last executing test programs: 12m57.723201307s ago: executing program 3 (id=1589): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000"], 0x0}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be17", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b376", 0x6}], 0x1}}], 0x2, 0x40) close(r2) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x4a33248eda255e64, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = syz_usb_connect$uac3(0x2, 0x101, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x2, 0x40, 0xc, {0x8, 0xb, 0x2, 0x2, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x49, 0x7}, [@selector_unit={0x6, 0x24, 0xc, 0x3, 0x1, "ee"}, @mixer_unit={0xb, 0x24, 0x5, 0x3, 0x40, "18a4f707480f"}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x603, 0x6, 0x3, 0xc34e, 0xa, 0x401, 0x0, 0xf000}, @cluster_info_segment={0x6, 0x20, 0x3, 0xab, 0xbd}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x1ff, 0x3, 0x0, 0x3ff, 0x6, 0x4, 0x2, 0x401}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x6, 0x2800, 0x0, 0x7, 0x7f, 0x81, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x1, 0x80, 0x16, "a0bd3fab875a2bcf"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9b, 0x2, 0x5, 0x8, "d81f5ef496f3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x1df, 0x8, 0x0, 0x6, {0xa, 0x25, 0x25, 0x9, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xa0, 0xe, "4e9fbb", "f453"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x3, 0x3, {0xa, 0x25, 0x25, 0x34, 0x3, 0x8863}}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x3, 0x5, 0x54, 0x20, 0x1}, 0x53, &(0x7f0000000680)={0x5, 0xf, 0x53, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x3, 0xfff}, @generic={0x26, 0x10, 0x1, "790404e89832cea7bc1d45b65fd489986a3445196f41476647b9ca0776e80aeeceb36b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x93, "e3751f50e8783e565e1e104e5976c4af"}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x425}}, {0xb3, &(0x7f0000000c40)=@string={0xb3, 0x3, "b89e0e55307ee829ef978f8a394c243abe53fdc8075e7528cb1aa96e3712c061536943ebf0f3495c6eabb96e416a22bfed6d6e874d7a966f54697137984c0724f9a06895b668d9a407116bb1266bdd2381f2cd99763b120c20d35b0c549bfbf6669f28e61533cbb44fa71affa00938da53216c68bb588d3ca8d153e2d88c792d900cc35cb5798dbd67be960937293706005479db84f67cff12e54c94cb1b7c8d22ad0a159dd4d81047bb4fc692b35df578"}}, {0x9f, &(0x7f0000000d00)=@string={0x9f, 0x3, "e83ce505743a2819104bebd3a05bb9c1c5d014d018f0a1d4d2effad22d826db798a9eb95f5408d5df9871866c34f40deeb2c6b04ee75928c35cdd5a217844de18513ca0f8e4c25cd7e3c0167d71564ed244b42a46c249bf54cdc9777298d28de49fe0a8a7ac1ef34be60a8d661beb8da0d274e472a0f40627d32bbb457155e3c9eacbaaf5e7555596307dc21d5fec3c4490dd961f6eb5a208d845ee202"}}, {0xab, &(0x7f0000000e00)=@string={0xab, 0x3, "542a5c847e7885ca722561927952423dc954118ff0284c161f3ce660b6674264d387519a7d0e53d9cd281d0f96f4ac1208ffa5975b23554c25843519c4aeea3f3cf031cb2f52d38d87c83c18f4651ceed9cf504aff933a7d452116078b9fe2f7baa261cc1dea53cd7163dd9f8e1a4e6bc1386216346613b9ceeff085d8ca446b8dda8293f11dc9f0aeb5b5934d57590c8ac3c6321de5f31a820c926ac738d810b9d32822332bf161bf"}}, {0xa7, &(0x7f0000000240)=ANY=[@ANYBLOB="a7039ea122cd7a12c959539cd41b3db45cb6892acf1a43eceb8334f7645feddb928fd7c9de723228f923ce2fd66ad4298e5b1da9d399b73621c38ee59893687c6e31e3d6a6c2fe499f1f14cc0a98d6b4abb882172a7a4cc37265303a5274910d675d243dfdf057cccb53f243c1ec0fb8c5a90531785f5a81b1b765956fbbfe273b0d7772a6294ca65b8cc041320b09bf797599ba968b97e36e43825d6917cff4705c701e249dae7b17c4e343"]}]}) syz_usb_control_io$uac3(r3, &(0x7f0000001140)={0x14, &(0x7f0000001000)={0x20, 0xb, 0xd8, {0xd8, 0x23, "57532f3573acc13feea1d2adab0a497bccbef48ba7c58549074972dba8690ab6f80df38ce65efcb4e18e44d129f498189c284601f6af092f6fd24ed60b9ca813c6e80070a7a4b99d80650db121018e77e9c6df4f5637930dfbcb87f908d2ef4df17264e7a25ccb2ad404b1bc9804105500c1ad828aa9f661e0eac1a30e632417f831231573846c23d995214d2f93d30d25f5b23b0685ee2b0fe0ceb2ea245b57bea433e7b9e9ef3fdf39e8bda7d4a6760f875943f49b668a193615c95e7dbe82dc44762552db923717358ed905adbf7efb60a56dc82c"}}, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000001380)={0x44, &(0x7f0000001180)={0x40, 0x9, 0xe, "5b2d7c1de3535471ef82f5bb5321"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001240)={0x20, 0x81, 0x1, "12"}, &(0x7f0000001280)={0x20, 0x82, 0x1, "a8"}, &(0x7f00000012c0)={0x20, 0x83, 0x1, "92"}, &(0x7f0000001300)={0x20, 0x84, 0x4, 'qY\rw'}, &(0x7f0000001340)={0x20, 0x85, 0x3, "34fda5"}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m54.569633331s ago: executing program 3 (id=1600): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="050000000107000005000800050000"], 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f00000003c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000006c0)=0x2) 12m52.554134285s ago: executing program 3 (id=1609): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000180)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) (fail_nth: 2) 12m52.101673062s ago: executing program 3 (id=1610): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0/../file0/../file0/../file0/file0\x00'}) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @multicast2}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x4c000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000100)=@generic={0x0, 0x8c5, 0x111}) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x2, 0x200200) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff0000000000000000000010003f00766574682b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 12m51.120084392s ago: executing program 3 (id=1612): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000380)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f046, 0x100410}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x13, 0x81, 0x2, 0x4, 0x2, 0x3e, 0x7, 0x23c, 0x40, 0x8a, 0xc, 0x7, 0x38, 0x1, 0x34d6, 0xffff, 0x200}, [{0x5, 0xec49, 0xc768, 0x1, 0x0, 0x4, 0x6}], "30ef68c362f35cef6ced058d82637816f693b106", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa98) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 12m50.694660849s ago: executing program 3 (id=1614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="050000000107000005000800050000"], 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f00000003c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000006c0)=0x2) 12m49.505499252s ago: executing program 32 (id=1614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="050000000107000005000800050000"], 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f00000003c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000006c0)=0x2) 5m7.021805843s ago: executing program 2 (id=3432): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000080)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xffff0000}}], 0x18}, 0x4040800) 5m6.827744847s ago: executing program 2 (id=3435): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008851) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0306000000000000009c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fed496e6866856b96b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 5m6.655368778s ago: executing program 2 (id=3439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) unshare(0xe060400) r2 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) 5m6.430047233s ago: executing program 2 (id=3443): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket(0x10, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x7, 0x2, 0x10, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x7}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5m5.942643848s ago: executing program 2 (id=3451): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="746172676574205043493a323a0f"], 0x15) 5m5.931545407s ago: executing program 2 (id=3455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000034c0)=[{0x0}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a1", 0xc}], 0x2}, 0x8000) 4m50.706593666s ago: executing program 33 (id=3455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000034c0)=[{0x0}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a1", 0xc}], 0x2}, 0x8000) 1m40.309044036s ago: executing program 4 (id=4738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "910d0000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x4004180}, 0x0) 1m40.043699466s ago: executing program 4 (id=4740): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fdd", 0xe3}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 1m39.70412722s ago: executing program 4 (id=4742): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m36.509536862s ago: executing program 4 (id=4757): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1m36.34237733s ago: executing program 4 (id=4759): fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r4, 0x3b8e, &(0x7f0000000000)="10") r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0) write$fault_inject(r6, 0x0, 0x41) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x0, 0x0, r7, 0xffffffff}) sendto$inet6(r3, 0x0, 0x51, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) 1m36.236165555s ago: executing program 4 (id=4760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xe1e, @local, 0x3}, 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffff6, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364987808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a7fcffc8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000440)=0x90) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x7) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) 1m29.63409304s ago: executing program 0 (id=4802): mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f00000000c0)={0x60, 0x4, 0xc}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000040)=""/29) ioctl$MEMREADOOB(r4, 0xc0104d04, &(0x7f0000000540)={0x6, 0xe6, &(0x7f0000000440)="c9486098c8274906c32e2eb99e6c969ae20555ddcd38921ea4fdf79d012bfe1cff7f5e933a483f20f2e6b4eb2b3bacafd9768e2f481f64eefc363471a3ae6fe267af08618a6720e87c508e7300dd399ad2d47d56661f6d900a47d425ba226d18b43ec5253529f162de7309232785212de5ae754440e76e88c41e6997031e6db43d4051a31eded292ff9a44622ce56cb0d2edf0c8644688b2123c2da4f0b039bf1ca6803410e0ff923a1e93531a0af383be05a736a9f8d74ed970f233135c8a52a54574e251d4ecacabdac69707151c60233279676c4308de7c2457548b88605beeb569c63eb6"}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) close(r1) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000600)={0x7, 0x5, 0x4, 0x10, 0x5c49, 0x0, 0x4}) r7 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x3a, @private=0xa010100, 0x4e22, 0x3, 'lc\x00', 0x8, 0x3, 0x6f}, 0x2c) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b0001010130080904000000010130000a2401010a000010000009040100000102300009040101010102300009050109b0020905f80a252502"], 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x14000, 0x8, 0x3, 0x0, 0xe, 0x2}, 0x30, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000000e0000802110090"], 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0008}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) lseek(r10, 0x8, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m26.451651873s ago: executing program 0 (id=4816): syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafc86dd6001410000101100fe00000000000100008000000000bb000000000043c60000000000ffff0000000080000e2200101b0b02020000000000"], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) fstat(r0, &(0x7f0000000540)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="44008000100067cfb9ace7d6ba6c03e301040000020000dfffffffffff63f0720ef588994faa999f70d0077a8a996ee5831c4ec0a7c64352068126802f5c03879daed8e63c9353fd5f32540928a251896ca54bd3458021e88d35f4e02722c6", @ANYRES8, @ANYBLOB="9380000068820000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="6b26ba7a9dcd5e258a71bbcb1db12fc0f59b0fc658c0ac8110f5334f5ccc6a89e50811bae28b8dbe62817f3c8773bde072e211fe51c457c175fa3fb627af2fd4ea49665b613cbb41d137dd980c26f5353ae165fea871eef0261b6aaef97a67db292d701ef7094da3fd8080707921140ee075ae1f961c9d428842b0e5ff8129d732509fd50ba3ac5e6bdb9a7fff5e563dd68b67d0003ff648e85fd01aec6784d0413b8a578d1b2aeba157cbf02f89cff3e5390e4dc150a2f528999f6e49600985fd2062dd4406361976201317766c796944ee2f81cb378a98d77ff38ed0e3d0ea307ef3f4fab45c1f0d5c49e0127f", @ANYBLOB, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_int(r3, 0x29, 0x17, 0x0, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000040)=0x10) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4101, 0x1000}, {&(0x7f0000003140)=""/4096}], 0x61, 0x0, 0x0, 0x7fffe000}}], 0x1, 0x0, 0x0) sendmmsg(r6, 0x0, 0x0, 0x9200000000000000) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c0200"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m23.398540498s ago: executing program 0 (id=4829): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1m23.319815141s ago: executing program 0 (id=4830): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m23.23990661s ago: executing program 0 (id=4831): unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7c8b3c38, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "ee56b3d487e25b32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) shutdown(r0, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 1m22.27414304s ago: executing program 0 (id=4835): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20}, 0x94) fanotify_init(0x20, 0x40000) r1 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\"[\x96O7AZ\xc06Ei\xc2\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet(0x2, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sg(0x0, 0xe6, 0x2602) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x80000000, 0x1016}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x420080, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6022020000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 1m21.104586237s ago: executing program 34 (id=4760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xe1e, @local, 0x3}, 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffff6, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364987808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a7fcffc8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000440)=0x90) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x7) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) 1m8.63422155s ago: executing program 6 (id=4880): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x32) 1m8.213700003s ago: executing program 6 (id=4882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m7.772291416s ago: executing program 6 (id=4883): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004b180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8bfffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r1, &(0x7f0000000300)=""/74, 0x4a) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r2, &(0x7f0000000000)=""/106, 0x6a) 1m7.092612126s ago: executing program 35 (id=4835): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20}, 0x94) fanotify_init(0x20, 0x40000) r1 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\"[\x96O7AZ\xc06Ei\xc2\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet(0x2, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sg(0x0, 0xe6, 0x2602) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x80000000, 0x1016}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x420080, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6022020000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 1m7.038172672s ago: executing program 6 (id=4887): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000012c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c00028008000140"], 0x154}}, 0x8044) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r2, 0x540b, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet6(0xa, 0xc, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) 1m6.600535441s ago: executing program 6 (id=4888): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="5af488271b2ddcd2"], 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x2, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000840)=ANY=[]) 1m3.405496057s ago: executing program 6 (id=4899): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20}, 0x94) fanotify_init(0x20, 0x40000) r1 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\"[\x96O7AZ\xc06Ei\xc2\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet(0x2, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sg(0x0, 0xe6, 0x2602) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x80000000, 0x1016}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x420080, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6022020000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) 47.995962925s ago: executing program 36 (id=4899): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20}, 0x94) fanotify_init(0x20, 0x40000) r1 = memfd_create(&(0x7f0000000800)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\"[\x96O7AZ\xc06Ei\xc2\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet(0x2, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sg(0x0, 0xe6, 0x2602) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x80000000, 0x1016}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180)) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x420080, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6022020000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) 9.024315685s ago: executing program 1 (id=5098): set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000ffffffffffffffc100001c"], 0x4a) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1a706}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x48800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) write(r10, &(0x7f0000000080)='/sys/kernel/config', 0x12) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='file0\x00', 0x0, 0x0) read(r11, &(0x7f0000000000), 0x12) symlink(&(0x7f0000000000), &(0x7f0000000100)='my_configfs\x00') utime(&(0x7f0000002380)='my_configfs\x00', 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x20000) 6.600910095s ago: executing program 8 (id=5108): syz_clone(0x8100000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffe, {0x1, 0xf0, 0x2}, 0xff}, 0x18) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="e4bdf31fa30d0c9300001600bfa7536be921f21c5fb8a03b5455e4555676df0000000000000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201505000000f1d4614ed23628302b12b0bbf62affe331c6b6d6560cb7b8716311963bd755baee35b2872a9ae8126ff91332eeec820f3c96a1590cd0fd3470bde5cc1dc2e349e6ad4ab014f7ca74906f09ac1d1b5466f290d3c8bc95fcd1bd46790cf2db2d5c662a23b72120c98b1000994ef26d9e271873b92dc18b7279ed983ef7595a73c279e0a636ce7e3c3986ccc9ba016e0e2e69deb527c63df498440ebf963aabad24e8a08ed3dd4591b3e83ee3715c1f8121dfb2c8b5f19d97ce18f04071564f06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r4, 0x5, 0x1) sendmsg$nl_generic(r0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x0, 0xea60}}, 0x0) 5.9124117s ago: executing program 1 (id=5111): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r1 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r3, &(0x7f0000001480)="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", 0x411) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4f4832a", 0x4}], 0x1) write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5f"}, 0x411) 5.764092247s ago: executing program 1 (id=5112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x2f3, 0x30}, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r5, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) r6 = dup(r3) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x5b, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x102) 5.113111941s ago: executing program 7 (id=5114): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1401"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) dup2(r0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 4.881442205s ago: executing program 7 (id=5116): socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x3c2}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{0x0}], 0x1}}], 0x4, 0x40480c0) 4.765442271s ago: executing program 1 (id=5117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc00000013000101000000000000000064010102000000000000000000000000640101021000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000fdffffffffffffffffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000000000000000044000500ac1414bb000000000000000000000000000004d2330000000a000000fc0100000000000000000000000000000000000003"], 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000"], 0xfdef) 4.705629483s ago: executing program 7 (id=5118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="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", 0xbd5}, {&(0x7f0000000500)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b805b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f01587e997359498ac5b57e8b86fbf5327519ebc68cb81762ebdada6dca6eaee8ac113c10eead6548244be72d5e261f0084329890a01da108431ece9146f6a5f6214c44e05a9750f872bb69b2ac0386c26b78819c32bec4043042e0c8cfc589a077c5e3b062fd0f5a277056779ea21", 0x12a}, {0x0}], 0x6}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0}, &(0x7f0000000c80)=0x40) 4.444467457s ago: executing program 7 (id=5119): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xfffffffffffffe2c, 0x0, 0x2, 0x2}}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc2a02) 4.166052763s ago: executing program 1 (id=5121): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa6, 0xac, 0x43, 0x40, 0x1c9e, 0x9603, 0xf30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x70a1c7e174e5b518, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0xfa, 0xb9, 0xb}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x30}, 0x3400c8d4) socket$inet6(0xa, 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) write(r1, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) r3 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400903000000451cd732fe62ebd7b6179fa5e6c9cc57eb47019ac175f73ae25214df4f1fb87ec40f3b65b33f25ef721b67bb86443e647fc8e1e30128062c1a8f6d0bf529ce78942c1779eb19ca9bd66aa314c835a920bac74bd847e728858bf056b8dd6264e9361ed6bc66c4370f06dfd9c9e68257406be84a36b73de2abdbdb91db94147474d55c155d51ef557fa015ed33da7c4ce57995beee8fb9aa90b5a3674300192b452806133613139bc2014b2bc5033a962638bcc3330edb"], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r5 = socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x0, 0x7, 0xb9, "b0100fd0112bb0dd04f5ca5b980c10e17c8d371e74a15566df441d1bdb4b8dd7860cc0b63da86acc66bf3d809cb9ed098d32f731d118347c48662094bc948d621aa6c1f4ee10c7d1aafc806a30cbfcb4f97fb52657dc3bafa6a54fe1de580a2385a8e5f301662973a9a3e51d3c8561699cac4f36670056b4d5a78e377cc59b6ef4403acf416ef980ca0210125bd7d27bddb15a3cc790f34d434d201b84ba7c9b34529bbd655c777c67e98a9dbfc8e5327c4e968221ef5b3d9e"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000019140)={0x20, 0x81, 0x3, "49ffa2"}, &(0x7f0000000980)={0x20, 0x82, 0x1, 'b'}, &(0x7f00000190c0)={0x20, 0x83, 0x3, "fb2d39"}, &(0x7f0000019100)=ANY=[], &(0x7f0000000a40)={0x20, 0x85, 0x3, "e74aba"}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) read$FUSE(r4, &(0x7f0000001580)={0x2020}, 0x2020) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000019100)={@local}) 3.853941121s ago: executing program 8 (id=5122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r4, &(0x7f0000001480)="2d76b41cfadba8c9e82b39a58fade4a1e1c7ef34f18f9ee7ea705a387831c57c3f007c87ff6a6d56a0412772be538a3a9da7d06107b64274af1202839475620c45529c8e1e684c2118de638371951ba4ff979185630a5fad24e8eac0e002159a4516f523cc596c18dea7d58a7fc7d7c536f144c2a3cd4b3c32712d9df8e06635edabc3756f4574734399c629e21514de00ca9cb5db71b1fd95c571fc14e0935bce3b828d3e9544db3e5d6dd7711292bade41db1468879a5ae363c0e350a18c2c1846c9dab94e0c296ad7ba7ddabb3090d84b7e1de1075d427e6da02193277000e89a90b611024684514dfe42ba05afb12275bd2157f049f1e59c6e3e04bdf2af1558978fd730ff32ebc982e3cb15f90d5cc35615b22eb49384b70a36e914a8639cefcf00da4188df83be0f5f20b765610a77efdb569852c0196fca2237eeed0bfac86e58d0ec211962bf22ee18dbbb0f33c591cba0e72e68de6eca4c96f29868bd2080c96f28b8e68c9a62efae50d8bdc9df9cfbf3350f4274da573ed3653f989ffddbb59f3f8c72a6b3bc7f705872d0309445e14781e888d8d1a5fb5de79c5ea573c3b0bdf4de2e4263635aab6732e3339450fceb7698309cc629ec4bff6fde7a01f182dca433a256e101d01ba88a6ff1e14d9dcaf7d8a6bce08534142561578702ded5cc1bae4bbc0d17d783729c78c1851e701cf55ae55cbe40cec2a6e60fc8db862dbebef6b8d224762518e8b2ad8c1f97bd13057d9103c55a806d5c747b4e4c68d39469a9cdc8b6d92ebd0ebc51a32371af555bfa64463122ed3055b244ca4c8ad98b9c8903fc70a3827c622bb1222e8ec47331797d592c7f0837e695e885e8e18ba748b1169318135af97b937a2fad5472590d10a356e7d2da2073cd17bd45669c65618baf849b4d15925da0dc40705ee26ce2b33b85a93651f4d264b723cc23644a94a200673b551690788c9cf637f926ba1da102172c23445cc10278fa28b81c55578e77d87151a8b423c5a5d0bfc3945028e16514837ffab181dd771ab456bde23e6b1c40830967492904622123b7ba477e1843102e0a2bb816cd6ab344135c0660d09842ca96b2e15561c551a4efefb55818da1b9208c6c7a414caf455f9510b1f2ee869bd43353b9dec4dc6cc6a49dbf1ab273a69d76c552d0ea4eb33d983b19ce04cb14473dcf2e006d5b9886de2cad58e6fa06aafa7406f12400ab9bd65f472636446dc104a1e31f4f2abdcfe94ba5cdb35ce9d4efd6ea2de3069ffae2fb4e1ed93616546f39285d4d78ead20bd35b721a51f4ebe84037f699ba4afc82ece8dfb15faa8974e2cb0e2987db498c34b78fc806e3287ec0928e14abc7701684f73032d9c791cd195357ecb579724ac51659a02512faf240ef3bc65a2ac7462d4dc9b8718d103ef5223520e0c60969e3ecac743eee57e664fe687aad5e5d474ae25ac5aa77489b592eafa00ff", 0x411) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4f4832a", 0x4}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5f"}, 0x411) 3.749865822s ago: executing program 8 (id=5123): socket$inet_udp(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0xf350b23e3388af9f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0xcc, @remote, 0x5}, {0xa, 0x4e23, 0xffffff03, @loopback, 0x1}, r1, 0x4}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 3.650623149s ago: executing program 8 (id=5124): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, 0x8) syz_usb_connect$uac2(0x5, 0x106, &(0x7f0000002080)=ANY=[], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 3.473216277s ago: executing program 5 (id=5126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010428bd7000000100", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.227402586s ago: executing program 5 (id=5127): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x46, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0xfffd, 0x8090, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.151839766s ago: executing program 9 (id=5128): socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x3c2}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{0x0}], 0x1}}], 0x4, 0x40480c0) 3.103994549s ago: executing program 7 (id=5129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea2d11397d2b33ad100d3753d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d590da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0acd3b4fbe21997754874d1c0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb06b5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa8", 0xbd5}, {&(0x7f0000000500)="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", 0x12a}, {0x0}], 0x6}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0}, &(0x7f0000000c80)=0x40) 3.041706144s ago: executing program 5 (id=5130): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x33, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0xfd5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x8}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r0 = memfd_secret(0x80000) syz_usb_connect$uac1(0x3, 0xd1, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x499, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x0, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x16}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x3}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x10, "a04c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xfffc, 0x9, 0x9}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x8, 0x57, "6f7c189a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x8, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x7d8, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x5d1, 0x0, "d2b3d806243f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x21, 0xff, 0xa, {0x7, 0x25, 0x1, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x9, 0xa7, 0x4, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7ff, 0x9, 0x2, "fce8c2e9158fc7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x7ff, 0x5, 0x5, 0x3, {0x7, 0x25, 0x1, 0x8, 0x3}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x3, 0x8, 0x0, 0x10, 0x8}, 0x47, &(0x7f0000000780)={0x5, 0xf, 0x47, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc8, "cda66e7f3d760936a233de1f9338a1b5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x1, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "b591d848a70a6de0bde8ab1c939385f8"}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x9, 0x0, 0x8001}]}, 0x9, [{0x25, &(0x7f0000000800)=@string={0x25, 0x3, "6c8eda45447f9053f0ba1ead9497799254d0d13c919b65bc9aae5511bf6a725ddea9fa"}}, {0x75, &(0x7f0000000840)=@string={0x75, 0x3, "e5fded8e7a90fa128f71e6b3fa1d0848b22357f991c5be720b85bee19001ae4584d946c0d3f1f25bc747647f56dc4ecb959f9235460f51d94b4f7b7860ebd011ec15c2336a1b3996f01d5aeececd4bcf8c548a02373f400ef4837d5c55eb89e81601865b0b827cdc708dd54910aca10d9adf91"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x455}}, {0xdf, &(0x7f0000000940)=@string={0xdf, 0x3, "d88705add97dac8ad4d24c93a6d1713585db81f01c4c9f9a46c83aa47ec308c1753f7bc185cb52cb1acb2b1ddb231382979994dcf67e5d4b7d0645486d71621d00f5a1ebad294506f489df074145d0371e9b4d9d415d7209e723864145bd1368f5383925fc52c9e16bc63a08862890404d02ee6724ab867f7d9772f1dc8809671c571bab9a26daf0e91ce8231981497dc24d43d319b3b17a911ad4cccde31e28ee9871a289bdd81e63b3fe68670119bf397b0866520af3440bed82b6915aa7c516444d72f5ef8c493394110e6b0e75ec3d7adae9d932e828395a062548"}}, {0xca, &(0x7f0000000a40)=@string={0xca, 0x3, "9f5ea1a48ef91cead243f0233fc3bd84b4e4dae86dc7f9d5a989d084f4201fbec4ae95a8a915e4bdba8ea54f190d341693cd52d5a64d454b102966151ea68e2b9d3e71f7ee03f44bb4cc934038076a541ee6f0cde97e7e239c1094e26d2eec61698255de0afaed3179efd23b976beba664202924327ba82868fe9a79e7856165b8d8c2d165137c0b5ffd61cb9bf80c1771061c068787818f046e8ddb8512b863d4da32c76791350f70ba98e6f6e9250402373f2eabd2c0428d26ef86fa009adb3a31c909ff1d78cd"}}, {0x32, &(0x7f0000000b40)=@string={0x32, 0x3, "ad5ed106de3164021d9df406ef2286afad56b30d5d37234685e071a91c64e76c673088a12b1cefd4a93bb245f70c599c"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2401}}, {0x5a, &(0x7f0000000bc0)=@string={0x5a, 0x3, "a3b9489fe0ae2d77f4aae35f851efaca30561c37e412b5b0df7c2c3e67c4a348a13e2962b93b3071980ffd11210901b5cfa6a3688383296ead84eaadc3751a911b9d7ef01756e5ce3a91c2ee5444ee7e34cace1a9b4489e6"}}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x3000) ftruncate(r0, 0x51a9497) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e00000020800074000000005d96fa9e2eee6f1789b040a1624b610699eed8ef0344b65fa70a850812d46e102eef9f3c08d2741905da935da1aab2901a0b6910a8faaae1b1e4ce72d00adf9f17f754d770586074cb4f0eebf92e22b23730def3bfd5299"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20044000) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x94}}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000d00)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e40)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x349}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd96, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001fc2905577451600e0900800154000000064240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000380)=0x10001) syz_usb_connect(0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) 2.890634011s ago: executing program 9 (id=5131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc00000013000101000000000000000064010102000000000000000000000000640101021000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000fdffffffffffffffffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000000000000000044000500ac1414bb000000000000000000000000000004d2330000000a000000fc0100000000000000000000000000000000000003"], 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) 2.888530798s ago: executing program 7 (id=5132): syz_clone(0x8100000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffe, {0x1, 0xf0, 0x2}, 0xff}, 0x18) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="e4bdf31fa30d0c9300001600bfa7536be921f21c5fb8a03b5455e4555676df0000000000000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201505000000f1d4614ed23628302b12b0bbf62affe331c6b6d6560cb7b8716311963bd755baee35b2872a9ae8126ff91332eeec820f3c96a1590cd0fd3470bde5cc1dc2e349e6ad4ab014f7ca74906f09ac1d1b5466f290d3c8bc95fcd1bd46790cf2db2d5c662a23b72120c98b1000994ef26d9e271873b92dc18b7279ed983ef7595a73c279e0a636ce7e3c3986ccc9ba016e0e2e69deb527c63df498440ebf963aabad24e8a08ed3dd4591b3e83ee3715c1f8121dfb2c8b5f19d97ce18f04071564f06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r4, 0x5, 0x1) sendmsg$nl_generic(r0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x0, 0xea60}}, 0x0) 2.44936368s ago: executing program 9 (id=5133): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1401"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 2.205577179s ago: executing program 9 (id=5134): socket$inet_udp(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0xf350b23e3388af9f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0xcc, @remote, 0x5}, {0xa, 0x4e23, 0xffffff03, @loopback, 0x1}, r1, 0x4}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 2.050265857s ago: executing program 9 (id=5135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a0904d937d13d4bab9f567dbcdc9d021acb1331a3ea3", 0x16, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0xffffff91}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 1.926783582s ago: executing program 1 (id=5136): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x1, &(0x7f0000000340)="81"}], 0x1}) 1.536795446s ago: executing program 5 (id=5137): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010428bd7000000100000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.374335039s ago: executing program 5 (id=5138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0x1fffd, 0x10, 0x7}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) semget(0x1, 0x0, 0x80) lseek(0xffffffffffffffff, 0x4, 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x8040480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_ENDIAN(r11, 0x4008af13, &(0x7f0000000000)={0x0, 0xc}) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) 882.628431ms ago: executing program 9 (id=5139): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xfffffffffffffe2c, 0x0, 0x2, 0x2}}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={0x0, 0x0, 0x4a}, 0x0, 0x0, &(0x7f0000000c80)=""/74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) lstat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc2a02) 517.588868ms ago: executing program 8 (id=5140): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/66, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4000000) 141.898321ms ago: executing program 8 (id=5141): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c050) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x80000) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b24040101"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) syz_ublk_setup_io_uring(0x30, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x11, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x9, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x3, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x1, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0xffffffff, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xa, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x10003, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x0, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0x800cb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 0s ago: executing program 5 (id=5142): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0xfffd, 0x8090, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.464344][T11498] usb 1-1: Product: syz [ 1493.468702][T11498] usb 1-1: Manufacturer: syz [ 1493.473460][T11498] usb 1-1: SerialNumber: syz [ 1493.505276][ T5709] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1493.516641][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.527768][ T5709] usb 2-1: config 0 descriptor?? [ 1493.737818][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'. [ 1493.750078][T21851] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1493.760611][T21851] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4744'. [ 1493.782944][T21851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.799682][T21851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.837584][T11498] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input194 [ 1493.841932][ T4968] bcm5974 1-1:1.0: could not read from device [ 1493.861722][ T4968] bcm5974 1-1:1.0: could not read from device [ 1493.883835][ T4968] bcm5974 1-1:1.0: could not read from device [ 1493.893571][ T4968] bcm5974 1-1:1.0: could not read from device [ 1493.902232][T11498] usb 1-1: USB disconnect, device number 108 [ 1494.020110][T21853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.033502][T21853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.101895][ T5709] ath6kl: Failed to submit usb control message: -71 [ 1494.101972][ T5709] ath6kl: unable to send the bmi data to the device: -71 [ 1494.102019][ T5709] ath6kl: Unable to send get target info: -71 [ 1494.110960][ T5709] ath6kl: Failed to init ath6kl core: -71 [ 1494.149231][ T5709] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1494.174553][ T5709] usb 2-1: USB disconnect, device number 115 [ 1494.794818][ T9] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1494.969378][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1494.987170][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1494.987216][ T9] usb 1-1: config 0 has no interface number 0 [ 1495.007078][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.007126][ T9] usb 1-1: Product: syz [ 1495.007145][ T9] usb 1-1: Manufacturer: syz [ 1495.007189][ T9] usb 1-1: SerialNumber: syz [ 1495.055369][ T9] usb 1-1: config 0 descriptor?? [ 1495.118406][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 1495.127886][T21869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4751'. [ 1495.266921][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1495.434379][T11501] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1495.490329][T21839] tipc: Resetting bearer [ 1495.526591][T21839] tipc: Disabling bearer [ 1495.597583][T11501] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1495.597659][T11501] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 1495.615553][T11501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.615637][T11501] usb 2-1: Product: syz [ 1495.615690][T11501] usb 2-1: Manufacturer: syz [ 1495.615740][T11501] usb 2-1: SerialNumber: syz [ 1495.886114][ T45] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1495.895089][T21871] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1495.914687][T21884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.924962][T21884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.133962][T11501] option 2-1:4.0: GSM modem (1-port) converter detected [ 1496.150774][T11501] usb 2-1: USB disconnect, device number 116 [ 1496.158377][T11501] option 2-1:4.0: device disconnected [ 1496.506457][T21902] __nla_validate_parse: 1 callbacks suppressed [ 1496.506523][T21902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1496.544371][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4764'. [ 1497.064406][T11501] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1497.104376][T18904] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1497.215590][T11501] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1497.215678][T11501] usb 2-1: no configurations [ 1497.215695][T11501] usb 2-1: can't read configurations, error -22 [ 1497.265371][T18904] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1497.268895][T18904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1497.268970][T18904] usb 6-1: config 0 has no interface number 0 [ 1497.277575][T18904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.277648][T18904] usb 6-1: Product: syz [ 1497.277698][T18904] usb 6-1: Manufacturer: syz [ 1497.277740][T18904] usb 6-1: SerialNumber: syz [ 1497.303607][T18904] usb 6-1: config 0 descriptor?? [ 1497.364691][T11501] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1497.513222][T18904] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1497.525183][T11501] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1497.525252][T11501] usb 2-1: no configurations [ 1497.525286][T11501] usb 2-1: can't read configurations, error -22 [ 1497.527488][T11501] usb usb2-port1: attempt power cycle [ 1497.864649][T11501] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1497.887079][T11501] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1497.887144][T11501] usb 2-1: no configurations [ 1497.887159][T11501] usb 2-1: can't read configurations, error -22 [ 1497.951514][ T45] IPVS: starting estimator thread 0... [ 1498.025319][T11501] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1498.044460][T21924] IPVS: using max 32 ests per chain, 76800 per kthread [ 1498.053829][T11501] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1498.053903][T11501] usb 2-1: no configurations [ 1498.053920][T11501] usb 2-1: can't read configurations, error -22 [ 1498.055125][T11501] usb usb2-port1: unable to enumerate USB device [ 1498.113329][T21928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4775'. [ 1498.169530][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4776'. [ 1498.394789][T21936] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4778'. [ 1499.315771][T21945] tipc: Enabled bearer , priority 0 [ 1499.316570][T21945] syzkaller0: entered promiscuous mode [ 1499.316612][T21945] syzkaller0: entered allmulticast mode [ 1499.338878][T21945] tipc: Resetting bearer [ 1499.349983][T21943] tipc: Resetting bearer [ 1499.388410][T21943] tipc: Disabling bearer [ 1499.913335][T21950] netlink: 'syz.1.4784': attribute type 4 has an invalid length. [ 1500.797507][T21954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4786'. [ 1500.857029][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1501.384563][T17118] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1501.426390][T21967] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4791'. [ 1501.535525][T17118] usb 2-1: Using ep0 maxpacket: 32 [ 1501.542947][T17118] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1501.543072][T17118] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1501.561180][T17118] usb 2-1: config 1 interface 0 altsetting 51 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.561216][T17118] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1501.575367][T17118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.575450][T17118] usb 2-1: Product: syz [ 1501.575494][T17118] usb 2-1: Manufacturer: syz [ 1501.575537][T17118] usb 2-1: SerialNumber: syz [ 1501.811334][T21961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.813966][T21961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.845721][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4789'. [ 1501.856881][T21961] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1501.865724][T21961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4789'. [ 1501.875033][T21961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.879312][T21961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.903904][T17118] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input195 [ 1501.914420][ T4968] bcm5974 2-1:1.0: could not read from device [ 1501.922125][ T4968] bcm5974 2-1:1.0: could not read from device [ 1501.933539][ T4968] bcm5974 2-1:1.0: could not read from device [ 1501.941375][ T4968] bcm5974 2-1:1.0: could not read from device [ 1501.943436][T17118] usb 2-1: USB disconnect, device number 121 [ 1502.233940][T21973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.249261][T21973] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1502.249842][T21973] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1502.447659][T21975] net_ratelimit: 494 callbacks suppressed [ 1502.447726][T21975] netlink: zone id is out of range [ 1502.447742][T21975] netlink: zone id is out of range [ 1502.447755][T21975] netlink: zone id is out of range [ 1502.447764][T21975] netlink: zone id is out of range [ 1502.447774][T21975] netlink: zone id is out of range [ 1502.447783][T21975] netlink: zone id is out of range [ 1502.447838][T21975] netlink: zone id is out of range [ 1502.447872][T21975] netlink: zone id is out of range [ 1502.447902][T21975] netlink: zone id is out of range [ 1502.447931][T21975] netlink: zone id is out of range [ 1502.596567][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1502.661087][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 1502.835888][T21990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.859486][T21990] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1502.961528][T21992] syzkaller0: entered promiscuous mode [ 1502.961579][T21992] syzkaller0: entered allmulticast mode [ 1503.212238][T21996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4804'. [ 1505.054503][T17118] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1505.205445][T17118] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1505.208675][T17118] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.208749][T17118] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1505.216020][T17118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.216100][T17118] usb 2-1: Product: syz [ 1505.216142][T17118] usb 2-1: Manufacturer: syz [ 1505.216183][T17118] usb 2-1: SerialNumber: syz [ 1505.318099][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1505.739816][ T31] kauditd_printk_skb: 96 callbacks suppressed [ 1505.741196][ T31] audit: type=1326 audit(1788647181.936:18014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.756554][ T31] audit: type=1326 audit(1788647181.936:18015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.757503][ T31] audit: type=1326 audit(1788647181.956:18016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.759059][ T31] audit: type=1326 audit(1788647181.956:18017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.759674][ T31] audit: type=1326 audit(1788647181.956:18018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.761722][ T31] audit: type=1326 audit(1788647181.956:18019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.761916][ T31] audit: type=1326 audit(1788647181.956:18020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.762734][ T31] audit: type=1326 audit(1788647181.956:18021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.772008][ T31] audit: type=1326 audit(1788647181.966:18022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1505.772250][ T31] audit: type=1326 audit(1788647181.966:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6eb9e159 code=0x7ffc0000 [ 1507.831642][ T189] usb 2-1: USB disconnect, device number 122 [ 1507.877878][T22026] net_ratelimit: 1000 callbacks suppressed [ 1507.877935][T22026] netlink: zone id is out of range [ 1507.877947][T22026] netlink: zone id is out of range [ 1507.877957][T22026] netlink: zone id is out of range [ 1507.877965][T22026] netlink: zone id is out of range [ 1507.878026][T22026] netlink: zone id is out of range [ 1507.878059][T22026] netlink: zone id is out of range [ 1507.878098][T22026] netlink: zone id is out of range [ 1507.878121][T22026] netlink: zone id is out of range [ 1507.878151][T22026] netlink: zone id is out of range [ 1507.878180][T22026] netlink: zone id is out of range [ 1508.038361][T22030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1508.052244][T22030] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1508.052784][T22030] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1508.294419][T17118] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1508.376542][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4821'. [ 1508.444589][T17118] usb 2-1: Using ep0 maxpacket: 8 [ 1508.446003][T17118] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1508.450191][T17118] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.450216][T17118] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1508.459959][T17118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.460027][T17118] usb 2-1: Product: syz [ 1508.460078][T17118] usb 2-1: Manufacturer: syz [ 1508.460120][T17118] usb 2-1: SerialNumber: syz [ 1508.800420][T17118] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1508.827916][T17118] usb 2-1: USB disconnect, device number 123 [ 1508.947349][T21538] udevd[21538]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1509.099859][T22049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1509.348281][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1509.794367][ T189] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1509.958324][ T189] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 1509.971195][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.971371][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.008581][ T189] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 1510.024819][ T45] wlan1: Trigger new scan to find an IBSS to join [ 1511.380901][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4840'. [ 1511.381137][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4840'. [ 1511.419484][ T189] usb 2-1: USB disconnect, device number 124 [ 1511.511986][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4840'. [ 1511.512177][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4840'. [ 1511.700510][T22082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1511.710702][T22082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1511.719249][T22082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1511.735723][T22082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1511.743412][T22082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1511.845089][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4840'. [ 1511.845340][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4840'. [ 1512.177338][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4843'. [ 1512.362919][T22097] loop5: detected capacity change from 0 to 7 [ 1512.369682][T22097] Dev loop5: unable to read RDB block 7 [ 1512.369747][T22097] loop5: unable to read partition table [ 1512.370198][T22097] loop5: partition table beyond EOD, truncated [ 1512.370229][T22097] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1512.407598][T22097] loop3: detected capacity change from 0 to 7 [ 1512.413680][T22097] loop3: p1 p4 [ 1512.413770][T22097] loop3: partition table partially beyond EOD, truncated [ 1512.542612][T21418] udevd[21418]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1512.571886][T21398] udevd[21398]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1512.631714][T22100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1512.667443][T22100] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1512.674760][T22100] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1512.789890][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.066672][ T37] wlan1: Trigger new scan to find an IBSS to join [ 1513.136783][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.179081][T22110] syzkaller0: entered promiscuous mode [ 1513.184815][T22110] syzkaller0: entered allmulticast mode [ 1513.206191][T22110] tipc: Enabled bearer , priority 0 [ 1513.269479][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.366587][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.412367][T22085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.412814][T22085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.413263][T22085] bridge_slave_0: entered allmulticast mode [ 1513.432408][T22085] bridge_slave_0: entered promiscuous mode [ 1513.442960][T22085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.443783][T22085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.445143][T22085] bridge_slave_1: entered allmulticast mode [ 1513.450715][T22085] bridge_slave_1: entered promiscuous mode [ 1513.457730][ T5693] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1513.508357][T22085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.524757][T22085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.566842][T22085] team0: Port device team_slave_0 added [ 1513.605521][T22085] team0: Port device team_slave_1 added [ 1513.616495][ T5693] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1513.627132][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.637513][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1513.637573][ T5693] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1513.637602][ T5693] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1513.637745][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.770349][T22085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.780934][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.780996][T22085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.785068][ T5628] Bluetooth: hci4: command tx timeout [ 1513.826029][T22085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.835604][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.835674][T22085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.142778][ T45] bond0 (unregistering): Released all slaves [ 1514.203697][T22085] hsr_slave_0: entered promiscuous mode [ 1514.210817][T22085] hsr_slave_1: entered promiscuous mode [ 1514.217763][T22085] debugfs: 'hsr0' already exists in 'hsr' [ 1514.223650][T22085] Cannot create hsr debugfs directory [ 1514.230951][ T45] tipc: Left network mode [ 1514.528757][ T45] hsr_slave_0: left promiscuous mode [ 1514.537565][ T45] hsr_slave_1: left promiscuous mode [ 1514.555217][ T45] veth1_macvtap: left promiscuous mode [ 1514.561029][ T45] veth0_macvtap: left promiscuous mode [ 1514.566974][ T45] veth1_vlan: left promiscuous mode [ 1514.567055][ T45] veth0_vlan: left promiscuous mode [ 1515.003502][ T45] team0 (unregistering): Port device dummy0 removed [ 1515.035797][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1515.329503][ T45] IPVS: stop unused estimator thread 0... [ 1515.423253][T22085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1515.437134][T22085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1515.443198][T22085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1515.457575][T22085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1515.462926][T22085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1515.481851][T22085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1515.487061][T22085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1515.508102][T22085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1515.613068][T22085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1515.638025][T22085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.651887][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.652186][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.679380][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.679621][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.860812][T22085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.867234][ T5628] Bluetooth: hci4: command tx timeout [ 1515.934206][T22085] veth0_vlan: entered promiscuous mode [ 1515.969781][T22085] veth1_vlan: entered promiscuous mode [ 1516.032534][ T45] wlan1: Trigger new scan to find an IBSS to join [ 1516.082158][T22085] veth0_macvtap: entered promiscuous mode [ 1516.100367][T22085] veth1_macvtap: entered promiscuous mode [ 1516.148472][T22085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1516.171934][T22085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1516.214541][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.225030][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.226779][ T262] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.226912][ T262] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.481662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.481714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.600882][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1516.628089][ T262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.628141][ T262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.650735][ T5693] usb 2-1: USB disconnect, device number 125 [ 1516.667743][T22145] tipc: Resetting bearer [ 1516.757669][T22145] tipc: Disabling bearer [ 1516.942556][T18808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.071199][T22166] __nla_validate_parse: 3 callbacks suppressed [ 1517.079179][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1517.091267][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1517.206662][T17118] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1517.343986][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1517.344944][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1517.395957][T17118] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1517.406559][T17118] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1517.406607][T17118] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.406634][T17118] usb 2-1: config 4 has no interface number 0 [ 1517.406679][T17118] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1517.450877][T17118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.450945][T17118] usb 2-1: Product: syz [ 1517.450979][T17118] usb 2-1: Manufacturer: syz [ 1517.451001][T17118] usb 2-1: SerialNumber: syz [ 1517.719479][T17118] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1517.822587][T17118] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1517.832733][T17118] dib0700: firmware download failed at 7 with -22 [ 1517.850750][T17118] usb 2-1: USB disconnect, device number 126 [ 1517.881165][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1517.881478][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1517.944660][T22082] Bluetooth: hci4: command tx timeout [ 1518.071371][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4855'. [ 1518.319442][T22187] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4856'. [ 1518.519858][T22190] loop5: detected capacity change from 0 to 7 [ 1518.532356][T22190] Dev loop5: unable to read RDB block 7 [ 1518.532425][T22190] loop5: unable to read partition table [ 1518.532659][T22190] loop5: partition table beyond EOD, truncated [ 1518.532704][T22190] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1518.621308][T22190] loop3: detected capacity change from 0 to 7 [ 1518.634065][T22190] loop3: p1 p4 [ 1518.634129][T22190] loop3: partition table partially beyond EOD, truncated [ 1518.734511][T22192] vivid-000: disconnect [ 1518.917587][T21418] udevd[21418]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1518.929355][T21398] udevd[21398]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1518.966368][T22191] vivid-000: reconnect [ 1519.106056][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1519.480834][T22208] syzkaller0: entered promiscuous mode [ 1519.480883][T22208] syzkaller0: entered allmulticast mode [ 1519.506695][T22208] tipc: Started in network mode [ 1519.506757][T22208] tipc: Node identity 6a53aeaae127, cluster identity 4711 [ 1519.542422][T22208] tipc: Enabled bearer , priority 0 [ 1519.549529][T10809] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1519.704475][T22216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4865'. [ 1519.714390][T10809] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1519.730352][T10809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.730407][T10809] usb 2-1: Product: syz [ 1519.730452][T10809] usb 2-1: Manufacturer: syz [ 1519.730474][T10809] usb 2-1: SerialNumber: syz [ 1520.026806][T22082] Bluetooth: hci4: command tx timeout [ 1520.137424][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4866'. [ 1520.145273][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1520.193173][T10809] net_ratelimit: 495 callbacks suppressed [ 1520.193235][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1520.193314][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1520.624711][ T5693] tipc: Node number set to 2339679914 [ 1521.424964][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1521.439740][T22203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.441474][T22203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.456416][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1521.458739][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1521.458897][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1521.462274][T10809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1521.487075][T10809] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1521.509305][T10809] usb 2-1: USB disconnect, device number 127 [ 1522.229709][T22243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.253561][T22243] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1522.377541][T22245] tipc: Started in network mode [ 1522.377604][T22245] tipc: Node identity ba9df12f1894, cluster identity 4711 [ 1522.378032][T22245] tipc: Enabled bearer , priority 0 [ 1522.380061][T22245] syzkaller0: entered promiscuous mode [ 1522.380114][T22245] syzkaller0: entered allmulticast mode [ 1522.416802][T22245] tipc: Resetting bearer [ 1522.422959][T22244] tipc: Resetting bearer [ 1522.455780][T22244] tipc: Disabling bearer [ 1522.468183][T22210] tipc: Resetting bearer [ 1522.501081][T22210] tipc: Disabling bearer [ 1522.514573][T11498] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1522.684697][T11498] usb 2-1: Using ep0 maxpacket: 8 [ 1522.690518][T11498] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1522.702450][T11498] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.712897][T11498] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1522.725398][T11498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.733593][T11498] usb 2-1: Product: syz [ 1522.738058][T11498] usb 2-1: Manufacturer: syz [ 1522.743733][T11498] usb 2-1: SerialNumber: syz [ 1523.020972][T11498] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1523.037846][T11498] usb 2-1: USB disconnect, device number 2 [ 1523.069793][T21538] udevd[21538]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1523.368575][T22261] __nla_validate_parse: 1 callbacks suppressed [ 1523.368627][T22261] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4876'. [ 1523.623074][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4877'. [ 1523.733483][T22268] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4879'. [ 1523.844365][T17118] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1524.014630][T17118] usb 2-1: Using ep0 maxpacket: 8 [ 1524.022621][T17118] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1524.049913][T17118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.058674][T17118] usb 2-1: Product: syz [ 1524.058733][T17118] usb 2-1: Manufacturer: syz [ 1524.058755][T17118] usb 2-1: SerialNumber: syz [ 1524.070264][T17118] usb 2-1: config 0 descriptor?? [ 1524.089353][T17118] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1524.089434][T17118] pctv452e: pctv452e_power_ctrl: 1 [ 1524.089434][T17118] [ 1524.089578][T17118] usb 2-1: selecting invalid altsetting 3 [ 1524.089626][T17118] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1524.089626][T17118] [ 1524.089684][T17118] dvb-usb: bulk message failed: -22 (5/0) [ 1524.129674][T17118] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1524.133191][T17118] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1524.133363][T17118] usb 2-1: media controller created [ 1524.133494][T17118] dvb-usb: bulk message failed: -22 (8/0) [ 1524.137371][T17118] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1524.137559][T17118] dvb-usb: MAC address reading failed. [ 1524.198515][T17118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1524.297104][T22265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.317316][T22265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.371289][T22275] tipc: Enabled bearer , priority 0 [ 1524.386399][T22275] syzkaller0: entered promiscuous mode [ 1524.386449][T22275] syzkaller0: entered allmulticast mode [ 1524.422816][T22275] tipc: Resetting bearer [ 1524.443347][T22274] tipc: Resetting bearer [ 1524.450956][T17118] DVB: Unable to find symbol stb0899_attach() [ 1524.451005][T17118] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1524.509166][T22274] tipc: Disabling bearer [ 1524.575067][T17118] rc_core: IR keymap rc-tt-1500 not found [ 1524.575104][T17118] Registered IR keymap rc-empty [ 1524.581218][T17118] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1524.599112][T17118] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input196 [ 1524.611252][T17118] dvb-usb: schedule remote query interval to 100 msecs. [ 1524.611277][T17118] pctv452e: pctv452e_power_ctrl: 0 [ 1524.611277][T17118] [ 1524.611292][T17118] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1524.714731][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1524.716007][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1524.825639][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1524.825716][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1524.934329][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1524.934395][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.044406][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.044462][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.154810][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.154866][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.264361][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.264433][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.375456][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.375534][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.484639][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.484710][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.514602][T22291] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4887'. [ 1525.594346][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.594403][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.666013][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1525.675489][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1525.692089][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1525.700384][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1525.706437][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.706707][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.722769][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1525.817739][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.817804][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1525.923939][T11498] usb 2-1: USB disconnect, device number 3 [ 1525.925232][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1525.925317][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1526.031465][T11498] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1526.395951][T22294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.403451][T22294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.412211][T22294] bridge_slave_0: entered allmulticast mode [ 1526.420564][T22294] bridge_slave_0: entered promiscuous mode [ 1526.432787][T22294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.440308][T22294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.447798][T22294] bridge_slave_1: entered allmulticast mode [ 1526.455936][T22294] bridge_slave_1: entered promiscuous mode [ 1526.495793][T22294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.508923][T22294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.638564][T22294] team0: Port device team_slave_0 added [ 1526.650988][T22294] team0: Port device team_slave_1 added [ 1526.695999][T22294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.696047][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.696078][T22294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.706941][T22294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.706993][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.707076][T22294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.843367][T22294] hsr_slave_0: entered promiscuous mode [ 1526.851194][T22294] hsr_slave_1: entered promiscuous mode [ 1526.858403][T22294] debugfs: 'hsr0' already exists in 'hsr' [ 1526.864641][T22294] Cannot create hsr debugfs directory [ 1526.969608][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1527.334456][T22294] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1527.347206][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1527.357875][T22294] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1527.364799][T17118] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1527.375620][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1527.385294][T22294] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1527.399087][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1527.407745][T22294] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1527.422243][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1527.494981][T17118] usb 2-1: device descriptor read/64, error -71 [ 1527.553339][T22294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.589988][T22294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.609807][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.610228][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.633035][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.633379][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.740086][T17118] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1527.771099][T22294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.785042][ T5628] Bluetooth: hci0: command tx timeout [ 1527.842688][T22294] veth0_vlan: entered promiscuous mode [ 1527.872761][T22294] veth1_vlan: entered promiscuous mode [ 1527.874734][T17118] usb 2-1: device descriptor read/64, error -71 [ 1527.945570][T22294] veth0_macvtap: entered promiscuous mode [ 1527.955787][T22294] veth1_macvtap: entered promiscuous mode [ 1527.985470][T17118] usb usb2-port1: attempt power cycle [ 1527.997013][T22294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1528.015980][T22294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.055340][T18808] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.055703][T18808] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.055764][T18808] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.055808][T18808] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.280128][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.288245][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.325873][T17118] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1528.350643][T17118] usb 2-1: device descriptor read/8, error -71 [ 1528.367908][ T262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.367964][ T262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.584567][T17118] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1528.597030][T22326] tipc: Enabled bearer , priority 0 [ 1528.605307][T17118] usb 2-1: device descriptor read/8, error -71 [ 1528.613326][T22326] syzkaller0: entered promiscuous mode [ 1528.619588][T22326] syzkaller0: entered allmulticast mode [ 1528.636848][T22326] tipc: Resetting bearer [ 1528.650600][T22325] tipc: Resetting bearer [ 1528.715521][T17118] usb usb2-port1: unable to enumerate USB device [ 1528.737132][T22325] tipc: Disabling bearer [ 1528.779321][T22334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1528.974817][T11498] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1529.124358][T11498] usb 9-1: Using ep0 maxpacket: 32 [ 1529.130243][T11498] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1529.140706][T11498] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1529.140750][T11498] usb 9-1: config 0 has no interface number 0 [ 1529.141819][T11498] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1529.168017][T11498] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.176447][T11498] usb 9-1: Product: syz [ 1529.176496][T11498] usb 9-1: Manufacturer: syz [ 1529.176519][T11498] usb 9-1: SerialNumber: syz [ 1529.196968][T11498] usb 9-1: config 0 descriptor?? [ 1529.864654][ T5628] Bluetooth: hci0: command tx timeout [ 1530.874208][T11498] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1530.883715][T11498] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1530.895686][T11498] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1530.903654][T11498] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1530.918537][T11498] usb 9-1: USB disconnect, device number 2 [ 1530.931164][T21538] udevd[21538]: setting mode of /dev/bus/usb/009/002 to 020664 failed: No such file or directory [ 1530.934081][T21538] udevd[21538]: setting owner of /dev/bus/usb/009/002 to uid=0, gid=0 failed: No such file or directory [ 1531.384997][T11498] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1531.545824][T11498] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1531.557595][T11498] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1531.566108][T11498] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.566421][T11498] usb 2-1: config 4 has no interface number 0 [ 1531.577544][T11498] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1531.602373][T11498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.612776][T11498] usb 2-1: Product: syz [ 1531.612851][T11498] usb 2-1: Manufacturer: syz [ 1531.612876][T11498] usb 2-1: SerialNumber: syz [ 1531.712224][T22383] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4906'. [ 1531.809747][T22386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.830848][T22386] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1531.838750][T22386] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1531.954395][ T5628] Bluetooth: hci0: command tx timeout [ 1532.063420][T11498] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1532.075303][T11498] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1532.083746][T11498] dib0700: firmware download failed at 7 with -22 [ 1532.098780][T10809] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1532.229860][T22396] syzkaller0: entered promiscuous mode [ 1532.236549][T22396] syzkaller0: entered allmulticast mode [ 1532.250561][T22396] tipc: Enabled bearer , priority 0 [ 1532.254718][T10809] usb 9-1: Using ep0 maxpacket: 8 [ 1532.257175][T10809] usb 9-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1532.268130][T10809] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.268219][T10809] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1532.281506][T10809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.281579][T10809] usb 9-1: Product: syz [ 1532.281621][T10809] usb 9-1: Manufacturer: syz [ 1532.281662][T10809] usb 9-1: SerialNumber: syz [ 1532.626249][T10809] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1532.640336][T10809] usb 9-1: USB disconnect, device number 3 [ 1532.713642][T21538] udevd[21538]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.824644][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 1532.939445][T22414] sctp: [Deprecated]: syz.7.4912 (pid 22414) Use of int in max_burst socket option. [ 1532.939445][T22414] Use struct sctp_assoc_value instead [ 1533.245476][ T5693] tipc: Node number set to 2718560559 [ 1534.026511][T22082] Bluetooth: hci0: command tx timeout [ 1534.170811][T10809] usb 2-1: USB disconnect, device number 8 [ 1534.930821][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1534.932084][ T31] audit: type=1326 audit(1788647211.126:18029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1534.962789][ T31] audit: type=1326 audit(1788647211.156:18030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1534.962869][ T31] audit: type=1326 audit(1788647211.156:18031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1534.994007][ T31] audit: type=1326 audit(1788647211.186:18032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1535.041020][ T31] audit: type=1326 audit(1788647211.236:18033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1535.041180][ T31] audit: type=1326 audit(1788647211.236:18034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1535.043173][ T31] audit: type=1326 audit(1788647211.236:18035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1535.091428][ T31] audit: type=1326 audit(1788647211.286:18036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b5235e98e code=0x7ffc0000 [ 1535.091995][ T31] audit: type=1326 audit(1788647211.286:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b5239ddeb code=0x7ffc0000 [ 1535.092282][ T31] audit: type=1326 audit(1788647211.286:18038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.4918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b5239ddeb code=0x7ffc0000 [ 1535.258002][T22398] tipc: Resetting bearer [ 1535.290134][T22398] tipc: Disabling bearer [ 1535.384366][T22323] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1535.535461][T22323] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1535.542205][T22323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.551826][T22323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.572059][T22323] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1535.572112][T22323] usb 2-1: Manufacturer: syz [ 1535.592939][T22323] usb 2-1: config 0 descriptor?? [ 1535.714374][T11503] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1535.870573][T11503] usb 9-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 1535.883341][T11503] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.883489][T11503] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.910853][T11503] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor [ 1536.477165][T22323] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0034/input/input197 [ 1536.568773][T22323] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0034/input/input198 [ 1536.597476][T22323] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0034/input/input199 [ 1536.616942][T22323] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0034/input/input200 [ 1536.640153][T22323] uclogic 0003:256C:006D.0034: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1536.708165][ T5693] usb 2-1: USB disconnect, device number 9 [ 1536.960275][T22468] fido_id[22468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1537.303378][T11503] usb 9-1: USB disconnect, device number 4 [ 1537.775415][ T5693] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1537.937179][ T5693] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1537.948303][ T5693] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1537.948371][ T5693] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.948394][ T5693] usb 2-1: config 4 has no interface number 0 [ 1537.948526][ T5693] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1537.988838][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.988929][ T5693] usb 2-1: Product: syz [ 1537.988985][ T5693] usb 2-1: Manufacturer: syz [ 1537.989034][ T5693] usb 2-1: SerialNumber: syz [ 1538.447719][ T5693] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1538.466146][ T5693] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1538.466224][ T5693] dib0700: firmware download failed at 7 with -22 [ 1538.547756][T22481] syzkaller0: entered promiscuous mode [ 1538.547805][T22481] syzkaller0: entered allmulticast mode [ 1538.580983][T22481] tipc: Enabled bearer , priority 0 [ 1539.377726][T22497] loop5: detected capacity change from 0 to 7 [ 1539.388885][T22497] Dev loop5: unable to read RDB block 7 [ 1539.388950][T22497] loop5: unable to read partition table [ 1539.391470][T22497] loop5: partition table beyond EOD, truncated [ 1539.391553][T22497] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1539.640129][ T4983] Dev loop5: unable to read RDB block 7 [ 1539.641874][ T4983] loop5: unable to read partition table [ 1539.644610][ T4983] loop5: partition table beyond EOD, [ 1539.652992][T11503] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1539.672004][ T4983] truncated [ 1539.826432][T11503] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1539.838713][T11503] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1539.840868][T11503] usb 9-1: config 0 has no interface number 0 [ 1539.872734][T11503] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.872801][T11503] usb 9-1: Product: syz [ 1539.872833][T11503] usb 9-1: Manufacturer: syz [ 1539.872907][T11503] usb 9-1: SerialNumber: syz [ 1539.892916][T11503] usb 9-1: config 0 descriptor?? [ 1540.109932][T22497] loop3: detected capacity change from 0 to 7 [ 1540.119892][T22497] loop3: p1 p4 [ 1540.119945][T22497] loop3: partition table partially beyond EOD, truncated [ 1540.141546][T11503] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1540.165808][T11503] usb 9-1: USB disconnect, device number 5 [ 1540.221415][T21418] udevd[21418]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1540.230134][T21388] udevd[21388]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1540.398766][T11503] usb 2-1: USB disconnect, device number 10 [ 1540.460075][T22502] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4937'. [ 1540.460129][T22502] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 1540.460149][T22502] openvswitch: netlink: Message has 4 unknown bytes. [ 1540.865061][T11503] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1541.014550][T11503] usb 2-1: Using ep0 maxpacket: 32 [ 1541.020414][T11503] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1541.021226][T11503] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1541.042801][T11503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.042843][T11503] usb 2-1: Product: syz [ 1541.042861][T11503] usb 2-1: Manufacturer: syz [ 1541.042897][T11503] usb 2-1: SerialNumber: syz [ 1541.301692][T11503] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1541.302598][T11503] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1541.305155][T11503] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1541.305308][T11503] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1541.390992][T11503] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1541.409592][T11503] usb 2-1: USB disconnect, device number 11 [ 1541.456293][T21538] udevd[21538]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.549742][T22480] tipc: Resetting bearer [ 1541.598627][T22480] tipc: Disabling bearer [ 1541.924585][T11503] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1542.074389][T11503] usb 9-1: Using ep0 maxpacket: 32 [ 1542.080175][T11503] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1542.086278][T11503] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.086476][T11503] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1542.101912][T11503] usb 9-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 1542.102013][T11503] usb 9-1: Product: syz [ 1542.102057][T11503] usb 9-1: Manufacturer: syz [ 1542.102101][T11503] usb 9-1: SerialNumber: syz [ 1542.141420][T11503] appletouch 9-1:1.0: Could not find int-in endpoint [ 1542.141492][T11503] appletouch 9-1:1.0: probe with driver appletouch failed with error -5 [ 1542.145752][T11503] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 1542.345164][T11503] usb 9-1: USB disconnect, device number 6 [ 1543.404325][T11503] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1543.558637][T11503] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1543.568298][T11503] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 20 [ 1543.568364][T11503] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1543.577070][T11503] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.577152][T11503] usb 9-1: Product: syz [ 1543.577203][T11503] usb 9-1: Manufacturer: syz [ 1543.577435][T11503] usb 9-1: SerialNumber: syz [ 1543.597295][T22527] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1543.613606][T11503] hub 9-1:1.0: bad descriptor, ignoring hub [ 1543.613690][T11503] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1543.805029][T11503] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1543.966771][T22538] syzkaller0: entered promiscuous mode [ 1543.966825][T22538] syzkaller0: entered allmulticast mode [ 1543.984436][T22538] tipc: Enabled bearer , priority 0 [ 1544.096764][T17118] usb 9-1: USB disconnect, device number 7 [ 1544.107709][T17118] usblp0: removed [ 1544.224402][T22323] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1544.385343][T22323] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1544.392393][T22323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.392545][T22323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1544.392623][T22323] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1544.392696][T22323] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.392808][T22323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.611166][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1544.622147][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1544.636903][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1544.650045][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1544.658534][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1545.510335][T22542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.518122][T22542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.525867][T22542] bridge_slave_0: entered allmulticast mode [ 1545.534362][T22542] bridge_slave_0: entered promiscuous mode [ 1545.543860][T22542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.551524][T22542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.559548][T22542] bridge_slave_1: entered allmulticast mode [ 1545.567984][T22542] bridge_slave_1: entered promiscuous mode [ 1545.611533][T22542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.628339][T22542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.669795][T22542] team0: Port device team_slave_0 added [ 1545.681304][T22542] team0: Port device team_slave_1 added [ 1545.718959][T22542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.726580][T22542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.752833][T22542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.765963][T22542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.773028][T22542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.800085][T22542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.861590][T22542] hsr_slave_0: entered promiscuous mode [ 1545.868689][T22542] hsr_slave_1: entered promiscuous mode [ 1545.875330][T22542] debugfs: 'hsr0' already exists in 'hsr' [ 1545.881339][T22542] Cannot create hsr debugfs directory [ 1546.110521][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.110600][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.132150][ T9] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1546.132265][ T9] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1546.142164][T11500] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1546.142368][T11500] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1546.157526][T18904] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1546.157739][T18904] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1546.211623][ T9] usb 1-1: USB disconnect, device number 109 [ 1546.271313][T11499] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1546.271472][T11499] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1546.355361][T18904] usb 6-1: USB disconnect, device number 107 [ 1546.357222][T11499] usb 7-1: USB disconnect, device number 13 [ 1546.582665][T11500] usb 5-1: USB disconnect, device number 116 [ 1546.698898][T22542] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1546.718399][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1546.726670][T22542] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1546.734534][T18904] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1546.748789][ T5628] Bluetooth: hci6: command tx timeout [ 1546.758629][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1546.777320][T22542] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1546.800821][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1546.811742][T22542] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1546.830450][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1546.897042][T18904] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1546.906728][T18904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.924656][T18904] usb 6-1: config 0 descriptor?? [ 1547.015455][T22542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.129910][T22542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.187381][ T253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.187567][ T253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.255471][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.255712][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1547.540270][ T9] usb 2-1: USB disconnect, device number 12 [ 1547.566143][T18904] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1547.567448][T18904] [drm:udl_init] *ERROR* Selecting channel failed [ 1547.743586][T18904] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1547.743658][T18904] [drm] Initialized udl on minor 1 [ 1547.749115][T18904] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1547.750319][T18904] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1547.751100][T11499] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1547.808402][T18904] usb 6-1: USB disconnect, device number 108 [ 1547.840513][T11499] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1547.841059][T11499] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1547.896161][T22563] tipc: Resetting bearer [ 1547.945666][T22563] tipc: Disabling bearer [ 1548.257060][T22589] loop5: detected capacity change from 0 to 7 [ 1548.269140][T22589] Dev loop5: unable to read RDB block 7 [ 1548.278862][T22589] loop5: unable to read partition table [ 1548.286327][T22589] loop5: partition table beyond EOD, truncated [ 1548.292864][T22589] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1548.314388][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1548.346424][T22542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.358781][T22591] tipc: Enabled bearer , priority 0 [ 1548.396460][T22591] syzkaller0: entered promiscuous mode [ 1548.396501][T22591] syzkaller0: entered allmulticast mode [ 1548.409274][T22591] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1548.452025][T22591] tipc: Resetting bearer [ 1548.476514][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1548.478070][ T9] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1548.481008][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.495021][ T9] usb 2-1: config 0 descriptor?? [ 1548.512138][ T9] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1548.538771][T22590] tipc: Resetting bearer [ 1548.545324][T22323] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1548.577159][T22590] tipc: Disabling bearer [ 1548.677443][T22542] veth0_vlan: entered promiscuous mode [ 1548.692878][T22542] veth1_vlan: entered promiscuous mode [ 1548.707069][T22323] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1548.720111][T22323] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1548.720175][T22323] usb 9-1: config 0 has no interface number 0 [ 1548.735190][ T4983] Dev loop5: unable to read RDB block 7 [ 1548.735234][ T4983] loop5: unable to read partition table [ 1548.735465][ T4983] loop5: partition table beyond EOD, truncated [ 1548.767300][T22323] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.767352][T22323] usb 9-1: Product: syz [ 1548.767386][T22323] usb 9-1: Manufacturer: syz [ 1548.767431][T22323] usb 9-1: SerialNumber: syz [ 1548.776684][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1548.810638][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1548.818120][ T9] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1548.818272][ T9] usb 2-1: media controller created [ 1548.829164][ T5628] Bluetooth: hci6: command tx timeout [ 1548.843295][T22323] usb 9-1: config 0 descriptor?? [ 1548.910476][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1548.921152][T22542] veth0_macvtap: entered promiscuous mode [ 1548.960129][T22542] veth1_macvtap: entered promiscuous mode [ 1549.070828][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 1549.070870][ T9] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1549.079502][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1549.079623][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1549.232758][T22599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.241562][T22599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.299724][T22599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.319477][ T4983] Dev loop5: unable to read RDB block 7 [ 1549.319574][ T4983] loop5: unable to read partition table [ 1549.320450][ T4983] loop5: partition table beyond EOD, truncated [ 1549.323861][T22599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.413175][T22589] loop3: detected capacity change from 0 to 7 [ 1549.481913][T22589] loop3: p1 p4 [ 1549.481993][T22589] loop3: partition table partially beyond EOD, truncated [ 1549.623922][T22603] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1549.632907][T22603] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1549.642641][T22602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1549.678249][ T12] bridge_slave_1: left allmulticast mode [ 1549.678319][ T12] bridge_slave_1: left promiscuous mode [ 1549.679137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.714670][T21535] udevd[21535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1549.767562][T21537] udevd[21537]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1549.793688][T22323] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1549.802692][ T12] bridge_slave_0: left allmulticast mode [ 1549.802749][ T12] bridge_slave_0: left promiscuous mode [ 1549.802979][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.853100][T22323] usb 9-1: USB disconnect, device number 8 [ 1549.885688][T11499] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1550.044308][T11499] usb 6-1: Using ep0 maxpacket: 8 [ 1550.050091][T11499] usb 6-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1550.060458][T11499] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.070775][T11499] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1550.089428][T11499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.097674][T11499] usb 6-1: Product: syz [ 1550.101977][T11499] usb 6-1: Manufacturer: syz [ 1550.102035][T11499] usb 6-1: SerialNumber: syz [ 1550.334120][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.365832][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.384100][ T12] bond0 (unregistering): Released all slaves [ 1550.411123][ T12] bond1 (unregistering): Released all slaves [ 1550.450813][T11499] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1550.478772][T11499] usb 6-1: USB disconnect, device number 109 [ 1550.685010][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.713632][T22542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.741666][ T12] tipc: Left network mode [ 1550.867925][T22542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.906366][ T5628] Bluetooth: hci6: command tx timeout [ 1551.017527][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.018733][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.029821][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.029870][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.150903][T18904] usb 2-1: USB disconnect, device number 13 [ 1551.363288][T18904] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1551.460130][ T12] hsr_slave_0: left promiscuous mode [ 1551.481336][ T12] hsr_slave_1: left promiscuous mode [ 1551.490295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.500125][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.185217][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1552.217653][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1552.371218][ T12] team0 (unregistering): Port device dummy0 removed [ 1552.427555][T22638] syzkaller0: entered promiscuous mode [ 1552.427610][T22638] syzkaller0: entered allmulticast mode [ 1552.463755][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1552.470573][T22639] tipc: Enabled bearer , priority 0 [ 1552.630240][T22323] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1552.787703][ T262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.787744][ T262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.807061][T22323] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1552.808315][T22323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.808377][T22323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1552.808402][T22323] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1552.808428][T22323] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.808468][T22323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.995025][ T5628] Bluetooth: hci6: command tx timeout [ 1553.058040][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.058115][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.106146][ T12] IPVS: stop unused estimator thread 0... [ 1553.423995][T22660] netlink: 190972 bytes leftover after parsing attributes in process `syz.9.4952'. [ 1553.424047][T22660] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 1553.432024][T22660] openvswitch: netlink: Message has 4 unknown bytes. [ 1553.657324][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.856341][T11503] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1554.044667][T11503] usb 10-1: Using ep0 maxpacket: 32 [ 1554.066553][T11503] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1554.066627][T11503] usb 10-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1554.100283][T11503] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.101475][T11503] usb 10-1: Product: syz [ 1554.101528][T11503] usb 10-1: Manufacturer: syz [ 1554.101548][T11503] usb 10-1: SerialNumber: syz [ 1554.189225][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.263634][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1554.368725][T11503] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1554.379122][T11503] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1554.390004][T11503] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1554.405526][T11503] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1554.442866][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.509289][T11503] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1554.553352][T11503] usb 10-1: USB disconnect, device number 2 [ 1554.649783][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1554.760888][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.126010][T22682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1555.299528][T22686] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1555.309689][ T12] bridge_slave_1: left allmulticast mode [ 1555.310881][T22686] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1555.323210][ T12] bridge_slave_1: left promiscuous mode [ 1555.323449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.366665][ T12] bridge_slave_0: left allmulticast mode [ 1555.374144][ T12] bridge_slave_0: left promiscuous mode [ 1555.383425][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.596692][T22159] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1555.755998][T22159] usb 6-1: Using ep0 maxpacket: 8 [ 1555.766587][T22159] usb 6-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1555.781698][T22159] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.781728][T22159] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1555.806187][T22159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.806240][T22159] usb 6-1: Product: syz [ 1555.806259][T22159] usb 6-1: Manufacturer: syz [ 1555.806308][T22159] usb 6-1: SerialNumber: syz [ 1555.957852][T11499] usb 2-1: USB disconnect, device number 14 [ 1556.072881][T22695] sctp: [Deprecated]: syz.9.4981 (pid 22695) Use of int in max_burst socket option. [ 1556.072881][T22695] Use struct sctp_assoc_value instead [ 1556.272246][T22159] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1556.310617][T22159] usb 6-1: USB disconnect, device number 110 [ 1556.350627][T18904] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1556.384792][ T9] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1556.411316][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.467909][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.481680][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.492217][ T12] bond0 (unregistering): Released all slaves [ 1556.502831][T22639] tipc: Resetting bearer [ 1556.509972][T18904] usb 9-1: not running at top speed; connect to a high speed hub [ 1556.510034][T18904] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1556.528812][T18904] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.528910][T18904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.548604][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1556.597626][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.597674][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1556.609090][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.609176][ T9] usb 10-1: Product: syz [ 1556.609219][ T9] usb 10-1: Manufacturer: syz [ 1556.609263][ T9] usb 10-1: SerialNumber: syz [ 1556.660942][T18904] uvcvideo 9-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1556.671810][T18904] uvcvideo 9-1:1.0: Found UVC 1.00 device (046d:0825) [ 1556.671911][T18904] uvcvideo 9-1:1.1: No supported video formats found. [ 1556.671933][T18904] uvcvideo 9-1:1.1: Failed to initialize the device (-22). [ 1556.672581][T18904] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -22 [ 1556.716205][ T9] usb 10-1: 0:2 : does not exist [ 1556.725426][T22639] tipc: Disabling bearer [ 1556.799108][ T12] tipc: Left network mode [ 1556.835128][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1556.899846][ T9] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1557.107715][ T9] usb 10-1: USB disconnect, device number 3 [ 1557.210375][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.261515][T17118] usb 9-1: USB disconnect, device number 9 [ 1557.502491][ T12] hsr_slave_0: left promiscuous mode [ 1557.513465][ T12] hsr_slave_1: left promiscuous mode [ 1557.514499][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.514522][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.537442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1557.537487][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1557.584405][ T12] veth1_macvtap: left promiscuous mode [ 1557.590328][ T12] veth0_macvtap: left promiscuous mode [ 1557.590490][ T12] veth1_vlan: left allmulticast mode [ 1557.590691][ T12] veth1_vlan: left promiscuous mode [ 1557.590754][ T12] veth0_vlan: left promiscuous mode [ 1558.138227][T22731] loop5: detected capacity change from 0 to 7 [ 1558.165856][T22731] Dev loop5: unable to read RDB block 7 [ 1558.165932][T22731] loop5: unable to read partition table [ 1558.166154][T22731] loop5: partition table beyond EOD, truncated [ 1558.166199][T22731] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1558.474356][T17118] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1558.624802][T17118] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1558.628400][T17118] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1558.628503][T17118] usb 9-1: config 0 has no interface number 0 [ 1558.634613][T17118] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.634634][T17118] usb 9-1: Product: syz [ 1558.634646][T17118] usb 9-1: Manufacturer: syz [ 1558.634657][T17118] usb 9-1: SerialNumber: syz [ 1558.672524][T17118] usb 9-1: config 0 descriptor?? [ 1558.915035][T22731] loop3: detected capacity change from 0 to 7 [ 1558.922466][T22731] loop3: p1 p4 [ 1558.922552][T22731] loop3: partition table partially beyond EOD, truncated [ 1558.997665][T17118] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1559.037628][T17118] usb 9-1: USB disconnect, device number 10 [ 1559.163913][T21537] udevd[21537]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1559.209536][T22746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1559.211968][T21535] udevd[21535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1559.298500][T22746] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1559.313144][T22746] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1559.337643][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1559.372575][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1559.550022][ T12] team0 (unregistering): Port device dummy0 removed [ 1559.584313][T11500] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1559.615054][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1559.755927][T11500] usb 10-1: Using ep0 maxpacket: 8 [ 1559.765151][T11500] usb 10-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1559.766367][T11500] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.766415][T11500] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1559.830671][T11500] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.830723][T11500] usb 10-1: Product: syz [ 1559.830756][T11500] usb 10-1: Manufacturer: syz [ 1559.830776][T11500] usb 10-1: SerialNumber: syz [ 1559.888492][T22750] syzkaller0: entered promiscuous mode [ 1559.894975][T22750] syzkaller0: entered allmulticast mode [ 1559.904056][T22750] tipc: Started in network mode [ 1559.909254][T22750] tipc: Node identity 36f63819b3a6, cluster identity 4711 [ 1559.921565][T22750] tipc: Enabled bearer , priority 0 [ 1560.137898][ T31] kauditd_printk_skb: 92 callbacks suppressed [ 1560.137944][ T31] audit: type=1326 audit(1788647236.326:18131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.137993][ T31] audit: type=1326 audit(1788647236.326:18132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.142859][ T31] audit: type=1326 audit(1788647236.326:18133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.142924][ T31] audit: type=1326 audit(1788647236.326:18134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.143994][ T31] audit: type=1326 audit(1788647236.326:18135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.149469][ T31] audit: type=1326 audit(1788647236.326:18136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.149526][ T31] audit: type=1326 audit(1788647236.326:18137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.178812][ T31] audit: type=1326 audit(1788647236.356:18138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.179003][ T31] audit: type=1326 audit(1788647236.356:18139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.179125][ T31] audit: type=1326 audit(1788647236.356:18140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.1.4996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5239e159 code=0x7ffc0000 [ 1560.185967][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1560.422134][ T9] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1560.435348][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.435426][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1560.435456][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1560.435486][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.435534][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.480653][ T12] IPVS: stop unused estimator thread 0... [ 1560.638092][T11500] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1560.654987][T11503] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1560.677729][T11500] usb 10-1: USB disconnect, device number 4 [ 1560.810263][T11503] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1560.812395][T11503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.812478][T11503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.828253][T11503] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1560.828352][T11503] usb 2-1: Manufacturer: syz [ 1560.877622][T11503] usb 2-1: config 0 descriptor?? [ 1560.914804][T17118] tipc: Node number set to 2236626969 [ 1560.970030][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.156691][T22770] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1561.167789][T22770] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1561.177184][T22770] bond1 (unregistering): Released all slaves [ 1561.184506][T17118] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1561.335932][T17118] usb 10-1: not running at top speed; connect to a high speed hub [ 1561.335989][T17118] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1561.357132][T17118] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.357228][T17118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.389937][T17118] uvcvideo 10-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1561.399581][T17118] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 1561.407565][T17118] uvcvideo 10-1:1.1: No supported video formats found. [ 1561.414707][T17118] uvcvideo 10-1:1.1: Failed to initialize the device (-22). [ 1561.425068][T17118] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -22 [ 1561.689054][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1561.808948][T11503] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input201 [ 1561.915361][T11503] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input202 [ 1561.957376][T11503] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input203 [ 1562.015378][T11503] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input204 [ 1562.083313][T11503] uclogic 0003:256C:006D.0035: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1562.397584][T17118] usb 2-1: USB disconnect, device number 15 [ 1562.789855][ T9] usb 10-1: USB disconnect, device number 5 [ 1563.644449][T11504] usb 9-1: USB disconnect, device number 11 [ 1563.697471][T22794] tipc: Resetting bearer [ 1563.890470][T22794] tipc: Disabling bearer [ 1564.031067][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1564.467205][T11504] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1564.627600][T11504] usb 9-1: Using ep0 maxpacket: 8 [ 1564.636763][T11504] usb 9-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1564.649086][T11504] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.676040][T11504] usb 9-1: config 0 descriptor?? [ 1564.707926][T11504] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1564.919146][T11504] dvb-usb: bulk message failed: -22 (1/0) [ 1564.950015][T11504] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1564.955324][T11504] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1564.955489][T11504] usb 9-1: media controller created [ 1565.077360][T11504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1565.339359][T11504] DVB: Unable to find symbol lgdt330x_attach() [ 1565.339401][T11504] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1565.352082][T11504] dvb-usb: bulk message failed: -22 (1/0) [ 1565.352160][T11504] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1566.185801][T17118] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1566.203356][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1566.357197][T17118] usb 6-1: Using ep0 maxpacket: 8 [ 1566.362992][T17118] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1566.381422][T17118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.381467][T17118] usb 6-1: Product: syz [ 1566.381500][T17118] usb 6-1: Manufacturer: syz [ 1566.381520][T17118] usb 6-1: SerialNumber: syz [ 1566.410057][T17118] usb 6-1: config 0 descriptor?? [ 1566.425363][T17118] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1566.425422][T17118] pctv452e: pctv452e_power_ctrl: 1 [ 1566.425422][T17118] [ 1566.425471][T17118] usb 6-1: selecting invalid altsetting 3 [ 1566.425489][T17118] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1566.425489][T17118] [ 1566.425508][T17118] dvb-usb: bulk message failed: -22 (5/0) [ 1566.475320][T17118] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1566.485474][T17118] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1566.485554][T17118] usb 6-1: media controller created [ 1566.502547][T17118] dvb-usb: bulk message failed: -22 (8/0) [ 1566.502590][T17118] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1566.502717][T17118] dvb-usb: MAC address reading failed. [ 1566.536137][T17118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1566.629520][T22859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.640045][T22859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.807295][T17118] DVB: Unable to find symbol stb0899_attach() [ 1566.817325][T17118] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1566.904959][T17118] rc_core: IR keymap rc-tt-1500 not found [ 1566.910834][T17118] Registered IR keymap rc-empty [ 1566.922658][T17118] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1566.936912][T17118] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input205 [ 1566.951068][T17118] dvb-usb: schedule remote query interval to 100 msecs. [ 1566.958353][T17118] pctv452e: pctv452e_power_ctrl: 0 [ 1566.958353][T17118] [ 1566.965789][T17118] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1567.065804][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1567.071874][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1567.162775][T11503] usb 9-1: USB disconnect, device number 12 [ 1567.178494][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1567.178589][ T9] dvb-usb: error -22 while querying for an remote control event. [ 1567.284367][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1567.284426][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1567.324703][T11503] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1567.394366][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1567.394426][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1567.514319][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1567.514385][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1567.634591][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1567.634856][ T9] dvb-usb: error -22 while querying for an remote control event. [ 1567.669104][T22888] tipc: Enabled bearer , priority 0 [ 1567.676870][T22888] syzkaller0: entered promiscuous mode [ 1567.676910][T22888] syzkaller0: entered allmulticast mode [ 1567.693014][T22888] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1567.751369][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1567.751424][ T9] dvb-usb: error -22 while querying for an remote control event. [ 1567.854367][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1567.854432][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1567.975308][T17118] dvb-usb: bulk message failed: -22 (4/0) [ 1567.977423][T17118] dvb-usb: error -22 while querying for an remote control event. [ 1568.067668][T17118] usb 6-1: USB disconnect, device number 111 [ 1568.197930][T22894] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5018'. [ 1568.292167][T22890] tipc: Resetting bearer [ 1568.357710][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1568.429635][T17118] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1568.555269][T22887] tipc: Resetting bearer [ 1568.700473][T22887] tipc: Disabling bearer [ 1569.004915][T22910] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1569.324809][T11503] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1569.366109][T22159] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1569.476597][T11503] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1569.495528][T11503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.503769][T11503] usb 2-1: Product: syz [ 1569.503790][T11503] usb 2-1: Manufacturer: syz [ 1569.503805][T11503] usb 2-1: SerialNumber: syz [ 1569.546468][T22159] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1569.550371][T22159] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.550444][T22159] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1569.591874][T22159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.591926][T22159] usb 9-1: Product: syz [ 1569.591958][T22159] usb 9-1: Manufacturer: syz [ 1569.592018][T22159] usb 9-1: SerialNumber: syz [ 1569.656285][T22159] usb 9-1: 0:2 : does not exist [ 1569.861272][T22159] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1569.999143][T11503] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1569.999230][T11503] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1570.062252][T22159] usb 9-1: USB disconnect, device number 13 [ 1570.165936][T21537] udevd[21537]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1570.766085][T11503] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1570.780550][T11503] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1570.791104][T11503] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1570.808063][T11503] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1570.842123][T11503] usb 2-1: USB disconnect, device number 16 [ 1570.964330][T11504] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1571.126128][T11504] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1571.137301][T11504] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1571.137335][T11504] usb 9-1: config 0 has no interface number 0 [ 1571.158415][T11504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.168055][T11504] usb 9-1: Product: syz [ 1571.168094][T11504] usb 9-1: Manufacturer: syz [ 1571.168109][T11504] usb 9-1: SerialNumber: syz [ 1571.188430][T11504] usb 9-1: config 0 descriptor?? [ 1571.292681][T22948] netlink: 'syz.9.5031': attribute type 10 has an invalid length. [ 1571.340132][T22948] team0: Port device dummy0 added [ 1571.396044][T22950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5032'. [ 1571.508991][T22942] loop3: detected capacity change from 0 to 7 [ 1571.520375][T22942] loop3: p1 p4 [ 1571.525270][T22942] loop3: partition table partially beyond EOD, truncated [ 1571.599964][T11504] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1571.630062][T11504] usb 9-1: USB disconnect, device number 14 [ 1571.802168][T21537] udevd[21537]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1571.820153][T21535] udevd[21535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1572.373221][T22971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1572.448472][T22971] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002 [ 1572.457894][T22971] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1572.610375][T22974] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1572.727863][ T5680] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1572.850997][T22982] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5042'. [ 1572.894505][ T5680] usb 9-1: Using ep0 maxpacket: 8 [ 1572.900502][ T5680] usb 9-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1572.909341][ T5680] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.909409][ T5680] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1572.958779][ T5680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.958847][ T5680] usb 9-1: Product: syz [ 1572.958865][ T5680] usb 9-1: Manufacturer: syz [ 1572.958882][ T5680] usb 9-1: SerialNumber: syz [ 1573.005792][ T9] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1573.109948][T22986] netlink: 'syz.1.5044': attribute type 10 has an invalid length. [ 1573.183177][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1573.198661][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.198750][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1573.218488][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.218639][ T9] usb 6-1: Product: syz [ 1573.218681][ T9] usb 6-1: Manufacturer: syz [ 1573.218725][ T9] usb 6-1: SerialNumber: syz [ 1573.276688][ T9] usb 6-1: 0:2 : does not exist [ 1573.437618][T22992] tipc: Enabled bearer , priority 0 [ 1573.446126][T22992] syzkaller0: entered promiscuous mode [ 1573.446197][T22992] syzkaller0: entered allmulticast mode [ 1573.471327][T22991] netlink: 10184 bytes leftover after parsing attributes in process `syz.7.5046'. [ 1573.471385][T22991] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5046'. [ 1573.478013][T22992] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1573.493678][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1573.597936][ T9] usb 6-1: USB disconnect, device number 112 [ 1573.638020][T22992] tipc: Resetting bearer [ 1573.648064][T22988] tipc: Resetting bearer [ 1573.713468][T21537] udevd[21537]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1573.777378][T22988] tipc: Disabling bearer [ 1573.822933][ T5680] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1573.848384][ T5680] usb 9-1: USB disconnect, device number 15 [ 1573.952279][T21535] udevd[21535]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.006483][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5047'. [ 1574.413378][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5053'. [ 1574.702740][T23032] netlink: 'syz.9.5055': attribute type 10 has an invalid length. [ 1575.044578][ T5680] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1575.098737][T23040] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1575.244344][ T5680] usb 9-1: device descriptor read/64, error -71 [ 1575.366435][T11504] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1575.484377][ T5680] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1575.612623][T11504] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1575.620096][T11504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.636757][ T5680] usb 9-1: device descriptor read/64, error -71 [ 1575.656642][T11504] usb 6-1: config 0 descriptor?? [ 1575.744761][ T5680] usb usb9-port1: attempt power cycle [ 1576.118524][T23042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.121252][T23042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.163017][T11504] ath6kl: Failed to submit usb control message: -71 [ 1576.163167][T11504] ath6kl: unable to send the bmi data to the device: -71 [ 1576.163301][T11504] ath6kl: Unable to send get target info: -71 [ 1576.177973][T11504] ath6kl: Failed to init ath6kl core: -71 [ 1576.205709][ T5680] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1576.218940][T11504] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1576.228383][ T5680] usb 9-1: device descriptor read/8, error -71 [ 1576.257023][T11504] usb 6-1: USB disconnect, device number 113 [ 1576.474374][ T5680] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1576.494945][ T5680] usb 9-1: device descriptor read/8, error -71 [ 1576.605703][ T5680] usb usb9-port1: unable to enumerate USB device [ 1576.661567][T23061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5062'. [ 1576.927868][T23069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5066'. [ 1577.038144][T23071] netlink: 'syz.1.5067': attribute type 10 has an invalid length. [ 1577.162049][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5069'. [ 1577.705055][ T5680] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1577.857216][ T5680] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1577.878151][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.897747][ T5680] usb 2-1: config 0 descriptor?? [ 1578.373831][ T5680] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1578.375640][ T5680] [drm:udl_init] *ERROR* Selecting channel failed [ 1578.432428][ T5680] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1578.432483][ T5680] [drm] Initialized udl on minor 1 [ 1578.450693][ T5680] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1578.486118][ T5680] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1578.507381][T10809] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1578.512322][ T5680] usb 2-1: USB disconnect, device number 17 [ 1578.531947][T10809] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1578.532465][T10809] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1578.949724][T23106] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5074'. [ 1579.280676][T23118] netlink: 'syz.5.5079': attribute type 10 has an invalid length. [ 1579.304964][ T5693] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1579.468454][ T5693] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1579.477241][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.493723][ T5693] usb 2-1: config 0 descriptor?? [ 1579.938106][T23110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.948634][ T5680] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1579.961041][T23110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.990829][ T5693] ath6kl: Failed to submit usb control message: -71 [ 1579.990906][ T5693] ath6kl: unable to send the bmi data to the device: -71 [ 1579.990966][ T5693] ath6kl: Unable to send get target info: -71 [ 1579.995284][ T5693] ath6kl: Failed to init ath6kl core: -71 [ 1579.999284][ T5693] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1580.064578][ T5693] usb 2-1: USB disconnect, device number 18 [ 1580.115843][ T5680] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1580.128501][ T5680] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1580.136770][ T5680] usb 6-1: Product: syz [ 1580.136792][ T5680] usb 6-1: SerialNumber: syz [ 1580.149091][ T5680] usb 6-1: config 0 descriptor?? [ 1580.389223][ T5680] usb 6-1: USB disconnect, device number 114 [ 1580.994853][T11499] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1581.144441][T11499] usb 2-1: Using ep0 maxpacket: 32 [ 1581.146522][T11499] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1581.151719][T11499] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1581.151778][T11499] usb 2-1: config 0 has no interface number 0 [ 1581.151900][T11499] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1581.172600][T11499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.172674][T11499] usb 2-1: Product: syz [ 1581.172716][T11499] usb 2-1: Manufacturer: syz [ 1581.172751][T11499] usb 2-1: SerialNumber: syz [ 1581.211326][T11499] usb 2-1: config 0 descriptor?? [ 1581.349703][T11504] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1581.460255][T23159] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5088'. [ 1581.508378][T11504] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1581.518966][T11504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.541495][T11504] usb 6-1: config 0 descriptor?? [ 1581.794101][T23169] netlink: 'syz.9.5091': attribute type 10 has an invalid length. [ 1581.914872][ T189] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1581.981749][T11504] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1581.989394][T11504] [drm:udl_init] *ERROR* Selecting channel failed [ 1582.060808][T11504] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1582.060856][T11504] [drm] Initialized udl on minor 1 [ 1582.075105][ T189] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1582.094818][ T189] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1582.094865][ T189] usb 9-1: config 0 has no interface number 0 [ 1582.110519][T11504] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1582.112059][T11504] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1582.127478][ T189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.127524][ T189] usb 9-1: Product: syz [ 1582.127558][ T189] usb 9-1: Manufacturer: syz [ 1582.127579][ T189] usb 9-1: SerialNumber: syz [ 1582.144863][ T5693] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1582.162972][ T5693] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1582.163264][ T5693] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1582.180995][T11504] usb 6-1: USB disconnect, device number 115 [ 1582.215491][ T189] usb 9-1: config 0 descriptor?? [ 1582.229107][ T31] kauditd_printk_skb: 73 callbacks suppressed [ 1582.229156][ T31] audit: type=1326 audit(1788647258.426:18214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.229344][ T31] audit: type=1326 audit(1788647258.426:18215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.267001][ T31] audit: type=1326 audit(1788647258.436:18216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.267232][ T31] audit: type=1326 audit(1788647258.436:18217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.276542][ T31] audit: type=1326 audit(1788647258.436:18218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.276755][ T31] audit: type=1326 audit(1788647258.456:18219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.392339][ T31] audit: type=1326 audit(1788647258.586:18220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.392421][ T31] audit: type=1326 audit(1788647258.586:18221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.457580][ T31] audit: type=1326 audit(1788647258.656:18222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.485797][ T31] audit: type=1326 audit(1788647258.686:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.7.5094" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa59e159 code=0x7ffc0000 [ 1582.513201][ T189] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1582.529059][ T189] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1582.542658][ T189] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1582.542766][ T189] usb 9-1: media controller created [ 1582.587801][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.841806][T11499] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1582.841885][T11499] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1582.841924][T11499] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1582.842007][T11499] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1582.897401][T11499] usb 2-1: USB disconnect, device number 19 [ 1582.967924][T23189] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5096'. [ 1583.164401][T11504] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1583.329184][T11504] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1583.341952][T11504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.356563][T11499] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1583.368231][T11504] usb 6-1: config 0 descriptor?? [ 1583.510830][T11499] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1583.522512][T11499] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.538184][T11499] usb 10-1: config 0 descriptor?? [ 1583.642741][T23205] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 1583.642789][T23205] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1583.678733][T23205] bond3 (unregistering): Released all slaves [ 1583.708146][ T189] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1583.811281][ T189] usb 9-1: USB disconnect, device number 20 [ 1583.884000][T23186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.897751][T23186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.919999][T11504] ath6kl: Failed to submit usb control message: -71 [ 1583.920167][T11504] ath6kl: unable to send the bmi data to the device: -71 [ 1583.920310][T11504] ath6kl: Unable to send get target info: -71 [ 1583.935005][T11504] ath6kl: Failed to init ath6kl core: -71 [ 1583.966124][T11504] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1583.993998][T11504] usb 6-1: USB disconnect, device number 116 [ 1584.262010][T11499] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1584.269172][T11499] [drm:udl_init] *ERROR* Selecting channel failed [ 1584.317284][T11499] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1584.323128][T11499] [drm] Initialized udl on minor 1 [ 1584.356065][T11499] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1584.362542][T11499] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1584.383871][T11499] usb 10-1: USB disconnect, device number 6 [ 1584.423523][T11504] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1584.486365][T11504] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1584.540432][T23221] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5100'. [ 1584.834726][T23232] netlink: 'syz.8.5102': attribute type 10 has an invalid length. [ 1584.874784][T23232] team0: Port device dummy0 added [ 1585.454492][ T5680] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1585.615634][ T5680] usb 10-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 1585.627139][ T5680] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.627254][ T5680] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.671112][ T5680] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor [ 1585.805768][T23250] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5107'. [ 1586.244431][T22159] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1586.407404][T22159] usb 9-1: Using ep0 maxpacket: 32 [ 1586.413908][T22159] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1586.428788][T22159] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1586.428861][T22159] usb 9-1: config 0 has no interface number 0 [ 1586.428923][T22159] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1586.463117][T22159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.463173][T22159] usb 9-1: Product: syz [ 1586.463227][T22159] usb 9-1: Manufacturer: syz [ 1586.463249][T22159] usb 9-1: SerialNumber: syz [ 1586.496289][T22159] usb 9-1: config 0 descriptor?? [ 1586.514604][T11498] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1586.665265][T11498] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1586.676689][T11498] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1586.676742][T11498] usb 6-1: config 0 has no interface number 0 [ 1586.709419][T11498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.709477][T11498] usb 6-1: Product: syz [ 1586.709495][T11498] usb 6-1: Manufacturer: syz [ 1586.709512][T11498] usb 6-1: SerialNumber: syz [ 1586.737349][T11498] usb 6-1: config 0 descriptor?? [ 1586.978560][T11498] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1586.993972][T11498] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1587.001306][T11498] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1587.001461][T11498] usb 6-1: media controller created [ 1587.044050][T11498] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1587.089004][ T5680] usb 10-1: USB disconnect, device number 7 [ 1588.060082][T22159] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1588.069498][T22159] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1588.069559][T22159] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1588.069666][T22159] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1588.109615][T22159] usb 9-1: USB disconnect, device number 21 [ 1588.185824][T11498] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1588.411399][T11498] usb 6-1: USB disconnect, device number 117 [ 1588.684419][T11503] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1588.850745][T11503] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1588.850829][T11503] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 1588.862223][T11503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.862305][T11503] usb 2-1: Product: syz [ 1588.862347][T11503] usb 2-1: Manufacturer: syz [ 1588.862391][T11503] usb 2-1: SerialNumber: syz [ 1589.093349][T23326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1589.106883][T23326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1589.135458][T11499] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1589.194135][T23328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.203589][T23328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.277958][T11499] usb 9-1: device descriptor read/64, error -71 [ 1589.524585][T11499] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1589.627127][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1589.627750][T23314] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1589.664515][T11499] usb 9-1: device descriptor read/64, error -71 [ 1589.704431][ T189] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1589.810642][T11499] usb usb9-port1: attempt power cycle [ 1589.864304][ T189] usb 6-1: Using ep0 maxpacket: 32 [ 1589.871642][ T189] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1589.881187][ T189] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1589.891644][ T189] usb 6-1: config 1 interface 0 altsetting 51 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.903844][T11503] option 2-1:4.0: GSM modem (1-port) converter detected [ 1589.911959][ T189] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1589.923965][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.933879][ T189] usb 6-1: Product: syz [ 1589.938335][ T189] usb 6-1: Manufacturer: syz [ 1589.943470][ T189] usb 6-1: SerialNumber: syz [ 1589.951818][T11503] usb 2-1: USB disconnect, device number 20 [ 1589.966566][T11503] option 2-1:4.0: device disconnected [ 1590.157488][T11499] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1590.175225][T11499] usb 9-1: device descriptor read/8, error -71 [ 1590.195417][T23332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.196676][T23332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.271402][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5130'. [ 1590.278924][T23332] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1590.288829][T23332] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5130'. [ 1590.298729][T23332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.299752][T23332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.331453][ T189] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input206 [ 1590.343142][ T4968] bcm5974 6-1:1.0: could not read from device [ 1590.350392][ T4968] bcm5974 6-1:1.0: could not read from device [ 1590.366114][ T4968] bcm5974 6-1:1.0: could not read from device [ 1590.379574][ T4968] bcm5974 6-1:1.0: could not read from device [ 1590.388325][ T189] usb 6-1: USB disconnect, device number 118 [ 1590.435261][T11499] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1590.456781][T11499] usb 9-1: device descriptor read/8, error -71 [ 1590.576881][T11499] usb usb9-port1: unable to enumerate USB device [ 1590.874568][T11499] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1590.984056][T23354] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5137'. [ 1590.993646][T23354] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5137'. [ 1591.027498][T11499] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1591.031470][T11499] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1591.031542][T11499] usb 2-1: config 0 has no interface number 0 [ 1591.042086][T11499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.042160][T11499] usb 2-1: Product: syz [ 1591.042203][T11499] usb 2-1: Manufacturer: syz [ 1591.042254][T11499] usb 2-1: SerialNumber: syz [ 1591.079842][T11499] usb 2-1: config 0 descriptor?? [ 1591.295876][T11499] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1591.310085][T11499] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1591.312698][T11499] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1591.316153][T11499] usb 2-1: media controller created [ 1591.368018][T11499] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1592.510067][T11499] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1592.512562][T23351] ================================================================== [ 1592.512611][T23351] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d4/0x630 [ 1592.512816][T23351] Read of size 1 at addr ffff888025754121 by task syz.1.5136/23351 [ 1592.512877][T23351] [ 1592.512953][T23351] CPU: 1 UID: 0 PID: 23351 Comm: syz.1.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1592.513039][T23351] Tainted: [L]=SOFTLOCKUP [ 1592.513069][T23351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1592.513124][T23351] Call Trace: [ 1592.513154][T23351] [ 1592.513192][T23351] dump_stack_lvl+0xe8/0x150 [ 1592.513289][T23351] print_address_description+0x55/0x1e0 [ 1592.513377][T23351] ? ec168_ ** replaying previous printk message ** [ 1592.513377][T23351] ? ec168_i2c_xfer+0x4d4/0x630 [ 1592.513439][T23351] print_report+0x58/0x70 [ 1592.513509][T23351] kasan_report+0x117/0x150 [ 1592.513591][T23351] ? ec168_i2c_xfer+0x4d4/0x630 [ 1592.513671][T23351] ec168_i2c_xfer+0x4d4/0x630 [ 1592.513754][T23351] __i2c_transfer+0x7bf/0x1fe0 [ 1592.513926][T23351] ? rt_mutex_lock_nested+0x167/0x1c0 [ 1592.513998][T23351] ? i2c_transfer+0xc7/0x2d0 [ 1592.514086][T23351] i2c_transfer+0x1cb/0x2d0 [ 1592.514185][T23351] i2cdev_ioctl_rdwr+0x460/0x740 [ 1592.514324][T23351] i2cdev_ioctl+0x6a5/0x880 [ 1592.514400][T23351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1592.514500][T23351] ? __fget_files+0x3a2/0x420 [ 1592.514597][T23351] ? __fget_files+0x2a/0x420 [ 1592.514680][T23351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1592.514775][T23351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1592.514855][T23351] __se_sys_ioctl+0xfc/0x170 [ 1592.514915][T23351] do_syscall_64+0x166/0x520 [ 1592.514999][T23351] ? trace_irq_disable+0x3b/0x140 [ 1592.515059][T23351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.515120][T23351] ? clear_bhb_loop+0x70/0xc0 [ 1592.515177][T23351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.515258][T23351] RIP: 0033:0x7f0b5239e159 [ 1592.515304][T23351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.515370][T23351] RSP: 002b:00007f0b532d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.515434][T23351] RAX: ffffffffffffffda RBX: 00007f0b52625fa0 RCX: 00007f0b5239e159 [ 1592.515486][T23351] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 1592.515520][T23351] RBP: 00007f0b52435024 R08: 0000000000000000 R09: 0000000000000000 [ 1592.515561][T23351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.515606][T23351] R13: 00007f0b52626038 R14: 00007f0b52625fa0 R15: 00007f0b5274fa48 [ 1592.515672][T23351] [ 1592.515694][T23351] [ 1592.515713][T23351] Allocated by task 23351: [ 1592.515747][T23351] kasan_save_track+0x3e/0x80 [ 1592.515810][T23351] __kasan_kmalloc+0x93/0xb0 [ 1592.515890][T23351] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 1592.515986][T23351] memdup_user+0x2b/0xd0 [ 1592.516037][T23351] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 1592.516119][T23351] i2cdev_ioctl+0x6a5/0x880 [ 1592.516201][T23351] __se_sys_ioctl+0xfc/0x170 [ 1592.516248][T23351] do_syscall_64+0x166/0x520 [ 1592.516277][T23351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.516297][T23351] [ 1592.516303][T23351] The buggy address belongs to the object at ffff888025754120 [ 1592.516303][T23351] which belongs to the cache kmalloc-8 of size 8 [ 1592.516320][T23351] The buggy address is located 0 bytes to the right of [ 1592.516320][T23351] allocated 1-byte region [ffff888025754120, ffff888025754121) [ 1592.516385][T23351] [ 1592.516391][T23351] The buggy address belongs to the physical page: [ 1592.516409][T23351] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25754 [ 1592.516431][T23351] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1592.516455][T23351] page_type: f5(slab) [ 1592.516477][T23351] raw: 00fff00000000000 ffff88801b041500 dead000000000100 dead000000000122 [ 1592.516495][T23351] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 1592.516507][T23351] page dumped because: kasan: bad access detected [ 1592.516524][T23351] page_owner tracks the page as allocated [ 1592.516533][T23351] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6050431094 [ 1592.516570][T23351] post_alloc_hook+0x1f9/0x250 [ 1592.516603][T23351] get_page_from_freelist+0x2209/0x2280 [ 1592.516625][T23351] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1592.516646][T23351] allocate_slab+0x7d/0x620 [ 1592.516672][T23351] refill_objects+0x2d5/0x350 [ 1592.516699][T23351] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1592.516725][T23351] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 1592.516773][T23351] kstrdup+0x42/0x100 [ 1592.516791][T23351] kobject_set_name_vargs+0x61/0x110 [ 1592.516816][T23351] dev_set_name+0xe2/0x140 [ 1592.516870][T23351] tty_register_device_attr+0x3b3/0x990 [ 1592.516904][T23351] tty_register_driver+0x868/0xe50 [ 1592.516942][T23351] legacy_pty_init+0x3b2/0x5d0 [ 1592.517006][T23351] pty_init+0x9/0x20 [ 1592.517035][T23351] do_one_initcall+0x250/0x870 [ 1592.517065][T23351] do_initcall_level+0x10a/0x1a0 [ 1592.517151][T23351] page last free pid 13 tgid 13 ts 6049796646 stack trace: [ 1592.517166][T23351] __free_frozen_pages+0xc93/0xd90 [ 1592.517197][T23351] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 1592.517229][T23351] alloc_vmap_area+0xd1a/0x1420 [ 1592.517255][T23351] __get_vm_area_node+0x200/0x2f0 [ 1592.517281][T23351] __vmalloc_node_range_noprof+0x343/0x1540 [ 1592.517311][T23351] __vmalloc_node_noprof+0xc2/0x100 [ 1592.517339][T23351] dup_task_struct+0x2c6/0xa00 [ 1592.517366][T23351] copy_process+0x820/0x43e0 [ 1592.517391][T23351] kernel_clone+0x2d7/0x940 [ 1592.517419][T23351] user_mode_thread+0x115/0x180 [ 1592.517448][T23351] call_usermodehelper_exec_work+0x5c/0x230 [ 1592.517474][T23351] process_scheduled_works+0xc3d/0x1630 [ 1592.517499][T23351] worker_thread+0xa47/0xfb0 [ 1592.517526][T23351] kthread+0x38b/0x480 [ 1592.517543][T23351] ret_from_fork+0x514/0xb70 [ 1592.517561][T23351] ret_from_fork_asm+0x1a/0x30 [ 1592.517592][T23351] [ 1592.517598][T23351] Memory state around the buggy address: [ 1592.517637][T23351] ffff888025754000: 06 fc fc fc 05 fc fc fc 07 fc fc fc 05 fc fc fc [ 1592.517696][T23351] ffff888025754080: fa fc fc fc 05 fc fc fc fa fc fc fc 07 fc fc fc [ 1592.517752][T23351] >ffff888025754100: 05 fc fc fc 01 fc fc fc 06 fc fc fc 05 fc fc fc [ 1592.517794][T23351] ^ [ 1592.517832][T23351] ffff888025754180: 00 fc fc fc 03 fc fc fc 00 fc fc fc 00 fc fc fc [ 1592.517881][T23351] ffff888025754200: 06 fc fc fc 04 fc fc fc 00 fc fc fc 00 fc fc fc [ 1592.517912][T23351] ================================================================== [ 1592.595176][T23351] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1593.177364][T23351] CPU: 1 UID: 0 PID: 23351 Comm: syz.1.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1593.188335][T23351] Tainted: [L]=SOFTLOCKUP [ 1593.192689][T23351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1593.202778][T23351] Call Trace: [ 1593.206087][T23351] [ 1593.209048][T23351] vpanic+0x56d/0xa60 [ 1593.213072][T23351] ? __pfx_vpanic+0x10/0x10 [ 1593.217632][T23351] ? __pfx___schedule+0x10/0x10 [ 1593.222523][T23351] panic+0xc5/0xd0 [ 1593.226276][T23351] ? __pfx_panic+0x10/0x10 [ 1593.230728][T23351] ? preempt_schedule_common+0x7f/0xd0 [ 1593.236233][T23351] ? ec168_i2c_xfer+0x4d4/0x630 [ 1593.241131][T23351] check_panic_on_warn+0x89/0xb0 [ 1593.246144][T23351] ? ec168_i2c_xfer+0x4d4/0x630 [ 1593.251042][T23351] end_report+0x73/0x170 [ 1593.255330][T23351] ? ec168_i2c_xfer+0x4d4/0x630 [ 1593.260214][T23351] kasan_report+0x128/0x150 [ 1593.264756][T23351] ? ec168_i2c_xfer+0x4d4/0x630 [ 1593.269728][T23351] ec168_i2c_xfer+0x4d4/0x630 [ 1593.274445][T23351] __i2c_transfer+0x7bf/0x1fe0 [ 1593.279257][T23351] ? rt_mutex_lock_nested+0x167/0x1c0 [ 1593.284665][T23351] ? i2c_transfer+0xc7/0x2d0 [ 1593.289289][T23351] i2c_transfer+0x1cb/0x2d0 [ 1593.293835][T23351] i2cdev_ioctl_rdwr+0x460/0x740 [ 1593.298823][T23351] i2cdev_ioctl+0x6a5/0x880 [ 1593.303424][T23351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1593.308492][T23351] ? __fget_files+0x3a2/0x420 [ 1593.313323][T23351] ? __fget_files+0x2a/0x420 [ 1593.318302][T23351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1593.323277][T23351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1593.328335][T23351] __se_sys_ioctl+0xfc/0x170 [ 1593.333063][T23351] do_syscall_64+0x166/0x520 [ 1593.337689][T23351] ? trace_irq_disable+0x3b/0x140 [ 1593.342834][T23351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.348928][T23351] ? clear_bhb_loop+0x70/0xc0 [ 1593.353630][T23351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.359546][T23351] RIP: 0033:0x7f0b5239e159 [ 1593.364018][T23351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.383658][T23351] RSP: 002b:00007f0b532d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1593.392109][T23351] RAX: ffffffffffffffda RBX: 00007f0b52625fa0 RCX: 00007f0b5239e159 [ 1593.400120][T23351] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 1593.408139][T23351] RBP: 00007f0b52435024 R08: 0000000000000000 R09: 0000000000000000 [ 1593.416153][T23351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.424165][T23351] R13: 00007f0b52626038 R14: 00007f0b52625fa0 R15: 00007f0b5274fa48 [ 1593.432189][T23351] [ 1593.435837][T23351] Kernel Offset: disabled [ 1593.440183][T23351] Rebooting in 86400 seconds..