last executing test programs: 2m39.765864576s ago: executing program 2 (id=314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x82, 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m39.76194467s ago: executing program 0 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$FIBMAP(r2, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c4160bed3fb85930000170001000000000000000000ac1414aa000000000000000000000000001004d400000000ac1414bb000000000000000000000000ff020002000000000000000000000001fe800c15324f000000000000000000aa000000000000fff802007d1b67de84c566529b12db366a21d964bb18819667a80a63f131a964dd8887e47b64a6c32876ca066ee4439a207a3664b9c166ac146ff1a1e692396bb5da7bc9cac6409e5723f61e2e607e9043543588be6cfa8a41bcb72a3181585d72e424b591425d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2001000000000000000000000000000000000000000000000000ffff0a0100ff000000004e2200000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000020000000000000000000000000000000000000000000000040000000000000000000000fefffffd000000000000000000000000440008000a010101000000000000000000000000100000043300000000000000ac1414aa000000000000000000000000000000000000fc000600"/192], 0x16c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c010) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) lseek(r3, 0x8000004, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0xd, 0x6, 0x1, 0x6}]}) setsockopt(r1, 0x3, 0xfffffff2, &(0x7f0000000540)="ce3a764860655cc3b9a21b4a459acd757675c63ce7b2b328e8f9da90bbc229dd44624cbfdd08f589a1d73541b782112a1c8bf4ab347e8f60591dfb4d56bd0dab7b1417378e", 0x45) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a28000000000a050000000000000000000000008000000140000000060900010073797a30000acc3d3e00000028000000000a010400000000000000000300008a0900010073797a30000000000800024000000007140000001000010000000000000000000100000a41d72f6d27a69d5c3b80b2d0f4fb0aae91966c266a044ccac0dda8d73997b0be4ab79def09ea5841fd3009fc67e54f7b6347efade85c68560c1656d5257118b1c673d23378871d"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xcf6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 2m39.588409796s ago: executing program 2 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000040a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000004008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d6163767461700000000800014000000005"], 0x130}}, 0x0) 2m39.376643849s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000f}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = memfd_create(&(0x7f0000000000)='^*\x00', 0x2) sendfile64(r1, r1, 0x0, 0x44) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8c30840100039180000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c007c72", @ANYRES16=0x0, @ANYBLOB="070000000000000000000500000008000380040001"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002"], 0x50}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x8000, 0x80000000, 0x1, {{0x6, 0x4, 0x1, 0x2c, 0x18, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @empty, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', r5, 0x0, 0x8, 0x9, 0x2, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@ra={0x94, 0xffffffffffffff1e}]}}}}}) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x5c, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast}, {@loopback}, {@private}, {@rand_addr=0x64010101}, {@multicast1}, {@dev}]}, @lsrr={0x83, 0x3, 0x10}]}}}}}}}, 0x0) 2m39.280642385s ago: executing program 2 (id=319): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdffb, {0x15}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x24008002) move_mount(r1, 0x0, r0, 0x0, 0x46) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) 2m38.99652762s ago: executing program 2 (id=322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000040)=0x2, 0xffff) (async) sendfile(r1, r2, &(0x7f0000000040)=0x2, 0xffff) fcntl$addseals(r2, 0x409, 0x8) (async) fcntl$addseals(r2, 0x409, 0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000380)={0x0, {0x39b14d69, 0xfffffffc, 0x5, 0x4, 0x3, 0x80000001}}) (async) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000380)={0x0, {0x39b14d69, 0xfffffffc, 0x5, 0x4, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x4, 0x80000) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x20006, 0x0, 0x1, r6}) (async) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x20006, 0x0, 0x1, r6}) io_setup(0x3ff, &(0x7f0000000500)) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x10000000, 0x1000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffb, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x3, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x3, 0xfffffffc, 0xffffffff, 0xe109, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x8, 0x10000, 0xec6a, 0x0, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10004, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x2, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0xd6, 0x2, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x9, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0x7, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r10, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="42feffff0200000009007400070000007f5d000002000000"], &(0x7f00000002c0), 0x0) (async) name_to_handle_at(r10, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="42feffff0200000009007400070000007f5d000002000000"], &(0x7f00000002c0), 0x0) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f00000000c0)) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) 2m38.686559857s ago: executing program 2 (id=324): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x6, 0xecff, 0x5, 0x0}) 2m38.672097288s ago: executing program 0 (id=325): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x8000091, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af11000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r0, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x4cf6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0xffffffff, 0x1, 0xff, 0x1000, 0x4, 0x5, 0x4}, &(0x7f0000000180)=0x9c) 2m38.350029226s ago: executing program 0 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x8000000) 2m35.862166049s ago: executing program 0 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x9, 0x7, 0x6, 0x10000, 0xffffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff1, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000002, 0x7, 0x1, 0x80000000, 0x1ff, 0x8, 0x2, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d000000ea00010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m35.516890897s ago: executing program 0 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010427bd700000800000020000000400000303000000080018004e24e434"], 0x24}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400000057e6f400d9d302ded3", @ANYRES32=0x0, @ANYBLOB="01980000031300001c00128009000100697069700000c8050c00028008000300e0"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m35.43558558s ago: executing program 0 (id=337): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000500)={0x1, @pix={0x4ed, 0x3, 0x59455247, 0x2, 0x0, 0x4, 0xb, 0x8000001, 0x1, 0x0, 0x0, 0x3}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="8189fb1dadb923328d9d0aae9205dd8000f30546ec7ab7846d443739ed4d000d804000", 0x23) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @empty, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0200", 0x3, 0x11, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x16}, [@dstopts={0x0, 0x0, '\x00', [@padn]}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000780)={0x34, r7, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x810) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = socket$inet(0x2, 0xa, 0x3fc) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2b, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x400001, 0x1, 0x1, 0xfffffffe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x128, 0x2, [@TCA_U32_ACT={0x100, 0x7, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x30, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x7, 0x6, "59f1f3"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2169, 0xffffffffffffffff, 0x1, 0x8}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x0, 0x2, 0x80000001}, 0x1, r13}}]}, {0x5, 0x6, '{'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r14 = syz_io_uring_complete(0x0, 0x0) ioctl$UI_SET_KEYBIT(r14, 0x40045565, 0x22e) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x6, 0x0, 0x5, 0x0}) 2m23.203343384s ago: executing program 32 (id=324): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x6, 0xecff, 0x5, 0x0}) 2m20.345236407s ago: executing program 33 (id=337): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000500)={0x1, @pix={0x4ed, 0x3, 0x59455247, 0x2, 0x0, 0x4, 0xb, 0x8000001, 0x1, 0x0, 0x0, 0x3}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="8189fb1dadb923328d9d0aae9205dd8000f30546ec7ab7846d443739ed4d000d804000", 0x23) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @empty, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0200", 0x3, 0x11, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x16}, [@dstopts={0x0, 0x0, '\x00', [@padn]}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000780)={0x34, r7, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x810) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = socket$inet(0x2, 0xa, 0x3fc) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2b, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x400001, 0x1, 0x1, 0xfffffffe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x128, 0x2, [@TCA_U32_ACT={0x100, 0x7, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x30, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x7, 0x6, "59f1f3"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x94, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2169, 0xffffffffffffffff, 0x1, 0x8}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x0, 0x2, 0x80000001}, 0x1, r13}}]}, {0x5, 0x6, '{'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r14 = syz_io_uring_complete(0x0, 0x0) ioctl$UI_SET_KEYBIT(r14, 0x40045565, 0x22e) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x6, 0x0, 0x5, 0x0}) 2m11.255393684s ago: executing program 6 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x3000000) 2m10.788756837s ago: executing program 6 (id=458): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x210, 0x210, 0x17c, 0xdc, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {0x4403000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0xfe, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @multicast2, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) 2m10.378336182s ago: executing program 6 (id=462): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x4, 0xf}, 0x23) unshare(0x2a020400) (async, rerun: 32) r1 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) r2 = getuid() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x40, 0x0, 0x1000000}, 0xc) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x200400) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x44, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async, rerun: 32) read(r4, &(0x7f00000063c0)=""/4096, 0x1000) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7e1]}}, 0x5c) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r8, r9, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2001422, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x2}}], [{@obj_type={'obj_type', 0x3d, '\\-'}}]}}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m9.972810755s ago: executing program 6 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010427bd700000800000020000000400000303000000080018004e24e434"], 0x24}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400000057e6f400d9d302ded3", @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000081130c00028008000300e0"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m9.610757802s ago: executing program 6 (id=467): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000240)={0x9, @pix_mp={0x0, 0x800, 0x50313134, 0x9, 0xa, [{0xf, 0x6}, {0x4, 0x5}, {0xffffbe93, 0x9}, {0x4, 0x5}, {0x6, 0x1}, {0xa, 0x5}, {0x1}, {0x3, 0x7}], 0xd, 0x9, 0x1, 0x1, 0x2}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4020aeb2, &(0x7f0000000140)={0xfff, 0xe, 0x8, 0xffff, 0xffffffffffffffff}) 2m9.230675437s ago: executing program 6 (id=468): syz_usb_connect(0x2, 0x4a, &(0x7f0000000880)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3dd"], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000001180)={{r0, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x101100, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x5]}, {0xffc7, 0x1000, 0x29b, 0xbcb}}, 0x401, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x62ca}, {[0xfff, 0x8ed9, 0xffffffff, 0x1]}, 0xa, 0x1000, &(0x7f0000000180)=""/4096}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x40044102, 0x0) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000011c0)="dbec43ca5a7c288e1193d87e58f40076f8121a53a2915b46730e82990197317e75a75630bc7590d909e2119e1fe1707848396cc1edf19186747ee1e2bf3b4f84e60076d35f24cb4f2040b967800db9f168d8f1d80ecc303cb43fae315836cba8c0b89279ef79c05a338e80f17232359db58ddad2ed256a186e10ddec99e4a5fdfc2569a298028b44cf3520a0ba913d5501719d46635e43331ed7f3ee4a99d6aa37732d5d7ba6d29d9b", 0xa9}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="ac000000130100007b040000875c44ff500000ca9225bf5f4b6e3ef26d6fdff12d8ecac1a409a46cd09bb62d954c8316b22268b7b3536c454cc76c0835d3449e6fd82920900ebc3754d862dc2a8a78a509188a0a1994426bfa91241f17bbec94d3663970aaf8b6e16d03bf7d68e3d555401d3ebcce74ba4ddd98a39ac45a2c692cc010a5bd4aa705d18c08b00001a4fb29ec4ea27945f06b83480a0ae402197e754aa1e0ef61d9f18060bfcc"], 0xac}, 0x44080) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = getpid() prlimit64(r4, 0x4, &(0x7f0000001400)={0x6, 0x9}, 0x0) r5 = dup(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r5, 0x0) openat$cuse(0xffffff9c, &(0x7f0000001440), 0x2, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000013c0)={&(0x7f0000001500)=""/93, 0x5d}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x6, 0x0, 0x5, 0x0}) 1m54.181170147s ago: executing program 34 (id=468): syz_usb_connect(0x2, 0x4a, &(0x7f0000000880)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3dd"], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000001180)={{r0, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x101100, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x5]}, {0xffc7, 0x1000, 0x29b, 0xbcb}}, 0x401, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x62ca}, {[0xfff, 0x8ed9, 0xffffffff, 0x1]}, 0xa, 0x1000, &(0x7f0000000180)=""/4096}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x40044102, 0x0) sendmsg$kcm(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000011c0)="dbec43ca5a7c288e1193d87e58f40076f8121a53a2915b46730e82990197317e75a75630bc7590d909e2119e1fe1707848396cc1edf19186747ee1e2bf3b4f84e60076d35f24cb4f2040b967800db9f168d8f1d80ecc303cb43fae315836cba8c0b89279ef79c05a338e80f17232359db58ddad2ed256a186e10ddec99e4a5fdfc2569a298028b44cf3520a0ba913d5501719d46635e43331ed7f3ee4a99d6aa37732d5d7ba6d29d9b", 0xa9}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="ac000000130100007b040000875c44ff500000ca9225bf5f4b6e3ef26d6fdff12d8ecac1a409a46cd09bb62d954c8316b22268b7b3536c454cc76c0835d3449e6fd82920900ebc3754d862dc2a8a78a509188a0a1994426bfa91241f17bbec94d3663970aaf8b6e16d03bf7d68e3d555401d3ebcce74ba4ddd98a39ac45a2c692cc010a5bd4aa705d18c08b00001a4fb29ec4ea27945f06b83480a0ae402197e754aa1e0ef61d9f18060bfcc"], 0xac}, 0x44080) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = getpid() prlimit64(r4, 0x4, &(0x7f0000001400)={0x6, 0x9}, 0x0) r5 = dup(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r5, 0x0) openat$cuse(0xffffff9c, &(0x7f0000001440), 0x2, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000013c0)={&(0x7f0000001500)=""/93, 0x5d}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x6, 0x0, 0x5, 0x0}) 9.573804613s ago: executing program 5 (id=995): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r2, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 9.100972206s ago: executing program 5 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x5, 0xb, 0x10, 0x3, 0x3, 0x0, 0x3}}) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write(r2, &(0x7f0000003200)="b645f8cb782b3b19e05d6f4219ee98da1cbbe365f04fc683c9070f4f4831f14c19152c4f7ee0616ce01083350476e39aa0d41495e62a195a3cdd75911f6134c1e8af2f48abee6c917804f1a74d5e41589d73f7a709ad91eae82ed9dc1f733c92dd62717a452b25", 0x67) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/150, 0x96}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0xfffffffe, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x16a) epoll_create(0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010828bd1728738adf250c000000400005800800010075647000340002800800030000800000080003007800000008000400a8"], 0x54}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) rmdir(0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000a895671f00000000ffdbdf2500000000779fcbe88e6a53e643c146136ceebbef70060e9f9e4c8acad543000091e89dec167351b8c3dfb71fdab00741bedf7fd4e3c976d01be06d53f5f27dd40613fcb237de71fb1acf9352a667a614293841bfd411dc2fe71983890dd076d08558ec346174624d7bc000"/133, @ANYRES32=0x0, @ANYBLOB="0020000000000000140012800b0001006772657461700000040002800a0001000000000000000000"], 0x40}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x88, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x2}, @broadcast, @value={0x4, 0x1, 0x1, 0x1, 0x81}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x1, "f4"}, {@device_a, @broadcast, 0x42, "4ce764a7bf06b5e2bdd8891cbc7b18a1c4dcd14f6f091a429bc11dae8f43322260da5086db9ac5efbe789126e706a5c01dc0942d2c6a58a2e2f7cdc64e58dd7e9d08"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x805) 8.167757004s ago: executing program 5 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}]}]}, 0x6c}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000005200000008009f000600000008002600b40900000800a1000600000078aa7b1065dfaf215ba1140d65dff4be0df9eeee7f73d85262e2741eeb7a1cebdceea8f3d2e64075c22fb7afab586aa40aeb"], 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x7c, 0x20000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0], 0x0, r7, 0x0, '\x00', 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r8 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x7d45}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 8.094310933s ago: executing program 4 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x4e21, @empty}}, 0x1, 0x3, [{{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e20, @remote}}]}, 0x20c) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe800000000000000b000000000000aaff02000000000000000000000000000111000000000000000100907809000000699951a503ff3c00fe8000000000000000000000000000bbfe0000000000000000000000000000bb2b00000f00000000a542e5fa78122afabe978693aab29d1466a08191331ab6a877ada0ba71547993040b10059bd34a8b75294b0923a60f1fb92185b6f684546c90065735ecd57d7d08c3b4f700b561a165be3b70f5708ad409f217ed6af01e38575352a8c2ea616803b11bf27a5a897a351022d0cbfbe26f30b3ab4e3a6f4253d5cf238632ba4115fbcacf020fd669b418bff577c51abf913317f857712c3d4734aa2f0dfdfd67c1de45cc09f7d560c395460a2a172b3c55cd9bcf7ebfd6763f961b5930f9280e156efdc6141ea07715d5af19c9ed06a53651a47aa5c52d8ff986c66d719c19088d4627ff684f19b24b6e6e9605c8a93df75154a96ee4db03442d71d423ae8c16b4106941048aaab26760c88cf9b2cddcd078641bfe5c645197c5ba125531be11df5a44801774c5539d136ba2032fbfcc52731f9713060fa4ad8f6b45b245da43d30117c2b132ed23eac46b5193978f893158020056a63a460d8204f02c26ea9dac9a739f166884691f551084b8ae09965499ddbf57f35eacf411d84b5213be8d953eedda4d32ad55543fd14d70809120f1ca942fb67d116642297cf78b6ca6f47089fb3ad10af09982551b6ab3c0f37a3e73e875220480c34b1746a98e551f4346706920c1f40dba48a6a3df76333178cd860232e4d52cbc9775fcb9785d5bd3df133756e4745e7e343bca8697fcf302178020df677a83b4473ecc42bfa8e6a50c8b79b315c1eb849fd713374d2b2dae2a60e1592baaf6ee9814c4b42e059094418d206392e9fb225922052995f932f454fd75cc7af9e13f28db47956289701273a411355f34f4677daa0d4fb8d87e2a49d3fc2d5670284c7cf2c622049eaafa2f743dfc7868d03505a409979adfc4ff044d1c04d2311f2ce1cdf5cbf50d289d9b5faae35b2b3de9211d5de16e1422dd47b6c4a4d0d28619e55a96063a46fe0f29b47e8c306cdfb3cb0064ecedfcf67bfe63a0e8a4c12929f0d6a7c32d9e225c7df08fdaf07d8dfbf85b3a167589378f74fa1bb75b3136619017c92a113075467498560442ba3fe1d5566b737e921dec06f60c8ec711b1a6b3df6ad7849564b4e05c4d29d73cda474a8e48f65aebe43c73a85af773eb382a1aba314430753a421d2827f677cc210cc4472e8ea235abc6e6e508c628bf78f5a9208f77c6ae02c03b7bfdde1b94ab2dad96714c5d0cc66763c74e7f1a3a373994ee7e30fd45ef323bb31400b701238fac457ec0d4d17b7b7393903b59dcba68fabfb65ec959f1a35948cd34799784bc3f4c6ff9fbb5da7a11bbf7bee96acfeb788d620f274858f6de5f7975d6bdf570de50ac2a9ecacf30672cb4d5326ab2ec36d0f09113d799a3167202b751292a497e015a6071373576f55bb0e6ce4f29820cd1a6a7293317ccce61d468e908868ba061653aaba351661008c70d825421810a524ef6df25878e750130dd99b8aa34fbce491e98770fa328c9d26f2d5800255e9037d74c7a2e2bacdcc81cec81a681d0be9aa77761ed07c91f5b0bcca388b881c001a6ecfd098ada1d3bed3b873ead6b79d930f544b2d3f3dd7b634105bfd710a825cb5c2bf41a931c0c3fabaef0bba470faadc56466bc0894f7222454ff138bffe94b58fb4d45a1cf14482d5bd7ac9887e2d2826bc74d1f22f056f2ded24c9586dd1be8a573a1c9da8dd0e5ff0a7263a473b1c948c4fea4a5282d3e039fb89140688b70d7d69ef13276d5e871550c1674cd506e9ad4d0d5a03e0b120c384b9f6ab315bc4c105f839206a53a6f226ce637689f81aab37a1b8f94f7796107ed826f3f3bf3d6a086f216ead59fc3e19a0aa39177bcbad38d94b7a4c3edbb53f88099a6ac618409a225c893244d22e236989ae9acd7eda7619f1f249dc60b855e0fec347f3909e90f80e6ac03feec2df18c9b4b2abcd96e90768e8433a133e69381b370341bd980257b4ed4ee4f7a2fda9142ed5540966d1142bb13840cccbab402d2ff9ce3702b4ca2115b20e29d4aa8341a77affa5abc88c09ead30ddd988844309d33fde48d32b156da20b912a17663b14b6db60d7d7af55dedb45d1088eb6b7e264478344c4389234e18209f86c9a77479f31e5617a30e6bf67f06c6c2d9558866dc9054814e58bcd5e2876e1f7b1d80279da5e1442eebffc07dc6330e000bd9361066950da1ba6cf64c7622c4e3ebd730152138d79b6f8f4cd3cfeca0c5f9c650303aef130c9e9449e7212163d60ca2741cfdf7951d804fa317d2cd4ae8397fed494502853b869672ca6f1e78d8fb05de313a4c0985f11b1c345bba92028bfd6b9e3a2cc7c975a48feb28ba1584523b88bbdaf4a052d01446ac06ff5fb00982ce965b72e9e37319ec7df2895843c750379eb99ecfa0569defe96a8204a7a1cda42eb69aa74fde31c0305d026ccf3fe1d3ac984901cc70890d0e3115001280f60e0130655f26bcb611e86f4c1c43327b18f2aace900cccc8a5606d7090cf7996093f72d32a71bfffb07954b4419c61c3a59ef35cd9533087c245106482d8d37b61d627fd1b60cc94ccceddb6da244a530442b4f2e4f7ec0cffca2cb02e4df7e25fe7229ea2b6be96ecab5ad54d623d369b5719d82c206692850b07e4a61dcca7d3cfd1bf0d8d46a0a9f6ced4f4094ba009e553f03a36e47fe5fa608f9d40fffef99d6e945468a75fc8663099c432bcb514d769e7559114ffe0beb6ddf9ad9dec965ec41b9ec2af69468b7e3512c949a82d8c1525f8f3d56553b8deaadf39328a983b2f483fb7bec16e1fc82d512d6156805ffc4d83bea8c674fa439b6b94ea76f5155a305b59715dd7f205d402b936afdb620a973663527dfe62a52af76c605264d729ad735a3dd27ab39a321b1401211108d52e9bb68baad2ce46ed3c85ccff07a383809f9aaa1aa88b57c1eaf69a1ee917e3a57800beba4919ef66a235a260978c76f1367e2b3a151069b379c5c261d56e3d4a31a122a515f3722dbe92eaa4032bab9b2684ed3c850c79276fc3adf44579a125ede97d172e7029dcd4ffe281c0608a6191e4a3eacc5c1d2563792820142ac6363fc3f7f4238852d15fce090cf54fb67ce3e4355ee701d02ab3f64011f9945659291f0252712948c91d5c4926f1728e9a517f9a583fc2d75773da4f10cbd28738de20d2cb05b9ca5a3fed2accf4ba7cb416f95338a1ada4691fcdc06322c009fa832b7dc7f9dee155941c3bf54626d4e47aa98d3eebe0ebfd7ebebca7f11e75e95dd9f81dbbd5359ed9bce1a55fc7938c7e79e84bdb2fc0b3bc7c77909b9fec954d0013b718e99067d47bfca810297d32cc34c6d092b855fba9d4b0bb53325b06fdf346d09a8290fa72f36bcba1584167bbf1a0e32e6aa7b3ba10569033067884fe671caf7195710bf0334f1fca6d76cc86ba8e49e5fc36f4011f42f6c475636f698df193b4f91c4b735b6b781736b978fcfe6ad49f8e5d90339cf494541f27e2ad4a86ba69eef6864880ae23d1db5353e67fbfbc494ffe3cd268fc430c5562c8c145ff70429047d00863d948ae2a76dba175809b3136539e9cfca23fa45ea1c2552bf943f7687b9e06bdaa66c1f6eba8cd3294c4437804041eddc469815b4cdde8501ee0f7ba8bcb36b14944d31066a5a11c9b562d840296cc4b1362054c15174b27306d362ebb3c4896e37cb5f5c037fece5dfba91ecda3111b1bc80a2ab0b3a61ea2b53347d34d581a3715928cefde613bd5b18424b4ac1e74247cd48676ed1e379c73a17547d439871f6e43b697181fa871b53ad9675c029a423827ae02eedd4564c753d552e939a38fea733b6699ed94b816b42eac960135cd30e65480fb1a1f9370d801ac1c232e3107c00fba5e778a870bc6d3066659e674e39d82f1414d6396ee2c731cd33cb4eaccb386b704bd7530bbdc6fc5a5edc093ed637460b6af9969b4239407b35c95f9a78f5adb85b68a8ad045c7833f9456cfa3fb185004b7df8515ed9c3121506804b5dc1fe5ae4d72b84ea3cf120f9575d205276a5934d683e7911ff7de4283f718082c71f02c109e5fe20aea97dafa090a163ccff053636c8657ca9a7451bf5d1051feef1f3b6d234d8e962f45520c14b2283408764da859499196c9c39e58f02974446812e557068367a37228f450b127ab0e304be418336f9aaecb313bd7ff326251a4e0cf13a426078fb9c0fcbdea5ed32cce52649d2465529945291f996d016e9927bc3ceccaf2b1eb7fb5562c89ce741e4884a8b5843a08a147ef0699a9063f41044f87fbcbad7cda63671df28fabbf3216f62082af08e5b4e8ab38f15948ab241ced5da50a7e093271244b40513a5db6b74d78d03d44e4cf4c5dcbb0327aa17f5e7c3684778bde55dbd9139a5cab010b3ee8b6f43ce2faeee633ca737ebe802f9e460aba571f28c763967b3f2636bc66ce44454809e2474a86789e98a46fcc1d1868cd860820d9dfdeae933f73b6a1bd3bbcf79b8c14354921fa7c13456995489abe275a43bf7725a9509fd97c522ec0598f5e1c8773b9966eae619b342ddda0de784aa2762f18b96c6e5256e3c74c8d125886edc659594f53072906f50fe1600c9ca39062d5f9875df13783bde9e5f50004da74793ea4272353fedd3bf8023aa550a451374964d208a3e190ebd12ded53f32cdd509301423d4ca0c1726a2eeaa8a0d3b53ac5cd14518eac7ece9a3effa518076d388b461ade8d577981590a6d6105c4f367390bc7c5a2a7b225160824709fb9aa1b55b84172af05c885295e97c233963c24f8cf5aa49c219b075c21f49044e594240b32bcdf26e31128cdb6173243fadfc2ea281ecdb61ce558486ae46d2d209d1b1e0e6600f00efb343992b1a2ea0a7a43cab8046b219fe1e54a80ffa1df84ab41d4df7ef3ebe486e1747ea0b075affc6c798e942e39a86a955a6aada121eba738cde9a33dce2daf6745b62b9c4db5ba2b44ff8884b5033dc92d33f9d65a450cea047cb35aec5a37ad322e4e07f56be0f7e0d2164027a4bff4e70642868978d7b0d1e82013447be0d34e32c2ce2316c0f35812cb132a0a9b104586fd3d1d3df82a9d6f123d711819803d2366bbe1f4c26fea66c5c034b9e147f57742f219cb493d6fea43a6dc4c50b864671c73f88b855798201bb890919574345b759de2c645351aadb7f5ed9d8ae3a2804ee1ede9f0122d4db3e12a67444b86746d54bb243814b7a9746c89764f5009c7b950a3a19828e973ea3f248a6ba64544c1aa69de375d3eb9ae4825950ea0657a1f35ac89ebca6aac43057f1b0abd9deb4ce505cdb9deb3b4151cccd24cda516783166eb7e3c8029db851c0fda16608f2f1e893d931ce609e217300c848975e75dea7fdb488bc512a1613eac5c699dc0277dd5601f354b18730b4a1b2e8ddd287d4bac13beef6c98b449e659b5fa81fdb452b5500dd1a5ca775c24c30ff9b01a59399d0bda0de1414bd037504d5f36622337b86566e0104119a19cf01f5e95a201ca3966af2829241e2e7887d2821d651bb1f90d5ec1858da6d58595213ffa32f04266197f11b022f0f36a26c5c1512a9e6eb392d92a5d108f7d124cb916cd42dfeb6f5f0fc6f4f48da00394d4d196aa191ff30361fbe2d510319c4dea0635a2", @ANYRESDEC=r1, @ANYRES8=r2, @ANYRES64=r1], 0xfce) 7.73163501s ago: executing program 4 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00090007bd70000000002004000000040019"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7.23660244s ago: executing program 4 (id=1013): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="76fce25c37660262dde181", 0xb, 0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000180)=0x8, 0x12) syz_clone(0x80, &(0x7f0000000040)="36dc281e74820a7d8dcccb54d2a56cdb9581f73bacd3106d152e85afc1ef51cb69c902bf618d3b568a85ae803a89efb4e5d087ba4807ec91404f384c2bb40280e8b1650dccf713e74ce39ac6f2878fa648238e5852f4", 0x56, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="6fceadd6be2429947d65be497ce63ff23ebec91b6b7fada48f39a2d4b0bf3b7a382d571d8b21d275c2f71a5ff5c5f953c907f02544672df86261bc413d1c51b0") sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xffffff41}, 0x0) 6.841539732s ago: executing program 4 (id=1017): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) r1 = epoll_create(0x628) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000009}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 5.687537638s ago: executing program 4 (id=1024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0x0, 0x6, 0x3, 0x7ff, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "000000400300"]}) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e4162e43ac610200000000002000000001000000000000000000000d00", [0x2, 0x7]}}) io_submit(0x0, 0x6, &(0x7f0000000e40)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x7a, r5, &(0x7f0000000a40)="c43b3a34cd987b1047146148e4c43ff7830c1c0bdb65cbd3a27f25441da0e2bdc84a795a4f2499a02b9bd2e83a3bce0a34ed0c9c8145ebf14eb99d85e0eaa60386377c58a736a9ef44bf7bb8d21b91bb3cfa7203bf0b5e65f695ea9857", 0x5d, 0x6, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x2, 0x7f, 0xffffffffffffffff, &(0x7f0000000b00)="5692f1f9436fd077ba8c974c82ec4ab1e428610dbc517b455f57208811e9803b017164545fc71ce9fc739cf1eb88ad557894b07132763520a72c73444879a3e626f7c15f162c15bd7a36070d70fcfe0a66dc655f084cb6e6f89dcdf29a2c2bc4d65221c53a014b144540d3ad70a0d5baca7e9c872950", 0x76, 0x2, 0x0, 0x2}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000bc0)="aba653310b412a5fa15c949562170c551d954fa827d9ba52debdceab27ced333f0c39508c2", 0x25, 0x4, 0x0, 0x3}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x9df4, 0xffffffffffffffff, &(0x7f0000000c80)="a25fee3b0e2ae4e29c05942e6e95f3f442dedc4dc7d60e2795cb3c8a1c806e4b11ff72e9da89f137c30ac18e7eb65889beaf95c00c25d20f67", 0x39, 0x6, 0x0, 0x3}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x5, 0x8e, 0xffffffffffffffff, &(0x7f0000000d00)="7cef48286e637d28c6e4d9b6e893b3fd276f73aa19b842162f87765b6d4e98a87bd6325b59ae676997de1d58f11dfc05e470765d9766f44d3909436b9d9e", 0x3e, 0x4, 0x0, 0x2}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000d80)="2aa49d", 0x3, 0x8f, 0x0, 0x2}]) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4.838042458s ago: executing program 5 (id=1026): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x44, 0x6, 0x7, 0x15, "a0e1c6beeb439eff56c42676bae174bc012837"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@canfd={0xd, {{0x3}, 0x3e, 0x1, 0x0, 0x0, "6b60e24033426832fbc00473a0dfb1fd5d2424eb22ce53280f21abb9083450734d292b4ed50d969e55ac282392ff2976b6e2c50edf49612f7b16cafdffca8ac7"}}}}, &(0x7f0000000340)={0x0, 0x0, [0x377, 0xcad, 0xc08, 0xf33]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r8 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000069dd3440cd0c93005a230102030109021b00010000000009040000016ce08d00090502"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r8, 0xffffc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 4.372132489s ago: executing program 7 (id=1027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r3 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r3, &(0x7f0000000400)=""/245, 0xf5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x21, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000083c0)=ANY=[@ANYBLOB="1201000000000040cb06f57300000000000109022400010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x0}, 0x0) r6 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000000200)={0xc, &(0x7f0000000040)={0x40, 0x21, 0xa6, {0xa6, 0x7, "952c54e3bf146b8dd5f5ab707f931a4514c6d17b46c70edefcd22420b6ec8aaca637695e80527c11af481c6247107a74741e98609fd0a5563d00b60146388cc2a508ede41402a0795fd6a67abcd30b416cdd6ff56ab108a4fa9005db67879249b04f2e6dc9d019f93f9518e98d37624c3f4ff501bf8a15424a16f8de6b60b611b344f0dfd2decaab29627d93274d057ff6f5dfc011689ac68c994680bbac31c45a60ec70"}}, &(0x7f0000000100)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "f72c8a116b2e97406d23b8ceda40d84b4da9bd0ad792e9e883c8dcecf39285afa307a70efe3c33d30708463c6fc22dbe44966433446bfdca64d0a03f27296cc2028d7cec5258025368a5aa78bf5327c4cc43fabcf7eca2ca25be8f944055b90c2996c8934728888fcf4a0a457e73c8212c2cbee8ea2933aa9469c9b7f9d24439d1eed8760f6e6b50df652f6170b66540bca60463b8c4abee0c0b0c56"}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000240)={0x40, 0x1, 0x66, "fc5c1b113a8230a10ba7fa1e24e80c960f9fb0f06103d38f8dbe496228558ed9f09054c8fa6c823956532660631606f5457db67cd5193ad3b3b80fb34229c17ed32d0c2dbca1a25493eaa47853133148f2ba98e6e885127fdbc24453b4df5027b876d55fe8ed"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xcee}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "45a7808544fcbb1c13f31b188b64185b63bd806fb3334ce59b1af22a9a58483af61574c1b1c2b6b0006095b607f73d"}}) 3.240922232s ago: executing program 1 (id=1029): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000305b0100140003006e657464657673696d3000000000000034001680300001802c000c8014a10100070000004c04a1ff0900000088a800001400016e75040000530700000600000088a80000080004"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2.971845422s ago: executing program 3 (id=1030): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000e80)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0) 2.342374535s ago: executing program 1 (id=1031): unshare(0x28000400) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0205648, &(0x7f0000000740)={0x4, @win={{0x15, 0x800000, 0x101}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9c}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='^', 0x1}], 0x1, 0x0, 0x0, 0x20004811}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$setlease(r3, 0x40f, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0300001600010a0000000000080000001c00e00000020f1b116dbbf92300ea6c732009cee41ddfb1a633dc76f8ff8aa4cad4bdcbf7a0bfb0409fa6912f87e8f9445abfac67e912203448c4e54c310b39c9bb8a81fe2d36d9f8565f6c1ddf0149bcdadae379a578f45f7d921601cc29f3233d63277363cc56702782bf53510ab443af5f027f4bddf5532aa0dbd24ae83c88a481fd3d1dca1f6011e06cc4aeeb364bac0a397b69428cdd0d9534eaac5ed332c57b24c89e1ddc09bd50f2cdc7d9eee56ca53750f39c64301aefb0ffb352d62ac0effa0000000000"], 0x1c}}, 0x0) r4 = dup(r1) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000640)={0x0, 0xfffffff7}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r5, 0xf6, 0x2009}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = syz_io_uring_complete(0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000140)="1c7a8a848244dc87c6009fdd85e00622f5dcd02aa8adf99584bf2043ce3b8146545bc9cfec02595fa6853f058f576f54c938340e4109846ede5f23f1bf6f156a355b33dafbc2df401ab2d9af108ce5c43e5ab477fcf14ec2bcee2781038636bca9ec6dc25539e5882925617f3c688d45c86ff357dcd0d3af59eb07500056f5596e28bfad8738afc1059a81bbbdb35fae24cebdd6aab82f904029c724", &(0x7f0000000200)=""/204, &(0x7f0000000380)="3d79933acaf242efcab23a6fabc6f6678cabbd761d00b4807dd357d35734a651fd013261a099b90f6100797159ad81bf512fe0a55eacd8bcc525bef47a5ee869558bb6d902958336478a372cf83cb6516ab767f4ef98c1f10e2693663b5b558952ef3c0c6c34cc3b7f3a217f881fff5e86aa30c743f972a1b85c7d81f9338930273568b643f7521d6b4292f88a4ad722cbe84cda16673e590bc5c8e6b568260602a7df4b", &(0x7f0000000440)="580e11e98348da7506815d734376c07bf86746b9405fbaa8e88b1e4a8c1ae76533e156a2e0aa11918e487292ad066a379eee112c895a5e7ea2ca8a1bbcfcd40022222d0f5457d2b7372245132c03dc3483e6047d7ed0c05df6be08d43d2e7e4b9f0648ad6136c43970873c1277617e69548063695af7414c48cac15bd78e0d3d09bf557192a3f8749a3cac9c70069e4700cdce9f7f120a3b", 0x0, r6}, 0x38) map_shadow_stack(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 2.234083276s ago: executing program 3 (id=1032): syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1080, 0x0, 0x6, 0x0, 0x4}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r3 = memfd_create(0x0, 0x6) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r4, 0x5514) fchown(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82187201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x550, 0x40, 0x180, 0x5, 0x4, 0x2, {0x0, 0xd}, {0x350, 0x20002, 0xffffffff}, {0x10, 0x300}, {0x4, 0x4080000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, 0x1, 0x4}) 2.183973546s ago: executing program 7 (id=1033): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x888e2) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x2, 0xde46, 0x60, 0x52f0}, 0x10) r1 = socket(0x1d, 0x800, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) sendmmsg$inet(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000800)="784f99e63ebbcd", 0x7}], 0x1}}], 0x1, 0x40000001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x3, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000005c0)={@private2}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_NOOP(r1, 0x0, 0x24004045) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r3, 0xf90, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x6, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5dc3cd4a524bd3ffe70c7f3f8c0b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r11 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x630, 0x494, 0x0, 0xfeffffff, 0x34c, 0x3f0, 0x59c, 0x59c, 0xffffffff, 0x59c, 0x59c, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'veth0_to_bridge\x00', 'caif0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x318, 0x34c, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x308d, 0x0, 0x64, 0x8, 0x22453, 0x40, 0x2, 0x7fffffff, 0x20}, {0x100}}}, @common=@inet=@hashlimit2={{0x150}, {'wg2\x00', {0xffff, 0x9, 0x68, 0xd78c, 0x10001, 0xc4, 0xfffffffc, 0x20, 0x8}, {0x44}}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x5, @private=0xa010100, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @private=0xa010101, @multicast2, @gre_key=0x134, @gre_key=0x8001}}}}, {{@ip={@local, @rand_addr=0x3, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21, @port=0x1}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x9f}, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x5c, 0x0, 0x8}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x8}}, @common=@inet=@ipcomp={{0x2c}, {[0x4d6, 0x4d2], 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@dev, @port, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x68c) 1.643031635s ago: executing program 7 (id=1034): socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x10c}}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000000000000000000000000090000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x2b, 0x400, 0x93e9a4102b7f3b0d, 0x8, 0x7, 0x400007, 0x4, 0x0, 0x0, 0x4, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.472992611s ago: executing program 3 (id=1035): r0 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x1c) r2 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x1080, 0x0, 0x6, 0x0, 0x4}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x6c57287be776ca67, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x2, 0x7fff, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x4, 0x1, 0xb, 0x6}], 0x10, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r4 = memfd_create(0x0, 0x6) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r5, 0x5514) fchown(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82187201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x550, 0x40, 0x180, 0x5, 0x4, 0x2, {0x0, 0xd}, {0x350, 0x20002, 0xffffffff}, {0x10, 0x300}, {0x4, 0x4080000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, 0x1, 0x4}) 1.254688306s ago: executing program 1 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000673a041ff02f01255509010000000000950000000000000025090100fcffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000000000010b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.131168294s ago: executing program 1 (id=1037): r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x400401, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10, 0x1000) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r4 = accept4$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000180)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000580)=0x8000, 0x8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000005c0)={0x1, 0x0, 0x3, 0x2, {0x9, 0x825, 0xb, 0x1ff}}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000600)) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0xffffffff, 0x4, 0x0, 0xfff, 0xd, 0x42e}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20048081) r6 = socket$inet(0x2, 0x1, 0x7) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f00000007c0)) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000880)={0x294, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6bf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6211}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a3ee27310adae041c001ae255c70bd675fb8819bc47acfa035602b089c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf8, 0x3, "4e455ce3f848071790723fa3240d5f19f7ac2ebe5914439576615e8eaf61662e8a8251e42c1d7f588d7b66920d3918ddcfb1b279192b457cc3f80d10b160e048e429530843200798a790a8fecf5a19c8e14538ecd6b0fe808b0d38d912879ecd3d9f4d4310c4bb9e9437f747c18833eee820715eb94f6a6603cf58b75f9ff6d3ba221dcc4eb231ba4364aec3d9268d099a5ac14c3d73802ee4bc8b2dd8410e7fceeedc2a770a52f34f18e3e6dbd28be8510d531e956bc218797eb5678a52d147a6c0ac8c7ec177d0129aa588856aadc85327a5c2b62a4b3deb72833b7b6b61f67b2bbb06637088de0b9e6164b0ad8c46c0f2b647"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt(r6, 0xa0d, 0xfb, &(0x7f0000000bc0)="a4a529195ac6b92e354a7ec017c7fa16153cdda5ec77fafc8c15038c6bb51c5b51d9062e01c8d7163531e2a4e7862594d82677cce573b73b9677fb8e19ac8e64392e36abb67ba280905046a1481932071645a8399d99a0d4b2df4e0d2392772ae27366a2fae4cffef4d9f3e4ec4858a73d76718427c90736404b991d85eed6aef2b177b2dfae0b41dda958005ca7249af724c833116881a5a9c0d6dd758653a6354b6ccf2e9150d37b582e696bcaf671e35efc03d1732914cf4013bd048aa66f6bc78b482c0fac02f823e02bfd6457f6efe29b0c0a8e325e251f0d73bd9e2a91d09301abb304ba9290fabdb2ae04a45e7d0f", 0xf2) r7 = openat$fb0(0xffffff9c, &(0x7f0000000cc0), 0x100000, 0x0) recvfrom$l2tp6(r2, &(0x7f0000000d00)=""/58, 0x3a, 0x14040, &(0x7f0000000d40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x34, 0xfffffffc, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0x4ea, 0x7fffffff}}) sendmsg$nl_route(r7, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@getnexthop={0x34, 0x6a, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r8}, @NHA_GROUPS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000811) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000f40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000001040)={0x8, 0xec, 0x0, 0x9, 0x3, [0x1ff, 0x6, 0x22df90ff, 0x9]}) r9 = memfd_create(&(0x7f0000001080)='/{--:\'-\\!!(\x00', 0x4) fstat(r9, &(0x7f00000010c0)) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r5) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x48, r10, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1244}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000012c0)='@}$@^-\x85,.*[(:\x00', &(0x7f0000001300)='cgroup.subtree_control\x00', 0x0) openat$kvm(0xffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000001380)={'team0\x00', {0x2, 0x4e20, @local}}) 1.111998683s ago: executing program 3 (id=1038): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x200, 0x0) getdents(r1, &(0x7f0000000200)=""/226, 0x13) sendfile(r0, r0, 0x0, 0xe3624aa1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 1.076033572s ago: executing program 5 (id=1039): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f100000000000000020001000000000500000500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000800000000000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4070bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x400) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 819.042687ms ago: executing program 3 (id=1040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb0000008000008276000000f1ffffff", 0x26}, {&(0x7f00000001c0)="f058050000007f8f", 0x8}], 0x2}, 0x34000054) 679.8171ms ago: executing program 1 (id=1041): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=r2, @ANYBLOB="ff01000008440000300012800b00010067656e657665000020000280140007000000000000000000000080"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 613.150514ms ago: executing program 7 (id=1042): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001ac0)=@nat={'nat\x00', 0x670, 0x5, 0x1564, 0x14d0, 0x1194, 0xffffffff, 0x13dc, 0x13dc, 0x14d0, 0x14d0, 0xffffffff, 0x14d0, 0x14d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x1160, 0x1194, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'bm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xd, 0x2, {0x3}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x1, {0xc}}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @port=0x4e24}}}}, {{@uncond, 0x0, 0x100, 0x134, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv6=@private2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0xcc, 0x114, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x7}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x6, 0x0, 0x59d6, {0x6}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x1, 0x5}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x5, 0x7, 0x3, 0xf7, 0x5], 0x3}, {0x2, [0x2, 0x3, 0x7, 0x3, 0x0, 0x2], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x15c0) 334.986509ms ago: executing program 7 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0xf5, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 261.313128ms ago: executing program 3 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x9, 0x7, 0x6, 0x10000, 0xffffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff1, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000002, 0x7, 0x1, 0x80000000, 0x1ff, 0x8, 0x2, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d00000000a1010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 255.027332ms ago: executing program 1 (id=1045): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c000000100005ff00000000f5ffffff0000204a", @ANYRES32=0x0, @ANYBLOB="4a840200000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 148.01044ms ago: executing program 5 (id=1046): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x8, 0x5, 0x4ec, 0xec, 0x2e8, 0xffffffff, 0x2e8, 0x1fc, 0x424, 0x424, 0xffffffff, 0x424, 0x424, 0x5, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff, 0x0, 0xff], 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x33, 0x7, 0x2, 0x21}, 0xb7030000, 0xa4, 0xec}, @unspec=@DNAT1={0x20, 'DNAT\x00', 0x1, {0x3, @ipv4=@local, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @gre_key=0x7, @port=0x4e23}}}, {{@ipv6={@remote, @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {}, 0x73, 0x4, 0x6, 0x42}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv4=@loopback, @ipv4=@rand_addr=0x64010100, @gre_key=0x82, @port=0x4e20}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv6=@empty, @port=0x4e23, @port=0x4e24}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff0000ff, 0xff, 0xff0000ff], 'vcan0\x00', 'bond0\x00', {0xff}, {0xff}, 0x62, 0x2a, 0x6, 0x1}, 0x0, 0xf4, 0x13c, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x3, 0x1, 0x2}, {{0x7}, 0xff}, {{0x7f}, 0x4}, 0xb}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x24, @ipv6=@private0, @ipv4=@local, @gre_key=0x8, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x548) 90.666689ms ago: executing program 4 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800064000000009080008400000009e050001000600000005001f000a00000005000400000000000900020073797a3100003f0010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 7 (id=1048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000004008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d6163767461700000000800014000000005"], 0x130}}, 0x0) kernel console output (not intermixed with test programs): or" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa301c code=0x7ffc0000 [ 204.049228][ T5748] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 204.118533][ T30] audit: type=1326 audit(1779537101.491:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.569" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa301c code=0x7ffc0000 [ 204.240113][ T5748] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.258418][ T30] audit: type=1326 audit(1779537101.491:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.569" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa301c code=0x7ffc0000 [ 204.298685][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.313119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 204.337071][ T5748] usb 4-1: Product: syz [ 204.364823][ T5748] usb 4-1: Manufacturer: syz [ 204.384184][ T5748] usb 4-1: SerialNumber: syz [ 204.394239][ T30] audit: type=1326 audit(1779537101.491:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.569" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa301c code=0x7ffc0000 [ 204.422671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 204.437102][ T5748] usb 4-1: config 0 descriptor?? [ 204.496745][ T30] audit: type=1326 audit(1779537101.491:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.569" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa301c code=0x7ffc0000 [ 204.544311][ T24] WIS Star Trek or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 204.609339][ T24] go7007 1-1:6.77: probe with driver go7007 failed with error -12 [ 204.650477][ T30] audit: type=1326 audit(1779537101.501:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.1.569" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fa301c code=0x7ffc0000 [ 204.685242][ T24] go7007 1-1:6.178: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 204.707774][ T5748] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.716509][ T24] go7007 1-1:6.178: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 205.168845][ T7536] pim6reg: entered allmulticast mode [ 205.316852][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 205.704849][ T5748] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 205.730963][ T5748] usb 4-1: USB disconnect, device number 28 [ 205.961462][ T7550] xt_cgroup: invalid path, errno=-2 [ 206.363824][ T7552] input: syz1 as /devices/virtual/input/input29 [ 206.870022][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 206.953759][ T5706] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 207.036292][ T7571] netlink: 'syz.5.583': attribute type 12 has an invalid length. [ 207.055681][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 207.067869][ T7572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.084208][ T7571] netlink: 'syz.5.583': attribute type 29 has an invalid length. [ 207.118061][ T7571] netlink: 148 bytes leftover after parsing attributes in process `syz.5.583'. [ 207.135519][ T5706] usb 8-1: too many configurations: 80, using maximum allowed: 8 [ 207.143418][ T7571] netlink: 59 bytes leftover after parsing attributes in process `syz.5.583'. [ 207.196181][ T5706] usb 8-1: config index 0 descriptor too short (expected 75, got 72) [ 207.214314][ T5706] usb 8-1: config index 1 descriptor too short (expected 75, got 72) [ 207.233441][ T5706] usb 8-1: config index 2 descriptor too short (expected 75, got 72) [ 207.252199][ T5706] usb 8-1: config index 3 descriptor too short (expected 75, got 72) [ 207.289743][ T5706] usb 8-1: config index 4 descriptor too short (expected 75, got 72) [ 207.316925][ T5706] usb 8-1: config index 5 descriptor too short (expected 75, got 72) [ 207.342109][ T5706] usb 8-1: config index 6 descriptor too short (expected 75, got 72) [ 207.360677][ T5706] usb 8-1: config index 7 descriptor too short (expected 75, got 72) [ 207.429789][ T5706] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.452055][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.466171][ T5706] usb 8-1: Product: syz [ 207.470598][ T5706] usb 8-1: Manufacturer: syz [ 207.475947][ T5706] usb 8-1: SerialNumber: syz [ 207.500320][ T5706] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.604620][ T29] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.723145][ T29] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 208.756398][ T29] ath9k_htc: Failed to initialize the device [ 208.811406][ T7601] netlink: 'syz.4.591': attribute type 8 has an invalid length. [ 208.840635][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 208.905321][ T29] usb 8-1: ath9k_htc: USB layer deinitialized [ 208.935676][ T7601] bond0: entered promiscuous mode [ 208.958885][ T7601] bond_slave_0: entered promiscuous mode [ 208.985707][ T7601] bond_slave_1: entered promiscuous mode [ 209.006477][ T7601] vxlan0: entered promiscuous mode [ 209.054993][ T7601] batadv0: entered promiscuous mode [ 209.100667][ T7601] debugfs: 'hsr1' already exists in 'hsr' [ 209.136633][ T7601] Cannot create hsr debugfs directory [ 209.162790][ T7601] hsr1: entered promiscuous mode [ 209.180256][ T7601] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 209.706500][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 209.775465][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 209.830368][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 209.894533][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 210.284531][ T5699] usb 8-1: USB disconnect, device number 2 [ 210.298791][ T7614] syzkaller0: entered promiscuous mode [ 210.347377][ T7614] syzkaller0: entered allmulticast mode [ 210.822741][ T5706] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 210.905784][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 211.039732][ T5706] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 211.079059][ T5706] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 211.148464][ T5706] usb 8-1: config 0 has no interface number 0 [ 211.184389][ T5706] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 211.192776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.223646][ T5706] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.267941][ T5706] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 211.282672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.306027][ T5706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.351951][ T5706] usb 8-1: config 0 descriptor?? [ 211.869460][ T5706] usb 8-1: USB disconnect, device number 3 [ 212.365816][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.7.598'. [ 213.999748][ T7653] Can't find ip_set type [ 214.175718][ T7663] : renamed from bridge_slave_0 (while UP) [ 214.462483][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 214.737185][ T5748] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 214.774388][ T5699] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 214.842835][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.897490][ T5748] usb 2-1: Using ep0 maxpacket: 32 [ 214.945339][ T5748] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 214.968760][ T5699] usb 8-1: Using ep0 maxpacket: 32 [ 214.970449][ T5748] usb 2-1: config 0 has no interface number 0 [ 214.992511][ T5748] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.009751][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 215.045989][ T5748] usb 2-1: config 0 interface 85 has no altsetting 0 [ 215.051825][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.072714][ T5699] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 215.083122][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.094299][ T5699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.104306][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 215.105533][ T5748] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 215.140445][ T5699] usb 8-1: config 0 descriptor?? [ 215.155922][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 215.186095][ T5699] gspca_main: sq930x-2.14.0 probing 041e:403c [ 215.192405][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.208252][ T9] usb 6-1: config 0 descriptor?? [ 215.235255][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.263706][ T5748] usb 2-1: Product: syz [ 215.298273][ T5748] usb 2-1: Manufacturer: syz [ 215.303119][ T5746] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 215.323851][ T5748] usb 2-1: SerialNumber: syz [ 215.394105][ T5748] usb 2-1: config 0 descriptor?? [ 215.486984][ T5746] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.501688][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.535534][ T5746] usb 5-1: config 0 descriptor?? [ 215.558928][ T5746] cp210x 5-1:0.0: cp210x converter detected [ 215.621269][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.637491][ T9] hid (null): global environment stack underflow [ 215.654129][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.700294][ T9] wacom 0003:056A:0131.0008: global environment stack underflow [ 215.709809][ T5699] gspca_sq930x: reg_r 001f failed -110 [ 215.719675][ T5699] sq930x 8-1:0.0: probe with driver sq930x failed with error -110 [ 215.735858][ T9] wacom 0003:056A:0131.0008: item 0 2 1 11 parsing failed [ 215.767937][ T9] wacom 0003:056A:0131.0008: parse failed [ 215.789977][ T9] wacom 0003:056A:0131.0008: probe with driver wacom failed with error -22 [ 215.839393][ T5748] appletouch 2-1:0.85: Failed to read mode from device. [ 215.849650][ T5746] usb 5-1: cp210x converter now attached to ttyUSB0 [ 215.871731][ T5748] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 215.901642][ T9] usb 6-1: USB disconnect, device number 6 [ 215.977695][ T5748] usb 2-1: USB disconnect, device number 27 [ 216.062085][ T5746] usb 5-1: USB disconnect, device number 15 [ 216.118153][ T5746] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.154423][ T5746] cp210x 5-1:0.0: device disconnected [ 217.150360][ T7700] xt_time: unknown flags 0xf4 [ 217.182487][ T7700] netlink: 52 bytes leftover after parsing attributes in process `syz.3.621'. [ 217.222221][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 217.331817][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 217.387224][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 217.482884][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.623'. [ 217.501909][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.623'. [ 217.528248][ T7705] bond2 (unregistering): Released all slaves [ 217.668018][ T5746] usb 8-1: USB disconnect, device number 4 [ 217.865407][ T7703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.927399][ T7707] bond2 (unregistering): Released all slaves [ 218.235075][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 218.277064][ T7724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.348804][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 218.369292][ T7728] input: syz1 as /devices/virtual/input/input32 [ 218.417604][ T7724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.439832][ T7724] bond2: (slave bond3): Enslaving as an active interface with an up link [ 218.476772][ T7729] bond2 (unregistering): (slave bond3): Releasing backup interface [ 218.492150][ T7729] bond2 (unregistering): Released all slaves [ 218.556857][ T7719] batadv_slave_0: entered promiscuous mode [ 218.662782][ T5699] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 218.695204][ T7713] batadv_slave_0: left promiscuous mode [ 218.859526][ T5699] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.887978][ T5699] usb 4-1: config 0 has no interface number 0 [ 218.914703][ T5699] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 218.934323][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.944921][ T5699] usb 4-1: Product: syz [ 218.949179][ T5699] usb 4-1: Manufacturer: syz [ 218.967263][ T5699] usb 4-1: SerialNumber: syz [ 218.988223][ T5699] usb 4-1: config 0 descriptor?? [ 219.000391][ T7736] binder: 7735:7736 ioctl c0306201 800003c0 returned -14 [ 219.020444][ T5699] usb 4-1: selecting invalid altsetting 1 [ 219.045011][ T5699] dvb_ttusb_budget: ttusb_init_controller: error [ 219.061979][ T5699] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.167775][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 219.183923][ T5746] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 219.235579][ T5699] DVB: Unable to find symbol stv0299_attach() [ 219.277411][ T7731] fuse: Unknown parameter '4“’ã' [ 219.347910][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.370142][ T5746] usb 2-1: Using ep0 maxpacket: 8 [ 219.371894][ T5699] DVB: Unable to find symbol tda8083_attach() [ 219.391824][ T5746] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 219.401633][ T5699] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 219.435621][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.483861][ T5746] usb 2-1: Product: syz [ 219.496485][ T5746] usb 2-1: Manufacturer: syz [ 219.517273][ T5746] usb 2-1: SerialNumber: syz [ 219.549228][ T5746] usb 2-1: config 0 descriptor?? [ 219.579911][ T5746] gspca_main: 2770:9120 too many config [ 219.787434][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.796641][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.807670][ T5746] usb 2-1: USB disconnect, device number 28 [ 219.913045][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 219.958004][ T7762] netlink: 37 bytes leftover after parsing attributes in process `syz.5.638'. [ 219.967964][ T7762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.042886][ T9] usb 8-1: device descriptor read/64, error -71 [ 220.061569][ T7764] netlink: 44 bytes leftover after parsing attributes in process `syz.5.639'. [ 220.283400][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 220.429590][ T7770] SET target dimension over the limit! [ 220.449569][ T9] usb 8-1: device descriptor read/64, error -71 [ 220.575863][ T9] usb usb8-port1: attempt power cycle [ 220.717214][ T7777] tipc: Enabling of bearer rejected, already enabled [ 220.848861][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 220.944151][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 220.973979][ T9] usb 8-1: device descriptor read/8, error -71 [ 221.222940][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 221.253289][ T9] usb 8-1: device descriptor read/8, error -71 [ 221.369893][ T9] usb usb8-port1: unable to enumerate USB device [ 221.507275][ T7786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.647'. [ 221.559648][ T5748] usb 4-1: USB disconnect, device number 29 [ 222.163406][ T5748] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 222.337443][ T5748] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 222.365482][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.410581][ T5748] usb 4-1: config 0 descriptor?? [ 222.467678][ T5748] cp210x 4-1:0.0: cp210x converter detected [ 222.677671][ T5748] usb 4-1: cp210x converter now attached to ttyUSB0 [ 222.792991][ T5692] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 222.872411][ T10] usb 4-1: USB disconnect, device number 30 [ 222.901247][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.933875][ T10] cp210x 4-1:0.0: device disconnected [ 222.989471][ T7801] netlink: 'syz.7.652': attribute type 1 has an invalid length. [ 223.003179][ T5692] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.014626][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.038416][ T5692] usb 2-1: config 0 descriptor?? [ 223.058869][ T5692] cp210x 2-1:0.0: cp210x converter detected [ 223.293341][ T5692] usb 2-1: cp210x converter now attached to ttyUSB0 [ 223.557390][ T5692] usb 2-1: USB disconnect, device number 29 [ 223.577212][ T5748] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 223.619582][ T5692] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 223.643506][ T5692] cp210x 2-1:0.0: device disconnected [ 223.754654][ T5748] usb 8-1: device descriptor read/64, error -71 [ 224.022921][ T5748] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 224.056246][ T7818] Cannot find add_set index 0 as target [ 224.180313][ T5748] usb 8-1: device descriptor read/64, error -71 [ 224.243385][ T5706] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 224.313320][ T5748] usb usb8-port1: attempt power cycle [ 224.427561][ T5706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 224.460215][ T5706] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.498456][ T5706] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.539470][ T5706] usb 6-1: config 1 interface 0 has no altsetting 1 [ 224.558819][ T5706] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 224.600688][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.633238][ T5706] usb 6-1: Product: syz [ 224.641812][ T5706] usb 6-1: Manufacturer: syz [ 224.653884][ T5748] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 224.664307][ T5706] usb 6-1: SerialNumber: syz [ 224.702442][ T5748] usb 8-1: device descriptor read/8, error -71 [ 224.716592][ T5706] smsusb:smsusb_probe: board id=8, interface number 0 [ 224.738774][ T7824] __nla_validate_parse: 2 callbacks suppressed [ 224.738820][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 224.889014][ T7833] netlink: 180 bytes leftover after parsing attributes in process `syz.3.666'. [ 224.945278][ T5706] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 224.960851][ T5706] smsusb 6-1:1.0: probe with driver smsusb failed with error -71 [ 225.008924][ T5748] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 225.037355][ T5706] usb 6-1: USB disconnect, device number 7 [ 225.045514][ T5748] usb 8-1: device descriptor read/8, error -71 [ 225.173215][ T5748] usb usb8-port1: unable to enumerate USB device [ 225.252847][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.446812][ T29] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.456384][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.469008][ T29] usb 5-1: config 0 descriptor?? [ 225.478266][ T29] cp210x 5-1:0.0: cp210x converter detected [ 225.718566][ T29] usb 5-1: cp210x converter now attached to ttyUSB0 [ 225.906990][ T5634] usb 5-1: USB disconnect, device number 16 [ 225.998954][ T5634] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.015808][ T5634] cp210x 5-1:0.0: device disconnected [ 226.189335][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 226.198419][ T7856] netlink: 'syz.3.673': attribute type 5 has an invalid length. [ 226.208560][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.673'. [ 226.213318][ T29] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 226.272413][ T7856] geneve3: entered promiscuous mode [ 226.297159][ T7856] geneve3: entered allmulticast mode [ 226.308961][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 226.318686][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 226.330177][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 226.341881][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 226.397727][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 226.414892][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.438038][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.461214][ T29] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 226.479163][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.508902][ T29] usb 2-1: Product: syz [ 226.519069][ T29] usb 2-1: Manufacturer: syz [ 226.523833][ T5634] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 226.558647][ T29] usb 2-1: SerialNumber: syz [ 226.578772][ T29] usb 2-1: config 0 descriptor?? [ 226.662468][ T7865] netlink: 'syz.4.676': attribute type 32 has an invalid length. [ 226.680968][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 226.697592][ T7865] netlink: 'syz.4.676': attribute type 32 has an invalid length. [ 226.699352][ T5634] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.723799][ T5634] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.733608][ T5634] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 226.747010][ T5634] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.756509][ T5634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.777825][ T7857] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 226.820063][ T5634] hub 6-1:1.0: bad descriptor, ignoring hub [ 226.845512][ T5634] hub 6-1:1.0: probe with driver hub failed with error -5 [ 226.874214][ T29] usb 2-1: USB disconnect, device number 30 [ 226.876184][ T5634] cdc_wdm 6-1:1.0: skipping garbage [ 226.904603][ T5634] cdc_wdm 6-1:1.0: skipping garbage [ 226.947180][ T5634] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 226.979203][ T5634] cdc_wdm 6-1:1.0: Unknown control protocol [ 227.086798][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.105075][ T5706] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 227.114834][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.139654][ T7871] netlink: 9 bytes leftover after parsing attributes in process `syz.4.679'. [ 227.162281][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.169035][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.176196][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.182814][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.189103][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.195732][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.202362][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.208999][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.215343][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.221953][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.228240][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.234837][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.241112][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.247882][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.254709][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.261312][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.267910][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.274511][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.280777][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 227.287374][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 227.293965][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 227.372814][ T5706] usb 4-1: device descriptor read/64, error -71 [ 227.452768][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 227.462323][ T9] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 227.471025][ T9] usb 8-1: config 0 has no interface number 0 [ 227.477698][ T9] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.489099][ T9] usb 8-1: config 0 interface 85 has no altsetting 0 [ 227.499627][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 227.509452][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.518255][ T9] usb 8-1: Product: syz [ 227.524996][ T9] usb 8-1: Manufacturer: syz [ 227.529830][ T9] usb 8-1: SerialNumber: syz [ 227.560130][ T9] usb 8-1: config 0 descriptor?? [ 227.633327][ T5706] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 227.758779][ T10] IPVS: starting estimator thread 0... [ 227.773449][ T5706] usb 4-1: device descriptor read/64, error -71 [ 227.789167][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.798728][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.815104][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 227.825110][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 227.851141][ T9] appletouch 8-1:0.85: Failed to read mode from device. [ 227.861843][ T7876] IPVS: using max 35 ests per chain, 84000 per kthread [ 227.879105][ T9] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 227.897335][ T5706] usb usb4-port1: attempt power cycle [ 227.918832][ T9] usb 8-1: USB disconnect, device number 13 [ 228.142887][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 228.152097][ T7881] netlink: 59 bytes leftover after parsing attributes in process `syz.4.683'. [ 228.253101][ T5706] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 228.281487][ T5706] usb 4-1: device descriptor read/8, error -71 [ 228.317730][ T7886] xt_cgroup: invalid path, errno=-2 [ 228.511707][ T7892] input: syz1 as /devices/virtual/input/input34 [ 228.543131][ T5706] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 228.587898][ T5706] usb 4-1: device descriptor read/8, error -71 [ 228.702840][ T5692] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 228.713360][ T5706] usb usb4-port1: unable to enumerate USB device [ 228.855432][ T5692] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.872409][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.885142][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.907735][ T5692] usb 2-1: config 0 descriptor?? [ 228.931365][ T5692] cp210x 2-1:0.0: cp210x converter detected [ 229.068338][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 229.078331][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.087211][ T9] usb 5-1: Product: syz [ 229.100147][ T9] usb 5-1: Manufacturer: syz [ 229.106426][ T9] usb 5-1: SerialNumber: syz [ 229.133573][ T7902] loop5: detected capacity change from 0 to 7 [ 229.133974][ T5692] usb 2-1: cp210x converter now attached to ttyUSB0 [ 229.177729][ T7902] Dev loop5: unable to read RDB block 7 [ 229.198462][ T7902] loop5: unable to read partition table [ 229.228672][ T7902] loop5: partition table beyond EOD, truncated [ 229.247312][ T7902] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.341257][ T5692] usb 2-1: USB disconnect, device number 31 [ 229.373315][ T5706] usb 6-1: USB disconnect, device number 8 [ 229.397487][ T5692] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.421770][ T5692] cp210x 2-1:0.0: device disconnected [ 229.830286][ T7919] unsupported nla_type 61704 [ 229.908754][ T7923] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 229.955123][ T5692] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 229.976030][ T7923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.983382][ T7923] IPv6: NLM_F_CREATE should be set when creating new route [ 229.990655][ T7923] IPv6: NLM_F_CREATE should be set when creating new route [ 230.040219][ T7926] __nla_validate_parse: 3 callbacks suppressed [ 230.040286][ T7926] netlink: 37 bytes leftover after parsing attributes in process `syz.7.700'. [ 230.061385][ T7926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.152840][ T5692] usb 6-1: Using ep0 maxpacket: 16 [ 230.160103][ T5692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.186956][ T5692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.198576][ T5692] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.212071][ T5692] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.226078][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.231944][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.264452][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.290860][ T5692] usb 6-1: config 0 descriptor?? [ 230.297075][ T7932] xt_connbytes: Forcing CT accounting to be enabled [ 230.311269][ T7932] SET target dimension over the limit! [ 230.433286][ T5706] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 230.492813][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.501827][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.513857][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.532723][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.556192][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.580734][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.605728][ T5706] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 230.625590][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.637494][ T5706] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.675051][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.708545][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.733366][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.759812][ T5706] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.771836][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.786457][ T5706] usb 2-1: Product: syz [ 230.795542][ T9] rtl8150 5-1:1.0: couldn't reset the device [ 230.805191][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.817827][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 230.828388][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.851220][ T5706] usb 2-1: Manufacturer: syz [ 230.871303][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.873785][ T5706] usb 2-1: SerialNumber: syz [ 230.950839][ T5706] usb 2-1: config 0 descriptor?? [ 231.008438][ T5706] hub 2-1:0.0: bad descriptor, ignoring hub [ 231.041717][ T5706] hub 2-1:0.0: probe with driver hub failed with error -5 [ 231.073117][ T5706] usb 2-1: selecting invalid altsetting 0 [ 231.273165][ T5692] usbhid 6-1:0.0: can't add hid device: -71 [ 231.299017][ T5692] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 231.328569][ T7948] netlink: 'syz.7.704': attribute type 4 has an invalid length. [ 231.444491][ T5692] usb 6-1: USB disconnect, device number 9 [ 231.663697][ T5706] usb 2-1: USB disconnect, device number 32 [ 231.710568][ T10] IPVS: starting estimator thread 0... [ 231.753699][ T7938] block device autoloading is deprecated and will be removed. [ 231.788083][ T5748] usb 5-1: USB disconnect, device number 17 [ 231.813695][ T7951] IPVS: using max 24 ests per chain, 57600 per kthread [ 231.873449][ T7953] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 232.118590][ T7950] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 232.255932][ T7957] netlink: 'syz.1.707': attribute type 8 has an invalid length. [ 232.309301][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 232.357427][ T7957] bond0: entered promiscuous mode [ 232.379925][ T7957] bond_slave_0: entered promiscuous mode [ 232.402592][ T7957] bond_slave_1: entered promiscuous mode [ 232.454517][ T7957] batadv0: entered promiscuous mode [ 232.498317][ T7957] team0: entered promiscuous mode [ 232.522290][ T7957] team_slave_0: entered promiscuous mode [ 232.551225][ T7957] team_slave_1: entered promiscuous mode [ 232.586682][ T7957] debugfs: 'hsr1' already exists in 'hsr' [ 232.611375][ T7957] Cannot create hsr debugfs directory [ 232.629826][ T7957] hsr1: entered promiscuous mode [ 232.662897][ T7957] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 232.904842][ T7967] netlink: 179600 bytes leftover after parsing attributes in process `syz.5.709'. [ 233.022666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 234.003607][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 234.066306][ T7976] FAULT_INJECTION: forcing a failure. [ 234.066306][ T7976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.139586][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.7.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.139612][ T7976] Tainted: [L]=SOFTLOCKUP [ 234.139618][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.139628][ T7976] Call Trace: [ 234.139634][ T7976] [ 234.139641][ T7976] dump_stack_lvl+0xe8/0x150 [ 234.139663][ T7976] should_fail_ex+0x412/0x560 [ 234.139691][ T7976] _copy_from_user+0x2d/0xb0 [ 234.139722][ T7976] get_compat_msghdr+0xb3/0x4c0 [ 234.139749][ T7976] ? _parse_integer_limit+0x1ae/0x1f0 [ 234.139768][ T7976] ? __pfx_get_compat_msghdr+0x10/0x10 [ 234.139793][ T7976] ? kstrtoull+0x12f/0x1d0 [ 234.139816][ T7976] ___sys_sendmsg+0x201/0x360 [ 234.139839][ T7976] ? __lock_acquire+0x6b5/0x2cf0 [ 234.139859][ T7976] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.139884][ T7976] ? get_pid_task+0x20/0x1f0 [ 234.139903][ T7976] ? get_pid_task+0x20/0x1f0 [ 234.139921][ T7976] ? get_pid_task+0x20/0x1f0 [ 234.139959][ T7976] ? __fget_files+0x2a/0x420 [ 234.139976][ T7976] ? __fget_files+0x3a0/0x420 [ 234.140004][ T7976] __sys_sendmsg+0x183/0x260 [ 234.140029][ T7976] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.140067][ T7976] __do_fast_syscall_32+0x229/0x6e0 [ 234.140083][ T7976] ? do_fast_syscall_32+0x33/0x70 [ 234.140097][ T7976] ? lockdep_hardirqs_on+0x7a/0x110 [ 234.140119][ T7976] ? asm_int80_emulation+0x1a/0x20 [ 234.140134][ T7976] ? do_int80_emulation+0x286/0x530 [ 234.140148][ T7976] ? trace_irq_disable+0x3b/0x140 [ 234.140174][ T7976] do_fast_syscall_32+0x33/0x70 [ 234.140188][ T7976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.140207][ T7976] RIP: 0023:0xf70bf01c [ 234.140222][ T7976] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 234.140235][ T7976] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 234.140251][ T7976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 234.140262][ T7976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.140270][ T7976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.140279][ T7976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 234.140288][ T7976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.140309][ T7976] [ 234.404662][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 234.414554][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 234.425319][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 234.435196][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 234.445021][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 234.454147][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.523175][ T10] usb 2-1: config 0 descriptor?? [ 234.742443][ T10] hdpvr 2-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 234.742443][ T10] †Ã›‘êpY [ 234.957062][ T10] hdpvr 2-1:0.0: device init failed [ 234.975646][ T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 235.026716][ T7982] fuse: Bad value for 'fd' [ 235.055810][ T10] usb 2-1: USB disconnect, device number 33 [ 235.994203][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 236.111263][ T8003] binder: 8002:8003 ioctl c0306201 800003c0 returned -14 [ 236.153047][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 236.161049][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.161096][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.161138][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.161155][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.161192][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 236.161209][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.167252][ T9] usb 4-1: config 0 descriptor?? [ 236.329428][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 236.948520][ T5748] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 237.158298][ T5748] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 237.206143][ T5748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.249455][ T5748] usb 2-1: config 0 has no interface number 0 [ 237.266663][ T5748] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 237.302987][ T5748] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 237.339762][ T5748] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.370243][ T8032] netlink: 'syz.7.726': attribute type 2 has an invalid length. [ 237.408424][ T5748] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 237.439941][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.466604][ T5748] usb 2-1: Product: syz [ 237.496892][ T5748] usb 2-1: Manufacturer: syz [ 237.524493][ T5748] usb 2-1: SerialNumber: syz [ 237.556004][ T5748] usb 2-1: config 0 descriptor?? [ 237.576559][ T8016] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 237.851855][ T5748] usb 2-1: probing VID:PID(0424:012C) [ 237.881484][ T5748] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 237.905653][ T5748] usb 2-1: vub300 testing BULK OUT EndPoint(1) 0F [ 237.922528][ T5748] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 237.981659][ T5748] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 238.024694][ T5748] usb 2-1: USB disconnect, device number 34 [ 238.298658][ T8038] tipc: Enabling of bearer rejected, failed to enable media [ 238.582863][ T5692] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 238.601864][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 238.626933][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.709979][ T9] usb 4-1: USB disconnect, device number 35 [ 238.766743][ T8043] netlink: 179600 bytes leftover after parsing attributes in process `syz.4.731'. [ 238.777988][ T5692] usb 6-1: Using ep0 maxpacket: 16 [ 238.806500][ T5692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.906212][ T5692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.939521][ T5692] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.988815][ T5692] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 239.002759][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.055551][ T5692] usb 6-1: config 0 descriptor?? [ 239.275255][ T8055] netlink: 'syz.3.734': attribute type 5 has an invalid length. [ 239.304494][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 239.732939][ T5706] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 239.831213][ T8063] syzkaller0: entered promiscuous mode [ 239.854432][ T8063] syzkaller0: entered allmulticast mode [ 239.937778][ T5706] usb 8-1: config 0 has an invalid interface number: 235 but max is 0 [ 239.950893][ T8063] tipc: Enabled bearer , priority 0 [ 239.966327][ T5706] usb 8-1: config 0 has no interface number 0 [ 239.987424][ T8062] tipc: Resetting bearer [ 240.004113][ T5706] usb 8-1: config 0 interface 235 altsetting 16 bulk endpoint 0x2 has invalid maxpacket 64 [ 240.030389][ T5706] usb 8-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.062796][ T1224] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 240.072246][ T5706] usb 8-1: config 0 interface 235 altsetting 16 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.131461][ T5706] usb 8-1: config 0 interface 235 has no altsetting 0 [ 240.166045][ T8062] tipc: Disabling bearer [ 240.191469][ T5706] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 240.210590][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.232892][ T1224] usb 4-1: Using ep0 maxpacket: 16 [ 240.239624][ T5706] usb 8-1: Product: syz [ 240.256075][ T1224] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.267371][ T5706] usb 8-1: Manufacturer: syz [ 240.281394][ T5706] usb 8-1: SerialNumber: syz [ 240.286837][ T1224] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 240.314733][ T5706] usb 8-1: config 0 descriptor?? [ 240.339960][ T1224] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 240.360217][ T8057] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 240.384437][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.400123][ T5706] keyspan 8-1:0.235: Keyspan 1 port adapter converter detected [ 240.410918][ T1224] usb 4-1: Product: syz [ 240.416274][ T5706] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 87 [ 240.432789][ T1224] usb 4-1: Manufacturer: syz [ 240.444743][ T1224] usb 4-1: SerialNumber: syz [ 240.452986][ T5706] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 7 [ 240.504776][ T5706] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 81 [ 240.528706][ T5706] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 1 [ 240.546041][ T5706] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 85 [ 240.580350][ T5706] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 240.635576][ T5706] usb 8-1: USB disconnect, device number 14 [ 240.708766][ T1224] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 240.722673][ T5706] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 240.742044][ T1224] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 240.759250][ T5706] keyspan 8-1:0.235: device disconnected [ 240.905545][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 240.905595][ T30] audit: type=1326 audit(1779537138.921:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 240.956249][ T30] audit: type=1326 audit(1779537138.951:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.029663][ T30] audit: type=1326 audit(1779537138.951:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.088293][ T30] audit: type=1326 audit(1779537138.951:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.149990][ T1224] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 241.177290][ T5692] usbhid 6-1:0.0: can't add hid device: -71 [ 241.201793][ T5692] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 241.205139][ T30] audit: type=1326 audit(1779537138.951:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.287314][ T30] audit: type=1326 audit(1779537138.961:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.343615][ T5692] usb 6-1: USB disconnect, device number 10 [ 241.399279][ T30] audit: type=1326 audit(1779537138.961:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.494254][ T30] audit: type=1326 audit(1779537138.961:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71861ab code=0x7ffc0000 [ 241.529261][ T1224] usb 4-1: USB disconnect, device number 36 [ 241.610080][ T30] audit: type=1326 audit(1779537139.161:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.643376][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.710477][ T8073] tipc: Enabling of bearer rejected, failed to enable media [ 241.740228][ T30] audit: type=1326 audit(1779537139.161:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8901c code=0x7ffc0000 [ 241.863972][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.743'. [ 241.876086][ T8075] netlink: 59 bytes leftover after parsing attributes in process `syz.7.743'. [ 242.053337][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.745'. [ 242.138095][ T8081] geneve3: entered promiscuous mode [ 242.155853][ T8081] geneve3: entered allmulticast mode [ 242.208203][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.335563][ T8089] team0 (unregistering): left promiscuous mode [ 242.343039][ T8089] team_slave_0: left promiscuous mode [ 242.353644][ T8089] team_slave_1: left promiscuous mode [ 242.383373][ T8089] team0 (unregistering): Port device team_slave_0 removed [ 242.411854][ T8091] loop2: detected capacity change from 0 to 7 [ 242.418210][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 242.432288][ T8089] team0 (unregistering): Port device team_slave_1 removed [ 242.443102][ T8091] Dev loop2: unable to read RDB block 7 [ 242.459061][ T8091] loop2: unable to read partition table [ 242.469533][ T8091] loop2: partition table beyond EOD, truncated [ 242.495018][ T8091] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.583638][ T10] usb 2-1: too many configurations: 113, using maximum allowed: 8 [ 242.634912][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.666356][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.691631][ T10] usb 2-1: Product: syz [ 242.708451][ T10] usb 2-1: Manufacturer: syz [ 242.724986][ T10] usb 2-1: SerialNumber: syz [ 242.748786][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.780674][ T5692] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.793099][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 243.110508][ T10] usb 2-1: USB disconnect, device number 35 [ 243.262819][ T8111] tipc: Enabling of bearer rejected, failed to enable media [ 243.373439][ T8113] binder: 8110:8113 ioctl c0306201 800003c0 returned -14 [ 243.543158][ T5706] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.713602][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 243.727495][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.753168][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.777429][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.803463][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.760'. [ 243.812148][ T5706] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 243.832581][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.866645][ T5706] usb 5-1: config 0 descriptor?? [ 244.012704][ T5692] usb 2-1: Service connection timeout for: 256 [ 244.030885][ T5692] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.047168][ T8125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.058356][ T5692] ath9k_htc: Failed to initialize the device [ 244.065512][ T8125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.072435][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 244.079864][ T8125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.093779][ T8125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.104017][ T8125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.127083][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.763'. [ 244.143660][ T8125] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 244.158816][ T8125] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 244.179883][ T8125] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 244.188705][ T8125] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 244.201958][ T8125] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 244.251445][ T8135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.869887][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 244.894525][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 244.934727][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 245.005911][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 245.939959][ T8157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.085145][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.085188][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.092393][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.138401][ T5706] usbhid 5-1:0.0: can't add hid device: -71 [ 246.144908][ T5706] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 246.162833][ T5643] Bluetooth: hci6: command 0x0c1a tx timeout [ 246.163432][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 246.168976][ T5643] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.175092][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.208307][ T5706] usb 5-1: USB disconnect, device number 18 [ 246.243130][ T5643] Bluetooth: hci7: command 0x0c1a tx timeout [ 246.310515][ T8162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.328461][ T8162] bond1: (slave bond2): Enslaving as an active interface with an up link [ 246.357609][ T8164] bond1 (unregistering): (slave bond2): Releasing backup interface [ 246.385939][ T8164] bond1 (unregistering): Released all slaves [ 246.469684][ T8169] syzkaller0: entered promiscuous mode [ 246.505642][ T8169] syzkaller0: entered allmulticast mode [ 246.527462][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 246.527483][ T30] audit: type=1326 audit(1779537144.541:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.1.774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa301c code=0x0 [ 246.786212][ T8176] Cannot find del_set index 1 as target [ 247.412019][ T5746] IPVS: starting estimator thread 0... [ 247.443400][ T8187] ipip1: entered promiscuous mode [ 247.488823][ T8184] syzkaller0: entered promiscuous mode [ 247.512764][ T8189] IPVS: using max 27 ests per chain, 64800 per kthread [ 247.519800][ T8184] syzkaller0: entered allmulticast mode [ 248.142896][ T5699] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 248.198560][ T8211] tipc: Enabling of bearer rejected, failed to enable media [ 248.316943][ T5699] usb 6-1: Using ep0 maxpacket: 8 [ 248.333403][ T5643] Bluetooth: hci7: command 0x0c1a tx timeout [ 248.340369][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 248.356581][ T8216] netlink: 'syz.1.790': attribute type 5 has an invalid length. [ 248.378388][ T8216] __nla_validate_parse: 2 callbacks suppressed [ 248.389335][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 248.398871][ T5699] usb 6-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 248.408663][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.464006][ T5699] usb 6-1: Product: syz [ 248.464328][ T5746] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 248.489753][ T5699] usb 6-1: Manufacturer: syz [ 248.507220][ T5699] usb 6-1: SerialNumber: syz [ 248.653738][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 248.669054][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.706747][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.726507][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.770525][ T5746] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 248.803016][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.838314][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.863979][ T5746] usb 4-1: config 0 descriptor?? [ 248.878343][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.947828][ T5699] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 249.049861][ T5699] usb 6-1: USB disconnect, device number 11 [ 249.062645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 249.591938][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.792'. [ 249.902740][ T1224] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 250.113007][ T1224] usb 8-1: Using ep0 maxpacket: 16 [ 250.150002][ T1224] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.184034][ T1224] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.221258][ T1224] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 250.256507][ T1224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.302052][ T1224] usb 8-1: SerialNumber: syz [ 250.381772][ T1224] usb 8-1: 0:2 : does not exist [ 250.413526][ T5643] Bluetooth: hci7: command 0x0c1a tx timeout [ 250.594227][ T8227] tipc: Started in network mode [ 250.624419][ T8227] tipc: Node identity 2d030000000005002e2e, cluster identity 4711 [ 250.922524][ T29] usb 8-1: USB disconnect, device number 15 [ 251.866231][ T5746] usbhid 4-1:0.0: can't add hid device: -71 [ 251.897477][ T5746] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 251.955583][ T5746] usb 4-1: USB disconnect, device number 37 [ 252.238165][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.798'. [ 252.270618][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.798'. [ 252.544636][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 252.727671][ T30] audit: type=1804 audit(1779537150.741:444): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.802" name="bus" dev="ramfs" ino=22215 res=1 errno=0 [ 252.988894][ T30] audit: type=1326 audit(1779537151.001:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.059357][ T30] audit: type=1326 audit(1779537151.031:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.084283][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 253.084489][ T30] audit: type=1326 audit(1779537151.031:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.120557][ T30] audit: type=1326 audit(1779537151.031:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.149216][ T30] audit: type=1326 audit(1779537151.031:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.175270][ T29] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 253.187454][ T30] audit: type=1326 audit(1779537151.031:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.226331][ T30] audit: type=1326 audit(1779537151.031:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.266446][ T30] audit: type=1326 audit(1779537151.031:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.292535][ T30] audit: type=1326 audit(1779537151.031:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.4.805" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 253.330579][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 253.345550][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.368629][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.390958][ T8261] netlink: 'syz.4.805': attribute type 3 has an invalid length. [ 253.399221][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 253.423994][ T8264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.435689][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 253.456042][ T29] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.482905][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.562778][ T1224] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 253.573213][ T8257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.597588][ T8269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.607562][ T29] hub 2-1:1.0: bad descriptor, ignoring hub [ 253.613851][ T29] hub 2-1:1.0: probe with driver hub failed with error -5 [ 253.631600][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 253.638225][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 253.646107][ T8269] bond3: (slave bond5): Enslaving as an active interface with an up link [ 253.649341][ T29] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 253.657850][ T29] cdc_wdm 2-1:1.0: Unknown control protocol [ 253.710579][ T8270] warning: `syz.5.804' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.724233][ T1224] usb 8-1: not running at top speed; connect to a high speed hub [ 253.768886][ T8272] bond3 (unregistering): (slave bond5): Releasing backup interface [ 253.787362][ T8272] bond3 (unregistering): Released all slaves [ 253.788702][ T1224] usb 8-1: config 1 interface 0 has no altsetting 0 [ 253.835724][ T1224] usb 8-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 253.860107][ T1224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.882859][ T1224] usb 8-1: Product: syz [ 253.894484][ T1224] usb 8-1: Manufacturer: syz [ 253.916836][ T1224] usb 8-1: SerialNumber: syz [ 253.990084][ T8262] netlink: 4124 bytes leftover after parsing attributes in process `syz.4.805'. [ 254.045908][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.063593][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.156308][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.191051][ C0] wdm_int_callback: 107 callbacks suppressed [ 254.191081][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 254.203778][ C0] wdm_int_callback: 107 callbacks suppressed [ 254.203799][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 254.216875][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 254.223510][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 254.230584][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 254.243767][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.336121][ T1224] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input35 [ 254.399174][ T4980] bcm5974 8-1:1.0: could not read from device [ 254.417477][ T4980] bcm5974 8-1:1.0: could not read from device [ 254.436241][ T1224] usb 8-1: USB disconnect, device number 16 [ 254.448815][ T4980] bcm5974 8-1:1.0: could not read from device [ 254.615734][ T29] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 254.787197][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.819326][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.851841][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.876480][ T29] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 254.909922][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.951589][ T29] usb 4-1: config 0 descriptor?? [ 255.502722][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 255.526650][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.549194][ T8297] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 255.568908][ T29] usb 4-1: USB disconnect, device number 38 [ 255.687500][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694484][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.758078][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.813'. [ 255.893665][ T29] usb 2-1: USB disconnect, device number 36 [ 255.990006][ T8301] bond2: (slave geneve3): making interface the new active one [ 256.060602][ T8301] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 256.139038][ T8302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.170191][ T57] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 256.204117][ T57] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 256.238026][ T57] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 256.298861][ T57] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 256.570601][ T8310] Cannot find add_set index 0 as target [ 256.820882][ T8314] netlink: 'syz.1.819': attribute type 10 has an invalid length. [ 256.965915][ T8314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.003305][ T8314] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 257.009417][ T8314] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 257.172886][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 257.352908][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 257.377205][ T10] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 257.417373][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.459828][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.498882][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.538838][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.591997][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.645050][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.712429][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.755299][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.806749][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 257.827924][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 257.860990][ T10] usb 2-1: SerialNumber: syz [ 257.881898][ T10] usb 2-1: config 0 descriptor?? [ 257.912217][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 257.934099][ T8331] ======================================================= [ 257.934099][ T8331] WARNING: The mand mount option has been deprecated and [ 257.934099][ T8331] and is ignored by this kernel. Remove the mand [ 257.934099][ T8331] option from the mount to silence this warning. [ 257.934099][ T8331] ======================================================= [ 258.115347][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.826'. [ 258.196369][ T8314] netlink: 14 bytes leftover after parsing attributes in process `syz.1.819'. [ 258.249324][ T8339] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 258.274680][ T8339] PKCS7: Only support pkcs7_signedData type [ 258.292752][ T8314] bond0 (unregistering): left promiscuous mode [ 258.333772][ T8314] bond_slave_0: left promiscuous mode [ 258.359248][ T8314] bond_slave_1: left promiscuous mode [ 258.388767][ T8314] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 258.529471][ T8314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.567482][ T8314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.621032][ T8314] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 258.650283][ T8314] bond0 (unregistering): Released all slaves [ 258.738486][ T8343] bridge1: entered promiscuous mode [ 258.979739][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.831'. [ 258.988796][ T8346] netlink: 'syz.3.830': attribute type 5 has an invalid length. [ 258.988825][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 259.030629][ T8348] netlink: 'syz.7.831': attribute type 5 has an invalid length. [ 259.048890][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.7.831'. [ 259.108721][ T8348] geneve2: entered promiscuous mode [ 259.139467][ T8348] geneve2: entered allmulticast mode [ 259.182821][ T1146] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 259.220153][ T1146] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 259.261384][ T1146] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 259.283737][ T13] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 259.430208][ T8353] tipc: Enabling of bearer rejected, failed to enable media [ 259.529931][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.834'. [ 259.616521][ T8315] mmap: syz.1.819 (8315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 259.717351][ T5699] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 259.783266][ T5634] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 259.882856][ T5699] usb 8-1: Using ep0 maxpacket: 16 [ 259.894038][ T5699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.930089][ T5699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.963054][ T5634] usb 6-1: Using ep0 maxpacket: 16 [ 259.981725][ T5699] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.020507][ T5634] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.072575][ T5699] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 260.082040][ T5634] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.103576][ T5699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.116672][ T8364] loop2: detected capacity change from 0 to 1 [ 260.125532][ T5634] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 260.139769][ T8364] Dev loop2: unable to read RDB block 1 [ 260.146603][ T5634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.157260][ T5699] usb 8-1: config 0 descriptor?? [ 260.167756][ T8364] loop2: unable to read partition table [ 260.192127][ T5634] usb 6-1: SerialNumber: syz [ 260.208150][ T8364] loop2: partition table beyond EOD, truncated [ 260.248587][ T8364] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.270299][ T5634] usb 6-1: 0:2 : does not exist [ 260.449633][ T8355] tipc: Cannot configure node identity twice [ 260.573511][ T5634] usb 6-1: USB disconnect, device number 12 [ 260.696034][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.891322][ T4980] bcm5974 2-1:0.0: could not read from device [ 260.909885][ T4980] bcm5974 2-1:0.0: could not read from device [ 260.956296][ T4980] bcm5974 2-1:0.0: could not read from device [ 260.979686][ T10] usb 2-1: USB disconnect, device number 37 [ 260.998247][ T4980] bcm5974 2-1:0.0: could not read from device [ 261.352775][ T5748] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 261.437093][ T8373] geneve2: entered promiscuous mode [ 261.457803][ T8373] geneve2: entered allmulticast mode [ 261.502924][ T5748] usb 5-1: device descriptor read/64, error -71 [ 261.774095][ T5748] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.837687][ T5699] usbhid 8-1:0.0: can't add hid device: -71 [ 261.871838][ T5699] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 261.914509][ T5699] usb 8-1: USB disconnect, device number 17 [ 261.923054][ T5748] usb 5-1: device descriptor read/64, error -71 [ 262.053136][ T5748] usb usb5-port1: attempt power cycle [ 262.229398][ T8380] program syz.1.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.325740][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 262.356099][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 262.381448][ T8384] dlm: no locking on control device [ 262.413812][ T5748] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.446580][ T5748] usb 5-1: device descriptor read/8, error -71 [ 262.604974][ T8390] binder: 8389:8390 ioctl c0306201 800003c0 returned -14 [ 262.622895][ T1224] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 262.692895][ T5748] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.713778][ T5748] usb 5-1: device descriptor read/8, error -71 [ 262.752835][ T5746] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 262.783676][ T1224] usb 4-1: Using ep0 maxpacket: 8 [ 262.792425][ T1224] usb 4-1: unable to get BOS descriptor or descriptor too short [ 262.804058][ T1224] usb 4-1: config 243 has an invalid interface number: 244 but max is 0 [ 262.812512][ T1224] usb 4-1: config 243 has no interface number 0 [ 262.819111][ T1224] usb 4-1: config 243 interface 244 has no altsetting 0 [ 262.827636][ T5748] usb usb5-port1: unable to enumerate USB device [ 262.835784][ T1224] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=1d.23 [ 262.845711][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.855123][ T1224] usb 4-1: Product: syz [ 262.859362][ T1224] usb 4-1: Manufacturer: syz [ 262.864220][ T1224] usb 4-1: SerialNumber: syz [ 262.912739][ T5746] usb 6-1: Using ep0 maxpacket: 32 [ 262.925499][ T5699] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 262.930835][ T5746] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.944673][ T5746] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.956106][ T5746] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.968288][ T5746] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.981485][ T5746] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.990871][ T5746] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 263.000128][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.027086][ T5746] usb 6-1: config 0 descriptor?? [ 263.080251][ T8384] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 263.085015][ T5699] usb 8-1: Using ep0 maxpacket: 32 [ 263.111557][ T5699] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 263.138687][ T5699] usb 8-1: config 0 has no interface number 0 [ 263.155512][ T5699] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.181370][ T5699] usb 8-1: config 0 interface 85 has no altsetting 0 [ 263.201525][ T5699] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 263.221898][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.240861][ T5699] usb 8-1: Product: syz [ 263.250224][ T5699] usb 8-1: Manufacturer: syz [ 263.256455][ T5699] usb 8-1: SerialNumber: syz [ 263.275795][ T5699] usb 8-1: config 0 descriptor?? [ 263.473737][ T1224] quatech2 4-1:243.244: Quatech 2nd gen USB to Serial Driver converter detected [ 263.487848][ T5746] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 263.501200][ T5746] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 263.510112][ T1224] usb 4-1: qt2_attach - failed to power on unit: -71 [ 263.521713][ T5746] hid-thrustmaster 0003:044F:B65D.0009: item fetching failed at offset 3/5 [ 263.531065][ T1224] quatech2 4-1:243.244: probe with driver quatech2 failed with error -71 [ 263.540171][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.548872][ T5746] hid-thrustmaster 0003:044F:B65D.0009: parse failed with error -22 [ 263.548956][ T5746] hid-thrustmaster 0003:044F:B65D.0009: probe with driver hid-thrustmaster failed with error -22 [ 263.587089][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.598265][ T1224] usb 4-1: USB disconnect, device number 39 [ 263.627352][ T5699] appletouch 8-1:0.85: Failed to read mode from device. [ 263.638165][ T5699] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 263.668080][ T5699] usb 8-1: USB disconnect, device number 18 [ 263.701583][ T5746] usb 6-1: USB disconnect, device number 13 [ 263.728720][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 263.746867][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 263.771060][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 263.781554][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 263.851981][ T8406] bridge_slave_1: left allmulticast mode [ 263.859438][ T8406] bridge_slave_1: left promiscuous mode [ 263.867257][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.295565][ T8416] tipc: Enabling of bearer rejected, failed to enable media [ 264.312825][ T1224] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 264.378962][ T8418] tipc: Enabled bearer , priority 0 [ 264.488866][ T5746] IPVS: starting estimator thread 0... [ 264.500878][ T1224] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 264.518417][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.861'. [ 264.530455][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.538953][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.861'. [ 264.548220][ T1224] usb 2-1: Product: syz [ 264.559390][ T1224] usb 2-1: Manufacturer: syz [ 264.571538][ T1224] usb 2-1: SerialNumber: syz [ 264.574013][ T5699] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 264.586701][ T8422] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 264.597870][ T8423] IPVS: using max 29 ests per chain, 69600 per kthread [ 264.614075][ T1224] usb 2-1: config 0 descriptor?? [ 264.637440][ T1224] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 264.683281][ T1224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.710158][ T1224] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 264.746216][ T1224] usb 2-1: media controller created [ 264.752730][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 264.765441][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.787218][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.809332][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.827782][ T1224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.841417][ T5699] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 264.865063][ T8412] dvb-usb: bulk message failed: -22 (7/0) [ 264.874349][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.898841][ T5699] usb 4-1: config 0 descriptor?? [ 264.963563][ T5728] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 264.995918][ T1224] DVB: Unable to find symbol mt352_attach() [ 265.104871][ T1224] DVB: Unable to find symbol nxt6000_attach() [ 265.111319][ T1224] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 265.141348][ T5728] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 265.147491][ T1224] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 265.161432][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.178799][ T1224] dvb-usb: schedule remote query interval to 1000 msecs. [ 265.180722][ T5728] usb 6-1: Product: syz [ 265.187304][ T1224] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 265.204330][ T5746] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 265.210126][ T5728] usb 6-1: Manufacturer: syz [ 265.219290][ T1224] dvb-usb: bulk message failed: -22 (7/0) [ 265.223996][ T5728] usb 6-1: SerialNumber: syz [ 265.250047][ T1224] dvb-usb: bulk message failed: -22 (7/0) [ 265.373005][ T5746] usb 8-1: Using ep0 maxpacket: 8 [ 265.380969][ T1224] tipc: Node number set to 53282048 [ 265.390587][ T5746] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 265.417146][ T5746] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.459797][ T5746] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.490636][ T5746] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.513011][ T5746] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.545774][ T5746] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.574454][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.812575][ T5746] usb 8-1: GET_CAPABILITIES returned 0 [ 265.821228][ T5746] usbtmc 8-1:16.0: can't read capabilities [ 265.929330][ T24] WIS Star Trek or compatible: unable to load firmware from file "go7007/go7007fw.bin" [ 265.949371][ T24] go7007 1-1:6.178: probe with driver go7007 failed with error -12 [ 265.995808][ T24] go7007 1-1:6.88: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 266.022856][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.047202][ T24] go7007 1-1:6.88: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 266.082135][ T8438] netlink: 'syz.5.862': attribute type 1 has an invalid length. [ 266.120291][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.143360][ T8438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.150680][ T8438] IPv6: NLM_F_CREATE should be set when creating new route [ 266.157981][ T8438] IPv6: NLM_F_CREATE should be set when creating new route [ 266.175633][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.192886][ T10] usb 5-1: device descriptor read/64, error -71 [ 266.230149][ T5746] usb 8-1: USB disconnect, device number 19 [ 266.250173][ T5748] dvb-usb: bulk message failed: -22 (7/0) [ 266.278644][ T5748] dvb-usb: error while querying for an remote control event. [ 266.439149][ T5699] usbhid 4-1:0.0: can't add hid device: -71 [ 266.452367][ T5699] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 266.483090][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 266.498456][ T5699] usb 4-1: USB disconnect, device number 40 [ 266.632873][ T10] usb 5-1: device descriptor read/64, error -71 [ 266.743194][ T10] usb usb5-port1: attempt power cycle [ 266.841055][ T5728] rtl8150 6-1:1.0: couldn't reset the device [ 266.847583][ T5728] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 267.079355][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.866'. [ 267.086154][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 267.095495][ T8443] netlink: 59 bytes leftover after parsing attributes in process `syz.7.866'. [ 267.131134][ T8445] Cannot find add_set index 0 as target [ 267.144096][ T10] usb 5-1: device descriptor read/8, error -71 [ 267.155066][ T5728] usb 2-1: USB disconnect, device number 38 [ 267.395576][ T5728] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 267.572136][ T8451] syzkaller0: entered promiscuous mode [ 267.591658][ T8451] syzkaller0: entered allmulticast mode [ 267.615209][ T8453] Invalid argument reading file caps for ./file0 [ 267.651134][ T8451] TC_ACT_REPEAT abuse ? [ 267.726471][ T8451] netlink: 'syz.1.867': attribute type 61 has an invalid length. [ 267.763270][ T8451] netlink: 'syz.1.867': attribute type 62 has an invalid length. [ 267.796398][ T8451] netlink: 80 bytes leftover after parsing attributes in process `syz.1.867'. [ 267.808757][ T5728] usb 6-1: USB disconnect, device number 14 [ 267.906312][ T8451] macsec1: entered promiscuous mode [ 267.925263][ T8451] virt_wifi0: entered promiscuous mode [ 268.259820][ T8466] tipc: Enabling of bearer rejected, failed to enable media [ 268.533098][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 268.563586][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 268.604070][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 268.692853][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 268.711392][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.733917][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.749977][ T8484] netlink: 'syz.4.884': attribute type 32 has an invalid length. [ 268.758493][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.770605][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 268.784372][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 268.793490][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.805979][ T8484] netlink: 'syz.4.884': attribute type 32 has an invalid length. [ 268.814105][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 268.825264][ T9] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 268.837390][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.845888][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.871569][ T9] usb 8-1: config 0 descriptor?? [ 268.884390][ T10] usb 4-1: config 0 descriptor?? [ 269.490929][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 269.582835][ T5748] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 269.721577][ T10] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 269.772216][ T5748] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 269.798945][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.837411][ T5748] usb 6-1: Product: syz [ 269.858262][ T5748] usb 6-1: Manufacturer: syz [ 269.865534][ T5748] usb 6-1: SerialNumber: syz [ 269.874190][ T10] hid-led 0003:27B8:01ED.000A: ThingM blink(1) v1 initialized [ 269.878610][ T8508] loop5: detected capacity change from 0 to 7 [ 269.915165][ T8508] Dev loop5: unable to read RDB block 7 [ 269.934228][ T8508] loop5: unable to read partition table [ 269.948136][ T8508] loop5: partition table beyond EOD, truncated [ 269.971088][ T8508] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.071179][ T10] usb 4-1: USB disconnect, device number 41 [ 270.207749][ T8511] loop2: detected capacity change from 0 to 7 [ 270.221494][ T8511] Dev loop2: unable to read RDB block 7 [ 270.248178][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 270.249266][ T8511] loop2: unable to read partition table [ 270.266368][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 270.278642][ T8511] loop2: partition table beyond EOD, truncated [ 270.287862][ T8511] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.298803][ T9] usb 8-1: USB disconnect, device number 20 [ 270.594069][ T8512] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 270.602233][ T8512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.855809][ T8518] input: syz1 as /devices/virtual/input/input39 [ 271.102004][ T8526] loop2: detected capacity change from 0 to 2 [ 271.111907][ T8526] Dev loop2: unable to read RDB block 2 [ 271.119126][ T8526] loop2: unable to read partition table [ 271.125716][ T8526] loop2: partition table beyond EOD, truncated [ 271.136425][ T8526] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.301411][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 271.327983][ T8528] netlink: 59 bytes leftover after parsing attributes in process `syz.4.897'. [ 271.420651][ T5748] rtl8150 6-1:1.0: couldn't reset the device [ 271.435960][ T5748] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 271.807958][ T8537] netlink: 37 bytes leftover after parsing attributes in process `syz.7.901'. [ 271.817361][ T8537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.071572][ T8546] misc userio: Invalid payload size [ 272.115277][ T8547] tipc: Enabling of bearer rejected, failed to enable media [ 272.191032][ T8546] netlink: 'syz.7.903': attribute type 21 has an invalid length. [ 272.212552][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 272.221862][ T8546] netlink: 128 bytes leftover after parsing attributes in process `syz.7.903'. [ 272.233927][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 272.280042][ T8546] netlink: 3 bytes leftover after parsing attributes in process `syz.7.903'. [ 272.399906][ T5746] usb 6-1: USB disconnect, device number 15 [ 272.412816][ T5728] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 272.578169][ T8551] binder: 8550:8551 ioctl c0306201 800003c0 returned -14 [ 272.592737][ T5728] usb 5-1: Using ep0 maxpacket: 16 [ 272.609628][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.651561][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.672165][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.697072][ T5728] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 272.707963][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.750733][ T5728] usb 5-1: config 0 descriptor?? [ 272.899218][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'. [ 273.029904][ T8559] loop5: detected capacity change from 0 to 7 [ 273.071057][ T8559] Dev loop5: unable to read RDB block 7 [ 273.095403][ T8559] loop5: AHDI p1 [ 273.114673][ T8559] loop5: partition table partially beyond EOD, truncated [ 273.546384][ T4995] Dev loop5: unable to read RDB block 7 [ 273.560621][ T4995] loop5: AHDI p1 [ 273.573024][ T4995] loop5: partition table partially beyond EOD, truncated [ 273.657126][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.911'. [ 273.669682][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.911'. [ 273.820429][ T4995] Dev loop5: unable to read RDB block 7 [ 273.849610][ T4995] loop5: AHDI p1 [ 273.870547][ T4995] loop5: partition table partially beyond EOD, truncated [ 274.593470][ T5728] usbhid 5-1:0.0: can't add hid device: -71 [ 274.621319][ T5728] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 274.688168][ T5728] usb 5-1: USB disconnect, device number 27 [ 274.777568][ T8567] could not allocate digest TFM handle blake2s-224-x86 [ 275.054261][ T5746] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 275.244698][ T5746] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.278084][ T5746] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.297972][ T5746] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 275.310575][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.330145][ T5746] hub 8-1:4.0: USB hub found [ 275.363710][ T29] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 275.523725][ T4995] Dev loop5: unable to read RDB block 7 [ 275.533228][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 275.552109][ T4995] loop5: AHDI p1 [ 275.566185][ T29] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 275.576976][ T4995] loop5: partition table partially beyond EOD, truncated [ 275.600906][ T29] usb 4-1: config 0 has no interface number 0 [ 275.623868][ T29] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.672314][ T29] usb 4-1: config 0 interface 85 has no altsetting 0 [ 275.706718][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 275.736639][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.752109][ T29] usb 4-1: Product: syz [ 275.757868][ T29] usb 4-1: Manufacturer: syz [ 275.764033][ T29] usb 4-1: SerialNumber: syz [ 275.783481][ T29] usb 4-1: config 0 descriptor?? [ 275.792359][ T5746] hub 8-1:4.0: 2 ports detected [ 275.802230][ T5746] usb 8-1: selecting invalid altsetting 1 [ 275.819840][ T5746] hub 8-1:4.0: Using single TT (err -22) [ 275.880591][ T8579] syzkaller0: entered promiscuous mode [ 275.904307][ T8579] syzkaller0: entered allmulticast mode [ 275.933141][ T5748] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 276.028495][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.056599][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.131523][ T5748] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 276.152511][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.194406][ T5748] usb 6-1: Product: syz [ 276.202530][ T5748] usb 6-1: Manufacturer: syz [ 276.209172][ T5748] usb 6-1: SerialNumber: syz [ 276.895702][ T5746] hub 8-1:4.0: hub_hub_status failed (err = -32) [ 276.950530][ T5746] hub 8-1:4.0: config failed, can't get hub status (err -32) [ 277.793395][ T5748] rtl8150 6-1:1.0: couldn't reset the device [ 277.800477][ T5748] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 277.863634][ T8602] __nla_validate_parse: 3 callbacks suppressed [ 277.863655][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 277.882197][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 277.900173][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 277.910673][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 278.065480][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 278.079661][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 278.094183][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 278.196086][ T29] appletouch 4-1:0.85: Failed to read mode from device. [ 278.228846][ T29] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 278.286264][ T29] usb 4-1: USB disconnect, device number 42 [ 278.722624][ T5746] usb 6-1: USB disconnect, device number 16 [ 279.322800][ T5728] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 279.505828][ T5728] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 279.530635][ T5728] usb 6-1: config 0 has no interface number 0 [ 279.552225][ T5728] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 279.579473][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.600111][ T5728] usb 6-1: Product: syz [ 279.617368][ T5728] usb 6-1: Manufacturer: syz [ 279.629220][ T5728] usb 6-1: SerialNumber: syz [ 279.655070][ T5728] usb 6-1: config 0 descriptor?? [ 280.272905][ T5746] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 280.439446][ T5746] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.459579][ T5746] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 38176, setting to 64 [ 280.470942][ T5746] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.484320][ T5746] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.493472][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.515150][ T5746] usbtmc 5-1:16.0: bulk endpoints not found [ 280.824350][ T8607] netlink: 'syz.3.923': attribute type 12 has an invalid length. [ 280.832999][ T8607] netlink: 'syz.3.923': attribute type 29 has an invalid length. [ 280.843845][ T8607] netlink: 148 bytes leftover after parsing attributes in process `syz.3.923'. [ 280.883877][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 280.883896][ T30] audit: type=1326 audit(1779537178.901:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 280.964604][ T9] usb 8-1: USB disconnect, device number 21 [ 280.988673][ T30] audit: type=1326 audit(1779537178.901:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.052930][ T30] audit: type=1326 audit(1779537178.901:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.132416][ T30] audit: type=1326 audit(1779537178.901:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.192058][ T30] audit: type=1326 audit(1779537178.901:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.237419][ T30] audit: type=1326 audit(1779537178.901:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.315502][ T30] audit: type=1326 audit(1779537178.901:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.376685][ T30] audit: type=1326 audit(1779537178.901:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.439465][ T30] audit: type=1326 audit(1779537178.901:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.499746][ T30] audit: type=1326 audit(1779537178.931:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.5.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 281.574927][ T5728] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 281.599997][ T5728] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 281.644855][ T5728] asix 6-1:0.251: probe with driver asix failed with error -71 [ 281.682491][ T5728] usb 6-1: USB disconnect, device number 17 [ 281.708249][ T8631] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 282.042349][ T8642] ipip1: entered promiscuous mode [ 282.282332][ T8648] syzkaller0: entered promiscuous mode [ 282.300664][ T8648] syzkaller0: entered allmulticast mode [ 282.432723][ T5746] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 282.597645][ T5746] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 282.620910][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.655534][ T5746] usb 4-1: Product: syz [ 282.663164][ T5748] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 282.672479][ T5746] usb 4-1: Manufacturer: syz [ 282.686469][ T5746] usb 4-1: SerialNumber: syz [ 283.000348][ T8659] FAULT_INJECTION: forcing a failure. [ 283.000348][ T8659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.016072][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.7.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.016106][ T8659] Tainted: [L]=SOFTLOCKUP [ 283.016115][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.016145][ T8659] Call Trace: [ 283.016153][ T8659] [ 283.016161][ T8659] dump_stack_lvl+0xe8/0x150 [ 283.016191][ T8659] should_fail_ex+0x412/0x560 [ 283.016225][ T8659] _copy_from_iter+0x1d3/0x1670 [ 283.016270][ T8659] ? __pfx__copy_from_iter+0x10/0x10 [ 283.016299][ T8659] ? trace_kmalloc+0x2a/0xf0 [ 283.016331][ T8659] ? __kmalloc_noprof+0x37d/0x760 [ 283.016360][ T8659] ? kernfs_fop_write_iter+0x158/0x540 [ 283.016380][ T8659] ? __kmalloc_noprof+0x1b8/0x760 [ 283.016414][ T8659] kernfs_fop_write_iter+0x19b/0x540 [ 283.016441][ T8659] vfs_write+0x61d/0xb90 [ 283.016480][ T8659] ? __pfx_vfs_write+0x10/0x10 [ 283.016522][ T8659] ? __fget_files+0x2a/0x420 [ 283.016559][ T8659] ksys_write+0x150/0x270 [ 283.016591][ T8659] ? __pfx_ksys_write+0x10/0x10 [ 283.016630][ T8659] __do_fast_syscall_32+0x229/0x6e0 [ 283.016652][ T8659] ? do_fast_syscall_32+0x33/0x70 [ 283.016672][ T8659] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.016702][ T8659] ? asm_int80_emulation+0x1a/0x20 [ 283.016721][ T8659] ? do_int80_emulation+0x286/0x530 [ 283.016778][ T8659] ? trace_irq_disable+0x3b/0x140 [ 283.016816][ T8659] do_fast_syscall_32+0x33/0x70 [ 283.016837][ T8659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.016861][ T8659] RIP: 0023:0xf70bf01c [ 283.016880][ T8659] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 283.016897][ T8659] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 283.016919][ T8659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 283.016933][ T8659] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.016946][ T8659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.016958][ T8659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.016970][ T8659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.017001][ T8659] [ 283.747004][ T5748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.785411][ T5748] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 283.796270][ T5748] usb 6-1: can't read configurations, error -71 [ 283.834938][ T10] usb 5-1: USB disconnect, device number 28 [ 284.678163][ T8672] input: syz1 as /devices/virtual/input/input41 [ 284.723664][ T5746] rtl8150 4-1:1.0: couldn't reset the device [ 284.740177][ T5746] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 284.762431][ T8674] loop2: detected capacity change from 0 to 3 [ 284.818094][ T8674] Dev loop2: unable to read RDB block 3 [ 284.830840][ T8674] loop2: unable to read partition table [ 284.858560][ T8674] loop2: partition table beyond EOD, truncated [ 284.891733][ T8674] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 284.980737][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 285.012756][ T8678] netlink: 59 bytes leftover after parsing attributes in process `syz.1.944'. [ 285.230625][ T8685] netlink: 'syz.1.948': attribute type 12 has an invalid length. [ 285.249150][ T8685] netlink: 'syz.1.948': attribute type 29 has an invalid length. [ 285.272834][ T8685] netlink: 148 bytes leftover after parsing attributes in process `syz.1.948'. [ 285.273740][ T5746] usb 4-1: USB disconnect, device number 43 [ 285.557062][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 285.577973][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 285.713441][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 285.889423][ T8698] binder: 8697:8698 ioctl c0306201 800003c0 returned -14 [ 285.905013][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 285.937318][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 285.969861][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 285.995475][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 286.031941][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 286.055148][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.134453][ T10] usb 8-1: config 0 descriptor?? [ 286.187216][ T8709] tipc: Enabling of bearer rejected, failed to enable media [ 286.372494][ T10] hdpvr 8-1:0.0: firmware version 0x8 dated 5 [ 286.453105][ T5699] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 286.626769][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 286.651083][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.678934][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.704203][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.748144][ T5699] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 286.768351][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.807254][ T5699] usb 6-1: config 0 descriptor?? [ 286.985986][ T10] hdpvr 8-1:0.0: Could not setup controls [ 287.006490][ T10] hdpvr 8-1:0.0: registering videodev failed [ 287.078314][ T10] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -71 [ 287.121733][ T10] usb 8-1: USB disconnect, device number 22 [ 288.576403][ T5699] usbhid 6-1:0.0: can't add hid device: -71 [ 288.607059][ T5699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 288.644957][ T5699] usb 6-1: USB disconnect, device number 20 [ 288.705601][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 288.705623][ T30] audit: type=1326 audit(1779537186.721:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 288.715900][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 288.820737][ T30] audit: type=1326 audit(1779537186.761:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 288.885226][ T30] audit: type=1326 audit(1779537186.771:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 288.970721][ T30] audit: type=1326 audit(1779537186.771:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.022981][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 289.034359][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.042140][ T30] audit: type=1326 audit(1779537186.771:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.094597][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.141329][ T30] audit: type=1326 audit(1779537186.771:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.156496][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 289.260770][ T30] audit: type=1326 audit(1779537186.771:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.297294][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.355314][ T9] usb 8-1: Product: syz [ 289.369712][ T9] usb 8-1: Manufacturer: syz [ 289.388147][ T9] usb 8-1: SerialNumber: syz [ 289.409217][ T30] audit: type=1326 audit(1779537186.771:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.448655][ T9] usb 8-1: config 0 descriptor?? [ 289.516552][ T30] audit: type=1326 audit(1779537186.781:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.582708][ T30] audit: type=1326 audit(1779537186.781:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd301c code=0x7ffc0000 [ 289.691332][ T9] usb 8-1: USB disconnect, device number 23 [ 289.802741][ T5746] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 290.015631][ T5746] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 290.047672][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.098111][ T5746] usb 4-1: config 0 descriptor?? [ 291.340325][ T8762] Set syz1 is full, maxelem 14 reached [ 292.426711][ T8774] SET target dimension over the limit! [ 292.627700][ T8779] tipc: Enabling of bearer rejected, failed to enable media [ 292.740041][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 292.751642][ T5746] usb 4-1: Cannot set autoneg [ 292.765327][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 292.789148][ T5746] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 292.829417][ T5746] usb 4-1: USB disconnect, device number 44 [ 292.895418][ T5748] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 293.062829][ T5748] usb 6-1: Using ep0 maxpacket: 16 [ 293.074897][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.113837][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.143814][ T5748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.177802][ T8789] ipip1: entered promiscuous mode [ 293.178458][ T5748] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 293.212919][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.234588][ T5748] usb 6-1: config 0 descriptor?? [ 293.344674][ T5699] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 293.540145][ T5699] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 293.576318][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.634027][ T5699] usb 2-1: Product: syz [ 293.663266][ T5699] usb 2-1: Manufacturer: syz [ 293.680200][ T5699] usb 2-1: SerialNumber: syz [ 293.926002][ T8796] netlink: 48 bytes leftover after parsing attributes in process `syz.4.985'. [ 294.237137][ T8798] loop5: detected capacity change from 0 to 7 [ 294.264385][ T8798] Dev loop5: unable to read RDB block 7 [ 294.270437][ T8798] loop5: unable to read partition table [ 294.281640][ T8798] loop5: partition table beyond EOD, truncated [ 294.290708][ T8798] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.682853][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 294.745735][ T8807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.870891][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.894872][ T29] usb 5-1: config 0 has no interface number 0 [ 294.912992][ T29] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.949910][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.990346][ T29] usb 5-1: Product: syz [ 295.016360][ T29] usb 5-1: Manufacturer: syz [ 295.031897][ T8807] input: syz1 as /devices/virtual/input/input42 [ 295.053932][ T29] usb 5-1: SerialNumber: syz [ 295.091049][ T5706] IPVS: starting estimator thread 0... [ 295.100309][ T8811] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 295.122871][ T29] usb 5-1: config 0 descriptor?? [ 295.257141][ T8812] IPVS: using max 26 ests per chain, 62400 per kthread [ 295.340858][ T5699] rtl8150 2-1:1.0: couldn't reset the device [ 295.354380][ T5699] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 295.417602][ T29] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.478338][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.509684][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.531199][ T29] usb 5-1: media controller created [ 295.546516][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 295.606566][ T5748] usbhid 6-1:0.0: can't add hid device: -71 [ 295.630462][ T5748] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 295.647226][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.675902][ T5748] usb 6-1: USB disconnect, device number 21 [ 295.695706][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 295.712496][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 295.723068][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 295.734912][ T9] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 295.757854][ T9] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.783802][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.803312][ T9] usb 8-1: Product: syz [ 295.812470][ T9] usb 8-1: Manufacturer: syz [ 295.823284][ T9] usb 8-1: SerialNumber: syz [ 295.861994][ T9] r8152-cfgselector 8-1: Unknown version 0x0000 [ 295.880490][ T9] r8152-cfgselector 8-1: config 0 descriptor?? [ 295.947039][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 295.956363][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 296.110772][ T9] r8152-cfgselector 8-1: Needed 1 retries to read version [ 296.122022][ T29] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 296.129017][ T9] r8152-cfgselector 8-1: Unknown version 0x0000 [ 296.148241][ T9] r8152-cfgselector 8-1: No union descriptors [ 296.182196][ T9] usb 2-1: USB disconnect, device number 39 [ 296.365743][ T29] usb 5-1: USB disconnect, device number 29 [ 296.810236][ T8831] netlink: 'syz.5.995': attribute type 4 has an invalid length. [ 296.872415][ T5728] r8152-cfgselector 8-1: USB disconnect, device number 24 [ 296.906209][ T8831] netlink: 'syz.5.995': attribute type 17 has an invalid length. [ 297.013761][ T8833] netlink: 37 bytes leftover after parsing attributes in process `syz.7.997'. [ 297.054925][ T5699] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 297.092879][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.219814][ T5699] usb 2-1: config 1 has an invalid interface number: 8 but max is 1 [ 297.252949][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.288893][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.318581][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.999'. [ 297.331917][ T5699] usb 2-1: config 1 has no interface number 0 [ 297.342048][ T5699] usb 2-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.355814][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.999'. [ 297.381714][ T5699] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.401930][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.423348][ T5699] usb 2-1: Product: syz [ 297.443265][ T5699] usb 2-1: Manufacturer: syz [ 297.457838][ T5699] usb 2-1: SerialNumber: syz [ 297.492218][ T5699] cdc_ncm 2-1:1.8: skipping garbage [ 297.517034][ T5699] cdc_ncm 2-1:1.8: CDC Union missing and no IAD found [ 297.537702][ T5699] cdc_ncm 2-1:1.8: bind() failure [ 297.755638][ T5748] usb 2-1: USB disconnect, device number 40 [ 298.199783][ T8853] tipc: Enabling of bearer rejected, failed to enable media [ 298.474422][ T5748] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 298.554549][ T8863] __nla_validate_parse: 1 callbacks suppressed [ 298.554575][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 298.662650][ T5748] usb 6-1: Using ep0 maxpacket: 16 [ 298.679327][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.736569][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.762427][ T5748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 298.815428][ T5748] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 298.843989][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.875281][ T5748] usb 6-1: config 0 descriptor?? [ 299.009604][ T8875] netlink: 'syz.1.1012': attribute type 8 has an invalid length. [ 299.054131][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 299.242553][ T8884] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 299.257907][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1015'. [ 299.283288][ T8887] netlink: 59 bytes leftover after parsing attributes in process `syz.7.1015'. [ 299.443776][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 299.588279][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.648431][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 300.241908][ T8909] Cannot find add_set index 0 as target [ 300.703145][ T5748] usbhid 6-1:0.0: can't add hid device: -71 [ 300.728029][ T5748] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 300.801844][ T5748] usb 6-1: USB disconnect, device number 22 [ 301.203315][ T5706] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 301.363017][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 301.383104][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.421656][ T5706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.464319][ T5706] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 301.493045][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.527823][ T5706] usb 2-1: Product: syz [ 301.541898][ T5706] usb 2-1: Manufacturer: syz [ 301.560308][ T5706] usb 2-1: SerialNumber: syz [ 301.602921][ T5706] usb 2-1: config 0 descriptor?? [ 301.840025][ T5706] usb 2-1: USB disconnect, device number 41 [ 302.232810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 302.244100][ T5748] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 302.415236][ T5748] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.478169][ T5748] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.511309][ T5748] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 302.553066][ T5748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.589283][ T5748] usb 8-1: config 0 descriptor?? [ 302.905080][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 303.047539][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.108928][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.137933][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.160051][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 303.204548][ T5748] usbhid 8-1:0.0: can't add hid device: -71 [ 303.215236][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.227894][ T5748] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 303.250234][ T8938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.260070][ T29] usb 6-1: Product: syz [ 303.305987][ T5748] usb 8-1: USB disconnect, device number 25 [ 303.316922][ T29] usb 6-1: Manufacturer: syz [ 303.352815][ T29] usb 6-1: SerialNumber: syz [ 303.757285][ T29] usb 6-1: config 0 descriptor?? [ 304.232239][ T8947] Invalid logical block size (3984) [ 304.273922][ T29] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 304.293298][ T29] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 304.326780][ T29] usb 6-1: USB disconnect, device number 23 [ 304.625326][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1034'. [ 305.189996][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 305.217099][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 305.247277][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 305.493200][ T8965] syzkaller0: entered promiscuous mode [ 305.513067][ T8965] syzkaller0: entered allmulticast mode [ 305.647463][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 305.684507][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 305.708637][ T8969] xt_cgroup: invalid path, errno=-2 [ 306.111699][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 306.211877][ T8979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.221453][ T8985] syzkaller0: entered promiscuous mode [ 306.243479][ T31] INFO: task syz.2.324:6705 blocked for more than 143 seconds. [ 306.256986][ T31] Tainted: G L syzkaller #0 [ 306.262526][ T8985] syzkaller0: entered allmulticast mode [ 306.270544][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.279683][ T31] task:syz.2.324 state:D stack:28120 pid:6705 tgid:6704 ppid:5651 task_flags:0x400040 flags:0x08080002 [ 306.293840][ T31] Call Trace: [ 306.297279][ T31] [ 306.300380][ T31] __schedule+0x1821/0x5740 [ 306.309138][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 306.317469][ T31] ? __pfx___schedule+0x10/0x10 [ 306.322483][ T31] ? schedule+0x90/0x360 [ 306.326905][ T31] schedule+0x164/0x360 [ 306.331361][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.337282][ T31] __mutex_lock+0x7f7/0x1550 [ 306.342116][ T31] ? __mutex_lock+0x608/0x1550 [ 306.348422][ T31] ? usbdev_open+0x182/0x770 [ 306.390004][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.412966][ T31] ? bus_find_device+0x27d/0x2d0 [ 306.421483][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 306.431643][ T31] ? usbdev_open+0xa7/0x770 [ 306.438910][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 306.444794][ T31] usbdev_open+0x182/0x770 [ 306.450132][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 306.456295][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 306.461598][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 306.466935][ T31] chrdev_open+0x4cd/0x5e0 [ 306.471740][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 306.477131][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 306.483960][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 306.489344][ T31] do_dentry_open+0x785/0x14e0 [ 306.495268][ T31] vfs_open+0x3b/0x340 [ 306.499643][ T31] ? path_openat+0x2df0/0x3860 [ 306.504848][ T31] path_openat+0x2e08/0x3860 [ 306.510080][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 306.522056][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 306.527917][ T31] ? stack_depot_save_flags+0x33/0x810 [ 306.533700][ T31] ? __pfx_path_openat+0x10/0x10 [ 306.539973][ T31] ? __ia32_compat_sys_openat+0x131/0x160 [ 306.546247][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 306.551501][ T31] do_file_open+0x23e/0x4a0 [ 306.556435][ T31] ? __pfx_do_file_open+0x10/0x10 [ 306.561749][ T31] ? _raw_spin_unlock+0x28/0x50 [ 306.576793][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1048'. [ 306.593511][ T31] ? alloc_fd+0x64b/0x6c0 [ 306.601140][ T8990] netlink: 59 bytes leftover after parsing attributes in process `syz.7.1048'. [ 306.601766][ T31] do_sys_openat2+0x113/0x200 [ 306.632998][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.633030][ T8984] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.647596][ T8984] bond3: (slave bond5): Enslaving as an active interface with an up link [ 306.658756][ T31] ? exc_page_fault+0x6a/0xc0 [ 306.664221][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 306.670153][ T31] do_int80_emulation+0x181/0x530 [ 306.707942][ T31] ? trace_irq_disable+0x3b/0x140 [ 306.730979][ T31] ? asm_int80_emulation+0x1a/0x20 [ 306.748384][ T31] ? clear_bhb_loop+0x40/0x90 [ 306.758985][ T31] ? clear_bhb_loop+0x40/0x90 [ 306.764208][ T31] asm_int80_emulation+0x1a/0x20 [ 306.769476][ T31] RIP: 0023:0xf71e61ab [ 306.775104][ T31] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 306.784306][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 306.792500][ T31] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.801536][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.810986][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.824224][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.832549][ T31] [ 306.836965][ T31] INFO: task syz.0.337:6739 blocked for more than 143 seconds. [ 306.847465][ T31] Tainted: G L syzkaller #0 [ 306.854572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.865558][ T31] task:syz.0.337 state:D stack:27992 pid:6739 tgid:6738 ppid:5650 task_flags:0x400040 flags:0x08080002 [ 306.880547][ T31] Call Trace: [ 306.902476][ T31] [ 306.906275][ T31] __schedule+0x1821/0x5740 [ 306.911166][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 306.923655][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 306.929249][ T31] ? kasan_save_free_info+0x46/0x50 [ 306.935466][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 306.940582][ T31] ? __pfx___schedule+0x10/0x10 [ 306.946128][ T31] ? schedule+0x90/0x360 [ 306.950589][ T31] schedule+0x164/0x360 [ 306.956570][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.962192][ T31] __mutex_lock+0x7f7/0x1550 [ 306.967540][ T31] ? __mutex_lock+0x608/0x1550 [ 306.972449][ T31] ? usbdev_open+0x182/0x770 [ 306.978366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.984949][ T31] ? bus_find_device+0x27d/0x2d0 [ 306.990178][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 306.996334][ T31] ? usbdev_open+0xa7/0x770 [ 307.001153][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 307.007486][ T31] usbdev_open+0x182/0x770 [ 307.012188][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 307.022023][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 307.029327][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 307.036684][ T31] chrdev_open+0x4cd/0x5e0 [ 307.041370][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 307.047091][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 307.054307][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 307.059389][ T31] do_dentry_open+0x785/0x14e0 [ 307.067107][ T31] vfs_open+0x3b/0x340 [ 307.071364][ T31] ? path_openat+0x2df0/0x3860 [ 307.077034][ T31] path_openat+0x2e08/0x3860 [ 307.081800][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 307.088867][ T31] ? stack_depot_save_flags+0x33/0x810 [ 307.096899][ T31] ? __pfx_path_openat+0x10/0x10 [ 307.102109][ T31] ? __ia32_compat_sys_openat+0x131/0x160 [ 307.108439][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 307.114326][ T31] do_file_open+0x23e/0x4a0 [ 307.119017][ T31] ? __pfx_do_file_open+0x10/0x10 [ 307.130458][ T31] ? _raw_spin_unlock+0x28/0x50 [ 307.137962][ T31] ? alloc_fd+0x64b/0x6c0 [ 307.142449][ T31] do_sys_openat2+0x113/0x200 [ 307.149486][ T31] ? sctp_setsockopt+0xb4a/0x12c0 [ 307.155243][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.160693][ T31] ? rcu_is_watching+0x15/0xb0 [ 307.166030][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 307.171844][ T31] do_int80_emulation+0x181/0x530 [ 307.179902][ T31] ? trace_irq_disable+0x3b/0x140 [ 307.185420][ T31] ? asm_int80_emulation+0x1a/0x20 [ 307.190661][ T31] ? clear_bhb_loop+0x40/0x90 [ 307.197199][ T31] ? clear_bhb_loop+0x40/0x90 [ 307.202062][ T31] asm_int80_emulation+0x1a/0x20 [ 307.210639][ T31] RIP: 0023:0xf71e61ab [ 307.215792][ T31] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 307.230279][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 307.239475][ T31] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.250293][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.261193][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.269898][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.278779][ T31] [ 307.296912][ T31] [ 307.296912][ T31] Showing all locks held in the system: [ 307.315096][ T31] 3 locks held by kworker/0:1/10: [ 307.320571][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 307.343434][ T31] #1: ffffc900000f7c40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 307.356767][ T31] #2: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 307.369820][ T31] 7 locks held by kworker/1:0/24: [ 307.375497][ T31] #0: ffff888021ed2140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 307.387870][ T31] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 307.400580][ T31] #2: ffff88802a8a21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 307.411761][ T31] #3: ffff88807ac551d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 307.424973][ T31] #4: ffff8880686e01a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 307.439800][ T31] #5: ffff888037218a08 (&go->hw_lock){+.+.}-{4:4}, at: go7007_boot_encoder+0x25/0xe0 [ 307.451025][ T31] #6: ffffffff8e7f99e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 307.462357][ T31] 4 locks held by kworker/1:1/29: [ 307.469664][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 307.481899][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 307.491287][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 307.501098][ T31] #3: ffffffff9a6df048 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 307.511965][ T31] 1 lock held by khungtaskd/31: [ 307.519215][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 307.538731][ T31] 5 locks held by kworker/u8:3/48: [ 307.544794][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 307.555687][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 307.565179][ T31] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 307.576202][ T31] #3: ffffffff9a63f250 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 307.588068][ T31] #4: ffffffff8e801120 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 307.599915][ T31] 3 locks held by kworker/u8:8/1164: [ 307.605846][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 307.618286][ T31] #1: ffffc900058c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 307.630813][ T31] #2: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 307.646275][ T31] 2 locks held by getty/5382: [ 307.651115][ T31] #0: ffff8880327b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 307.661572][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 307.672923][ T31] 4 locks held by kworker/1:6/5746: [ 307.678268][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 307.692493][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 307.703339][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 307.712518][ T31] #3: ffffffff9a6db898 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 307.724057][ T31] 4 locks held by udevd/5884: [ 307.728890][ T31] #0: ffff88802b920f38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 307.743216][ T31] #1: ffff888056303c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 307.755200][ T31] #2: ffff888078d2e4b8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 307.766068][ T31] #3: ffff88807ac551d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 307.776259][ T31] 1 lock held by syz.2.324/6705: [ 307.781341][ T31] #0: ffff88802a8a21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 307.791327][ T31] 1 lock held by syz.0.337/6739: [ 307.798810][ T31] #0: ffff88802a8a21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 307.810513][ T31] 1 lock held by syz.6.468/7150: [ 307.815872][ T31] #0: ffff88802a8a21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 307.825648][ T31] 2 locks held by syz.4.1013/8883: [ 307.830937][ T31] 1 lock held by syz.3.1044/8977: [ 307.836638][ T31] #0: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 307.853208][ T31] 2 locks held by syz.3.1044/8980: [ 307.858395][ T31] #0: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 307.872316][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 307.884320][ T31] 1 lock held by syz.3.1044/8985: [ 307.889413][ T31] #0: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 307.899564][ T31] 3 locks held by syz.3.1044/8992: [ 307.907464][ T31] #0: ffffffff8fe40d68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 307.917711][ T31] #1: ffffffff8fe40ba0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 307.932485][ T31] #2: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650 [ 307.945344][ T31] 1 lock held by syz.1.1045/8979: [ 307.950470][ T31] #0: ffffffff8fdd1400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 307.961159][ T31] [ 307.966542][ T31] ============================================= [ 307.966542][ T31] [ 307.980791][ T31] NMI backtrace for cpu 1 [ 307.980813][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 307.980841][ T31] Tainted: [L]=SOFTLOCKUP [ 307.980848][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.980861][ T31] Call Trace: [ 307.980869][ T31] [ 307.980877][ T31] dump_stack_lvl+0xe8/0x150 [ 307.980908][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 307.980935][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 307.980961][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 307.980989][ T31] sys_info+0x135/0x170 [ 307.981011][ T31] watchdog+0xfd3/0x1030 [ 307.981050][ T31] ? watchdog+0x1c9/0x1030 [ 307.981095][ T31] kthread+0x389/0x470 [ 307.981124][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.981151][ T31] ? __pfx_kthread+0x10/0x10 [ 307.981180][ T31] ret_from_fork+0x514/0xb70 [ 307.981207][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.981238][ T31] ? __switch_to+0xc79/0x1410 [ 307.981271][ T31] ? __pfx_kthread+0x10/0x10 [ 307.981300][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.981340][ T31] [ 307.981359][ T31] Sending NMI from CPU 1 to CPUs 0: [ 308.050853][ T8992] tipc: Enabled bearer , priority 0 [ 308.108707][ C0] NMI backtrace for cpu 0 [ 308.108728][ C0] CPU: 0 UID: 0 PID: 8883 Comm: syz.4.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.108755][ C0] Tainted: [L]=SOFTLOCKUP [ 308.108761][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.108773][ C0] RIP: 0010:__lock_acquire+0x17a0/0x2cf0 [ 308.108800][ C0] Code: 05 bd 97 a0 14 48 b8 00 00 00 00 01 00 00 00 48 89 05 a4 97 a0 14 48 8d 84 24 90 00 00 00 48 89 05 95 17 a0 14 31 ff 45 31 e4 <4d> 85 e4 4c 8b 6c 24 10 74 30 49 8b 44 24 30 48 85 c0 74 26 48 8b [ 308.108816][ C0] RSP: 0000:ffffc900000071d0 EFLAGS: 00000046 [ 308.108832][ C0] RAX: ffffffff93eb9940 RBX: 00000000000003fd RCX: 000000000003b947 [ 308.108846][ C0] RDX: ffffffff96d33718 RSI: ffff8880277568c0 RDI: 00000000000003fd [ 308.108859][ C0] RBP: a5ec26d381407935 R08: ffffc90000007198 R09: 0000000000000020 [ 308.108872][ C0] R10: dffffc0000000000 R11: ffffffff81a22380 R12: ffffffff96e12e58 [ 308.108886][ C0] R13: ffff8880277568c0 R14: ffff888027755c40 R15: 000000000000029c [ 308.108900][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 308.108915][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 308.108928][ C0] CR2: 00000000f7488108 CR3: 000000007db50000 CR4: 00000000003526f0 [ 308.108943][ C0] Call Trace: [ 308.108950][ C0] [ 308.108969][ C0] ? debug_object_activate+0x83/0x580 [ 308.108993][ C0] lock_acquire+0x106/0x350 [ 308.109011][ C0] ? debug_object_activate+0x83/0x580 [ 308.109037][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 308.109066][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 308.109093][ C0] ? debug_object_activate+0x83/0x580 [ 308.109116][ C0] debug_object_activate+0x83/0x580 [ 308.109143][ C0] hrtimer_start_range_ns+0x579/0xed0 [ 308.109172][ C0] netem_dequeue+0x13db/0x15f0 [ 308.109203][ C0] ? ktime_get+0x45/0x220 [ 308.109236][ C0] ? __pfx_netem_dequeue+0x10/0x10 [ 308.109259][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.109291][ C0] ? ktime_get+0x45/0x220 [ 308.109320][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 308.109349][ C0] ? ktime_get+0x1f5/0x220 [ 308.109376][ C0] __qdisc_run+0x23f/0x1560 [ 308.109405][ C0] ? rcu_is_watching+0x15/0xb0 [ 308.109430][ C0] __dev_queue_xmit+0x1d26/0x3950 [ 308.109452][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 308.109470][ C0] ? tipc_net+0x45/0x270 [ 308.109488][ C0] ? lock_acquire+0x106/0x350 [ 308.109507][ C0] ? tipc_net+0x45/0x270 [ 308.109529][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 308.109547][ C0] ? tipc_net+0x45/0x270 [ 308.109566][ C0] ? tipc_net+0x205/0x270 [ 308.109593][ C0] ? tipc_crypto_xmit+0x1df/0x2600 [ 308.109614][ C0] ? arch_do_signal_or_restart+0xbc/0x840 [ 308.109642][ C0] ? irqentry_exit+0x289/0x760 [ 308.109672][ C0] ? tipc_net+0x45/0x270 [ 308.109697][ C0] ? eth_header+0x11b/0x200 [ 308.109716][ C0] ? eth_header+0x11b/0x200 [ 308.109731][ C0] ? __pfx_eth_header+0x10/0x10 [ 308.109748][ C0] tipc_l2_send_msg+0x337/0x400 [ 308.109778][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 308.109806][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 308.109834][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 308.109861][ C0] ? tipc_disc_timeout+0x576/0x6f0 [ 308.109888][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 308.109910][ C0] tipc_disc_timeout+0x595/0x6f0 [ 308.109939][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 308.109967][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 308.109997][ C0] call_timer_fn+0x192/0x5e0 [ 308.110018][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 308.110044][ C0] ? call_timer_fn+0xd4/0x5e0 [ 308.110063][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 308.110090][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.110114][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 308.110141][ C0] __run_timer_base+0x652/0x8b0 [ 308.110159][ C0] ? ktime_get+0x45/0x220 [ 308.110191][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 308.110217][ C0] run_timer_softirq+0xb7/0x170 [ 308.110236][ C0] handle_softirqs+0x22a/0x840 [ 308.110256][ C0] ? __irq_exit_rcu+0xca/0x220 [ 308.110277][ C0] __irq_exit_rcu+0xca/0x220 [ 308.110295][ C0] irq_exit_rcu+0x9/0x30 [ 308.110311][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 308.110338][ C0] [ 308.110343][ C0] [ 308.110350][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.110370][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 308.110395][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9a f5 f5 f5 48 89 df e8 a2 6a f6 f5 e8 cd 01 22 f6 fb bf 01 00 00 00 72 e9 e7 f5 65 8b 05 9b 9f 8d 07 85 c0 74 07 5b e9 01 48 00 00 [ 308.110411][ C0] RSP: 0000:ffffc900061f7280 EFLAGS: 00000206 [ 308.110426][ C0] RAX: 0000000000056e8d RBX: ffff88807d7f0968 RCX: 0000000080000002 [ 308.110439][ C0] RDX: 0000000000000006 RSI: ffffffff8dfacd65 RDI: 0000000000000001 [ 308.110451][ C0] RBP: 1ffff1100fafe12c R08: ffffffff9030d5f7 R09: 1ffffffff2061abe [ 308.110465][ C0] R10: dffffc0000000000 R11: fffffbfff2061abf R12: ffff88807d7f0968 [ 308.110479][ C0] R13: dffffc0000000000 R14: 00fff6000002002d R15: ffff88807d7f0960 [ 308.110501][ C0] filemap_remove_folio+0x102/0x3a0 [ 308.110536][ C0] truncate_inode_folio+0x5d/0x70 [ 308.110554][ C0] shmem_undo_range+0x42f/0x1660 [ 308.110583][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 308.110602][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 308.110645][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 308.110668][ C0] shmem_evict_inode+0x289/0xae0 [ 308.110696][ C0] ? inode_wait_for_writeback+0x16d/0x3b0 [ 308.110725][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 308.110750][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 308.110776][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 308.110805][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 308.110830][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 308.110856][ C0] evict+0x61e/0xb10 [ 308.110886][ C0] ? __pfx_evict+0x10/0x10 [ 308.110911][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 308.110937][ C0] ? _raw_spin_unlock+0x28/0x50 [ 308.110960][ C0] ? iput+0xb25/0xe80 [ 308.111002][ C0] __dentry_kill+0x1a2/0x690 [ 308.111020][ C0] ? finish_dput+0xad/0x480 [ 308.111041][ C0] finish_dput+0xc9/0x480 [ 308.111063][ C0] __fput+0x691/0xa60 [ 308.111089][ C0] task_work_run+0x1d9/0x270 [ 308.111116][ C0] ? __pfx_task_work_run+0x10/0x10 [ 308.111141][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 308.111171][ C0] do_exit+0x70f/0x22c0 [ 308.111198][ C0] ? __pfx_do_exit+0x10/0x10 [ 308.111229][ C0] do_group_exit+0x21b/0x2d0 [ 308.111253][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.111279][ C0] get_signal+0x1284/0x1330 [ 308.111305][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 308.111334][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 308.111372][ C0] irqentry_exit+0x289/0x760 [ 308.111399][ C0] ? trace_irq_disable+0x3b/0x140 [ 308.111428][ C0] asm_exc_page_fault+0x26/0x30 [ 308.111446][ C0] RIP: 0023:0x0 [ 308.111458][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 308.111468][ C0] RSP: 002b:00000000800000a0 EFLAGS: 00010206 [ 308.111482][ C0] RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000000 [ 308.111493][ C0] RDX: 000000000000f452 RSI: 0000000080000100 RDI: 0000000080000140 [ 308.111505][ C0] RBP: 00000000588e2348 R08: 0000000000000000 R09: 0000000000000000 [ 308.111517][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.111528][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.111546][ C0] [ 308.867357][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 308.874290][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 308.884997][ T31] Tainted: [L]=SOFTLOCKUP [ 308.889340][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.899425][ T31] Call Trace: [ 308.902731][ T31] [ 308.905684][ T31] vpanic+0x56c/0xa60 [ 308.909703][ T31] ? __pfx___schedule+0x10/0x10 [ 308.914591][ T31] ? __pfx_vpanic+0x10/0x10 [ 308.919125][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 308.925312][ T31] panic+0xc5/0xd0 [ 308.929055][ T31] ? __pfx_panic+0x10/0x10 [ 308.933496][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 308.938917][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 308.945108][ T31] watchdog+0x102c/0x1030 [ 308.949480][ T31] ? watchdog+0x1c9/0x1030 [ 308.953936][ T31] kthread+0x389/0x470 [ 308.958031][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.962740][ T31] ? __pfx_kthread+0x10/0x10 [ 308.967369][ T31] ret_from_fork+0x514/0xb70 [ 308.971996][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.977134][ T31] ? __switch_to+0xc79/0x1410 [ 308.981844][ T31] ? __pfx_kthread+0x10/0x10 [ 308.986464][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.991279][ T31] [ 308.994783][ T31] Kernel Offset: disabled [ 308.999131][ T31] Rebooting in 86400 seconds..