d2ea346811e1dbb4da8b96e34dfa14e9697a11b946fa57791f39b2e225c7050b63d472ef738dbb28d18d69f65b7c9a29f4ee622284ff4e8771fe1256409d9d17afb403cfae9c3590b3fe2f8f6a5b06d4c35fcc2b9b8c2f15af7a884af32beb0b2e185fd645e9f3a7b9ef61bddf9d569f1edc712171537f10beafdba1853b74866a98c1e3eb034a1fe384f46e37f494101fdf7bd4fefebe1f0ec7a95520473abbac672c2b2c90bcb0de240fcad95254b05ae94467e05e435b1d6e5f80d849c5bc50ba4377a41aef4079e92f5e9a3b5ed26aa694b86b904881a3290eb6453ae6751426d7f46a71a3f61557e1b33df31a01c9ec930e42af0b7f115a07083419ed84748acf1dcef636bb6f48aece718bbb30d9424d5ccd666c7ce3ec708163586227598f93e920d5ca02e98c5942afcc4591ca82ef4c656558c3b1e7a2cbfe204361efdcc3f99fa353bc05934ec0d5046bc1da5cce63cec820c655db6a9e0475a5549d355ed6edd1308215fcc945f2ba577512010a889e2bf920347ec47aca676e16425b4d44a8c1c10f84394b9790de209841cb258f5e3a255f53bb90ccec6b6638658707919a3ecb6a2522e6d70f5cadf5e4b56e4347777ef0f668f3fd0fbc3c83bb5f4eed5c0d062f041f7b78fb744eb453b468b373ccb46192cfeab667ebcde51954b75d32a40f790ad5d688447a5d45635c1101e0ec7a68e425b7c1db1d9df26bd0945855d421a763bc7c31be2283b75bc04d10b7f2bbbe0aeea49cceee4ce2a651b462169a1cb1fddac060f43eb718b74a881a87c4758bcc06d76b5bd56dbc685afb37d10497ef0cc5ee53af51ab375264d1f4e61c8e7178907eb5225d383dac0ec5e044a97cfa52ecbeb899185e0fcfaeefa5d1454a50bbc7dfef0cf8c6bb4a84f07d165953cbae9e751ff765906205a47dd144f648330d96908c342df5d04d459bd32c94cad95d834bfb27f23f2a9732b3a31dca537ae4ae6dda02fa68db0d438cb42c3a1e38df5725d29b665c5b602d81c040db1dc4dfdfc000b36ffbb94c149754b7bdeb97e5873d21abfcfcedc49429b55bf1c41d41b42bf7cf7f3509ac90883e919c9c588cf4f090142fcdf7dcaf3874b699303e15c23c547b83dfd3729e37f22aa63334a83a4c3fd82cc1b7893b0920f25f1bc0da0c91059bdbb3cb3f8e3ef38b2aba8be2aeba155f76d737a8fb693ee6dd83a84a13ce226c9dd620c22181a0eb1cd7fdb9265ef041de8e1180fa6b9246b1265fe7c26e2110fb3fb79f63980f7b9c4834dc14098ebc5189913e39d155e36f1d05b2516974403ac6803fc99e1c7597b34ec75c566590a0efd02c1ba96a9b4c5a20b4c7214f70cd47dc60f508a0754e4c6877aef35f945a707add18cc2adf255b53b7a3d2ef39097d9eb6ad71298102eba2fd2b7751dfd3073d8571a4f68edc1c3e5376532a8c11346275cc25c3f3275be93f288b3a537c741abf1bd3cfb5108c92c17ff2004d50b388572b9d9581bcc8345e903b37c9ca373288db52abbede08c60392f0b42aa612da0b40983cc401d82695b194d580f9201728518f1edf05929fb0996f9532fd6842083d54bf120884e764c7458c45f05531e010313893a6dbe2eb5dc32dde8dc13463345c822d6362243aa7226360c814f702287d20d3f127143bb4806564290df1eb3971a25a7a5e29cba0a419c5eb7218e411be853803082bde451179c2c9dd9bdff2fced141747ac0c7380ba68cfdd178b4f9bd9e6bf9e0830579dff575b15bafece96e38433f109f12dc3c955ca6c8343337eb51fc936f8388db7ac7ed4a454822145d08b59b579c19f717a1ccb3ccb94286f438e47a23f97ac028d34bb58825e4ccf000ad4486ce9e6528d66a9ac13b6d8ebde719f81a8141e91efa7c484844720300969aa76ee4d41b39bb12693d66e34f5f42d891f1adac0a86454b603cda7b08f21bb7c5e1f93a02a84c400f445f240b10a58424799a9a11bc11025c4c7d018025cdfc7da831d389d9c5a9f444a706d554fe148233d31cbadbe3e13935385411b084a8e7c0ac2f5c9e0db3c61b6ed5577577fdd23a93d99c311b79c0b343965b2a9a21000c1523d36525850db5d954a85429f3a772e6e7a9590b5a7877c7a245f16762ef47b1d3ae55a51e0ec53f4cf247a52a138a35a5aa103041b4aac4de250f44dd318fd558ff3484c6da4d1702c8be01de6796a41e3eee24864a89dc19dc9e491dbb019ee8a0c97e8a535369a2a76af256627ff10bbd68b96e44862c027016ce05c417fd38c6f70c2af0209f6eb17bee685e9ca64a06b40ade68809a294f8e91b89725f4265fafce1c8d0c3e97b804531480f1f9f85a177d477894b7090d533c72177a52ae5d8e58c48574ca323c3c13be88dde150eedc7426c79508a09a91a51ba6fb9eec6a12db75e2abca51560fb0edd2e2da4328afcdd447f69f441158a5f04c48870832609020cceeb456b9e464f7df3ec1f156b14e019853e92f2cdb2a5025fb2d691ddf558c99e89a4f84433079d432f2f9d9f4a845ed2d88d66727ef5b0cb0444ff7467ee76332ebd0b6789f755fef7436609b6112a0983c36c199ff8659285ddc19d56b1257b34ec5c77afa430e3e0708c8a63f2fd603404310dfbe31770182cd3852b5603678b963fdd213616557a0c8a38ee446704852a3bbca2189cffab69d51a880beab11d3111d78730bdc80a0c44f32fb7394b2e0fb87b8b197ab4f806f1130721818b3f245b6e47d248c98bc4bbd480aa10cc9e6cd32d2c6bb1d6da1fc8a99eeed643e88580fdd6a370d54979972af6e3bb2cd26d35371b776dfdc2cecfb64ffcd18972a9a54b6dcca79e6e298c44362ec6d49f0347c77e0d29001025bdb1c5b42463f6abe841aefbc93f907d834f1b08ec1d24cbc0008fc184a80624f97e7a86e515bf2d05bdf15c1859099d08112b03faab6d9470b40a9af817503479b96107ec889fce48afb9da6f940100725253fe38a1f6594c72edde98ab001a56e6db44de51540328ab5f9c1cbaca73ced78946a1afb56de7332af44e14aa0900d3855ce93874b1b61bda889106418e57b763ecb48773bbfaf66962e0d6b79518dbdbd5ed6fe5588668a1f14079c4b4dc7da9ec69e44c6725c84ea314c79d17342c972fac19c38a839213b2557b3a7a8b08578477dfe57d7e69186016cf17af74930bbeb37e154eed7b68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x8848}, 0x24000000) 2m36.21732403s ago: executing program 6 (id=2449): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="286ef44af434e4f37ff5f1cf5b9bff5895c14ec9c82194bcdcf97a9f1b55782ace056714507612096c1115b03a198e609f2209c8a001076ce1357fa8b5db097f68965dcf8eef1b376c00910ff7262d95000582728f5c664f8067ee0084cf8921cc8620be9c72748e4dc383b8ef2f657e1f1306496908d1340683881a47099534ee14db225eff0160860f31480c0aad3a08bda6039c3ee77128e9667d525b14f227dd04d75f682bae9d99bcd1f4c9e19ca6d22cf31b25b20429e82a6f748e430057658b806284f2b7d39872b09a5cffd2979a", @ANYRESHEX=r5], 0x0) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async, rerun: 32) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async, rerun: 32) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="74617267657420503a383a31662e3100323c157e71e0af3709555ad966bf0ce8bc75f49ff42cbb85b77cd47e42ce9cbf40"], 0x14) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) r6 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 2m36.068622169s ago: executing program 6 (id=2451): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) syz_pidfd_open(r0, 0x0) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) socket$netlink(0x10, 0x3, 0xa) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x10200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m35.309343604s ago: executing program 6 (id=2457): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="52010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) close(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0xa, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x46, 0x6c, 0x39, 0x40, 0x1784, 0x6, 0xbb2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x30, 0x3, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x62, 0x3, 0x94, 0x98, 0x2f, 0xd7, [], [{{0x9, 0x5, 0x4, 0x2, 0x400, 0x26, 0xe, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x4, 0x7}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x0, 0x30, 0xe0}}]}}]}}]}}, 0x0) 2m32.15817693s ago: executing program 6 (id=2464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000005240001800a00010072656469720000001000028008000140000000170800024000ffff140900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2m31.826303834s ago: executing program 6 (id=2467): socket(0x2, 0x2, 0x1) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (rerun: 64) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) (async) unlink(0x0) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r5, 0xfffffffffffffffe, 0x0) (async) sendfile(r5, r5, &(0x7f0000000540), 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) syz_clone3(&(0x7f00000003c0)={0xc0000080, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 64) 2m30.528822487s ago: executing program 6 (id=2474): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}, {&(0x7f00000001c0)="550bbbec2b28850d", 0x8}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x5, {0x7, 0x1, 0x1, 0x2}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192}) syz_usb_connect(0x5, 0x996, &(0x7f0000001000)=ANY=[@ANYBLOB="120100007d29d240b82227607a21000000010902840903000000000904510303020a000909210500000122c10e09"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80140002f80300000000000000040037"], 0x34}], 0x1}, 0x0) socket(0x28, 0x1, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064d0, &(0x7f0000000140)={0x0}) 2m15.470384741s ago: executing program 34 (id=2474): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}, {&(0x7f00000001c0)="550bbbec2b28850d", 0x8}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x5, {0x7, 0x1, 0x1, 0x2}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192}) syz_usb_connect(0x5, 0x996, &(0x7f0000001000)=ANY=[@ANYBLOB="120100007d29d240b82227607a21000000010902840903000000000904510303020a000909210500000122c10e09"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80140002f80300000000000000040037"], 0x34}], 0x1}, 0x0) socket(0x28, 0x1, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064d0, &(0x7f0000000140)={0x0}) 1m51.385303323s ago: executing program 4 (id=2586): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xd04}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 1m49.923751062s ago: executing program 4 (id=2592): socket(0x2b, 0x80801, 0x1) (async) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) gettid() (async) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = userfaultfd(0x80001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) fchmodat(r5, &(0x7f0000000740)='./file0\x00', 0x1b8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0xdcdfeeb0) (async) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0xdcdfeeb0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001600), 0x0, 0x0, 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x25, &(0x7f0000000080), 0x0) dup3(r9, r1, 0x80000) (async) r10 = dup3(r9, r1, 0x80000) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002b80)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/241, 0xf1, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000002b40)=""/4, 0x4, 0x2, 0x3b}}, &(0x7f0000000680)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 1m49.345208014s ago: executing program 4 (id=2594): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00', 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, 0x0, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x1, 0x7fffffff}}, 0x28) write$FUSE_ATTR(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000000)=0xfffffffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0xffffffff) r8 = openat2(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8100, 0x10, 0x30}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x17, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @generic={0x80, 0xd, 0x4, 0x40, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1m47.837437984s ago: executing program 4 (id=2599): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x30) r1 = fanotify_init(0x200, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000480)={0xfffffff8, {{0xa, 0x4e20, 0x0, @mcast2, 0x8e}}, {{0xa, 0x4e23, 0x2924, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff9}}}, 0x108) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$LOOP_SET_FD(r8, 0x4c00, r8) dup2(r7, r3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf090}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x3, 0xa4fffffc, @rand_addr=' \x01\x00'}}}, 0x108) fanotify_mark(r1, 0x441, 0x48000001, r0, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYRES16=r6], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xa8, &(0x7f00000005c0)=@string={0xa8, 0x3, "c9300e64ff3413104fd5c11ff0e32374d6d31a01cacc31a4c8b7cd11aec83f3cecc19ab361669d9a80e9b2f1633e9a735faa4047631dd9c4ddd3e4d621e38142ec46a842971e81c11125249d421ee68b97fc81177364ba238b072044b7bedbb4a8a8cf24ab3704b76e9fb84ef35c8be2c5ce5599fb8a76888ad54b4a5064ef09b8f4e8911d6698865af52b2a57ecf97977323f7950faabafa3e0902e15c979003890f307cc63"}}, {0x55, &(0x7f00000006c0)=@string={0x55, 0x3, "e787bdfe5ca040873f79b13dc172dcf7e4277c903ac83bfdf650479020471b4e6995716f31feaff1a95726909fd64b4f452e3dc15870254acd92a3895bef0eedf898376286d0862e74da6b9dc4b9e1819a008c"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m46.433805193s ago: executing program 4 (id=2603): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m45.057652859s ago: executing program 4 (id=2606): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1}, {r1, 0x8153}], 0x2, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @loopback}, &(0x7f0000000200)=0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x2}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/20, 0x14}, 0x6}], 0x1, 0x10001, 0x0) 1m44.20372399s ago: executing program 35 (id=2606): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1}, {r1, 0x8153}], 0x2, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @loopback}, &(0x7f0000000200)=0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x2}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/20, 0x14}, 0x6}], 0x1, 0x10001, 0x0) 17.492847932s ago: executing program 3 (id=2865): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0000000000005c00000000402f947800000000e0000001248022eb000000000000100008000000000086dd080088be00000000100000000100000000000000080022eb00000000200000020200000000000000000400000800655800000000"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=0x38) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x0, 0x5, 0x3], 0x100000, 0x8340}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x7c, 0x3, 0xd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x0, 0x8, 0xc, '\x00', 0x1, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.529124093s ago: executing program 3 (id=2869): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x3, @loopback, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000002680)={0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, 0x0}}], 0x2, 0x4040) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c0203010902"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xb, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x4adb}, {0xd, 0x24, 0xf, 0x1, 0x5d7, 0x5, 0xa0ae, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x6, 0x1}}}}}]}}]}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket(0x10, 0x803, 0x0) (async) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) (async) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) socket(0x2a, 0x2, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRES16=r8, @ANYRES8=r6, @ANYBLOB="71e79fd800000000140012800c000100028008000500042d9953a657df13c96a88a174fafaee55e2c0915ef31cfc3f0177501364ee6f732762afe4bc57c1e7638c19fe0b52d8dbd77a6956bd7f734b19a00ee5da7e4659dc6f75ab3ef4c6fb1b2afa62a8bbbfc926167e574024dcf095db0938d07d58982c9767e78b704a7bef00"/138, @ANYBLOB="a74ec159188095a65c82cca60e666000115fc3e258c534ce2ba431f980cebff96b8fec7770712fbeea363e4f7f14ebb86065c98ff0c3eff397ba418ae9a6207838cfdcefb22a2578cda9e61ff90b18a76c1cf346ea76640a69331468bb062b789a0399daf16855f1a359a785b964018fb347000a94864505c7ad1d5df07c00714002f094625cc0f12148332304d651aa24e7b065c77ec8444cc788ca9c6a7ca9a85b737cd7fbbb8734dfc85452541ef98d5c6200a7df9387e117b181e627"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0xfff2}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 15.17945707s ago: executing program 3 (id=2871): r0 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r0, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0xfff, r0, 0x1, {0x16, 0x5}, 0x6}, 0x1) 14.673156271s ago: executing program 5 (id=2872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x40000003, 0x1, 0x1, "910f87a5bb5de06185cd000000000000000000001800", 0x51424752}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000080)={0x3, {{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}}, {{0xa, 0x4e22, 0x6, @local, 0xffffffff}}}, 0x108) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.620287496s ago: executing program 3 (id=2873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0xff7f, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 14.280241148s ago: executing program 3 (id=2876): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@remote, 0xffff, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x7, 0x0, 0x80000001, 0x800000000}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0xffff, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x68, 0x14, 0x2, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x10}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_LABEL={0x14, 0x3, 'vxcan1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x2, 0x9}}, @IFA_FLAGS={0x8, 0x8, 0x701}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd7}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async) close(r4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) 14.106977794s ago: executing program 5 (id=2877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x49, 0x0, "012fdd90c46483b13de94bc700022eb76eab66bf16657b7754ec9f3d5818a5bbd020fa3068af5bb2fffedeacfab26318efa2ec16f6a9bdcfe9c0a30eca37f5b9b23edc3aa8912ec22f0fb8afdb31449f"}, 0xd8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x7, 0x1801, 0x0, 0x0}, {0xfffc, 0x5611, 0x0, 0x0}], 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x1004, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000500)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009040000008afb1a008bf2be6b5c47b2453d31902ee6e0cc81ddd467ff27c1d0eededfff478c1afce6465e275a17e1ae6b442e25146ace3991a0ae6f1823a628fb9fc904de6e34d5a9d766f929ccc72e2aa8de3acb7428d51f75567a20d6c5adfffed8058b6f72d15d027c227d7ad6505f003b688619925366cd51baad91580d917d6578adaa38426c68a2c7a872bbd830635e"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xd0103, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r7, 0x0, 0x1, 0x4}}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r8, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7498, 0x0, 0xffffffff, 0x1f7}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) 13.723865129s ago: executing program 7 (id=2879): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x95, 0xaf, 0x32, 0x40, 0x644, 0x800f, 0xc577, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xc, 0x48}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0xa7, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0x7, 0x60, 0x6d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "af5561"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x52, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x1, 0x6, 0x3b, 0x3, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x10, 0x2d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x21, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x7f, 0x10}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x40, 0x9, 0x1, 0x40, 0x4}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x17, &(0x7f0000000180)=@string={0x17, 0x3, "19f9c5427c7bef67ea7da56ae599a91cf99cdb6ae7"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x810}}]}) 12.818031063s ago: executing program 3 (id=2880): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x5, 0x84) clock_gettime(0x0, &(0x7f0000001740)={0x0, 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4}, 0x0, 0x0}, 0x20) recvmmsg(r1, &(0x7f00000016c0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000000)=""/51, 0x33}], 0x4, &(0x7f00000013c0)=""/216, 0xd8}, 0x9}, {{&(0x7f00000014c0)=@caif=@rfm, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/115, 0x73}], 0x1, &(0x7f0000001600)=""/141, 0x8d}, 0xb}], 0x2, 0x40000163, &(0x7f0000001780)={r2, r3+60000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000002800)={@ax25={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, {&(0x7f00000017c0)=""/4096, 0x1000}, &(0x7f00000027c0), 0x8}, 0xa0) 10.401512947s ago: executing program 5 (id=2885): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@setlink={0x44, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_CARRIER={0x0, 0x21, 0x5}, @IFLA_MASTER={0xffffffffffffff17, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 10.385077221s ago: executing program 7 (id=2886): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4000) fsopen(0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0x1040) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000701, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4c050}, 0x40) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x6, 0xfffffffd, 0x3ff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 9.348066194s ago: executing program 5 (id=2887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xf0, 0x0, 0xb47, 0x9, 0x0, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049", 0xf2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = io_uring_setup(0x6ddb, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3fffffe, 0x3ca}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xd, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0xfffffd9c}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x24, 0x301, 0x70bd29, 0x25dfdbf7, {0x1}, [@generic="0d75f3"]}, 0x18}}, 0x0) 8.845148071s ago: executing program 1 (id=2888): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="d74d507910900b13d67efb33a1d2eab1380b6f36350b0cb29543ec928bb715d15c1b1d897c63b079b5d4804b36533dcfe3f385ccea538f931070b84be370b05b997ec3d5892242560900640233c1ba0b612ba67b5873b5b96e0814169987ef8f892a0b7a89b3f53eff4afc11efa2834d3704a34eb7d24cda31", 0x79}, {&(0x7f00000005c0)="53c0fa4ea15f960076fd9043b0a38d64ddda804eec0df2dcdbdf98ea21302abec111ee42c422838338f6e8702b66b0d095d79178516c5c2d7b67a3dff5579e9b756dc949735f6375ef83e7fdf71e7b30182360cce6568fc6e7aaf7a38291076d0969d7d19bb908209ec26a2dc8c8588ebed4c7418e3de73654d8e52e803b51a2f34b5601898232c078612ec1ecdc581f253d42b92ba85dce07457068841c6e9e9f7326", 0xa3}], 0x2, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r2, r3, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r3, r2, r1, r2, r4]}}], 0x140, 0x4}}], 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2115, 0x490400) fadvise64(r5, 0x8000000000000002, 0x9, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x59dd, 0xd868db8e834c4cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x480c6) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="47a555a35f2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000890000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0xfe, 0x80000001}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x25e, 0x7, 0x4, 0x6d, 0x1, 0x2, 0xffffffff, 0xde, 0x9c7b, 0x1, 0xfff, 0x6, 0x6, 0xffffffffffffffff, 0x4], 0x5000, 0x41354}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x0, 0x1, 0x7, 0x0, 0x5, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800f3d202000000fddbdf86157239af4186fa4fa72502000004fd00c807000000000c00168008000600050000000600150003000000"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$netlink(0x10, 0x3, 0xb) 8.148074905s ago: executing program 1 (id=2890): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f00000001c0), 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) unlinkat(0xffffffffffffffff, 0x0, 0x200) (async) unlinkat(0xffffffffffffffff, 0x0, 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000300)=@mmap={0x438f, 0x8, 0x4, 0x4000, 0x5, {r1, r2/1000+10000}, {0x2, 0xc, 0x9, 0x6, 0x0, 0x3, "d5a7df96"}, 0x1, 0x1, {}, 0x2, 0x0, r3}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x14382) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="911069000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000240)={r8, 0x0, r9, 0x4, 0x8, 0xfffffe01, 0x200, 0x8c4d, 0x4, 0xffff, 0x6}) r10 = syz_open_dev$audion(&(0x7f0000000000), 0xf, 0x1) mmap(&(0x7f000012d000/0x1000)=nil, 0x1000, 0x100000b, 0x110, r10, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.08683859s ago: executing program 8 (id=2893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x18401) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=0x0) close_range(r1, r3, 0x0) syz_io_uring_submit(0x0, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000003e00)=""/4088, 0xff8}, {&(0x7f0000000440)=""/234, 0xea}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x200001}], 0x4, 0x40010000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x740, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x200000000000024a, 0x0, &(0x7f0000000880)='syzkaller\x00', 0xdf64, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x0, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x10, 0x7}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-ce\x00'}, 0x37) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000006006a91f4a732c85d0000000001000000b98ad4be3815400000"], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0x7d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={0x0, 0x2a8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000a8440000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f00000021c0)={0x18, 0x0, r5, {0x7}}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 6.765471408s ago: executing program 8 (id=2895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f20f1b230f783a440f20c066350c000000440f22c066b95502000066b85f00000066ba000000000f300f2133f30fc2b6d400320f019eb93667f00fb05f74bad104ec0f9f9f0e00", 0x47}], 0x1, 0x20, 0x0, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x3000], 0x0, 0x5, 0x8}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e23, 0x2, 'sed\x00', 0xe, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4000004}}, 0x44) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) (async) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000680)={"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"}) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x7}, 0x38) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.260687951s ago: executing program 8 (id=2896): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) unshare(0x24060400) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x3}, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) unshare(0x24060400) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x3}, 0x20) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) 6.117263038s ago: executing program 5 (id=2897): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=ANY=[], 0x2b4}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000001, 0x0, 0x2, 0xb49, 0x8, 0x8, 0x0, 0x3}, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r6, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r8, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040091) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0xfffffffffffffe3e) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r12, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) 5.637972947s ago: executing program 7 (id=2898): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x8, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 5.021295276s ago: executing program 1 (id=2899): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x8, 0x0, {0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0xfc27, 0x2, 0x0, 0x4, 0x6000, 0x0, 0x0, 0x0, 0x0, 0xb82, 0x1000000}}}, 0x78) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000500)=@ax25={{0x3, @rose}, [@remote, @default, @null, @default, @netrom, @null, @bcast]}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000800)=""/68, 0x44}], 0x2, &(0x7f0000000700)=""/227, 0xe3}, 0x8}], 0x1, 0x40002001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = dup2(r1, r1) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f00000006c0)={0x0, 0x0, 0x20005, 0x6}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r6 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000002000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r7, 0x1000000, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x206, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x9, 0xff9e}) landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050081) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0x2, 0x2}, {0xe}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040) syz_open_dev$video4linux(&(0x7f0000000080), 0xfffffffffffffffd, 0x204202) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='/dev/i2c-#\x00', &(0x7f0000000240)='/d\x00\xa9\xd5.A[o\xbf\xeabe\xcbv#\x01', 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0xde6b, 0x1}, {0x4d, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) 3.920987269s ago: executing program 1 (id=2900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa", @ANYRES8], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b0001006572"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) lsetxattr$security_capability(&(0x7f0000001500)='./cgroup/cgroup.procs\x00', &(0x7f0000001580), 0x0, 0x0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000100)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa", @ANYRES8], 0x0) (async) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b0001006572"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) lsetxattr$security_capability(&(0x7f0000001500)='./cgroup/cgroup.procs\x00', &(0x7f0000001580), 0x0, 0x0, 0x3) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000100)}, 0x10) (async) 3.671099255s ago: executing program 8 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x2501}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="20050108000020"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r2, 0x10000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}, {&(0x7f0000003040)="c2", 0x1}], 0x2}}], 0x2, 0x4000000) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3.4804677s ago: executing program 1 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235008000000f30b8010000000f01c1440f20c0350c000000440f22c0b9be080000b882c9888aba000000000f30b9b50800000f32ea4c000000f300660f204466ba2000ec0fc7b9008000000f001f", 0x55}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) (async) r3 = syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) (async) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "520cb365", {0x1, 0x17a, 0x1, 0x14, 0x7f}}) (async) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x0, 0x0, 0xd, 0x2, 0x8, 0xdd}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0x80405600, &(0x7f0000002dc0)={0x8, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x10, 0x4, "e6035a2f"}, 0x4}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x0, 0x1a) getdents(r5, &(0x7f0000000140)=""/177, 0xb1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000), 0x4) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000240)={0x96bb, 0xfc0, 0xff, 0x1, 0x13}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.321047737s ago: executing program 7 (id=2903): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4000) fsopen(0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0x1040) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000701, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4c050}, 0x40) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x6, 0xfffffffd, 0x3ff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 724.195659ms ago: executing program 7 (id=2904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) preadv(r1, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/6, 0x6}], 0x2, 0x0, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500060000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xc, 0x502) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) 514.046854ms ago: executing program 8 (id=2905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x8004e20}, 0xfcdd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 373.17814ms ago: executing program 1 (id=2906): unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r3 = io_uring_setup(0x1f9, &(0x7f0000002280)={0x0, 0x11ab, 0x40, 0x1, 0xa2}) io_uring_setup(0x2ad3, &(0x7f0000002300)={0x0, 0xd4a6, 0x80, 0x0, 0x39f, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18, r6}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000180)={0xe, @sliced={0x0, [0x7ff, 0x7, 0x5, 0x9, 0x5, 0x4, 0xfffd, 0x4, 0x8, 0x9, 0x1, 0xa, 0xca4c, 0x8001, 0x400, 0x1, 0x89, 0x401, 0x1, 0x0, 0x3, 0x5, 0x2, 0x9, 0xa, 0x8, 0x3, 0x0, 0x3, 0x5594, 0x8, 0x5, 0x8, 0x100, 0x5, 0x205, 0x6, 0x1, 0x5, 0x6, 0x3, 0x0, 0x82, 0x2, 0x5, 0x1, 0x8, 0x8], 0x10002}}) read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 221.096706ms ago: executing program 5 (id=2907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2a2b5aa40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec36, 0x2, 0x2, 0x4000032f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x28, 0x2007, @fd, 0x9, 0x0, 0x0, 0x0, 0x1, {0x1}}) r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="2f4e02000000b23b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000080)={0xffff1000, 0x104000, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x7, 0x115, "55b1db"}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) socket$netlink(0x10, 0x3, 0xf) syz_usb_control_io$uac1(r5, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_sctp_SCTP_INITMSG(r12, 0x84, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="000226bd7000fedbdf250600000008000300", @ANYRES32=r11, @ANYBLOB="0500530000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x20008890) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 0s ago: executing program 8 (id=2908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40, 0x2}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@delchain={0x34, 0x64, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {}, {0xb, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xa6, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): ferent from the interface descriptor's value: 3 [ 817.329746][ T2152] usb 2-1: USB disconnect, device number 59 [ 817.331354][T16334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.348508][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 817.373431][ T43] usb 6-1: config 162 interface 150 has no altsetting 0 [ 817.393997][T16334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.398658][ T43] usb 6-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 817.413323][ T5909] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 817.424971][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.448513][ T43] usb 6-1: Product: syz [ 817.451211][T16334] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.452837][ T43] usb 6-1: Manufacturer: syz [ 817.472650][T16334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.498537][T16334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.507337][ T43] usb 6-1: SerialNumber: syz [ 817.530294][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 817.532823][T16334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.604673][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 817.632627][ T5909] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.649900][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 817.655448][ T5909] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 817.698659][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.729525][ T5909] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 817.743354][ T43] usb 6-1: Found UVC 0.0a device syz (058f:3820) [ 817.752589][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.778568][ T43] usb 6-1: No valid video chain found. [ 817.792839][ T5909] usb 5-1: config 0 descriptor?? [ 817.824158][ T43] usb 6-1: USB disconnect, device number 8 [ 817.902523][ T6266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.928910][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 817.942648][ T6266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.062332][ T6266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.087761][ T6266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.164052][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 818.253742][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 818.253831][ T30] audit: type=1326 audit(1753148297.787:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.4.2544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5268b8e9a9 code=0x0 [ 818.329174][ T5909] corsair-cpro 0003:1B1C:0C10.002F: item fetching failed at offset 2/5 [ 818.362400][ T5909] corsair-cpro 0003:1B1C:0C10.002F: probe with driver corsair-cpro failed with error -22 [ 818.558448][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 818.705139][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 819.100932][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 819.203259][ T5909] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 819.282430][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 819.363304][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 819.372374][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 819.383232][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 819.393374][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 819.407424][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 819.428346][ T5909] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 819.470263][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.489160][ T5909] usb 2-1: Product: syz [ 819.502864][ T5909] usb 2-1: Manufacturer: syz [ 819.591565][ T5909] usb 2-1: SerialNumber: syz [ 819.597487][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 819.638644][ T5909] usb 2-1: config 0 descriptor?? [ 819.737346][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 819.820236][T16505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 819.852577][ T5909] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 819.866235][ T5909] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 819.880412][ T5909] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 819.890935][ T5909] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 819.899692][ T5909] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 820.106545][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 820.142541][ T5909] usb 5-1: USB disconnect, device number 39 [ 820.489520][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 820.602401][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 820.745768][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 820.803389][T15505] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 820.843206][ T5909] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 820.920490][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 820.970673][T15505] usb 4-1: config 7 has an invalid interface number: 227 but max is 3 [ 820.986137][T15505] usb 4-1: config 7 has an invalid descriptor of length 228, skipping remainder of the config [ 821.003289][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 821.012541][ T5909] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 821.053714][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 821.066009][ T5909] usb 5-1: config 1 interface 0 has no altsetting 0 [ 821.088155][T15505] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 821.100706][ T5909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 821.142702][T15505] usb 4-1: config 7 has no interface number 0 [ 821.161575][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 821.188479][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.270742][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 821.278128][T15505] usb 4-1: config 7 interface 227 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 821.309803][ T5909] usb 5-1: Product: à° [ 821.337428][ T5909] usb 5-1: Manufacturer: ã° [ 821.371349][ T5909] usb 5-1: SerialNumber: 艽忹㞾ꪠ㲲켉鬀ⳡ [ 821.376922][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 821.395865][T15505] usb 4-1: config 7 interface 227 has no altsetting 0 [ 821.455835][T15505] usb 4-1: New USB device found, idVendor=0c45, idProduct=602e, bcdDevice=b1.c5 [ 821.515261][T15505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.538734][T15505] usb 4-1: Product: syz [ 821.579990][T15505] usb 4-1: Manufacturer: syz [ 821.607444][T15505] usb 4-1: SerialNumber: syz [ 821.643553][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 821.702159][T16516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.754997][T16516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.835364][ T5909] usbhid 5-1:1.0: can't add hid device: -71 [ 821.841991][ T5909] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 821.880855][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 821.917523][T15505] gspca_main: sonixb-2.14.0 probing 0c45:602e [ 821.934850][ T5909] usb 5-1: USB disconnect, device number 40 [ 821.949833][T15505] sonixb 4-1:7.227: Error reading register 00: -71 [ 821.999997][T15505] usb 4-1: USB disconnect, device number 54 [ 822.122018][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 822.239107][ T5909] usb 2-1: USB disconnect, device number 60 [ 822.272453][ T5909] mcba_usb 2-1:0.0 can0: device disconnected [ 822.346174][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 822.409863][ T5849] Bluetooth: hci1: adv larger than maximum supported [ 822.409947][ T5849] Bluetooth: hci1: Malformed LE Event: 0x0d [ 822.415382][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 822.468484][ T30] audit: type=1400 audit(1753148302.007:892): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="/d" pid=16541 comm="syz.5.2561" [ 822.489137][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 822.560410][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 822.668029][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 822.825595][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 822.833097][ T5938] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 823.023859][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 823.040738][ T5938] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 823.061783][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.129743][ T5938] usb 5-1: Product: syz [ 823.148418][ T5938] usb 5-1: Manufacturer: syz [ 823.187928][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 823.199892][ T5938] usb 5-1: SerialNumber: syz [ 823.229954][ T5938] usb 5-1: config 0 descriptor?? [ 823.278489][ T5938] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 823.338194][ T5938] usb 5-1: Detected FT232H [ 823.343236][T15505] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 823.481295][T16549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.608454][T16549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.631922][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 823.681951][ T5938] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 823.719501][T15505] usb 2-1: config 0 has no interfaces? [ 823.736029][ T5938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 823.796051][T15505] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 823.807323][ T5938] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 823.827633][T15505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.848727][ T5938] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 823.863262][T15505] usb 2-1: Product: syz [ 823.875115][T15505] usb 2-1: Manufacturer: syz [ 823.890009][T15505] usb 2-1: SerialNumber: syz [ 823.916289][T15505] usb 2-1: config 0 descriptor?? [ 823.933455][ T5938] usb 5-1: USB disconnect, device number 41 [ 823.965907][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 824.016420][ T5938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 824.064680][ T5938] ftdi_sio 5-1:0.0: device disconnected [ 824.170177][T16566] input: syz0 as /devices/virtual/input/input94 [ 824.175109][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 824.242662][T16566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2566'. [ 824.252045][T16566] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2566'. [ 824.259955][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.303620][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.330925][T16566] batadv0: left promiscuous mode [ 824.349618][T16566] batadv0: left allmulticast mode [ 824.394193][T16566] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2566'. [ 824.444568][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 824.463282][T15505] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 824.548377][T16566] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 824.637254][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 824.645760][T15505] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 824.660170][T15505] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 824.680843][T15505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.713888][T15505] usb 6-1: config 0 descriptor?? [ 824.862356][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 824.863232][ T5909] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 824.966872][T15505] usbhid 6-1:0.0: can't add hid device: -71 [ 824.977019][T15505] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 825.010009][T15505] usb 6-1: USB disconnect, device number 9 [ 825.024549][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 825.033251][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 825.045599][ T5909] usb 5-1: config 5 has an invalid interface number: 35 but max is 1 [ 825.075343][ T5909] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 825.093913][ T5909] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 825.113507][ T5909] usb 5-1: config 5 has no interface number 0 [ 825.126368][ T5909] usb 5-1: config 5 has no interface number 1 [ 825.140760][ T5909] usb 5-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.176730][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 825.189358][ T5909] usb 5-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.209011][ T5909] usb 5-1: config 5 interface 35 has no altsetting 0 [ 825.239598][ T5909] usb 5-1: config 5 interface 4 has no altsetting 0 [ 825.271277][ T5909] usb 5-1: config 5 interface 4 has no altsetting 1 [ 825.309716][ T5909] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 825.335533][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.357158][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 825.363403][ T5909] usb 5-1: Product: syz [ 825.366749][T16602] binder: 16600:16602 ioctl 4018620d 0 returned -22 [ 825.367948][ T5909] usb 5-1: Manufacturer: syz [ 825.381431][ T5909] usb 5-1: SerialNumber: syz [ 825.437670][T16602] binder: 16600:16602 ioctl 4018620d 0 returned -22 [ 825.451167][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 825.457415][T16602] binder: 16600:16602 ioctl 4018620d 0 returned -22 [ 825.501981][T16602] binder: 16600:16602 ioctl 4018620d 0 returned -22 [ 825.534648][T16602] binder: 16600:16602 ioctl 4018620d 0 returned -22 [ 825.655604][ T5909] ttusbir 5-1:5.35: cannot find expected altsetting [ 825.665573][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 825.694632][ T5909] ttusbir 5-1:5.4: cannot find expected altsetting [ 825.758580][ T5909] usb 5-1: USB disconnect, device number 42 [ 825.911608][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.141156][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.146742][ T5909] usb 2-1: USB disconnect, device number 61 [ 826.180172][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.272094][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.338055][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.480449][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.513078][ T5938] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 826.610277][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.633293][ T5909] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 826.684561][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.690806][ T5938] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 826.715685][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.731911][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.754938][ T5938] usb 4-1: config 0 descriptor?? [ 826.805789][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 826.833350][ T5909] usb 2-1: can't read configurations, error -61 [ 826.845743][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 826.962669][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 827.003081][ T5909] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 827.218346][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 827.271361][ T5909] usb 2-1: can't read configurations, error -61 [ 827.318970][ T5909] usb usb2-port1: attempt power cycle [ 827.386312][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 827.548679][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 827.683106][ T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 827.703989][ T5909] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 827.777201][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 827.852192][ T5909] usb 2-1: can't read configurations, error -61 [ 827.864209][ T43] usb 6-1: device descriptor read/64, error -71 [ 827.896024][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 828.003544][ T5909] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 828.045672][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 828.064844][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 828.085722][ T5909] usb 2-1: can't read configurations, error -61 [ 828.105547][ T5909] usb usb2-port1: unable to enumerate USB device [ 828.193448][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 828.250394][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 828.353156][ T43] usb 6-1: device descriptor read/64, error -71 [ 828.716732][ T43] usb usb6-port1: attempt power cycle [ 828.801193][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 829.040098][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 829.073096][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 829.186327][ T43] usb 6-1: device descriptor read/8, error -71 [ 829.307055][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 829.329142][ T5938] usb 4-1: Cannot set autoneg [ 829.334436][ T5938] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 829.378036][ T5938] usb 4-1: USB disconnect, device number 55 [ 829.443083][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 829.467498][ T43] usb 6-1: device descriptor read/8, error -71 [ 829.601846][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 829.608689][ T43] usb usb6-port1: unable to enumerate USB device [ 831.116426][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 831.278206][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 831.306417][T16668] xt_CT: No such helper "syz1" [ 831.443301][ T5938] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 831.508284][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 831.583215][ T5938] usb 6-1: device descriptor read/64, error -71 [ 831.616350][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 831.647469][T16672] »»»»»»: renamed from ip_vti0 (while UP) [ 831.805063][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 831.911463][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 831.953113][ T5938] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 832.004377][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 832.183608][ T5938] usb 6-1: device descriptor read/64, error -71 [ 832.188705][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 832.220033][T16684] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2595'. [ 832.314076][ T5938] usb usb6-port1: attempt power cycle [ 832.558569][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 832.672438][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 832.690653][ T5938] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 832.772669][ T5938] usb 6-1: device descriptor read/8, error -71 [ 833.119197][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.243196][ T5938] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 833.277217][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.308438][ T5938] usb 6-1: device descriptor read/8, error -71 [ 833.400961][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.443833][ T5938] usb usb6-port1: unable to enumerate USB device [ 833.490423][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.539027][T16700] netlink: 'syz.1.2597': attribute type 11 has an invalid length. [ 833.544758][T16700] binder: 16697:16700 ioctl 4018620d 0 returned -22 [ 833.598557][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.635754][ T5949] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 833.687066][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.783321][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 833.785025][ T5949] usb 5-1: config 0 has no interfaces? [ 833.803263][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 833.896073][T16704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.896407][T16704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.904207][ T5949] usb 5-1: string descriptor 0 read error: -71 [ 833.904374][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 833.904400][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.930781][ T5949] usb 5-1: config 0 descriptor?? [ 833.932184][ T5949] usb 5-1: can't set config #0, error -71 [ 833.937072][ T5949] usb 5-1: USB disconnect, device number 43 [ 833.946259][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 834.100319][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 834.225605][T16707] ======================================================= [ 834.225605][T16707] WARNING: The mand mount option has been deprecated and [ 834.225605][T16707] and is ignored by this kernel. Remove the mand [ 834.225605][T16707] option from the mount to silence this warning. [ 834.225605][T16707] ======================================================= [ 834.242563][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 834.257007][T16710] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2598'. [ 834.257038][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2598'. [ 834.618845][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 834.764957][T16718] loop6: detected capacity change from 0 to 7 [ 834.770972][ T5967] Dev loop6: unable to read RDB block 7 [ 834.771021][ T5967] loop6: unable to read partition table [ 834.771289][ T5967] loop6: partition table beyond EOD, truncated [ 834.793579][T16718] Dev loop6: unable to read RDB block 7 [ 834.793632][T16718] loop6: unable to read partition table [ 834.793920][T16718] loop6: partition table beyond EOD, truncated [ 834.793957][T16718] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 834.938451][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 835.321097][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 835.614089][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 835.952553][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 836.378021][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 836.630138][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 836.742540][T10075] bridge_slave_1: left promiscuous mode [ 836.762625][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.802704][T10075] bridge_slave_0: left promiscuous mode [ 836.827859][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.002159][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 837.294908][T16739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2609'. [ 837.465196][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 837.479368][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 837.894985][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 838.029594][ T30] audit: type=1326 audit(1753148317.567:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16748 comm="syz.3.2611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x0 [ 838.246018][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 838.259562][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 838.295797][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 838.323456][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 838.334350][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 838.458362][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 838.922234][T10075] tipc: Disabling bearer [ 839.038906][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 839.635902][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 839.946910][T10075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.962706][T10075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.988560][T10075] bond0 (unregistering): Released all slaves [ 840.021661][T16731] kthread_run failed with err -4 [ 840.431541][ T5861] Bluetooth: hci4: command tx timeout [ 840.640022][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 840.663939][T16773] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2615'. [ 841.067716][T10075] tipc: Disabling bearer [ 841.078708][T10075] tipc: Left network mode [ 841.288067][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 841.761462][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 841.797176][ T5938] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 842.043138][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 842.122624][ T5938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 842.179467][ T5938] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 842.213045][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.247429][ T5938] usb 2-1: Product: syz [ 842.266471][ T5938] usb 2-1: Manufacturer: syz [ 842.285558][ T5938] usb 2-1: SerialNumber: syz [ 842.336146][ T5938] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input97 [ 842.493197][ T5861] Bluetooth: hci4: command tx timeout [ 842.618080][ T5909] usb 2-1: USB disconnect, device number 66 [ 842.624331][ T5204] bcm5974 2-1:1.0: could not read from device [ 842.700348][T11852] bcm5974 2-1:1.0: could not read from device [ 843.009458][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 843.043281][ T5938] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 843.191726][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 843.212390][T10075] hsr_slave_0: left promiscuous mode [ 843.254723][T10075] hsr_slave_1: left promiscuous mode [ 843.271173][ T5938] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 843.286426][T10075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.318783][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 843.350855][ T5938] usb 6-1: Product: syz [ 843.362206][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 843.368724][ T5938] usb 6-1: SerialNumber: syz [ 843.397921][ T5938] usb 6-1: config 0 descriptor?? [ 843.510181][T16811] binder: 16809:16811 unknown command 0 [ 843.531552][T16811] binder: 16809:16811 ioctl c0306201 200000000080 returned -22 [ 843.541386][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 843.650687][ T5938] hso 6-1:0.0: Failed to find BULK IN ep [ 843.718403][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 843.783280][ T5909] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 843.836384][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 843.920254][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 844.019035][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.038297][ T5909] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 844.051176][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.136976][ T5909] usb 2-1: config 0 descriptor?? [ 844.208877][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 844.322019][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 844.577960][ T5861] Bluetooth: hci4: command tx timeout [ 844.592523][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 845.022397][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 845.211050][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 845.381350][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 845.508745][T10075] team0 (unregistering): Port device team_slave_1 removed [ 845.590844][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 845.645060][T10075] team0 (unregistering): Port device team_slave_0 removed [ 845.690615][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 845.841319][ T5938] usb 6-1: USB disconnect, device number 18 [ 845.863577][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 846.156118][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 846.280917][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 846.496626][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 846.683079][ T5861] Bluetooth: hci4: command tx timeout [ 846.771937][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 846.945084][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 847.067254][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 847.278644][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 847.406095][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 847.556193][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 847.833769][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.144678][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.315222][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.413280][ T5908] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 848.520886][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.563181][ T5908] usb 4-1: device descriptor read/64, error -71 [ 848.614752][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.690464][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.837938][ T5908] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 848.843616][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 848.983118][ T5908] usb 4-1: device descriptor read/64, error -71 [ 848.995608][T16755] chnl_net:caif_netlink_parms(): no params data found [ 849.022186][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 849.103703][ T5908] usb usb4-port1: attempt power cycle [ 849.218503][ T5909] usbhid 2-1:0.0: can't add hid device: -32 [ 849.241539][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 849.264118][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 849.422734][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 849.493123][ T5908] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 849.514680][ T5908] usb 4-1: device descriptor read/8, error -71 [ 849.763841][ T5908] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 849.771350][ T5949] usb 2-1: USB disconnect, device number 67 [ 849.945300][ T5908] usb 4-1: device descriptor read/8, error -71 [ 850.053528][ T5908] usb usb4-port1: unable to enumerate USB device [ 850.169982][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 850.346824][T16755] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.355872][T16755] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.390459][T16755] bridge_slave_0: entered allmulticast mode [ 850.405676][T16755] bridge_slave_0: entered promiscuous mode [ 850.432431][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 850.455154][T16755] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.462371][T16755] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.476561][T16755] bridge_slave_1: entered allmulticast mode [ 850.525065][T16755] bridge_slave_1: entered promiscuous mode [ 850.750864][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 850.768961][T16755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.824757][T16755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.828538][T10075] IPVS: stop unused estimator thread 0... [ 851.301402][T16755] team0: Port device team_slave_0 added [ 851.358360][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 851.409230][T16755] team0: Port device team_slave_1 added [ 851.848083][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 852.045082][T16755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.052106][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.139164][ T5909] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 852.263824][T16755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.313073][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 852.361951][ T5909] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 852.394908][T16755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.404379][ T5909] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 852.433071][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.473721][ T5909] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 852.482148][ T5909] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 852.518395][T16914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.567008][ T5909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 852.583483][T16755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.635986][ T5909] usb 6-1: config 0 has no interface number 0 [ 852.661301][ T5909] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 852.666049][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 852.753710][ T5909] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 852.778997][ T5909] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 852.823096][ T5909] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.880817][ T5909] usb 6-1: config 0 interface 125 has no altsetting 0 [ 852.883054][ T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 852.889154][ T5909] usb 6-1: config 0 interface 125 has no altsetting 2 [ 852.921534][ T5909] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 852.947602][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.030237][ T5909] usb 6-1: Product: syz [ 853.033084][ T24] usb 4-1: device descriptor read/64, error -71 [ 853.072276][ T5909] usb 6-1: Manufacturer: syz [ 853.118148][ T5909] usb 6-1: SerialNumber: syz [ 853.152765][ T5909] usb 6-1: config 0 descriptor?? [ 853.182646][ T5909] usb 6-1: selecting invalid altsetting 2 [ 853.293133][ T24] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 853.489871][T16755] hsr_slave_0: entered promiscuous mode [ 853.530576][T16755] hsr_slave_1: entered promiscuous mode [ 853.568839][T16755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.613111][ T24] usb 4-1: device descriptor read/64, error -71 [ 853.643324][T16755] Cannot create hsr debugfs directory [ 853.763963][ T24] usb usb4-port1: attempt power cycle [ 853.789057][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 854.043470][ T5949] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 854.113464][ T24] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 854.177267][ T24] usb 4-1: device descriptor read/8, error -71 [ 854.233535][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 854.251883][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.281845][ T5949] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 854.298884][ T5909] usb 6-1: USB disconnect, device number 19 [ 854.306614][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.326719][ T5949] usb 2-1: Product: syz [ 854.338111][ T5949] usb 2-1: Manufacturer: syz [ 854.354887][ T5949] usb 2-1: SerialNumber: syz [ 854.364829][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 854.395351][ T5949] usb 2-1: config 0 descriptor?? [ 854.423466][ T5949] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 854.429714][ T5949] usb 2-1: selecting invalid altsetting 1 [ 854.463349][ T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 854.504707][ T24] usb 4-1: device descriptor read/8, error -71 [ 854.623938][ T24] usb usb4-port1: unable to enumerate USB device [ 854.677754][T16928] tipc: Enabling of bearer rejected, already enabled [ 854.713894][ T5949] gspca_stk014: init reg: 0x00 [ 854.737707][ T5949] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 854.808163][T16755] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 854.888431][T16755] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 854.935466][ T5908] usb 2-1: USB disconnect, device number 68 [ 854.965413][T16755] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 855.006026][T16755] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 855.022317][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 855.443331][T16755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.573786][T16755] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.666067][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.673401][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.709509][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.716803][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.218613][T16755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.405235][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 856.646771][T16755] veth0_vlan: entered promiscuous mode [ 856.689640][T16755] veth1_vlan: entered promiscuous mode [ 856.710622][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 857.070099][T16755] veth0_macvtap: entered promiscuous mode [ 857.118033][T16755] veth1_macvtap: entered promiscuous mode [ 857.227547][T16755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.248087][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 857.344598][T16755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.386837][T16755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.463023][T16755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.471896][T16755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.516681][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 857.523177][ T5908] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 857.532695][T16755] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.703659][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 857.730338][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.747602][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 857.785022][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.798648][ T5909] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 857.987778][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 858.053224][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 858.053379][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.104645][ T5908] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 858.106716][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.152213][ T5909] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 858.173398][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.174995][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 858.181525][ T5908] usb 6-1: Product: syz [ 858.181544][ T5908] usb 6-1: Manufacturer: syz [ 858.181559][ T5908] usb 6-1: SerialNumber: syz [ 858.203412][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.214593][ T5908] usb 6-1: config 0 descriptor?? [ 858.271729][ T5908] hub 6-1:0.0: bad descriptor, ignoring hub [ 858.283363][ T5909] usb 2-1: config 0 descriptor?? [ 858.292095][T16992] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 858.333646][ T5908] hub 6-1:0.0: probe with driver hub failed with error -5 [ 858.450932][T10072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.485088][T10072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.523695][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 858.561029][ T5909] creative-sb0540 0003:041E:3100.0030: item fetching failed at offset 1/5 [ 858.619328][ T5909] creative-sb0540 0003:041E:3100.0030: parse failed [ 858.673444][ T5909] creative-sb0540 0003:041E:3100.0030: probe with driver creative-sb0540 failed with error -22 [ 858.938058][ T5909] usb 2-1: USB disconnect, device number 69 [ 859.091593][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 859.291005][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 859.513590][T17029] fuse: Bad value for 'rootmode' [ 859.555778][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 859.673402][ T24] usb 4-1: device descriptor read/64, error -71 [ 859.702571][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 859.846806][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 859.891429][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 859.936916][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 860.014627][ T5909] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 860.018109][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 860.030683][ T2152] usb 6-1: USB disconnect, device number 20 [ 860.056041][T17038] kvm: pic: non byte write [ 860.115524][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 860.141034][ T24] usb 4-1: config 0 has no interfaces? [ 860.165375][ T24] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 860.169092][ T5909] usb 2-1: device descriptor read/64, error -71 [ 860.206966][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.244873][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 860.251924][ T24] usb 4-1: config 0 descriptor?? [ 860.411155][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 860.443766][ T5909] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 860.583119][ T5909] usb 2-1: device descriptor read/64, error -71 [ 860.610105][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 860.704181][ T5909] usb usb2-port1: attempt power cycle [ 860.802807][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 860.805183][ T24] usb 4-1: USB disconnect, device number 65 [ 860.974782][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 861.090361][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 861.103067][ T5909] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 861.136564][ T5909] usb 2-1: device descriptor read/8, error -71 [ 861.169556][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 861.340947][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 861.393047][ T5909] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 861.473855][ T5909] usb 2-1: device descriptor read/8, error -71 [ 861.521110][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 861.601689][ T5909] usb usb2-port1: unable to enumerate USB device [ 861.760586][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 861.803181][ T5949] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 862.215332][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 862.231435][ T5949] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 862.303212][ T5949] usb 4-1: config 0 has no interface number 0 [ 862.314918][ T5949] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 862.327530][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.342122][T17087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.400138][T17087] trusted_key: encrypted_key: insufficient parameters specified [ 862.419056][T17087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.440792][T17087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.499281][ T5949] usb 4-1: Product: syz [ 862.522037][ T5949] usb 4-1: Manufacturer: syz [ 862.700106][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 862.706339][ T5949] usb 4-1: SerialNumber: syz [ 862.759074][ T5949] usb 4-1: config 0 descriptor?? [ 862.785639][ T5949] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 862.900568][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 862.987775][ T5949] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 863.008348][ T5949] gspca_pac7302 4-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 863.062714][ T5949] usb 4-1: USB disconnect, device number 66 [ 863.119424][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 863.334086][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 863.882565][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 864.003041][ T5949] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 864.117667][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 864.184751][ T5949] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 864.217067][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.269569][ T5949] usb 4-1: config 0 descriptor?? [ 864.311533][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 864.581248][ T5930] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 864.606584][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 864.872660][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 865.097178][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 865.328319][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 865.580700][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 865.848316][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 866.011076][ T30] audit: type=1800 audit(1753148345.547:894): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2690" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 866.143844][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 866.411023][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 866.558758][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 866.584393][ T5930] usb 9-1: device descriptor read/64, error -71 [ 866.776254][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 866.853305][ T5930] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 866.925648][ T5949] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 866.963605][ T5949] asix 4-1:0.0: probe with driver asix failed with error -71 [ 866.999200][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 867.021030][ T5949] usb 4-1: USB disconnect, device number 67 [ 867.049108][T17156] xt_CT: No such helper "snmp" [ 867.054884][ T5930] usb 9-1: Using ep0 maxpacket: 32 [ 867.076195][ T5930] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 867.110357][ T5930] usb 9-1: config 0 has no interface number 0 [ 867.150873][ T5930] usb 9-1: config 0 interface 184 has no altsetting 0 [ 867.196400][ T5930] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 867.230670][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.260017][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 867.273522][ T5930] usb 9-1: Product: syz [ 867.288616][ T5930] usb 9-1: Manufacturer: syz [ 867.303157][ T5930] usb 9-1: SerialNumber: syz [ 867.335262][ T5930] usb 9-1: config 0 descriptor?? [ 867.385658][ T5930] smsc75xx v1.0.0 [ 867.463163][ T5908] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 867.484984][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 867.619043][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 867.645337][ T5908] usb 6-1: config 4 has an invalid interface number: 231 but max is 0 [ 867.683075][ T5908] usb 6-1: config 4 has no interface number 0 [ 867.696164][ T5908] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 867.723094][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.756692][ T5908] usb 6-1: Product: syz [ 867.760957][ T5908] usb 6-1: Manufacturer: syz [ 867.795491][ T5908] usb 6-1: SerialNumber: syz [ 867.842662][ T5908] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 867.852408][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 867.942631][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 867.988958][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 868.015136][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 868.034525][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.066247][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.083697][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 868.195527][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 868.904292][ T5908] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 868.941972][ T5908] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 868.991625][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 869.137628][ T5908] usb 6-1: USB disconnect, device number 21 [ 869.175295][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 869.295262][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 869.297188][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 869.323953][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 869.339336][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 869.370102][ T5930] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 869.413083][ T5930] usb 9-1: USB disconnect, device number 3 [ 869.504376][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 869.620251][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 869.802348][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.003595][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.220645][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.377209][ T2152] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 870.377526][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.413632][ T5930] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 870.512566][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.519507][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.544189][ T2152] usb 9-1: device descriptor read/64, error -71 [ 870.558900][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.605446][ T5930] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 870.633050][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.641776][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.658052][ T5930] usb 6-1: config 0 descriptor?? [ 870.750888][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.773629][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 870.791750][ T2152] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 870.850901][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.934523][ T2152] usb 9-1: device descriptor read/64, error -71 [ 870.956848][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 870.963545][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 870.980505][ T24] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 871.000886][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.015527][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 871.026588][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.053749][ T2152] usb usb9-port1: attempt power cycle [ 871.073682][ T24] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 871.082449][ T24] usb 2-1: no configuration chosen from 1 choice [ 871.086774][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.112476][ T5930] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 871.160474][ T5930] usb 6-1: USB disconnect, device number 22 [ 871.253658][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.330818][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.420641][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.433121][ T2152] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 871.484823][ T2152] usb 9-1: device descriptor read/8, error -71 [ 871.502364][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.557620][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.652560][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.753315][ T2152] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 871.816379][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 871.816951][ T2152] usb 9-1: device descriptor read/8, error -71 [ 871.860449][T17236] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 871.954973][ T2152] usb usb9-port1: unable to enumerate USB device [ 871.961656][T17236] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 872.039381][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 872.186311][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 872.343820][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 872.485749][T17255] loop2: detected capacity change from 0 to 7 [ 872.509508][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 872.527801][T17255] Dev loop2: unable to read RDB block 7 [ 872.564778][T17255] loop2: unable to read partition table [ 872.584797][T17255] loop2: partition table beyond EOD, truncated [ 872.601209][T17255] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 872.709754][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 872.831478][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 873.249459][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 873.411143][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 873.525524][ T24] usb 2-1: USB disconnect, device number 74 [ 873.640359][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 873.653069][ T5930] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 873.742859][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 873.804441][ T5930] usb 9-1: Invalid ep0 maxpacket: 32 [ 874.370165][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 874.413480][ T5930] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 874.603086][ T5930] usb 9-1: Invalid ep0 maxpacket: 32 [ 874.608512][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 874.644027][ T5930] usb usb9-port1: attempt power cycle [ 874.748337][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 874.842377][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 874.906883][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.013403][ T5930] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 875.033812][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.033825][ T5930] usb 9-1: Invalid ep0 maxpacket: 32 [ 875.100465][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.163206][ T5930] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 875.215601][ T5930] usb 9-1: Invalid ep0 maxpacket: 32 [ 875.229890][ T5930] usb usb9-port1: unable to enumerate USB device [ 875.242109][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.335194][ T30] audit: type=1326 audit(1753148354.877:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.3.2730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x0 [ 875.370620][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.377846][T17313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.453212][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.534959][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.651450][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 875.909158][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 876.223107][T15505] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 876.383324][T15505] usb 6-1: Using ep0 maxpacket: 16 [ 876.775329][T15505] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 876.801459][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 876.837700][T15505] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.889602][T15505] usb 6-1: config 0 has no interface number 0 [ 876.919800][T15505] usb 6-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.973090][ T43] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 877.041536][T15505] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 877.090283][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 877.109728][T15505] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.135040][T15505] usb 6-1: Product: syz [ 877.148176][T15505] usb 6-1: Manufacturer: syz [ 877.183759][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 877.199283][T15505] usb 6-1: SerialNumber: syz [ 877.298473][T17355] veth1_macvtap: left promiscuous mode [ 877.409173][ T43] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 877.434288][T15505] usb 6-1: config 0 descriptor?? [ 877.459793][ T43] usb 2-1: config 179 has no interface number 0 [ 877.480166][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 877.482033][T15505] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 877.547345][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 877.553611][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 877.565349][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 877.577514][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 877.589563][ T43] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 877.603207][ T43] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 877.612658][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.685694][T17351] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 877.836654][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 877.929265][T15505] usb 6-1: USB disconnect, device number 23 [ 877.940262][T17369] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 877.946881][T17369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 877.966475][T10071] usb 6-1: Failed to submit usb control message: -71 [ 877.993452][T17351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 878.000141][T17351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 878.007880][T10071] usb 6-1: unable to send the bmi data to the device: -71 [ 878.034506][T10071] usb 6-1: unable to get target info from device [ 878.047664][T17369] vhci_hcd vhci_hcd.0: Device attached [ 878.056845][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 878.090736][T17351] vhci_hcd vhci_hcd.0: Device attached [ 878.107780][T10071] usb 6-1: could not get target info (-71) [ 878.128831][T10071] usb 6-1: could not probe fw (-71) [ 878.151723][T17371] vhci_hcd: connection closed [ 878.154118][ T5909] usb 2-1: USB disconnect, device number 75 [ 878.154916][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 878.163688][T17370] vhci_hcd: connection closed [ 878.165402][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 878.186298][ T6288] vhci_hcd: stop threads [ 878.190867][ T6288] vhci_hcd: release socket [ 878.213186][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 878.218434][ T5930] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 878.264907][ T6288] vhci_hcd: disconnect device [ 878.284779][ T6288] vhci_hcd: stop threads [ 878.320677][ T6288] vhci_hcd: release socket [ 878.333440][ T43] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 878.341192][ T43] usb 35-2: enqueue for inactive port 1 [ 878.378035][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 878.378211][ T6288] vhci_hcd: disconnect device [ 878.422229][ T5930] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.459982][ T5930] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.473362][ T43] vhci_hcd: vhci_device speed not set [ 878.505537][ T5930] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 878.530327][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 878.576100][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 878.589816][ T5930] usb 9-1: SerialNumber: syz [ 878.800867][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 878.837785][ T5930] usb 9-1: 0:2 : does not exist [ 878.899230][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 878.983434][ T5930] usb 9-1: USB disconnect, device number 12 [ 879.021988][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.061025][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.163661][ T1217] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 879.189394][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.288770][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.325140][ T1217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.345131][ T1217] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.429535][ T1217] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 879.444919][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.458778][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 879.497045][ T1217] usb 2-1: SerialNumber: syz [ 879.621291][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.641696][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2740'. [ 879.685987][T17393] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.694662][T17393] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.763562][T17379] netlink: 'syz.1.2737': attribute type 1 has an invalid length. [ 879.777844][T17379] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2737'. [ 879.800759][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.870952][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 879.972619][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 880.023461][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 880.090229][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 880.243223][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 880.447411][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 880.581274][ T1217] usb 2-1: 0:2 : does not exist [ 880.605681][ T1217] usb 2-1: unit 48 not found! [ 880.676694][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 880.696014][ T1217] usb 2-1: USB disconnect, device number 76 [ 880.788343][T17416] program syz.1.2747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 880.847255][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.862180][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.010190][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.044021][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 881.146303][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 881.196498][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.245463][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 881.305327][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 881.324687][ T24] usb 6-1: config 0 has an invalid interface number: 165 but max is 0 [ 881.341548][ T24] usb 6-1: config 0 has no interface number 0 [ 881.360266][ T24] usb 6-1: config 0 interface 165 has no altsetting 0 [ 881.399428][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.413928][ T24] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 881.451368][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.473545][ T24] usb 6-1: Product: syz [ 881.496809][ T24] usb 6-1: Manufacturer: syz [ 881.501573][ T24] usb 6-1: SerialNumber: syz [ 881.534127][ T5930] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 881.534259][ T24] usb 6-1: config 0 descriptor?? [ 881.584979][T17442] x_tables: duplicate underflow at hook 1 [ 881.602622][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.718532][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.739947][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.748521][ T5930] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 881.786414][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.854375][ T5930] usb 2-1: config 0 descriptor?? [ 881.899857][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 881.976676][ T24] comedi comedi5: Wrong number of endpoints [ 881.982668][ T24] ni6501 6-1:0.165: driver 'ni6501' failed to auto-configure device. [ 882.019715][ T24] usb 6-1: USB disconnect, device number 24 [ 882.065448][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 882.219223][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 882.382096][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 882.441008][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2753'. [ 882.488869][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 882.651346][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 882.747533][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 882.921578][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.086932][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.199294][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.278852][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.395079][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.499431][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.656598][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.672015][T17479] binder: 17478:17479 ioctl c0306201 200000000700 returned -14 [ 883.826793][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.926974][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 883.984188][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.040718][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.083190][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 884.106466][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.139519][ T43] usb 2-1: USB disconnect, device number 77 [ 884.253223][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 884.275985][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.291674][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.302553][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 884.331811][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.387136][ T24] usb 4-1: config 0 descriptor?? [ 884.394175][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.404779][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 884.456748][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.548208][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.712539][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.854095][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 884.934600][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.010906][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.043262][ T5909] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 885.149706][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.193121][ T5909] usb 9-1: Using ep0 maxpacket: 32 [ 885.207786][ T5909] usb 9-1: config 1 has an invalid interface number: 137 but max is 0 [ 885.210214][T17482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.231011][ T5909] usb 9-1: config 1 has no interface number 0 [ 885.243380][T17482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.272338][ T5909] usb 9-1: config 1 interface 137 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 885.300619][ T5909] usb 9-1: config 1 interface 137 has no altsetting 0 [ 885.327638][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.333993][ T5909] usb 9-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 885.358171][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.386415][ T5909] usb 9-1: Product: syz [ 885.401013][ T5909] usb 9-1: Manufacturer: syz [ 885.433187][ T5909] usb 9-1: SerialNumber: syz [ 885.449723][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.472615][T17495] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 885.510488][T17482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.519717][ T24] gspca_vc032x: reg_w err -110 [ 885.528437][T17482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.533368][ T43] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 885.552455][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 885.647342][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.693350][T17523] netlink: 'syz.1.2773': attribute type 21 has an invalid length. [ 885.753353][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 885.764782][ T43] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 885.784996][ T5909] pl2303 9-1:1.137: required endpoints missing [ 885.789906][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 885.803111][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 885.804214][ T43] usb 6-1: config 95 has no interface number 0 [ 885.824825][ T5909] usb 9-1: USB disconnect, device number 13 [ 885.883090][ T43] usb 6-1: config 95 interface 1 has no altsetting 0 [ 885.923658][ T43] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 885.934030][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.942112][ T43] usb 6-1: Product: syz [ 885.983096][ T43] usb 6-1: Manufacturer: syz [ 886.000303][ T43] usb 6-1: SerialNumber: syz [ 886.015437][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 886.092258][T17522] input: syz0 as /devices/virtual/input/input98 [ 886.145639][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 886.246179][T17511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.260015][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 886.268654][T17511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.533414][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 886.560439][T17511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.613661][T17511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.726364][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 886.754300][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 886.934246][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 886.966639][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 886.996670][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 887.028020][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.089349][ T24] usb 2-1: Product: syz [ 887.137872][ T24] usb 2-1: Manufacturer: syz [ 887.200948][ T24] usb 2-1: SerialNumber: syz [ 887.312844][ T24] usb 2-1: config 0 descriptor?? [ 887.405470][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 887.574153][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 887.581643][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 887.643828][ T43] usb 6-1: USB disconnect, device number 25 [ 887.794583][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.848576][T17552] syzkaller0: entered promiscuous mode [ 887.863604][T17552] syzkaller0: entered allmulticast mode [ 887.900202][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 887.953799][T17552] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 887.999125][ T5909] usb 4-1: USB disconnect, device number 68 [ 888.236658][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 888.262787][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 888.313792][ T24] usb 2-1: USB disconnect, device number 78 [ 888.352225][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.475691][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 888.626014][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 888.695373][T17569] syzkaller1: entered promiscuous mode [ 888.700934][T17569] syzkaller1: entered allmulticast mode [ 888.735867][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 888.892817][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 889.188621][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 889.214026][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 889.361791][T17591] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 889.589349][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 889.724974][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 890.038815][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 890.473180][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 890.591371][T17599] netlink: 14031 bytes leftover after parsing attributes in process `syz.8.2785'. [ 891.215249][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 891.393162][ T5930] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 891.543517][ T5930] usb 4-1: device descriptor read/64, error -71 [ 891.688264][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 891.813074][ T5930] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 891.963460][ T5930] usb 4-1: device descriptor read/64, error -71 [ 892.059794][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 892.086992][ T5930] usb usb4-port1: attempt power cycle [ 892.643078][ T5930] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 892.655319][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 892.705295][ T5930] usb 4-1: device descriptor read/8, error -71 [ 892.973520][ T5930] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 893.063912][ T5930] usb 4-1: device descriptor read/8, error -71 [ 893.174845][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 893.238889][ T5930] usb usb4-port1: unable to enumerate USB device [ 893.263238][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 893.424483][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 893.484389][ T24] usb 6-1: config 0 has an invalid interface number: 190 but max is 0 [ 893.570926][ T24] usb 6-1: config 0 has no interface number 0 [ 893.621234][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 893.669306][ T24] usb 6-1: config 0 interface 190 has no altsetting 0 [ 893.787592][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=cf.45 [ 893.848502][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.894750][ T24] usb 6-1: Product: syz [ 893.899114][ T24] usb 6-1: Manufacturer: syz [ 893.938750][ T24] usb 6-1: SerialNumber: syz [ 893.990244][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 894.048656][ T24] usb 6-1: config 0 descriptor?? [ 894.303388][ T5909] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 894.389580][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.190/input/input99 [ 894.428452][ T5204] bcm5974 6-1:0.190: could not read from device [ 894.513490][ T5204] bcm5974 6-1:0.190: could not read from device [ 894.533379][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 894.546477][ T5909] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 894.557898][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.582356][ T5909] usb 2-1: config 0 has no interface number 0 [ 894.592818][ T5909] usb 2-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.614071][ T5909] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 894.641898][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.644717][ T24] usb 6-1: USB disconnect, device number 26 [ 894.660742][ T5204] bcm5974 6-1:0.190: could not read from device [ 894.677323][ T5909] usb 2-1: Product: syz [ 894.681688][ T5909] usb 2-1: Manufacturer: syz [ 894.696272][ T5909] usb 2-1: SerialNumber: syz [ 894.704802][ T5204] bcm5974 6-1:0.190: could not read from device [ 894.748047][ T5909] usb 2-1: config 0 descriptor?? [ 894.863278][ T1217] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 894.877185][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 894.978547][ T5909] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 895.037600][T10071] usb 2-1: Failed to submit usb control message: -71 [ 895.051183][T10071] usb 2-1: unable to send the bmi data to the device: -71 [ 895.080584][T10071] usb 2-1: unable to get target info from device [ 895.106530][T10071] usb 2-1: could not get target info (-71) [ 895.150498][ T1217] usb 4-1: unable to get BOS descriptor or descriptor too short [ 895.176573][T10071] usb 2-1: could not probe fw (-71) [ 895.206261][ T5909] usb 2-1: USB disconnect, device number 79 [ 895.247786][ T1217] usb 4-1: not running at top speed; connect to a high speed hub [ 895.487352][ T1217] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 895.598137][ T1217] usb 4-1: config 3 has no interface number 0 [ 895.629759][ T1217] usb 4-1: config 3 interface 106 has no altsetting 0 [ 895.660923][ T1217] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 895.672624][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.704232][ T1217] usb 4-1: Product: syz [ 895.708656][ T1217] usb 4-1: Manufacturer: syz [ 895.713915][ T1217] usb 4-1: SerialNumber: syz [ 896.131022][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 896.432082][ T1217] kobil_sct 4-1:3.106: required endpoints missing [ 896.450614][ T1217] usb 4-1: USB disconnect, device number 73 [ 896.577427][T17672] syzkaller1: entered promiscuous mode [ 896.666826][T17672] syzkaller1: entered allmulticast mode [ 897.041405][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 897.106342][T17681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.497308][ T30] audit: type=1326 audit(1753148377.027:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 897.612517][ T30] audit: type=1326 audit(1753148377.027:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 897.698205][T15505] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 897.743257][ T30] audit: type=1326 audit(1753148377.027:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 897.858046][ T30] audit: type=1326 audit(1753148377.027:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 898.027465][T15505] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.113379][T15505] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 898.142877][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 898.193642][T15505] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 898.202759][T15505] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.312886][T15505] usb 9-1: config 0 descriptor?? [ 898.391078][T15505] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 898.420500][T15505] dvb-usb: bulk message failed: -22 (3/0) [ 898.464733][T15505] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 898.512727][T15505] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 898.547107][T15505] usb 9-1: media controller created [ 898.563127][ T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 898.601246][T15505] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.689131][T15505] dvb-usb: bulk message failed: -22 (6/0) [ 898.723251][T15505] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 898.740126][ T30] audit: type=1326 audit(1753148378.277:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 898.763409][ T43] usb 6-1: device descriptor read/64, error -71 [ 898.813714][T15505] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input100 [ 898.873265][T15505] dvb-usb: schedule remote query interval to 150 msecs. [ 898.880418][ T30] audit: type=1326 audit(1753148378.277:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 898.933129][T15505] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 899.006678][ T30] audit: type=1326 audit(1753148378.517:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 899.063041][ T43] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 899.096520][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 899.102663][ T5909] dvb-usb: error while querying for an remote control event. [ 899.120546][T17690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.130015][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 899.165537][ T30] audit: type=1326 audit(1753148378.517:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 899.208190][ T30] audit: type=1326 audit(1753148378.517:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 899.231608][T15505] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 899.243283][ T43] usb 6-1: device descriptor read/64, error -71 [ 899.261797][ T30] audit: type=1326 audit(1753148378.597:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 899.343272][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 899.350641][ T5930] dvb-usb: error while querying for an remote control event. [ 899.363579][ T43] usb usb6-port1: attempt power cycle [ 899.410834][T15505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.439900][T15505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.472564][T15505] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 899.493260][T15505] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.534612][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 899.550988][ T5909] dvb-usb: error while querying for an remote control event. [ 899.571541][T15505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.624815][T15505] usb 2-1: config 0 descriptor?? [ 899.713287][ T24] usb 9-1: USB disconnect, device number 14 [ 899.763083][ T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 899.803796][ T43] usb 6-1: device descriptor read/8, error -71 [ 899.839693][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 900.039218][T17709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.053188][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 900.061575][T17709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.101148][ T43] usb 6-1: device descriptor read/8, error -71 [ 900.224374][ T43] usb usb6-port1: unable to enumerate USB device [ 900.296127][T15505] usbhid 2-1:0.0: can't add hid device: -71 [ 900.320631][T15505] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 900.370328][T15505] usb 2-1: USB disconnect, device number 80 [ 900.913210][ T43] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 901.123581][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 901.192741][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.248603][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.279251][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.324135][ T43] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 901.363323][ T5949] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 901.401966][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.490788][ T43] usb 9-1: config 0 descriptor?? [ 901.554067][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 901.649506][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 901.667912][ T5949] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 901.687701][ T43] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input101 [ 901.760232][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.877958][ T5204] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 901.905852][ T5949] usb 2-1: config 0 has no interface number 0 [ 901.975703][ T5949] usb 2-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 902.006957][ T5204] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 902.074379][ T5949] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 902.103156][T11852] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 902.152242][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.173360][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.181435][ T5949] usb 2-1: Product: syz [ 902.194219][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.242895][ T5949] usb 2-1: Manufacturer: syz [ 902.247301][ T5204] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 902.270572][ T5949] usb 2-1: SerialNumber: syz [ 902.294247][ T5949] usb 2-1: config 0 descriptor?? [ 902.341014][ T5204] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 902.343677][T15505] usb 9-1: USB disconnect, device number 15 [ 902.372018][ T5949] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 902.541481][ T6288] usb 2-1: Failed to submit usb control message: -71 [ 902.550188][ T5909] usb 2-1: USB disconnect, device number 81 [ 902.576720][ T6288] usb 2-1: unable to send the bmi data to the device: -71 [ 902.613333][ T6288] usb 2-1: unable to get target info from device [ 902.627394][ T6288] usb 2-1: could not get target info (-71) [ 902.657211][ T6288] usb 2-1: could not probe fw (-71) [ 903.406801][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 903.550128][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 903.644819][T17769] geneve2: entered allmulticast mode [ 903.851260][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 904.028703][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 904.868480][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 905.268723][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 905.368090][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 905.449528][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 905.656799][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 905.693067][ T2152] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 905.875649][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 905.882288][ T2152] usb 6-1: Using ep0 maxpacket: 8 [ 905.913318][ T2152] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 905.922788][ T2152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.964530][ T2152] usb 6-1: Product: syz [ 905.968905][ T2152] usb 6-1: Manufacturer: syz [ 905.983073][ T2152] usb 6-1: SerialNumber: syz [ 905.991459][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.063509][ T2152] usb 6-1: config 0 descriptor?? [ 906.137952][ T2152] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 906.165232][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.278366][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.550756][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.615069][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.670764][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.849689][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 906.928995][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 907.082266][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 907.209496][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 907.388118][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 907.413533][ T2152] gspca_sonixj: reg_w1 err -110 [ 907.459844][ T2152] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 907.606437][T17816] netlink: 'syz.7.2822': attribute type 30 has an invalid length. [ 907.668950][T17815] netlink: 'syz.7.2822': attribute type 30 has an invalid length. [ 907.761110][T17816] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2822'. [ 907.816102][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 907.842889][T17815] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2822'. [ 907.895587][T15505] IPVS: starting estimator thread 0... [ 908.015105][T17830] IPVS: using max 29 ests per chain, 69600 per kthread [ 908.294772][T17816] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 908.296538][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 908.299751][T17815] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 908.476441][T17834] syz.3.2824: attempt to access beyond end of device [ 908.476441][T17834] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 908.552618][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 908.685602][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 908.878216][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 909.105687][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 909.163069][T15505] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 909.328548][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 909.424616][T15505] usb 2-1: config 0 has no interfaces? [ 909.470743][T15505] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 909.488692][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 909.523439][T15505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.577668][T15505] usb 2-1: Product: syz [ 909.601103][T15505] usb 2-1: Manufacturer: syz [ 909.629076][ T24] usb 6-1: USB disconnect, device number 31 [ 909.679611][T15505] usb 2-1: SerialNumber: syz [ 909.710590][T15505] usb 2-1: config 0 descriptor?? [ 909.778213][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 909.922551][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 910.058796][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 910.158926][T17845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.167862][T17845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.206512][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 910.409029][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 911.145095][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 911.361874][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 911.433902][T17875] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 911.495391][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 911.574536][T17875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 911.640455][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 911.650826][T17877] syzkaller1: entered promiscuous mode [ 911.682716][T17877] syzkaller1: entered allmulticast mode [ 911.908941][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 911.923235][ T24] usb 2-1: USB disconnect, device number 82 [ 912.003519][T17885] usb usb8: usbfs: process 17885 (syz.7.2837) did not claim interface 3 before use [ 912.076700][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 912.227236][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 912.522494][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 912.727320][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 913.144335][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 913.193210][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 913.290649][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 913.539104][ T24] usb 4-1: config 0 has no interfaces? [ 913.559534][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 913.568786][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.594294][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 913.630357][ T24] usb 4-1: Product: syz [ 913.640488][ T24] usb 4-1: Manufacturer: syz [ 913.670930][ T24] usb 4-1: SerialNumber: syz [ 913.741721][ T24] usb 4-1: config 0 descriptor?? [ 913.822565][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.354800][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.432335][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.508686][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.601786][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.692758][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.869530][T17913] binder: BINDER_SET_CONTEXT_MGR already set [ 914.878470][T17913] binder: 17911:17913 ioctl 4018620d 200000000040 returned -16 [ 914.907619][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 914.942869][T17913] netlink: 186232 bytes leftover after parsing attributes in process `syz.8.2844'. [ 915.074029][T17916] binder: 17911:17916 ioctl c0306201 2000000003c0 returned -22 [ 915.201156][T17913] binder: 17911:17913 ioctl 8138ae83 7f3684bf4aa0 returned -22 [ 915.275949][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 915.303404][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 915.525237][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 915.558698][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 915.660437][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.672025][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 915.723120][ T5930] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 915.777644][ T24] usb 2-1: config 0 descriptor?? [ 915.788640][ T5949] usb 4-1: USB disconnect, device number 74 [ 915.877543][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 916.003139][ T5930] usb 9-1: Using ep0 maxpacket: 8 [ 916.009782][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 916.052145][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 916.092793][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 916.353181][ T5930] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.365858][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 916.389148][ T5930] usb 9-1: config 0 has no interfaces? [ 916.437102][ T5930] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 916.454553][ T5930] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 916.472024][ T5930] usb 9-1: Product: syz [ 916.482438][ T5930] usb 9-1: Manufacturer: syz [ 916.523134][ T5930] usb 9-1: SerialNumber: syz [ 916.534349][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 916.634538][ T5930] usb 9-1: config 0 descriptor?? [ 916.930740][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 917.123874][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 917.229081][ T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 917.271585][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 917.394222][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 917.401574][ T43] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 917.416224][ T43] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 917.429823][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 917.458513][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 917.492344][ T43] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 917.509478][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.519012][ T43] usb 4-1: Product: syz [ 917.527424][ T43] usb 4-1: Manufacturer: syz [ 917.532355][ T43] usb 4-1: SerialNumber: syz [ 917.556834][ T43] usb 4-1: config 0 descriptor?? [ 917.574022][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 917.588961][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 917.662088][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 917.768388][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 917.902180][ T43] usb 4-1: USB disconnect, device number 75 [ 918.082523][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 918.145239][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 918.331266][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 918.486305][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 918.588568][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 918.674484][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 918.739434][ T24] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 918.739468][ T24] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 918.840805][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 918.859460][T17945] netlink: 'syz.1.2854': attribute type 9 has an invalid length. [ 918.874758][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 919.070108][T17950] netlink: 'syz.5.2852': attribute type 13 has an invalid length. [ 919.089533][T17945] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.098707][T17945] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.107853][T17945] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.116815][T17945] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.135136][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 919.194386][T17954] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 919.226346][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 919.241998][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 919.243128][T17949] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 919.536085][T15505] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 919.734479][T15505] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 919.743366][T15505] usb 4-1: config 0 has no interface number 0 [ 919.763085][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 919.797329][T15505] usb 4-1: config 0 interface 222 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 919.856356][T15505] usb 4-1: config 0 interface 222 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 919.913369][T17950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.936705][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 919.954434][T15505] usb 4-1: config 0 interface 222 has no altsetting 0 [ 919.965807][T17957] tipc: Enabled bearer , priority 0 [ 920.033188][T15505] usb 4-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=86.41 [ 920.046940][T15505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.070017][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 920.077020][T15505] usb 4-1: Product: syz [ 920.086447][T15505] usb 4-1: Manufacturer: syz [ 920.091333][T15505] usb 4-1: SerialNumber: syz [ 920.112515][T17961] tipc: Resetting bearer [ 920.114140][T15505] usb 4-1: config 0 descriptor?? [ 920.154351][T17953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 920.161892][T17953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 920.224129][T17955] tipc: Disabling bearer [ 920.284951][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 920.476422][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 920.498543][T15505] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.222/input/input103 [ 920.935844][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 921.137173][T17967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.152011][T17967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.272750][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 921.474035][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 921.600932][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 921.644091][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 921.860396][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 921.983835][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 922.234844][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 922.303332][ T1217] usb 4-1: USB disconnect, device number 76 [ 922.459713][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 922.545818][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 922.878879][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 923.220960][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 923.299003][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 923.348286][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 923.403079][ T1217] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 923.461038][T15505] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 923.496028][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 923.563348][ T1217] usb 6-1: Using ep0 maxpacket: 16 [ 923.656330][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.750938][ T1217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.833648][ T1217] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.844523][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 923.966604][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 923.966624][ T30] audit: type=1326 audit(1753148403.497:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.3.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 924.001997][T17998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 924.033098][ T1217] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 924.042320][ T1217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.049865][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 924.068932][ T30] audit: type=1326 audit(1753148403.507:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.3.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 924.130476][ T1217] usb 6-1: config 0 descriptor?? [ 924.163979][ T30] audit: type=1326 audit(1753148403.507:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.3.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 924.248538][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 924.277015][ T30] audit: type=1326 audit(1753148403.507:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.3.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 924.299749][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.413314][ T30] audit: type=1326 audit(1753148403.607:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.3.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 924.504606][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 924.557901][ T30] audit: type=1326 audit(1753148403.607:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.3.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ab8e9a9 code=0x7ffc0000 [ 924.580630][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.844792][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 924.895910][ T1217] microsoft 0003:045E:07DA.0031: unbalanced delimiter at end of report description [ 924.938437][ T1217] microsoft 0003:045E:07DA.0031: parse failed [ 924.948107][T15505] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 924.983230][ T1217] microsoft 0003:045E:07DA.0031: probe with driver microsoft failed with error -22 [ 925.040860][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.141994][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.173354][T15505] usb 4-1: Using ep0 maxpacket: 8 [ 925.186540][T15505] usb 4-1: config 0 has no interfaces? [ 925.205413][T15505] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 925.237687][T15505] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 925.252084][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.269934][T15505] usb 4-1: Product: syz [ 925.290851][T15505] usb 4-1: Manufacturer: syz [ 925.308577][T15505] usb 4-1: SerialNumber: syz [ 925.331502][T15505] usb 4-1: config 0 descriptor?? [ 925.385719][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.482001][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.559904][T18018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.632584][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.649371][T18018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.756244][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 925.819208][ T43] usb 4-1: USB disconnect, device number 78 [ 925.835231][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 926.103951][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 926.321260][ T43] usb 6-1: USB disconnect, device number 32 [ 926.392118][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 926.599930][ T2152] usb 9-1: USB disconnect, device number 16 [ 926.650327][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 926.801982][T18040] sctp: [Deprecated]: syz.8.2875 (pid 18040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.801982][T18040] Use struct sctp_sack_info instead [ 926.833263][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 926.960382][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.125598][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.155751][T18049] IPv6: sit1: Disabled Multicast RS [ 927.188856][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.292454][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.374013][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 927.433830][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.439719][ T2152] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 927.552034][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.563039][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 927.584935][ T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 927.603212][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.635276][ T2152] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.656766][ T43] usb 6-1: config 0 descriptor?? [ 927.662105][ T2152] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.685629][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.695313][ T2152] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 927.708159][ T2152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.748858][ T2152] usb 9-1: Product: syz [ 927.780202][ T2152] usb 9-1: Manufacturer: syz [ 927.796406][ T2152] usb 9-1: SerialNumber: syz [ 927.870365][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 927.999749][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 928.025313][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.052209][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.109358][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 928.260753][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 928.420343][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 928.608490][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 928.812615][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 928.819736][ T2152] usb 9-1: 0:2 : does not exist [ 928.850017][ T2152] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 928.884916][ T30] audit: type=1326 audit(1753148408.427:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 928.983738][ T2152] usb 9-1: USB disconnect, device number 17 [ 928.993050][ T30] audit: type=1326 audit(1753148408.427:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.015618][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.069521][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 929.099042][ T30] audit: type=1326 audit(1753148408.447:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.177728][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.226518][ T30] audit: type=1326 audit(1753148408.447:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.314402][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 929.374187][ T30] audit: type=1326 audit(1753148408.457:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.492889][ T2152] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 929.516367][ T30] audit: type=1326 audit(1753148408.457:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.602212][ T30] audit: type=1326 audit(1753148408.457:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.610357][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 929.653480][ T2152] usb 9-1: Using ep0 maxpacket: 16 [ 929.671929][ T2152] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 929.697893][ T2152] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 929.734325][ T30] audit: type=1326 audit(1753148408.457:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003a98e9a9 code=0x7ffc0000 [ 929.818417][ T2152] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 929.835268][ T2152] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.865842][ T30] audit: type=1326 audit(1753148408.457:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f003a98e5ab code=0x7ffc0000 [ 929.894553][ T2152] usb 9-1: Product: syz [ 929.909804][ T2152] usb 9-1: Manufacturer: syz [ 929.915594][ T2152] usb 9-1: SerialNumber: syz [ 929.919869][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 930.044685][ T30] audit: type=1326 audit(1753148408.457:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f003a98e5ab code=0x7ffc0000 [ 930.208177][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 930.241207][T18067] loop6: detected capacity change from 0 to 63 [ 930.267672][T18067] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.276735][T18067] Buffer I/O error on dev loop6, logical block 1, async page read [ 930.284927][T18067] Buffer I/O error on dev loop6, logical block 2, async page read [ 930.296548][ T30] audit: type=1326 audit(1753148408.457:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.1.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f003a98e5ab code=0x7ffc0000 [ 930.314999][T18067] Buffer I/O error on dev loop6, logical block 3, async page read [ 930.349050][T18067] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.359054][T18067] Buffer I/O error on dev loop6, logical block 1, async page read [ 930.368600][T18067] Buffer I/O error on dev loop6, logical block 2, async page read [ 930.377321][T18067] Buffer I/O error on dev loop6, logical block 3, async page read [ 930.385917][T18067] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.394599][T18067] Buffer I/O error on dev loop6, logical block 1, async page read [ 930.403566][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 930.424382][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 930.475669][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 930.485118][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 930.509509][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 930.519696][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.921029][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 931.730217][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 931.966402][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.973515][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.032678][ T6288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.164506][ T6288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.573446][ T5849] Bluetooth: hci3: command tx timeout [ 932.853387][ T2152] usb 9-1: USB disconnect, device number 18 [ 932.970614][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.019667][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 933.050510][ T6288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.102574][ T6288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.202354][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 933.603089][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 933.705971][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 933.915267][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 934.013532][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 934.089178][ T6288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.134757][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 934.147046][ T6288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.235969][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 934.414530][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 934.480707][ T6288] bond0: (slave netdevsim0): Releasing backup interface [ 934.563583][ T6288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.596363][ T6288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.653350][ T5861] Bluetooth: hci3: command tx timeout [ 934.708952][T18122] tipc: Started in network mode [ 934.713978][T18122] tipc: Node identity 3a5876541164, cluster identity 4711 [ 934.721363][T18122] tipc: Enabled bearer , priority 0 [ 934.776577][T18125] syzkaller0: entered promiscuous mode [ 934.794441][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 934.801121][T18125] syzkaller0: entered allmulticast mode [ 934.851233][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 935.019953][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 935.112189][T18112] tipc: Resetting bearer [ 935.145806][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 935.198174][T18112] tipc: Disabling bearer [ 935.223099][ T1217] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 935.306196][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 935.388183][ T1217] usb 9-1: Using ep0 maxpacket: 16 [ 935.408833][T18072] chnl_net:caif_netlink_parms(): no params data found [ 935.429989][ T1217] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 935.485383][ T1217] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 935.519128][ T6288] bridge_slave_1: left allmulticast mode [ 935.528086][ T1217] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 935.530706][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 935.545019][ T1217] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.563258][ T6288] bridge_slave_1: left promiscuous mode [ 935.571054][ T1217] usb 9-1: Product: syz [ 935.583444][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.586008][ T1217] usb 9-1: Manufacturer: syz [ 935.614829][ T1217] usb 9-1: SerialNumber: syz [ 935.635625][ T1217] usb 9-1: config 0 descriptor?? [ 935.656458][ T6288] bridge_slave_0: left allmulticast mode [ 935.669035][ T1217] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 935.703215][ T6288] bridge_slave_0: left promiscuous mode [ 935.711862][ T1217] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 935.715090][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.810007][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 935.952737][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.128994][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.175996][T18146] CUSE: info not properly terminated [ 936.274025][ T1217] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 936.287965][ T1217] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 936.326651][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.340270][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 936.340290][ T30] audit: type=1800 audit(1753148415.877:966): pid=18150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2899" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 936.529179][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.660924][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.733983][ T5861] Bluetooth: hci3: command tx timeout [ 936.794725][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.909514][ T1217] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 936.917611][ T1217] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 936.946766][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 936.954854][ T1217] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 936.963854][ T1217] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 936.999685][ T1217] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 937.126149][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.221271][T18129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.263701][T18129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.336658][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.350229][ T1217] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 937.422615][ T1217] usb 9-1: USB disconnect, device number 19 [ 937.524530][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.646804][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.722799][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.771846][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.817735][ T6288] team0: Port device bond0 removed [ 937.827370][ T6288] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 937.841943][ T6288] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 937.842294][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 937.861229][ T6288] bond0 (unregistering): Released all slaves [ 937.883813][ T6288] bond1 (unregistering): Released all slaves [ 937.930381][ T1217] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 937.949045][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.003519][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.078506][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.083566][ T1217] usb 9-1: device descriptor read/64, error -71 [ 938.149785][ T6288] bond2 (unregistering): Released all slaves [ 938.161393][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.224990][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.277808][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.367225][ T1217] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 938.375896][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.428567][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.436679][ T6288] bond3 (unregistering): Released all slaves [ 938.512829][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.518706][ T1217] usb 9-1: device descriptor read/64, error -71 [ 938.527822][T18168] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 938.635369][ T6288] : left promiscuous mode [ 938.655490][ T1217] usb usb9-port1: attempt power cycle [ 938.707406][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.807682][ T6288] : left promiscuous mode [ 938.823171][ T5861] Bluetooth: hci3: command tx timeout [ 938.830207][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.904111][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 938.957721][ T6288] tipc: Disabling bearer [ 938.983263][ T6288] tipc: Left network mode [ 939.033141][ T1217] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 939.096364][ T1217] usb 9-1: device descriptor read/8, error -71 [ 939.244678][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 939.311119][T18072] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.331097][T18072] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.356075][T18072] bridge_slave_0: entered allmulticast mode [ 939.600941][ T1217] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 939.643527][T18072] bridge_slave_0: entered promiscuous mode [ 939.663939][ T1217] usb 9-1: device descriptor read/8, error -71 [ 939.724866][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 939.734468][T18072] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.741796][T18072] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.761504][T18072] bridge_slave_1: entered allmulticast mode [ 939.773995][ T1217] usb usb9-port1: unable to enumerate USB device [ 939.791605][T18072] bridge_slave_1: entered promiscuous mode [ 939.994302][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 940.146304][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 940.155237][T18072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.176791][T18072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.274930][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 940.406923][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 940.460225][T18072] team0: Port device team_slave_0 added [ 940.500168][T18072] team0: Port device team_slave_1 added [ 940.580894][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 940.730527][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 940.988800][T18072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.008574][T18072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.093163][T18072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.164755][T18072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.176387][T18072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.200951][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 941.203889][T18072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.363417][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 941.431955][ T6288] hsr_slave_0: left promiscuous mode [ 941.447757][ T6288] hsr_slave_1: left promiscuous mode [ 941.464075][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.471715][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.473080][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 941.492037][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.508377][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.535362][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 941.543624][ T31] INFO: task syz.6.2474:16166 blocked for more than 143 seconds. [ 941.551423][ T31] Not tainted 6.16.0-rc7-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 941.576309][ T31] Blocked by coredump. [ 941.593073][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.602059][ T31] task:syz.6.2474 state:D stack:23592 pid:16166 tgid:16163 ppid:12795 task_flags:0x400548 flags:0x00024004 [ 941.681469][ T31] Call Trace: [ 941.722951][ T31] [ 941.732208][ T31] __schedule+0x16fd/0x4cf0 [ 941.759048][ T31] ? schedule+0x165/0x360 [ 941.787827][ T31] ? __pfx___schedule+0x10/0x10 [ 941.809929][ T31] ? schedule+0x91/0x360 [ 941.836409][ T31] schedule+0x165/0x360 [ 941.840669][ T31] schedule_timeout+0x9a/0x270 [ 941.879208][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 941.913066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 941.943047][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 941.948359][ T31] ? wait_for_completion+0x267/0x5d0 [ 941.982076][ T31] wait_for_completion+0x2bf/0x5d0 [ 941.987898][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 942.002970][ T31] ? io_wq_put_and_exit+0x160/0x690 [ 942.008262][ T31] ? io_wq_put_and_exit+0x160/0x690 [ 942.022491][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.029833][ T31] io_wq_put_and_exit+0x31b/0x690 [ 942.035425][ T31] ? io_wq_put_and_exit+0x160/0x690 [ 942.040778][ T31] io_uring_clean_tctx+0x11f/0x1a0 [ 942.063622][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 942.069364][ T31] ? io_uring_drop_tctx_refs+0x131/0x1c0 [ 942.093669][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 942.099248][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 942.123107][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 942.129283][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 942.143113][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 942.148760][ T31] do_exit+0x345/0x22e0 [ 942.176666][ T31] ? do_raw_spin_lock+0x121/0x290 [ 942.181797][ T31] ? __pfx_do_exit+0x10/0x10 [ 942.191508][ T31] ? cgroup_freezing+0x20/0x350 [ 942.203385][ T31] do_group_exit+0x21c/0x2d0 [ 942.208071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 942.223521][ T31] get_signal+0x1286/0x1340 [ 942.228140][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 942.253519][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 942.259924][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 942.283087][ T31] exit_to_user_mode_loop+0x75/0x110 [ 942.288497][ T31] do_syscall_64+0x2bd/0x3b0 [ 942.295819][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.303192][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 942.308484][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.333233][ T31] ? clear_bhb_loop+0x60/0xb0 [ 942.338191][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.345337][ T31] RIP: 0033:0x7f69f778e9a9 [ 942.349852][ T31] RSP: 002b:00007f69f55f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 942.359179][ T31] RAX: fffffffffffffe00 RBX: 00007f69f79b6088 RCX: 00007f69f778e9a9 [ 942.369176][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69f79b6088 [ 942.373640][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.382723][ T31] RBP: 00007f69f79b6080 R08: 0000000000000000 R09: 0000000000000000 [ 942.403856][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69f79b608c [ 942.412329][ T31] R13: 0000000000000000 R14: 00007f69f7adf940 R15: 00007f69f7adfa28 [ 942.412588][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.427950][ T31] [ 942.443955][ T31] [ 942.443955][ T31] Showing all locks held in the system: [ 942.451972][ T31] 6 locks held by kworker/1:0/24: [ 942.462778][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.464588][ T31] #0: ffff8881404f6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.492769][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.505419][ T31] #2: ffff88802856d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 942.515257][ T31] #3: ffff8880594c9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 942.524986][ T31] #4: ffff88804fd9a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 942.534886][ T31] #5: ffffffff8dfe4850 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 942.535932][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.545900][ T31] 1 lock held by khungtaskd/31: [ 942.556928][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 942.567405][ T31] 5 locks held by kworker/1:1/43: [ 942.572504][ T31] #0: ffff8881404f6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.589431][ T31] #1: ffffc90000b37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.611870][ T31] #2: ffff8880287ac198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 942.612812][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.622462][ T31] #3: ffff88807aedb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 942.637049][ T31] #4: ffff88804f9aa160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 942.647187][ T31] 1 lock held by dhcpcd/5514: [ 942.652255][ T31] #0: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 942.662192][ T31] 2 locks held by getty/5611: [ 942.667434][ T31] #0: ffff8880301c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 942.670530][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.684816][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 942.700922][ T31] 5 locks held by kworker/u8:19/6288: [ 942.707984][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.721807][ T31] #1: ffffc9000beb7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.733102][ T31] #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 942.742589][ T31] #3: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 942.746282][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.753390][ T31] #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 942.770641][ T31] 3 locks held by kworker/u8:27/10070: [ 942.776703][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.788907][ T31] #1: ffffc90003cdfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.800380][ T31] #2: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 942.810024][ T31] 2 locks held by kworker/u8:28/10071: [ 942.811458][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.816655][ T31] 3 locks held by kworker/u8:29/10072: [ 942.828207][ T31] #0: ffff8880300d5948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.840913][ T31] #1: ffffc90003c47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.855336][ T31] #2: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 942.865503][ T31] 2 locks held by kworker/u8:31/10075: [ 942.871258][ T31] #0: ffff888140bf3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.883257][ T31] #1: ffffc90003affbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.896481][ T31] 1 lock held by iou-wrk-16166/16170: [ 942.902083][ T31] 2 locks held by kworker/u8:2/17345: [ 942.906244][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.908242][ T31] #0: ffff888140bf3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 942.925238][ T31] #1: ffffc9000410fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 942.937881][ T31] 2 locks held by syz-executor/18072: [ 942.951790][ T31] #0: ffffffff8fa3f8b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 942.956237][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 942.961952][ T31] #1: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 942.982181][ T31] 1 lock held by syz.5.2907/18202: [ 942.996235][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 943.000599][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 943.013328][ T31] 1 lock held by syz.8.2908/18204: [ 943.013350][ T31] #0: ffffffff8f51c108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 943.058398][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 943.115643][ T31] [ 943.118060][ T31] ============================================= [ 943.118060][ T31] [ 943.183429][ T31] NMI backtrace for cpu 1 [ 943.183453][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 943.183477][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.183489][ T31] Call Trace: [ 943.183498][ T31] [ 943.183507][ T31] dump_stack_lvl+0x189/0x250 [ 943.183535][ T31] ? __wake_up_klogd+0xd9/0x110 [ 943.183565][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.183589][ T31] ? __pfx__printk+0x10/0x10 [ 943.183628][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 943.183674][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 943.183701][ T31] ? _printk+0xcf/0x120 [ 943.183732][ T31] ? __pfx__printk+0x10/0x10 [ 943.183761][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 943.183802][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 943.183834][ T31] watchdog+0xfee/0x1030 [ 943.183856][ T31] ? watchdog+0x1de/0x1030 [ 943.183883][ T31] kthread+0x70e/0x8a0 [ 943.183914][ T31] ? __pfx_watchdog+0x10/0x10 [ 943.183932][ T31] ? __pfx_kthread+0x10/0x10 [ 943.183962][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.183982][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.184001][ T31] ? __pfx_kthread+0x10/0x10 [ 943.184029][ T31] ret_from_fork+0x3fc/0x770 [ 943.184054][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 943.184082][ T31] ? __switch_to_asm+0x39/0x70 [ 943.184105][ T31] ? __switch_to_asm+0x33/0x70 [ 943.184128][ T31] ? __pfx_kthread+0x10/0x10 [ 943.184157][ T31] ret_from_fork_asm+0x1a/0x30 [ 943.184199][ T31] [ 943.184208][ T31] Sending NMI from CPU 1 to CPUs 0: [ 943.184766][T16170] iou-wrk-16166 (16170): drop_caches: 1 [ 943.189139][ C0] NMI backtrace for cpu 0 [ 943.189155][ C0] CPU: 0 UID: 0 PID: 16170 Comm: iou-wrk-16166 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 943.189174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.189184][ C0] RIP: 0010:memset_orig+0x6a/0xb0 [ 943.189206][ C0] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 <66> 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a [ 943.189221][ C0] RSP: 0018:ffffc9000423ed18 EFLAGS: 00000206 [ 943.189236][ C0] RAX: 0000000000000000 RBX: 00000005ffff0a00 RCX: 0000000000000003 [ 943.189248][ C0] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000423eda0 [ 943.189259][ C0] RBP: ffffc9000423ee40 R08: ffffc9000423edb7 R09: 0000000000000000 [ 943.189270][ C0] R10: ffffc9000423eda0 R11: fffff52000847db7 R12: 00000000000003af [ 943.189283][ C0] R13: 00000000000003af R14: ffffc9000423f121 R15: 0000000005ffff0a [ 943.189294][ C0] FS: 00007f69f55f66c0(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 943.189307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.189319][ C0] CR2: 0000563b9fc7f000 CR3: 0000000041adc000 CR4: 00000000003526f0 [ 943.189335][ C0] Call Trace: [ 943.189343][ C0] [ 943.189349][ C0] number+0x271/0xf60 [ 943.189373][ C0] ? number+0x91/0xf60 [ 943.189401][ C0] ? __pfx_number+0x10/0x10 [ 943.189422][ C0] ? finish_task_switch+0x18b/0x950 [ 943.189437][ C0] ? format_decode+0x5a3/0xe30 [ 943.189459][ C0] vsnprintf+0x91b/0xf00 [ 943.189484][ C0] sprintf+0xd9/0x120 [ 943.189507][ C0] ? __pfx_sprintf+0x10/0x10 [ 943.189528][ C0] ? desc_read+0x208/0x3f0 [ 943.189549][ C0] info_print_prefix+0x155/0x310 [ 943.189573][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 943.189593][ C0] ? _prb_read_valid+0xa7b/0xa90 [ 943.189609][ C0] ? desc_read+0x1b8/0x3f0 [ 943.189628][ C0] record_print_text+0x154/0x430 [ 943.189651][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 943.189668][ C0] ? __pfx_record_print_text+0x10/0x10 [ 943.189690][ C0] ? this_cpu_in_panic+0x4f/0x80 [ 943.189710][ C0] printk_get_next_message+0x26d/0x7b0 [ 943.189733][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 943.189754][ C0] ? __lock_acquire+0xab9/0xd20 [ 943.189774][ C0] ? console_flush_all+0x13a/0xc40 [ 943.189797][ C0] ? console_flush_all+0x476/0xc40 [ 943.189817][ C0] console_flush_all+0x4ca/0xc40 [ 943.189838][ C0] ? console_flush_all+0x13a/0xc40 [ 943.189858][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 943.189874][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 943.189899][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 943.189921][ C0] console_unlock+0xc4/0x270 [ 943.189940][ C0] ? __pfx_console_unlock+0x10/0x10 [ 943.189960][ C0] ? vprintk_emit+0x444/0x7a0 [ 943.189977][ C0] ? vprintk_emit+0x444/0x7a0 [ 943.189995][ C0] vprintk_emit+0x5b7/0x7a0 [ 943.190011][ C0] ? vprintk_emit+0x444/0x7a0 [ 943.190029][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 943.190046][ C0] ? __lock_acquire+0xab9/0xd20 [ 943.190064][ C0] ? __lock_acquire+0xab9/0xd20 [ 943.190082][ C0] _printk+0xcf/0x120 [ 943.190104][ C0] ? __pfx__printk+0x10/0x10 [ 943.190126][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 943.190148][ C0] drop_caches_sysctl_handler+0x153/0x170 [ 943.190171][ C0] proc_sys_call_handler+0x4c6/0x700 [ 943.190192][ C0] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 943.190211][ C0] ? io_write+0x985/0x1700 [ 943.190227][ C0] ? __pfx_proc_sys_write+0x10/0x10 [ 943.190244][ C0] io_write+0xb30/0x1700 [ 943.190264][ C0] ? __pfx_io_write+0x10/0x10 [ 943.190283][ C0] __io_issue_sqe+0x181/0x4b0 [ 943.190308][ C0] io_issue_sqe+0x165/0xfd0 [ 943.190326][ C0] io_wq_submit_work+0x6e9/0xb90 [ 943.190350][ C0] io_worker_handle_work+0x7cd/0x1180 [ 943.190375][ C0] io_wq_worker+0x42f/0xeb0 [ 943.190401][ C0] ? io_wq_worker+0x351/0xeb0 [ 943.190417][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 943.190433][ C0] ? cgroup_freezing+0x20/0x350 [ 943.190453][ C0] ? cgroup_freezing+0x29a/0x350 [ 943.190476][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.190490][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.190506][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 943.190520][ C0] ret_from_fork+0x3fc/0x770 [ 943.190537][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 943.190555][ C0] ? __switch_to_asm+0x39/0x70 [ 943.190574][ C0] ? __switch_to_asm+0x33/0x70 [ 943.190591][ C0] ? __pfx_io_wq_worker+0x10/0x10 [ 943.190606][ C0] ret_from_fork_asm+0x1a/0x30 [ 943.190631][ C0] [ 943.191135][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 943.191150][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 943.191170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.191181][ T31] Call Trace: [ 943.191190][ T31] [ 943.191198][ T31] dump_stack_lvl+0x99/0x250 [ 943.191220][ T31] ? __asan_memcpy+0x40/0x70 [ 943.191242][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.191263][ T31] ? __pfx__printk+0x10/0x10 [ 943.191298][ T31] panic+0x2db/0x790 [ 943.191323][ T31] ? __pfx_panic+0x10/0x10 [ 943.191343][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 943.191370][ T31] ? irq_work_queue+0xc3/0x140 [ 943.191396][ T31] watchdog+0x102d/0x1030 [ 943.191416][ T31] ? watchdog+0x1de/0x1030 [ 943.191441][ T31] kthread+0x70e/0x8a0 [ 943.191469][ T31] ? __pfx_watchdog+0x10/0x10 [ 943.191485][ T31] ? __pfx_kthread+0x10/0x10 [ 943.191511][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.191528][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.191545][ T31] ? __pfx_kthread+0x10/0x10 [ 943.191570][ T31] ret_from_fork+0x3fc/0x770 [ 943.191592][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 943.191617][ T31] ? __switch_to_asm+0x39/0x70 [ 943.191637][ T31] ? __switch_to_asm+0x33/0x70 [ 943.191665][ T31] ? __pfx_kthread+0x10/0x10 [ 943.191691][ T31] ret_from_fork_asm+0x1a/0x30 [ 943.191727][ T31] [ 943.200993][ T31] Kernel Offset: disabled