last executing test programs: 4m24.266505185s ago: executing program 4 (id=610): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) (async) unshare(0x28040680) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) close(r0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) 4m23.287216021s ago: executing program 4 (id=614): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x66020000) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) landlock_restrict_self(r4, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) unshare(0x66020000) (async) gettid() (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) landlock_restrict_self(r4, 0xc) (async) 4m20.7717366s ago: executing program 4 (id=624): socket$kcm(0x2, 0x3, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0xffffffff, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x4000006, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x3ff, 0x4, 0x70a, 0x7fffffff}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x200, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0xffffffff}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x0, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x3fd}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0xb, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x2}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x80000007, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x1006, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x84, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x80000) (async) r2 = epoll_create1(0x80000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {r4, 0x12}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {r4, 0x12}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000039}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000002380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1018}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x80000000}, 0x1c) r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) syz_io_uring_setup(0xf73, &(0x7f00000003c0)={0x0, 0x5f09, 0x8000, 0x2, 0x30a, 0x0, r1}, &(0x7f00000023c0), &(0x7f0000002400), &(0x7f0000002440)) fchdir(r9) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r10, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r10, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 4m20.611122945s ago: executing program 4 (id=627): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="003000000000e6b630cec906a9e2ee16417d30ea2e85f80c6b15d0d4d2cea7c3187b41b0a39d537fa8bb2feea8cc11d7bca5f6b150ca7d9f127f70b4760c08b2da8f6e5d2d445f2de427c91e11402c373945e2ca8bc5af05868cfbe3d4374c8f674e387a91c15013aa8ceda719dad1f822d5927e53f0adfcf69c7d4b4539caebfeac982919c74b43641464c319edff9d0fca84a4117107b5637b2630e8167d2fe04ebc492d69"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m17.387713906s ago: executing program 4 (id=634): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x4e22, 0x0, @empty, 0xfba4}}}, 0x88) (async) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1={0xfc, 0x1, '\x00', 0x8}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x3}, 0x4) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000140)) ioctl$VT_GETSTATE(r4, 0x5603, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x150740) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000040)={{0xf}, 0x1, 0x8, 0x7000, {0x2, 0x1}, 0xf9}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 4m16.970652203s ago: executing program 4 (id=637): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0xc880, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @loopback, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='<', 0x1}], 0x1}}], 0x2, 0x4048484) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000400)=""/198, &(0x7f0000000500)=0xc6) 4m16.688493275s ago: executing program 32 (id=637): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0xc880, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @loopback, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='<', 0x1}], 0x1}}], 0x2, 0x4048484) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000400)=""/198, &(0x7f0000000500)=0xc6) 4m15.89300438s ago: executing program 2 (id=642): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000080)={0xe7, 0x2, 0xfffeffff, 0x2, 0x7, 0x800}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000001c0)=""/264, &(0x7f0000000940), &(0x7f0000000100)="1980fddfe45f87b31db0d2404547847811948a084069e5e6858ee5c686048a1f57973d4573382291ac4fb722863532bddb0fc5fe29facd1069e2d452919c4fcd91ea6e53c6b4a21b9442ce309edde66d6944cf36abad50ed341d4c", 0xa7a, r7}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0005000000000904c50003ff01070009050502080000030109050c"], 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r10 = io_uring_setup(0x5b4, &(0x7f0000000440)={0x0, 0x2dd6, 0x0, 0x6, 0x81000153}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[r10], 0x1) dup3(r9, r8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) 4m12.026263252s ago: executing program 2 (id=650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r6, 0x8800000) (async) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x40000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) (async) sendfile(r8, r6, 0x0, 0x578410eb) (async) mmap(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x27ffff3, 0x13, r1, 0x8572000) 4m10.609424405s ago: executing program 2 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000051c0)={'xfrm0\x00', &(0x7f0000004180)=@ethtool_dump={0x40, 0x7, 0x3, 0x1000, "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"}}) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r7, 0x4, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) recvmmsg(r6, &(0x7f00000040c0)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000002c00)=""/217, 0xd9}, {&(0x7f0000002d00)=""/200, 0xc8}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x3, &(0x7f0000003e00)}}, {{&(0x7f0000003e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003ec0)=""/15, 0xf}, {&(0x7f0000003f00)=""/143, 0x8f}, {&(0x7f0000003fc0)=""/155, 0x9b}], 0x3}, 0x8}], 0x3, 0x40000100, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 4m7.504273352s ago: executing program 2 (id=665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020100000000000008000a"], 0x20}, 0x1, 0x2000000, 0x0, 0x4000000}, 0x880) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20008890}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/95) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r9, &(0x7f00000004c0)=""/40, 0x28) r10 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r10, 0xc2604110, 0x0) 4m7.232630973s ago: executing program 2 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r1 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01a9480000000004090000000000ddbc3abd41680f00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x100010, r1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 3m16.329338878s ago: executing program 3 (id=815): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x2f) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='P') r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$chown(0x4, r7, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) 3m14.415115845s ago: executing program 3 (id=817): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8000000000000000, 0x70e00) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001800010300000000000000000a800000ff0300060200000014000200fc00000000000001000000000000000114000700000000000000000000ff"], 0x58}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x18c}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@remote, r8}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r10}, 0x14) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRESOCT=r12], 0xfdef) 3m13.759466016s ago: executing program 3 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) io_uring_setup(0x1b7b, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdff9000000000400030004000300040003000c00018008000100", @ANYRES32=r6, @ANYBLOB="040003000c000180080003000100000004000300"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x40) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newtfilter={0x268, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xc}, {0x2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x234, 0x2, [@TCA_BPF_ACT={0x224, 0x1, [@m_ctinfo={0x6c, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x55c7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}]}, {0x25, 0x6, "34a8437bc966711b5ff0b075db1c992a8277da3e01c5542c6b0ebd9f9e8eb12e1e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xe4, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xaf, 0x6, "6b91b8f346177c28f8aaa84c880a0ea72b757c19a9d3ace514edc67e3b13aa941861e5515c14d3f595b4b15d0938145a6404c0a4620b1020a5572762d425bec187c77fd202d012306043aff6f9caeca79b24d3fe0dd14520c000954fe2580e68b2b7539b47fd39f4396c9cbc09ae49ea0f74204451c767042feb0d733fb39c09b9546cab82216ac9f11cb204b6ac3750acc975f51e4e93701fec873956d241218efbb4963a5e16656bb876"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x30, 0x18, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x74, 0x10, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x1}}]}, {0x2d, 0x6, "a1dfa6373b963bb288b45debc7da9d2acbf591c7646dfcc407aea6291d74981539eaf823e1d66960ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x2c, 0x6, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x67}]}, 0x268}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 3m13.416355445s ago: executing program 3 (id=824): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000101010200000000000000000a0000003c0002800c000280050001003a0000002c00018014000300ff02000000000000000000000070e11a1200040000000000000000000000ffff000000000c0019800800020099"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="540000000506010100009136475500000500000705000100070000000900020073797a3000000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3d, 0x9, 0x8, 0x0, r1}) 3m13.168124277s ago: executing program 3 (id=825): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01a9480000000004090000000000ddbc3abd41680f00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x100010, r1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 3m12.330896192s ago: executing program 34 (id=825): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01a9480000000004090000000000ddbc3abd41680f00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x100010, r1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 2m43.790272573s ago: executing program 7 (id=919): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000001240)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='0', 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff0300000009058203"], 0x0) 2m41.063457497s ago: executing program 7 (id=924): r0 = socket(0x1f, 0x805, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='team0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xfffffffc, 0xfff, 0x5, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') (async, rerun: 64) io_setup(0xff, &(0x7f0000000b00)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x4, r5}]) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x3}, 0x20) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r7, &(0x7f00000001c0)='team0\x00', 0x440, &(0x7f0000000200)={@align=0x7, {0x8001, 0x26e4, 0x9, 0x6}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) (async) r10 = socket(0x2, 0x80000, 0xfffffffd) sendmmsg$inet_sctp(r10, 0x0, 0x0, 0x0) syz_clone(0x9000011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/softnet_stat\x00') (async) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', '', [], 0xa, "da4064a24a3aa076d92369424f34110be438fc232d43e9d139902048be4a9360b452caa657fdcf60a04b1ce8980a93d1587632d774528c50430786ab1094884b9f1926d1be786b1c15e5fae097bdf949fdf8676d6d5941a57242eed9a53224f6bf1a6e929a9f33c5da7189172061bb58669bae8e89e6322592fd4248e5b3da4efcf4755477afc7bc7ca36e857d4acc73aac6db5693f7a9b323d18fea6cd8adc47922fdfcc33d829100000000000000"}, 0xb3) 2m40.057265124s ago: executing program 7 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x7}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x200, 0x3}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x1}, 0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0x169a02, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000180)={&(0x7f0000000200)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@hopopts={{0x18, 0x29, 0x36, {0x33}}}], 0x18}, 0x400c0c4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f0000000000)=0x8) sendfile(r3, r1, &(0x7f00000001c0)=0x1, 0x8) 2m39.416802616s ago: executing program 7 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x5ffffff, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x4, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x5ffffff, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x4, 0x8}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) (async) 2m39.159547408s ago: executing program 7 (id=930): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x17880, 0x700, 0x81, 0x1, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x68, 0x0, 0xb, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, {[@rr={0x7, 0x3, 0x9d}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 2m39.038326769s ago: executing program 7 (id=931): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x20000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r3], 0x50}}, 0x4000040) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00001000120d0fbd8e00020000", @ANYRES32=r6, @ANYBLOB="850b0100301804000a00010011169b10eb570000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000010) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0xfffffff7, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x87, @private, 0x0, 0x0, 'sed\x00', 0x1a, 0xfffffffb, 0x14}, 0x2c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'vcan0\x00', &(0x7f0000000200)=@ethtool_modinfo={0x42, 0xfffffffd, 0x6}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000008200000a88000000060a010400000000000000000a0004050900010073797a31000000005c000480580001800a000100696e6e6572000000480002800800006d6574610000000004000280080001400000001208000240000000080800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 2m23.510540041s ago: executing program 35 (id=931): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x20000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r3], 0x50}}, 0x4000040) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00001000120d0fbd8e00020000", @ANYRES32=r6, @ANYBLOB="850b0100301804000a00010011169b10eb570000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000010) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0xfffffff7, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x87, @private, 0x0, 0x0, 'sed\x00', 0x1a, 0xfffffffb, 0x14}, 0x2c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'vcan0\x00', &(0x7f0000000200)=@ethtool_modinfo={0x42, 0xfffffffd, 0x6}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000008200000a88000000060a010400000000000000000a0004050900010073797a31000000005c000480580001800a000100696e6e6572000000480002800800006d6574610000000004000280080001400000001208000240000000080800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 16.849546914s ago: executing program 1 (id=1456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000080)='./file0\x00', r6, 0x0, 0x1000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@allocspi={0x1a4, 0x16, 0x200, 0x70bd27, 0x25dfdbfe, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e23, 0xf, 0x4e24, 0x0, 0x2, 0x80, 0xc0, 0x1d, 0x0, r2}, {@in=@rand_addr=0x64010101, 0x4d3, 0x33}, @in6=@mcast2, {0x1ff, 0x8, 0x10001, 0x800, 0x3, 0x7f, 0x80000001, 0xffffffffffffffff}, {0x8, 0x6, 0x7fff, 0x8000000000000001}, {0xc09, 0x0, 0xa}, 0x70bd26, 0x3501, 0x2, 0x1, 0x7, 0x80}, 0x8, 0xfffffffd}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e20, 0x3ff, 0x2, 0x80, 0x20, 0x3b, 0x0, r6}, {0xdf, 0xffff, 0x400, 0x9, 0x8, 0x1, 0x2, 0xffffffff}, {0x40, 0x1, 0x1ff}, 0xcd, 0x6e6bb8, 0x0, 0x1, 0x2}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x840}, 0x20004810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fcntl$dupfd(r7, 0x406, r7) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) syz_emit_ethernet(0x1015, &(0x7f0000000840)={@random="cbfa0e6585cc", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@x25={0x805, {0x1, 0xb, 0xfb, "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"}}}}, &(0x7f0000001880)={0x0, 0x3, [0x8d4, 0x4f3, 0x6fa, 0x4d9]}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r11, 0x80, 0xba, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r12}, 0x38) (async) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000500)=0xffff0080) (async) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000000)=0x3) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r13, @ANYBLOB="010001000000fddbdf250e000000180001801400020076657468315f746f5f68738aec000000"], 0x2c}}, 0x8000) 16.538525845s ago: executing program 1 (id=1457): r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040893}, 0x4000000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x80000000000, r5}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2) (async) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4093, 0xffd}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x0, 0x0, 0x7ff}) syz_emit_ethernet(0x7e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd600000000048870000000000000000000000ffffffffffffff0200000000000000000000000000013b0804"], 0x0) 15.927706662s ago: executing program 1 (id=1458): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 13.815408693s ago: executing program 5 (id=1464): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/54, 0x36, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000003800), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x386, "000000000009b8d8fe1c0a4c88ae00", 0x494e4f4b}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x82000, 0x182) openat(r8, &(0x7f0000000140)='./file0\x00', 0x80000, 0x80) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 12.893850827s ago: executing program 5 (id=1467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x201}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) (async) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001740)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/181, 0xb5}], 0x2, &(0x7f0000001680)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000005c0)=""/4096, 0x1000}, &(0x7f00000015c0), 0x54}}, @zcopy_cookie={0x18}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x9}, &(0x7f0000001600)=0x1000, &(0x7f0000001640)=0x4, 0x5, 0x8000000000000001, 0x0, 0x1000, 0x8, 0xe72}}], 0xa0, 0x40}, 0x30000083) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001780)=""/183, 0xb7) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 12.691503391s ago: executing program 1 (id=1468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x800000080000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)=0xfffffffffffffdb7) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000008c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x1, 0x2400c080) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x5, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x40d4}, 0x2402c0c5) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000380)={0xfd80, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES64=r8, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64=r5, @ANYRES8=r0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0x4, 0x23ea, 0xffffffff, 0x3}, 0x14) 11.778567073s ago: executing program 5 (id=1472): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xc2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 8.675110409s ago: executing program 1 (id=1483): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, 0x0, 0x0, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r4, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write(r5, &(0x7f0000000fc0)="c62521e5ba9a21ad2f3cab7629bd5b4a7764e5850f0ec7e1a9b0f8eec5bf5991cae41893fffb8d05f78f380ac193e91680bc9c0ee2a5abd4e099710af57d8bdba38e0fa58f185a989b5f217944be9fc4c594612665e474b0c262e6309b48cf3c1327c765e85869b29157274185b4556e093269451ac35b2aec73847d0d84771aadcb4238a52110f6a906fc0f81a80e458c7de13d3ebcee882cba06d76c36e779338c23f8ff7c8f6db3b388819b4eb7f1e753962124242d51193dc4f0415f87f3f2dc1d391be02b2aea87096679a31bf899d17ada4a1dcfff30bed9f44de1adc3417e1e3811", 0xe5) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 6.449360067s ago: executing program 6 (id=1490): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@iv={0x18}], 0x18, 0x1}], 0x1, 0x40800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x825d795ed73addf8, 0x6, 0x10, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x80, 0x10001, 0xa8}}) 5.440321413s ago: executing program 1 (id=1493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/185) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000008c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x1, 0x2400c080) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x5, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x40d4}, 0x2402c0c5) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0x4, 0x236a, 0x4, 0x3}, 0x14) 5.027742504s ago: executing program 0 (id=1495): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) unshare(0x26020480) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000540)={{@local, 0x196c8a}, 0x0, 0x9, 0xffffffff, 0x40}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.00128177s ago: executing program 6 (id=1496): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 4.932372531s ago: executing program 5 (id=1497): write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003", 0x1f) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fcdbdf253400000008000300", @ANYRES32=r2, @ANYBLOB="86a1990cc701490a"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x11) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@local, 0x1}, 0x400, "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"}, 0x418, 0x2001}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x6, &(0x7f0000000300)=[{0x9, 0x5, 0x1, 0x6aba}, {0x2, 0x0, 0xcf}, {0x3, 0x1, 0x19, 0x95}, {0xb, 0x54, 0x0, 0x6}, {0x200, 0x7f, 0x2, 0x1}, {0x7, 0xf6, 0x7}]}) write$ppp(r3, &(0x7f0000000140)="1e08", 0x23) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x5) preadv(r5, &(0x7f0000001880), 0x0, 0x2000000, 0x10000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xe0000}], 0xc4, 0x3000, 0x0, 0x9) read$FUSE(r6, &(0x7f0000002580)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0xa030, 0x0, 0x1}, 0x18, 0x1) landlock_restrict_self(r8, 0xc) 4.771840237s ago: executing program 6 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x185, 0x7, 0x5d}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r3, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xd}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000004) 4.686853009s ago: executing program 0 (id=1499): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd4", 0x2b}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='name', &(0x7f00000003c0)='-\xd4\xea-\x00'/22, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x4000002, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa}, 0x1c) sendto$inet6(r4, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 4.563035181s ago: executing program 6 (id=1500): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) close_range(r1, r1, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (fail_nth: 9) 4.165601956s ago: executing program 6 (id=1501): syz_usb_connect(0x2, 0x4f, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], &(0x7f0000000240)={0x0, 0x0, 0x47, 0x0, 0x0, [{0x59, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x429}}, {0x0, &(0x7f0000000180)=@string={0x0, 0x3, "fe68941225ebd47c632a62caff3e7e8bcb5709f5202d5a689d67e6d815e7e1da8ca2f2e918b539b89b4c5968d51901a9ad6789996e2c4fefae902b0d153966ad0d88"}}, {0x0, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x406}}]}) syz_usb_connect$cdc_ncm(0x5, 0xa3, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x2, 0x1, 0xe8, 0xa0, 0x75, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '^'}, {0x5, 0x24, 0x0, 0x4e}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x0, 0xfff9, 0x2}, {0x6, 0x24, 0x1a, 0x330d, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x100}, @dmm={0x7, 0x24, 0x14, 0x8, 0x4c5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x7, 0x1, 0x7}, @dmm={0x7, 0x24, 0x14, 0x1, 0xfff7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x24, 0x10, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0xb, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xa, 0x1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x90, 0x0, 0xf, 0xff, 0x9}, 0x44, &(0x7f00000002c0)={0x5, 0xf, 0x44, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xbe, 0x4, 0x7, 0x1e000, 0x4, [0xcf, 0x3f00, 0xffcf, 0xff0030]}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7fffffe, 0xf00, 0x7ff, [0xc000, 0xc0, 0xff3f00, 0xc03f, 0x3fc0]}]}, 0x9, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1809}}, {0x3f, &(0x7f0000000380)=@string={0x3f, 0x3, "e20534e4c071c6e0662e591e86b57022189f6ab7cb2747239cedf77d31d188bbcdf45fd388f209d5e9bbd332495fb84932cc0aac466c0e48b652f53a69"}}, {0x79, &(0x7f00000003c0)=@string={0x79, 0x3, "a2a12c87092c0a2265d27995acdff7d93dd4064cb122ac67758ddd1ff02414bfbec77c26515fd45b1ec330e99f0889d8c8a36057126558db0ccf8766d8502f6024c438659beaf15daf47b837c99f36f5f9d5b758867cac0e6a60de6409c845af7a7a781c549a5ee50e21cb77a62bee9a0df0226f355d7c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x34}}, {0x28, &(0x7f0000000480)=@string={0x28, 0x3, "0e230f1a0d2ed254240cf30a8fec1392629276ebab384b391ec2f7ebf1be6ac23a769b548282"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42d}}, {0xb4, &(0x7f0000000500)=@string={0xb4, 0x3, "92df8389e3c9d7fe67df306b5392f0a164c26d7cda9a6d2bb96beab844c41e44b68f73234b38ea399bc3e4f10e605c488014a7ac0f89d9f0678a357a47d23aa5e34e850ec274f79c69df11829a95521d6f7422dafb157e168eeaba760f6e5ca59fcc62c883cc0eae87c31d39eab047b302cc940a43ca413bf2284724edaf29e5f9b4127156bab0b15a1f1acb797b40fb07094d3996e944ca5df69adb609f3417b9eafd640dc638fc41871b6532992a254a01"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2009}}]}) 3.500185586s ago: executing program 0 (id=1502): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x3938c1, 0x178) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) (async) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000680)={0x0, "4900bb33663fb3b6d05a929145325c94db33661d4653f6702f7c8d16a03d8bc8", 0x1, 0x10, 0x6660, 0x1, 0x8, 0x9, 0x0, 0x1}) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000580)={0x378e5f2d9c745e8f, 0x10, 0x6, "e45dbfc3abee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000a40)={0x40, 0x6, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, 0x0, &(0x7f0000000100)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) (async) fanotify_init(0x200, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) (async) io_uring_enter(r5, 0x221c, 0x134d, 0x16, 0x0, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) (async) socket$nl_route(0x10, 0x3, 0x0) 3.253527747s ago: executing program 0 (id=1503): socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x2, {0x1, @win={{0x0, 0x8, 0x278b, 0x8}, 0x0, 0xfffffff8, 0x0, 0xfffffffc, 0x0, 0x1}}, 0x3c9dc4d1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x2, {0x1, @vbi={0x3, 0x0, 0x0, 0x0, [0x0, 0x37], [0x10001]}}}) memfd_secret(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0xc00, 0x38416761, 0x280, 0x1e0, 0x0, @discrete={0x7fff, 0x80}}) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0xc00, 0x38416761, 0x280, 0x1e0, 0x0, @discrete={0x7fff, 0x80}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x251f, 0x2000, 0x4, 0xd1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x2010, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x2010, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f0000000580)={0x0, 0xfffffffd, 0x0, 0x6, 0x4, 0x2, 0x81, 0xa301}) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e23, @broadcast}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.761355835s ago: executing program 8 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7c00e00006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) read(r1, &(0x7f0000001140)=""/4096, 0x1000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000080)={0x2, 0x6, 0xde6, 0x5, 'syz1\x00', 0x10}) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) (async) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) 2.679867548s ago: executing program 5 (id=1505): unshare(0x8eebfff33b0b2f2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000440)={0x9, @sdr={0x34325258, 0x400}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = syz_open_pts(r3, 0x8182) r5 = dup3(r4, r3, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @multicast2}, 0x0, 0x2, 0x1, 0x3}}, 0x26) 2.64191005s ago: executing program 0 (id=1506): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect$uac1(0x0, 0x7b, &(0x7f0000000580)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xf1, 0x80, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe78, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x3, 0x5, 0x1, [0x6], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7, 0xee, {0x7, 0x25, 0x1, 0x4, 0x28, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0x8, 0x9ab}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000380)={0x1, 0x8}, 0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r3, r2, 0x80000) r4 = socket(0xa, 0x3, 0xff) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000000280)) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r5, 0x0}]) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000500)={0xf010000, 0x0, {0x100, 0x0, 0x3005, 0x0, 0x0, 0x3}}) 2.415419244s ago: executing program 8 (id=1507): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000380)={@remote, @remote, 0x1, "b9fce1f34bfd1239a0b3cb785fedbfd1bf7cb12a9b48cf1a7936e64f9f7db8be", 0x8e, 0x27d40000, 0x5, 0x2}, 0x3c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004a40)=@filter={'filter\x00', 0x42, 0x4, 0x1370, 0xffffffff, 0x1208, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x12d8, 0x12d8, 0x12d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010102, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0xd0, 0xf8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}, {0x40, 0x50, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0xa00, 0x100, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@private, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00', {}, {0xff}}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x0, 0x0, 0x5, 0x5, 0x4], 0x0, 0x3}, {0x3, [0x1, 0x4, 0x1, 0x9, 0x4, 0x5], 0x7, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13d0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000020601020000000000000000020000021274588cbaa7fee4ce24d34dad5fdb946c69390c0fd525a520fcefd0773de16ad21adf2127f3abdaeefa8ba6b197edc30b1000cab18831bab9eeb49eac093c3641b2f3e78347f9afc898db95ff621b94"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000068001002b000000"], 0x1c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3e0, 0x88}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x48080) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000240)={0x0, 0x0, 0x201c, 0x48d, 0x800, 0x4, 0x1000}) unshare(0x28000600) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000240)={0x27800000001, 0x0, 0x1, r10, 0x1}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f14010000000000000000000a0045006908000300"/36], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x405, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) 1.812258384s ago: executing program 8 (id=1508): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 1.774083011s ago: executing program 8 (id=1509): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) unshare(0x26020480) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000540)={{@local, 0x196c8a}, 0x0, 0x9, 0xffffffff, 0x40}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.318783265s ago: executing program 8 (id=1510): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x2e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000000600)=[{0x2, 0x810, 0x0, 0x0}], 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.131336552s ago: executing program 6 (id=1511): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 606.811507ms ago: executing program 0 (id=1512): socket(0x26, 0x6, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80782, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xb, 0x8, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x2) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r7, &(0x7f0000000040), 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b010000091400078008000140000000060800024000000001"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x5, 0x31384142, 0x0, @stepwise={0x8, 0xff, 0x1, 0xfffffffd, 0x0, 0xfffffffe}}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 47.313947ms ago: executing program 5 (id=1513): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x200000, 0x3, 0x7, 0x7, 0x0, [{0x7, 0x8, 0x40, '\x00', 0x2}, {0xc4, 0x2, 0x1, '\x00', 0x1}, {0xcd, 0x80, 0x14, '\x00', 0x79}, {0x7, 0xe3, 0x1, '\x00', 0x6}, {0x0, 0x3, 0xf9, '\x00', 0x8}, {0x8, 0x4, 0x9, '\x00', 0x3}, {0x3, 0x2, 0x8, '\x00', 0x2}, {0x14, 0x54, 0xa, '\x00', 0x4}, {0x6, 0x2, 0xf7, '\x00', 0xf}, {0x69, 0x0, 0x8, '\x00', 0xd}, {0x0, 0xac, 0xb, '\x00', 0x7}, {0x7, 0x2, 0x80, '\x00', 0x6}, {0x2, 0x1, 0x1, '\x00', 0x36}, {0xa, 0x8, 0x9, '\x00', 0x5a}, {0x4, 0x2, 0x7, '\x00', 0x1b}, {0x8, 0x7a, 0x0, '\x00', 0x8}, {0xfd, 0x8, 0x9, '\x00', 0x40}, {0x24, 0x1, 0x1, '\x00', 0x80}, {0x2, 0x4, 0x2, '\x00', 0x4}, {0x6, 0x7, 0x6, '\x00', 0xfe}, {0x9, 0x0, 0xf2, '\x00', 0xff}, {0x9, 0x1, 0x1, '\x00', 0x8}, {0x4, 0x3, 0x0, '\x00', 0x1}, {0x4, 0x2, 0x25, '\x00', 0x4}]}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2000000000000000, 0x20, 0x3, 0x5, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x4, 0x8, 0x0, 0x73, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="03040007b50000000100fefffeefffff"], 0xc8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20004) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0xa) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x80}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x404c840) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 8 (id=1514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffe}]}]}]}}]}, 0x44}}, 0x4004002) r7 = socket$netlink(0x10, 0x3, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x7}, @mss={0x2, 0x7}, @sack_perm, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0xfffe}, @window={0x3, 0x2, 0x1}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000080)="61968475de6100", 0xfffffe82, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r9, &(0x7f0000000140), &(0x7f0000000280)=0x14) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fedade2531000000200001801400020076657468305f746f5f62726964676500080001"], 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x24000894) r11 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16=r7], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): : LD USB Device #0 now disconnected [ 583.104138][ T5915] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 583.169506][ T5915] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 583.226200][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.279549][ T5915] usb 9-1: Product: syz [ 583.301956][ T5915] usb 9-1: Manufacturer: syz [ 583.307276][ T5915] usb 9-1: SerialNumber: syz [ 583.453288][ T5901] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 583.513797][ T5901] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 583.600185][ T5901] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0028/input/input45 [ 583.638705][ T5915] usb 9-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 583.685389][ T5915] usb 9-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 583.828219][ T5901] cm6533_jd 0003:0D8C:0022.0028: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 583.888858][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 583.930098][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 584.019238][ T5901] usb 2-1: USB disconnect, device number 61 [ 584.185096][ T5915] usb 9-1: USB disconnect, device number 4 [ 584.296616][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 584.323297][T10710] fido_id[10710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 584.476051][ T8285] udevd[8285]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.702022][T10718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=66559 (8519552 ns) > initial count (512 ns). Using initial count to start timer. [ 584.864897][ T5928] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 584.958368][T10713] vlan2: entered allmulticast mode [ 584.972344][T10713] bridge2: entered allmulticast mode [ 584.983254][T10714] bridge2: port 1(erspan0) entered blocking state [ 584.995156][T10714] bridge2: port 1(erspan0) entered disabled state [ 585.014868][T10714] erspan0: entered allmulticast mode [ 585.042135][T10714] erspan0: entered promiscuous mode [ 585.048916][T10714] bridge2: port 1(erspan0) entered blocking state [ 585.055643][T10714] bridge2: port 1(erspan0) entered forwarding state [ 585.114090][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 585.138919][ T5928] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 585.177352][ T5928] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 585.196547][ T5928] usb 1-1: config 0 has no interface number 1 [ 585.216793][ T5928] usb 1-1: config 0 has no interface number 2 [ 585.251305][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 585.288112][ T5928] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 585.329134][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.350237][ T5928] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 585.380077][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.429712][ T5928] usb 1-1: config 0 descriptor?? [ 585.696109][ T5928] usb 1-1: Could not set interface, error -71 [ 585.724390][ T5928] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 585.773891][ T5928] usb 1-1: USB disconnect, device number 83 [ 585.792717][ T9694] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 585.982018][ T9694] usb 9-1: Using ep0 maxpacket: 32 [ 585.996519][ T9694] usb 9-1: config 164 has an invalid interface number: 195 but max is 0 [ 586.005828][ T9694] usb 9-1: config 164 has an invalid descriptor of length 85, skipping remainder of the config [ 586.027120][ T9694] usb 9-1: config 164 has no interface number 0 [ 586.038045][ T9694] usb 9-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 586.059562][ T9694] usb 9-1: config 164 interface 195 has no altsetting 0 [ 586.075321][ T9694] usb 9-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=e7.8c [ 586.084934][ T9694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.093689][ T9694] usb 9-1: Product: syz [ 586.098298][ T9694] usb 9-1: Manufacturer: syz [ 586.103844][ T9694] usb 9-1: SerialNumber: syz [ 586.261901][T10736] FAULT_INJECTION: forcing a failure. [ 586.261901][T10736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.281688][T10736] CPU: 0 UID: 0 PID: 10736 Comm: syz.6.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.281719][T10736] Tainted: [L]=SOFTLOCKUP [ 586.281727][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 586.281738][T10736] Call Trace: [ 586.281747][T10736] [ 586.281758][T10736] dump_stack_lvl+0xe8/0x150 [ 586.281792][T10736] should_fail_ex+0x412/0x560 [ 586.281829][T10736] _copy_from_user+0x2d/0xb0 [ 586.281855][T10736] snd_seq_ioctl+0x219/0x4c0 [ 586.281884][T10736] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 586.281921][T10736] ? __fget_files+0x3a0/0x420 [ 586.281940][T10736] ? __fget_files+0x2a/0x420 [ 586.281962][T10736] ? bpf_lsm_file_ioctl+0x9/0x20 [ 586.281990][T10736] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 586.282011][T10736] __se_sys_ioctl+0xfc/0x170 [ 586.282039][T10736] do_syscall_64+0x14d/0xf80 [ 586.282065][T10736] ? trace_irq_disable+0x3b/0x150 [ 586.282083][T10736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.282104][T10736] ? clear_bhb_loop+0x40/0x90 [ 586.282129][T10736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.282150][T10736] RIP: 0033:0x7fe76419c819 [ 586.282170][T10736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.282187][T10736] RSP: 002b:00007fe764fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.282209][T10736] RAX: ffffffffffffffda RBX: 00007fe764416180 RCX: 00007fe76419c819 [ 586.282224][T10736] RDX: 0000200000000100 RSI: 00000000c058534f RDI: 0000000000000007 [ 586.282237][T10736] RBP: 00007fe764fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 586.282249][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.282261][T10736] R13: 00007fe764416218 R14: 00007fe764416180 R15: 00007fe76453fa48 [ 586.282293][T10736] [ 587.757158][T10773] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 588.476002][ T9694] usb 9-1: USB disconnect, device number 5 [ 589.134711][T10786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.603232][T10791] FAULT_INJECTION: forcing a failure. [ 589.603232][T10791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.626571][T10791] CPU: 1 UID: 0 PID: 10791 Comm: syz.5.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.626605][T10791] Tainted: [L]=SOFTLOCKUP [ 589.626613][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 589.626626][T10791] Call Trace: [ 589.626633][T10791] [ 589.626645][T10791] dump_stack_lvl+0xe8/0x150 [ 589.626679][T10791] should_fail_ex+0x412/0x560 [ 589.626714][T10791] _copy_to_user+0x31/0xb0 [ 589.626741][T10791] snd_seq_ioctl+0x3a5/0x4c0 [ 589.626766][T10791] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 589.626803][T10791] ? __fget_files+0x3a0/0x420 [ 589.626822][T10791] ? __fget_files+0x2a/0x420 [ 589.626844][T10791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 589.626873][T10791] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 589.626893][T10791] __se_sys_ioctl+0xfc/0x170 [ 589.626921][T10791] do_syscall_64+0x14d/0xf80 [ 589.626947][T10791] ? trace_irq_disable+0x3b/0x150 [ 589.626965][T10791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.626987][T10791] ? clear_bhb_loop+0x40/0x90 [ 589.627012][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.627032][T10791] RIP: 0033:0x7f0e7db9c819 [ 589.627053][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.627080][T10791] RSP: 002b:00007f0e7bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.627103][T10791] RAX: ffffffffffffffda RBX: 00007f0e7de16090 RCX: 00007f0e7db9c819 [ 589.627118][T10791] RDX: 0000200000000100 RSI: 00000000c058534f RDI: 0000000000000007 [ 589.627131][T10791] RBP: 00007f0e7bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 589.627143][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.627155][T10791] R13: 00007f0e7de16128 R14: 00007f0e7de16090 R15: 00007f0e7df3fa48 [ 589.627187][T10791] [ 590.077870][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1120'. [ 590.099710][T10795] dns_resolver: Unsupported content type (89) [ 590.663726][T10823] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1125'. [ 590.877805][T10827] netlink: 'syz.0.1126': attribute type 13 has an invalid length. [ 591.431928][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 591.623097][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 591.658963][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.679099][T10842] kvm: kvm [10841]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffff000008fe [ 591.699628][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.729614][T10842] kvm: kvm [10841]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000 [ 591.742731][ T24] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 591.768660][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.830262][ T24] usb 9-1: config 0 descriptor?? [ 592.280771][ T24] hid-multitouch 0003:1FD2:6007.0029: reserved main item tag 0xe [ 592.337151][ T24] hid-multitouch 0003:1FD2:6007.0029: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 592.401530][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1131'. [ 592.472431][T10847] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1131'. [ 592.505927][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.556394][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.594331][ T9694] usb 9-1: USB disconnect, device number 6 [ 593.045686][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 593.116021][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1134'. [ 593.125168][T10856] netlink: 'syz.5.1134': attribute type 21 has an invalid length. [ 593.223096][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 593.232209][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.241275][ T24] usb 1-1: config 0 has no interface number 0 [ 593.250716][ T24] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 593.262735][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.271074][ T24] usb 1-1: Product: syz [ 593.279818][ T24] usb 1-1: Manufacturer: syz [ 593.280390][T10860] loop5: detected capacity change from 0 to 7 [ 593.284959][ T24] usb 1-1: SerialNumber: syz [ 593.316261][ T24] usb 1-1: config 0 descriptor?? [ 593.481938][ T8794] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 593.563123][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 593.591938][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 593.601016][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 593.671876][ T8794] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 593.680391][ T8794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.722398][ T8794] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 593.734516][ T8794] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 593.742986][ T8794] usb 7-1: Manufacturer: syz [ 593.788571][ T8794] usb 7-1: config 0 descriptor?? [ 593.807804][T10860] Dev loop5: unable to read RDB block 7 [ 593.815423][T10860] loop5: unable to read partition table [ 593.822924][T10860] loop5: partition table beyond EOD, truncated [ 593.839438][T10860] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 593.962225][ T8794] rc_core: IR keymap rc-hauppauge not found [ 593.968429][ T8794] Registered IR keymap rc-empty [ 593.989868][ T8794] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 594.030523][ T8794] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input46 [ 594.158783][ T24] usb 1-1: selecting invalid altsetting 1 [ 594.175561][ T24] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 594.185852][ T24] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 594.202074][ T24] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 594.233368][ T24] usb 1-1: USB disconnect, device number 84 [ 594.368422][ T1148] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 594.566247][T10636] usb 7-1: USB disconnect, device number 34 [ 595.054692][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1140'. [ 595.261902][T10636] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 595.288775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807df5cc00: rx timeout, send abort [ 595.422394][T10636] usb 1-1: Using ep0 maxpacket: 8 [ 595.446991][T10636] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 595.502323][T10636] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.556436][T10636] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.601314][T10636] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 595.631742][T10636] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.686225][T10636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.721220][T10636] usbtmc 1-1:16.0: bulk endpoints not found [ 596.061917][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 596.263724][ T24] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 596.324114][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 596.364646][ T24] usb 6-1: can't read configurations, error -22 [ 596.522349][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 596.713636][ T24] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 596.752921][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 596.768967][ T24] usb 6-1: can't read configurations, error -22 [ 596.785313][ T24] usb usb6-port1: attempt power cycle [ 597.162060][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 597.194994][ T24] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 597.213611][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 597.222132][ T24] usb 6-1: can't read configurations, error -22 [ 597.323888][ T5915] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 597.381924][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 597.413793][ T24] usb 6-1: too many configurations: 71, using maximum allowed: 8 [ 597.427099][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 597.437496][ T24] usb 6-1: can't read configurations, error -22 [ 597.456215][ T24] usb usb6-port1: unable to enumerate USB device [ 597.508073][ T5915] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.538697][ T5915] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 597.559765][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 597.580817][ T5915] usb 9-1: Product: syz [ 597.611905][ T5915] usb 9-1: Manufacturer: syz [ 597.633406][ T5915] usb 9-1: SerialNumber: syz [ 597.653642][ T5915] usb 9-1: config 0 descriptor?? [ 597.852055][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 598.013212][ T5915] usb 9-1: bad CDC descriptors [ 598.019201][ T5915] usb 9-1: unsupported MDLM descriptors [ 598.022420][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 598.075699][ T24] usb 7-1: config 2 has an invalid interface number: 241 but max is 0 [ 598.093653][ T24] usb 7-1: config 2 has no interface number 0 [ 598.095315][ T5915] usb 9-1: USB disconnect, device number 7 [ 598.099909][ T24] usb 7-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid maxpacket 25502, setting to 64 [ 598.142053][ T24] usb 7-1: config 2 interface 241 has no altsetting 0 [ 598.199381][ T24] usb 7-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 598.223333][ T9694] usb 1-1: USB disconnect, device number 85 [ 598.237323][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.255255][ T24] usb 7-1: Product: syz [ 598.276985][ T24] usb 7-1: Manufacturer: syz [ 598.282962][ T24] usb 7-1: SerialNumber: syz [ 598.296499][ T24] ti_usb_3410_5052 7-1:2.241: TI USB 3410 1 port adapter converter detected [ 598.312312][ T24] ti_usb_3410_5052 7-1:2.241: missing endpoints [ 598.382784][T10927] fuse: Bad value for 'fd' [ 598.502306][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.531462][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.653595][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.667613][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.884025][ T24] usb 7-1: USB disconnect, device number 35 [ 599.058449][T10941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.153733][ T5915] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 599.324087][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.335180][ T9694] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 599.346678][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.378903][ T5915] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 599.401888][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.424772][ T5915] usb 1-1: config 0 descriptor?? [ 599.492015][ T9694] usb 2-1: device descriptor read/64, error -71 [ 599.731983][ T9694] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 599.882022][ T55] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 599.952254][ T9694] usb 2-1: device descriptor read/64, error -71 [ 600.044399][T10935] loop2: detected capacity change from 0 to 7 [ 600.053832][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 600.075137][ T55] usb 7-1: config 2 has an invalid interface number: 45 but max is 0 [ 600.075213][ T9694] usb usb2-port1: attempt power cycle [ 600.090674][ T55] usb 7-1: config 2 has no interface number 0 [ 600.104808][ T8013] Dev loop2: unable to read RDB block 7 [ 600.110896][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.120796][ T55] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 94, changing to 10 [ 600.134513][ T8013] loop2: AHDI p1 p2 p3 [ 600.138843][ T8013] loop2: partition table partially beyond EOD, truncated [ 600.147283][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.158524][ T55] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 25761, setting to 1024 [ 600.171079][ T8013] loop2: p1 start 1601398130 is beyond EOD, truncated [ 600.186855][ T8013] loop2: p2 start 1702059890 is beyond EOD, truncated [ 600.201996][ T55] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 600.220968][T10935] Dev loop2: unable to read RDB block 7 [ 600.234071][T10935] loop2: AHDI p1 p2 p3 [ 600.234625][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.252283][ T55] usb 7-1: Product: syz [ 600.254898][T10935] loop2: partition table partially beyond EOD, [ 600.256543][ T55] usb 7-1: Manufacturer: syz [ 600.256587][ T55] usb 7-1: SerialNumber: syz [ 600.309500][T10945] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 600.330953][ T55] kobil_sct 7-1:2.45: KOBIL USB smart card terminal converter detected [ 600.344726][T10935] truncated [ 600.349678][ T55] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 600.364951][T10935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 600.397260][T10935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 600.501982][ T9694] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 600.559572][ T9694] usb 2-1: device descriptor read/8, error -71 [ 600.609012][ T55] usb 7-1: USB disconnect, device number 36 [ 600.648711][ T55] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 600.694751][ T55] kobil_sct 7-1:2.45: device disconnected [ 600.812009][ T9694] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 600.843871][ T9694] usb 2-1: device descriptor read/8, error -71 [ 600.962349][ T9694] usb usb2-port1: unable to enumerate USB device [ 601.051961][ T8794] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 601.161926][ T55] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 601.191887][ T8794] usb 6-1: device descriptor read/64, error -71 [ 601.324220][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 601.394783][T10958] geneve2: entered promiscuous mode [ 601.400632][T10958] geneve2: entered allmulticast mode [ 601.432029][ T8794] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 601.443333][ T55] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 601.455364][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.467307][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 601.485262][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 601.516809][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 601.546869][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.571926][ T8794] usb 6-1: device descriptor read/64, error -71 [ 601.630913][ T55] usbtmc 7-1:16.0: bulk endpoints not found [ 601.703675][ T8794] usb usb6-port1: attempt power cycle [ 601.858453][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 601.874959][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 601.925106][ T5915] usb 1-1: USB disconnect, device number 86 [ 602.052013][ T8794] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 602.093275][ T8794] usb 6-1: device descriptor read/8, error -71 [ 602.371931][ T8794] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 602.462787][ T8794] usb 6-1: device descriptor read/8, error -71 [ 602.597424][ T8794] usb usb6-port1: unable to enumerate USB device [ 603.632675][ T5915] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 603.823981][ T5915] usb 9-1: config 129 has an invalid interface number: 4 but max is 0 [ 603.851992][ T5915] usb 9-1: config 129 has no interface number 0 [ 603.881618][ T5915] usb 9-1: config 129 interface 4 has no altsetting 0 [ 603.905258][ T5915] usb 9-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 603.921267][ T5832] usb 7-1: USB disconnect, device number 37 [ 603.948641][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.979393][ T5915] usb 9-1: Product: syz [ 603.984177][ T5915] usb 9-1: Manufacturer: syz [ 603.991691][ T5915] usb 9-1: SerialNumber: syz [ 604.253424][ T5915] ftdi_sio 9-1:129.4: FTDI USB Serial Device converter detected [ 604.295232][ T5915] usb 9-1: Detected SIO [ 604.323654][ T5915] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 604.356377][ T5915] usb 9-1: USB disconnect, device number 8 [ 604.389932][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 604.434720][ T5915] ftdi_sio 9-1:129.4: device disconnected [ 604.832006][ T5832] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 604.953308][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 604.953332][ T30] audit: type=1326 audit(1775509339.182:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10988 comm="syz.8.1166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5eef79c819 code=0x0 [ 604.983794][ T8794] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 605.011949][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 605.026409][ T30] audit: type=1326 audit(1775509339.262:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10988 comm="syz.8.1166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5eef79c819 code=0x0 [ 605.037528][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.135616][ T5832] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 605.165719][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.213517][ T5832] usb 7-1: config 0 descriptor?? [ 605.229626][ T5832] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 605.232123][ T8794] usb 2-1: Using ep0 maxpacket: 8 [ 605.427104][ T8794] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 605.496751][ T8794] usb 2-1: config 179 has no interface number 0 [ 605.527364][ T5832] gspca_vc032x: reg_r err -32 [ 605.542370][ T5832] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 605.568561][ T8794] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 605.615413][ T5832] usb 7-1: USB disconnect, device number 38 [ 605.638386][ T8794] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 605.691930][ T8794] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 605.733189][ T8794] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 605.796490][ T8794] usb 2-1: config 179 interface 65 has no altsetting 0 [ 605.826973][ T8794] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 605.847869][ T8794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.321935][ T55] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 606.482353][ T9694] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 606.492707][ T55] usb 9-1: Using ep0 maxpacket: 16 [ 606.523527][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.549410][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.578108][ T55] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.610502][ T55] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 606.655124][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.695748][ T9694] usb 7-1: config 129 has an invalid interface number: 4 but max is 0 [ 606.705123][ T55] usb 9-1: config 0 descriptor?? [ 606.745884][ T9694] usb 7-1: config 129 has no interface number 0 [ 606.767313][ T9694] usb 7-1: config 129 interface 4 has no altsetting 0 [ 606.791065][ T9694] usb 7-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 606.811970][ T9694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.833729][ T9694] usb 7-1: Product: syz [ 606.844309][ T9694] usb 7-1: Manufacturer: syz [ 606.855409][ T9694] usb 7-1: SerialNumber: syz [ 607.100424][ T9694] ftdi_sio 7-1:129.4: FTDI USB Serial Device converter detected [ 607.130110][ T9694] usb 7-1: Detected SIO [ 607.170506][ T9694] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 607.197482][ T9694] usb 7-1: USB disconnect, device number 39 [ 607.215753][ T9694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 607.225642][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.261320][T11016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.275107][ T9694] ftdi_sio 7-1:129.4: device disconnected [ 607.320797][T11035] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 607.320797][T11035] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 607.320797][T11035] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 607.320797][T11035] 1 3 ram3 0 0 0 0 0 0 0 0 0  (pid: 11035 comm: syz.5.1180) [ 607.362017][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.382029][T11016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.458864][ T30] audit: type=1800 audit(1775509341.692:1008): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1180" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=46398 res=0 errno=0 [ 607.744001][T11041] misc userio: Invalid payload size [ 607.765562][T11041] misc userio: The device must be registered before sending interrupts [ 608.156992][ T55] usbhid 9-1:0.0: can't add hid device: -71 [ 608.163752][ T55] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 608.196731][ T55] usb 9-1: USB disconnect, device number 9 [ 608.211966][ T5915] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 608.381287][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 608.389479][T11048] lo: Caught tx_queue_len zero misconfig [ 608.391973][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 608.408476][T11047] netlink: 'syz.0.1183': attribute type 13 has an invalid length. [ 608.416756][T11047] netlink: 'syz.0.1183': attribute type 11 has an invalid length. [ 608.445098][ T5915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.467100][ T5915] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.491923][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 608.499977][ T5915] usb 7-1: Product: syz [ 608.504356][ T5915] usb 7-1: SerialNumber: syz [ 608.892021][ T5832] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 608.932957][ T9694] usb 2-1: USB disconnect, device number 66 [ 609.061906][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 609.070351][ T5832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.086383][ T5832] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.103812][ T5832] usb 6-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 609.117063][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.128770][ T5832] usb 6-1: Product: syz [ 609.142034][ T5832] usb 6-1: Manufacturer: syz [ 609.158420][ T5832] usb 6-1: SerialNumber: syz [ 609.231581][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1188'. [ 609.246553][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1188'. [ 609.278176][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1188'. [ 609.404314][ T5832] usb 6-1: USB disconnect, device number 37 [ 609.541925][ T55] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 609.620659][ T5915] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 609.632849][ T5915] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 609.640547][ T5915] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 609.693766][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.709641][ T55] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 609.721980][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.736667][ T55] usb 1-1: config 0 descriptor?? [ 609.748230][ T55] dvb-usb: found a 'TeVii S662' in warm state. [ 609.761633][ T55] dw2102: su3000_power_ctrl: 1, initialized 0 [ 609.768812][ T55] dvb-usb: bulk message failed: -22 (2/0) [ 609.786006][ T55] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 609.818481][ T55] dvb-usb: TeVii S662 error while loading driver (-19) [ 609.853916][ T5915] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 609.874266][ T5915] usb 7-1: USB disconnect, device number 40 [ 609.898765][ T5915] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 609.963534][ T5832] usb 1-1: USB disconnect, device number 87 [ 610.317678][T11085] fuse: Unknown parameter '' [ 610.328676][T11085] fuse: Unknown parameter '' [ 610.471942][ T5832] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 610.634783][ T5832] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 610.643366][ T5832] usb 6-1: config 129 has no interface number 0 [ 610.649779][ T5832] usb 6-1: config 129 interface 4 has no altsetting 0 [ 610.666301][ T5832] usb 6-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 610.678572][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.688905][ T5832] usb 6-1: Product: syz [ 610.693902][ T5832] usb 6-1: Manufacturer: syz [ 610.699702][ T5832] usb 6-1: SerialNumber: syz [ 610.812107][ T5915] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 610.930410][ T5832] ftdi_sio 6-1:129.4: FTDI USB Serial Device converter detected [ 610.958342][ T5832] usb 6-1: Detected SIO [ 610.966738][ T5832] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 610.976659][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 610.994667][ T5832] usb 6-1: USB disconnect, device number 38 [ 611.006068][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 611.028504][ T5832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 611.052628][ T5915] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 611.067275][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.076326][ T5832] ftdi_sio 6-1:129.4: device disconnected [ 611.089584][ T5915] usb 7-1: Product: syz [ 611.099562][ T5915] usb 7-1: Manufacturer: syz [ 611.115294][ T5915] usb 7-1: SerialNumber: syz [ 611.149398][ T5915] usb 7-1: config 0 descriptor?? [ 611.177700][ T5915] usb 7-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 611.404361][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.422702][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.692941][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 611.731969][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 611.896083][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.959047][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.076426][ T5915] usb 7-1: USB disconnect, device number 41 [ 612.101775][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 612.168673][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 612.184031][T10622] udevd[10622]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.216524][ T24] usb 2-1: Product: syz [ 612.227817][ T24] usb 2-1: Manufacturer: syz [ 612.243849][ T24] usb 2-1: SerialNumber: syz [ 612.650223][T11135] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 612.650223][T11135] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 612.650223][T11135] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 612.650223][T11135] 1 3 ram3 0 0 0 0 0 0 0 0 0  (pid: 11135 comm: syz.6.1208) [ 612.838068][ T30] audit: type=1800 audit(1775509347.062:1009): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1208" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=46908 res=0 errno=0 [ 613.072396][T11142] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 614.194053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.234296][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1218'. [ 614.285357][ T24] usb 2-1: USB disconnect, device number 67 [ 614.521120][T11181] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 614.521120][T11181] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 614.521120][T11181] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 614.521120][T11181] 1 3 ram3 0 0 0 0 0 0 0 0 0  (pid: 11181 comm: syz.1.1222) [ 614.562587][ T30] audit: type=1800 audit(1775509348.802:1010): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=47133 res=0 errno=0 [ 614.701968][ T5928] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 614.872055][ T5928] usb 9-1: Using ep0 maxpacket: 32 [ 614.884696][ T5928] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 614.921908][ T5928] usb 9-1: config 0 has no interface number 0 [ 614.964591][ T5928] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 614.974579][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.057244][ T5928] usb 9-1: Product: syz [ 615.061501][ T5928] usb 9-1: Manufacturer: syz [ 615.086747][ T5928] usb 9-1: SerialNumber: syz [ 615.111914][ T5928] usb 9-1: config 0 descriptor?? [ 615.123015][ T5928] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 615.178172][T11188] netlink: 'syz.5.1224': attribute type 1 has an invalid length. [ 615.242412][T11187] loop2: detected capacity change from 0 to 7 [ 615.378692][T11187] Dev loop2: unable to read RDB block 7 [ 615.404928][ T5928] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 615.572063][ T5928] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 615.594512][T11187] loop2: AHDI p3 [ 615.598331][T11187] loop2: partition table partially beyond EOD, truncated [ 615.915575][T11211] netlink: 'syz.0.1226': attribute type 13 has an invalid length. [ 616.105428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.352235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.383894][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 616.392847][ T5928] usb 9-1: USB disconnect, device number 10 [ 616.476897][ T5928] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 616.527454][ T5928] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 616.544468][ T5928] quatech2 9-1:0.51: device disconnected [ 617.086421][T11231] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 617.086421][T11231] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 617.086421][T11231] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 617.086421][T11231] 1 3 ram3 0 0 0 0 0 0 0 0 0  (pid: 11231 comm: syz.5.1233) [ 617.149353][ T30] audit: type=1800 audit(1775509351.382:1011): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1233" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=46398 res=0 errno=0 [ 617.482108][ T55] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 617.572387][ T5915] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 617.622431][ T5915] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 617.661921][ T55] usb 9-1: Using ep0 maxpacket: 8 [ 617.674982][ T55] usb 9-1: config index 0 descriptor too short (expected 8192, got 18) [ 617.691979][ T55] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.730754][ T55] usb 9-1: config 0 has no interfaces? [ 617.746866][ T55] usb 9-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 617.787632][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.829577][ T55] usb 9-1: config 0 descriptor?? [ 618.060189][T10636] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 618.078999][ T55] usb 9-1: string descriptor 0 read error: -71 [ 618.095870][ T55] usb 9-1: USB disconnect, device number 11 [ 618.253618][T10636] usb 1-1: config 129 has an invalid interface number: 4 but max is 0 [ 618.270096][T10636] usb 1-1: config 129 has no interface number 0 [ 618.299725][T10636] usb 1-1: config 129 interface 4 has no altsetting 0 [ 618.320261][T10636] usb 1-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 618.339962][T10636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.371915][T10636] usb 1-1: Product: syz [ 618.391442][T10636] usb 1-1: Manufacturer: syz [ 618.400854][T10636] usb 1-1: SerialNumber: syz [ 618.471747][T11258] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1240'. [ 618.633963][T10636] ftdi_sio 1-1:129.4: FTDI USB Serial Device converter detected [ 618.663659][T10636] usb 1-1: Detected SIO [ 618.680702][T10636] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 618.740219][T10636] usb 1-1: USB disconnect, device number 88 [ 618.779736][T10636] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 618.806038][T10636] ftdi_sio 1-1:129.4: device disconnected [ 619.150456][T11272] program syz.6.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.373169][T11279] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 619.373169][T11279] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 619.373169][T11279] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 619.373169][T11279] 1 3 ram3 0 0 0 0 0 0 0 0 0  (pid: 11279 comm: syz.6.1246) [ 619.492151][ T30] audit: type=1800 audit(1775509353.732:1012): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1246" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=46908 res=0 errno=0 [ 619.884408][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d7c7400: rx timeout, send abort [ 619.924986][T11287] netlink: 'syz.6.1248': attribute type 13 has an invalid length. [ 620.362539][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 620.384367][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805885dc00: rx timeout, send abort [ 620.392802][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d7c7400: abort rx timeout. Force session deactivation [ 620.413223][T10636] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 620.523952][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.587230][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.604653][T10636] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 620.615207][ T24] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 620.636633][ T24] usb 2-1: Product: syz [ 620.650792][T10636] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 620.651162][ T24] usb 2-1: SerialNumber: syz [ 620.670280][T10636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.717880][T10636] usb 6-1: Product: syz [ 620.742610][T10636] usb 6-1: Manufacturer: syz [ 620.757660][T10636] usb 6-1: SerialNumber: syz [ 620.892726][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805885dc00: abort rx timeout. Force session deactivation [ 621.057204][T11303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1253'. [ 621.149995][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 621.211505][T10636] usb 6-1: selecting invalid altsetting 1 [ 621.261323][T10636] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 621.261604][T10636] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 621.312592][T11302] netlink: 'syz.8.1252': attribute type 13 has an invalid length. [ 621.341761][T10636] usb 6-1: USB disconnect, device number 39 [ 621.436358][T11303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1253'. [ 621.869955][ T24] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 621.894346][ T24] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 621.935555][ T24] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 622.020846][ T87] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.043482][ T87] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.074189][ T87] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.215065][ T87] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.228026][ T24] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 622.232655][T10636] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 622.325972][ T24] usb 2-1: USB disconnect, device number 68 [ 622.352567][ T24] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 622.495307][T10636] usb 1-1: config 129 has an invalid interface number: 4 but max is 0 [ 622.539078][T10636] usb 1-1: config 129 has no interface number 0 [ 622.571954][T10636] usb 1-1: config 129 interface 4 has no altsetting 0 [ 622.610499][T10636] usb 1-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 622.642047][ T9694] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 622.653395][T10636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.697320][T10636] usb 1-1: Product: syz [ 622.701561][T10636] usb 1-1: Manufacturer: syz [ 622.763213][T10636] usb 1-1: SerialNumber: syz [ 622.824720][ T9694] usb 7-1: config 0 has no interfaces? [ 622.851404][ T9694] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 622.931930][ T9694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.088041][ T9694] usb 7-1: config 0 descriptor?? [ 623.104032][T10636] ftdi_sio 1-1:129.4: FTDI USB Serial Device converter detected [ 623.159986][T10636] usb 1-1: Detected SIO [ 623.192802][T10636] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 623.224749][T10636] usb 1-1: USB disconnect, device number 89 [ 623.278319][T10636] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 623.329867][T10636] ftdi_sio 1-1:129.4: device disconnected [ 623.358640][ T9694] usb 7-1: string descriptor 0 read error: -71 [ 623.413097][ T9694] usb 7-1: USB disconnect, device number 42 [ 623.489597][ T30] audit: type=1326 audit(1775509357.722:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.8.1258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eef79c819 code=0x0 [ 623.842900][T11332] netlink: 'syz.5.1260': attribute type 13 has an invalid length. [ 624.192080][ T5915] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 624.440656][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.447672][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.542447][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 624.617100][ T5915] usb 1-1: not running at top speed; connect to a high speed hub [ 624.648973][ T5915] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 624.716494][ T5915] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 624.731946][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.748993][ T5915] usb 1-1: Product: syz [ 624.755681][ T5915] usb 1-1: Manufacturer: syz [ 624.761759][ T5915] usb 1-1: SerialNumber: syz [ 625.305169][T11345] netlink: 'syz.0.1259': attribute type 23 has an invalid length. [ 626.274846][T11356] netlink: 'syz.6.1264': attribute type 13 has an invalid length. [ 626.352974][ T144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.514719][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 626.820138][T11362] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1265'. [ 627.066417][T11362] netlink: 'syz.1.1265': attribute type 25 has an invalid length. [ 627.090455][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 628.234010][T11372] netlink: 'syz.8.1266': attribute type 13 has an invalid length. [ 628.602901][T11362] netlink: 'syz.1.1265': attribute type 25 has an invalid length. [ 628.681700][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 628.893190][ T5915] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 628.907085][ T5915] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 628.955808][ T5915] usb 1-1: USB disconnect, device number 90 [ 629.024838][ T8013] udevd[8013]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.661954][ T5928] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 629.824534][ T5928] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 629.833986][ T5928] usb 6-1: config 129 has no interface number 0 [ 629.849408][ T5928] usb 6-1: config 129 interface 4 has no altsetting 0 [ 629.862003][ T5928] usb 6-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 629.878174][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.887462][ T5928] usb 6-1: Product: syz [ 629.896695][ T5928] usb 6-1: Manufacturer: syz [ 629.903049][ T5928] usb 6-1: SerialNumber: syz [ 630.152700][ T5928] ftdi_sio 6-1:129.4: FTDI USB Serial Device converter detected [ 630.165218][ T5928] usb 6-1: Detected SIO [ 630.176337][ T5928] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 630.202141][ T5928] usb 6-1: USB disconnect, device number 40 [ 630.225278][ T5928] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 630.256178][ T5928] ftdi_sio 6-1:129.4: device disconnected [ 630.455408][ T8794] IPVS: starting estimator thread 0... [ 630.542082][T11394] IPVS: using max 32 ests per chain, 76800 per kthread [ 630.682116][ T5928] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 630.763968][ T5915] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 630.819000][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'. [ 630.830455][T11403] netlink: 'syz.1.1273': attribute type 3 has an invalid length. [ 630.843890][T11403] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1273'. [ 630.868646][ T5928] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 630.878226][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 630.894751][T11403] dvmrp12: entered allmulticast mode [ 630.910383][ T5928] usb 7-1: Product: syz [ 630.921179][ T5928] usb 7-1: Manufacturer: syz [ 630.943322][ T5928] usb 7-1: SerialNumber: syz [ 630.954542][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 630.960334][ T5928] usb 7-1: config 0 descriptor?? [ 630.979915][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 630.980340][ T5928] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 631.022013][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 631.029833][ T5915] usb 1-1: config 1 interface 0 has no altsetting 0 [ 631.040871][ T5915] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 631.063203][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.071508][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 631.084106][ T5915] usb 1-1: Product: syz [ 631.088437][ T5915] usb 1-1: Manufacturer: syz [ 631.096140][T11402] dvmrp12: left allmulticast mode [ 631.102302][ T5915] usb 1-1: SerialNumber: syz [ 631.119220][ T5928] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 631.133015][ T5928] usb 7-1: media controller created [ 631.179096][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 631.334355][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input47 [ 631.351647][ T5177] bcm5974 1-1:1.0: could not read from device [ 631.367174][ T5915] usb 1-1: USB disconnect, device number 91 [ 631.589927][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 632.017147][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1277'. [ 632.033944][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1277'. [ 632.232640][ T9694] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 632.346619][T11432] loop5: detected capacity change from 0 to 7 [ 632.360019][T11432] Dev loop5: unable to read RDB block 7 [ 632.375351][T11432] loop5: AHDI p1 p2 p3 [ 632.379669][T11432] loop5: partition table partially beyond EOD, truncated [ 632.388752][T11432] loop5: p1 start 926365495 is beyond EOD, truncated [ 632.396305][T11432] loop5: p2 start 1702059890 is beyond EOD, truncated [ 632.408080][ T9694] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 632.461015][ T9694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.495932][ T9694] usb 9-1: Product: syz [ 632.515442][ T9694] usb 9-1: Manufacturer: syz [ 632.525894][ T9694] usb 9-1: SerialNumber: syz [ 632.548515][ T9694] usb 9-1: config 0 descriptor?? [ 632.571267][ T9694] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 632.809070][T11446] netlink: 'syz.5.1282': attribute type 13 has an invalid length. [ 633.320950][ T5894] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 633.397507][ T5928] cxusb: set interface failed [ 633.412743][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 633.511651][ T5894] usb 1-1: config 129 has an invalid interface number: 4 but max is 0 [ 633.526867][ T5894] usb 1-1: config 129 has no interface number 0 [ 633.548183][ T5894] usb 1-1: config 129 interface 4 has no altsetting 0 [ 633.581214][ T5894] usb 1-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 633.593463][ T5928] DVB: Unable to find symbol mt352_attach() [ 633.610408][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.619923][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 633.637654][ T5894] usb 1-1: Product: syz [ 633.642432][ T5928] zl10353_read_register: readreg error (reg=127, ret==-121) [ 633.668960][ T5894] usb 1-1: Manufacturer: syz [ 633.675520][ T5928] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 633.684493][ T5894] usb 1-1: SerialNumber: syz [ 633.713787][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1285'. [ 633.964340][ T5894] ftdi_sio 1-1:129.4: FTDI USB Serial Device converter detected [ 634.014300][ T5928] rc_core: IR keymap rc-dvico-mce not found [ 634.089556][ T5928] Registered IR keymap rc-empty [ 634.102688][ T9694] gspca_stk1135: reg_w 0xd err -110 [ 634.108866][ T5894] usb 1-1: Detected SIO [ 634.120995][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.134891][ T5928] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 634.145879][ T5894] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 634.171881][ T9694] gspca_stk1135: Sensor write failed [ 634.194507][ T5894] usb 1-1: USB disconnect, device number 92 [ 634.202277][ T5928] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input48 [ 634.237228][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.240856][ T5894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 634.268077][ T5928] dvb-usb: schedule remote query interval to 100 msecs. [ 634.302853][ T5928] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 634.325355][ T9694] gspca_stk1135: Sensor write failed [ 634.354421][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.362556][ T5894] ftdi_sio 1-1:129.4: device disconnected [ 634.412733][ T8794] dvb-usb: bulk message failed: -22 (1/0) [ 634.416761][ T9694] gspca_stk1135: Sensor read failed [ 634.462549][ T5928] usb 7-1: USB disconnect, device number 43 [ 634.506674][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.551900][ T9694] gspca_stk1135: Sensor read failed [ 634.590304][ T9694] gspca_stk1135: Detected sensor type unknown (0x0) [ 634.628523][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.684585][ T9694] gspca_stk1135: Sensor read failed [ 634.712029][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.788470][ T9694] gspca_stk1135: Sensor read failed [ 634.807033][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.843864][ T9694] gspca_stk1135: Sensor write failed [ 634.860811][ T9694] gspca_stk1135: serial bus timeout: status=0x00 [ 634.874166][ T9694] gspca_stk1135: Sensor write failed [ 634.890145][ T9694] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110 [ 634.962799][ T9694] usb 9-1: USB disconnect, device number 12 [ 635.417450][ T5928] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 635.572173][ T9694] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 635.766651][ T9694] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.816388][ T9694] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.868213][ T9694] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 635.985595][ T9694] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 636.062183][ T9694] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.128035][ T9694] usb 9-1: config 0 descriptor?? [ 636.590363][ T9694] usbhid 9-1:0.0: can't add hid device: -71 [ 636.606358][ T9694] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 636.664908][ T9694] usb 9-1: USB disconnect, device number 13 [ 637.210681][T11524] syzkaller0: entered promiscuous mode [ 637.224288][T11524] syzkaller0: entered allmulticast mode [ 637.791901][ T9694] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 638.042610][ T9694] usb 9-1: config 129 has an invalid interface number: 4 but max is 0 [ 638.103342][ T9694] usb 9-1: config 129 has no interface number 0 [ 638.153667][ T9694] usb 9-1: config 129 interface 4 has no altsetting 0 [ 638.186762][ T9694] usb 9-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 638.208709][ T9694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.278550][ T9694] usb 9-1: Product: syz [ 638.284382][ T9694] usb 9-1: Manufacturer: syz [ 638.295385][ T9694] usb 9-1: SerialNumber: syz [ 638.684769][ T9694] ftdi_sio 9-1:129.4: FTDI USB Serial Device converter detected [ 638.710041][ T9694] usb 9-1: Detected SIO [ 638.725640][ T9694] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 638.748650][ T9694] usb 9-1: USB disconnect, device number 14 [ 638.772286][ T9694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 638.813194][ T9694] ftdi_sio 9-1:129.4: device disconnected [ 639.598339][T11540] netlink: 'syz.8.1298': attribute type 13 has an invalid length. [ 641.212002][ T9694] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 641.356816][ T9694] usb 2-1: device descriptor read/64, error -71 [ 641.601950][ T9694] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 641.732091][ T9694] usb 2-1: device descriptor read/64, error -71 [ 641.867510][ T9694] usb usb2-port1: attempt power cycle [ 642.253032][ T9694] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 642.272739][ T9694] usb 2-1: device descriptor read/8, error -71 [ 642.522878][ T9694] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 642.592643][ T9694] usb 2-1: device descriptor read/8, error -71 [ 642.722459][ T9694] usb usb2-port1: unable to enumerate USB device [ 642.812631][T10636] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 642.985995][T10636] usb 7-1: Using ep0 maxpacket: 16 [ 643.016641][T10636] usb 7-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 643.040545][T10636] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.128150][T10636] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.161689][T10636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.194107][T10636] usb 7-1: Product: syz [ 643.211881][T10636] usb 7-1: Manufacturer: syz [ 643.231575][T10636] usb 7-1: SerialNumber: syz [ 643.405256][T11568] veth0: Caught tx_queue_len zero misconfig [ 643.486117][T10636] usb 7-1: 0:2 : does not exist [ 643.760151][T10636] usb 7-1: USB disconnect, device number 44 [ 643.859787][ T8013] udevd[8013]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.118653][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.148752][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.343176][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 644.527490][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 644.545744][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.563310][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 644.576369][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 644.588306][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 644.617026][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.639284][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 644.671071][T11590] fuse: Unknown parameter '' [ 644.686947][ T24] usb 7-1: SerialNumber: syz [ 644.749150][T11579] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 644.766010][T11579] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 644.807312][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 644.825427][T11592] netlink: 'syz.5.1312': attribute type 49 has an invalid length. [ 644.833687][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 645.296152][T11599] netlink: 'syz.5.1313': attribute type 13 has an invalid length. [ 645.542228][ T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 645.662182][ T24] usb 7-1: USB disconnect, device number 45 [ 646.503515][T11611] netlink: 'syz.6.1316': attribute type 16 has an invalid length. [ 646.511560][T11611] netlink: 'syz.6.1316': attribute type 17 has an invalid length. [ 646.685165][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.725136][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.911982][ T9694] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 647.021087][T11611] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.029078][T11611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.060024][T11611] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.067442][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.101937][ T9694] usb 9-1: Using ep0 maxpacket: 16 [ 647.115293][ T9694] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 647.144124][ T9694] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 647.172206][ T9694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.199768][ T9694] usb 9-1: Product: syz [ 647.207693][ T9694] usb 9-1: Manufacturer: syz [ 647.213049][ T9694] usb 9-1: SerialNumber: syz [ 647.230433][ T9694] usb 9-1: config 0 descriptor?? [ 647.255415][ T9694] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 647.266177][ T9694] usb 9-1: Detected FT232R [ 647.311205][T11622] tipc: Enabled bearer , priority 0 [ 647.323466][T11622] syzkaller0: entered promiscuous mode [ 647.329263][T11622] syzkaller0: entered allmulticast mode [ 647.372764][T11622] tipc: Resetting bearer [ 647.600775][T11621] tipc: Resetting bearer [ 647.634788][T11621] tipc: Disabling bearer [ 647.744979][T11628] tap0: tun_chr_ioctl cmd 1074025677 [ 647.753387][T11628] tap0: linktype set to 776 [ 647.765175][T11628] tap0: tun_chr_ioctl cmd 2147767507 [ 647.901018][ T30] audit: type=1326 audit(1775509382.132:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7db9c819 code=0x0 [ 648.012396][ T24] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 648.035624][T11638] fuse: Unknown parameter 'rootodet-000040000' [ 648.175746][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 648.186868][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 648.200074][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 648.218439][ T24] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 648.228625][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.239681][ T24] usb 7-1: Product: syz [ 648.244094][ T8794] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 648.251947][ T24] usb 7-1: Manufacturer: syz [ 648.256833][ T24] usb 7-1: SerialNumber: syz [ 648.273222][ T24] usb 7-1: config 0 descriptor?? [ 648.281632][T11628] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.291236][T11628] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 648.301546][ T24] usb 7-1: ucan: probing device on interface #0 [ 648.412286][ T8794] usb 1-1: Using ep0 maxpacket: 32 [ 648.420309][ T8794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.439647][ T8794] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 648.448905][ T8794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.458588][ T8794] usb 1-1: Product: syz [ 648.465402][ T8794] usb 1-1: Manufacturer: syz [ 648.470506][ T8794] usb 1-1: SerialNumber: syz [ 648.480071][ T8794] usb 1-1: config 0 descriptor?? [ 648.501087][ T24] usb 7-1: ucan: could not read protocol version, ret=-71 [ 648.510798][ T8794] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 648.523863][ T24] usb 7-1: ucan: probe failed; try to update the device firmware [ 648.547061][ T24] usb 7-1: USB disconnect, device number 46 [ 648.623925][ T5915] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 648.733841][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.756208][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.782229][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 648.792242][ T5915] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 648.800969][ T5915] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 648.809821][ T5915] usb 2-1: config 166 has no interface number 0 [ 648.816936][ T5915] usb 2-1: config 166 has no interface number 1 [ 648.824474][ T5915] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 648.853263][ T5915] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 648.865206][ T5915] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 648.886984][ T5915] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 648.921041][ T5915] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 648.947556][ T5915] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 648.963746][ T5915] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 648.976585][ T8794] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 649.004923][ T5915] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 649.018385][ T5915] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 649.020466][ T8794] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 649.064817][ T5915] usb 2-1: config 166 interface 177 has no altsetting 0 [ 649.076675][ T5915] usb 2-1: config 166 interface 34 has no altsetting 0 [ 649.090964][ T5915] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 649.100254][ T8794] usb 1-1: USB disconnect, device number 93 [ 649.108712][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.119881][ T5915] usb 2-1: Product: syz [ 649.127040][ T5915] usb 2-1: Manufacturer: syz [ 649.133294][ T5915] usb 2-1: SerialNumber: syz [ 649.240824][T11648] netlink: 'syz.6.1327': attribute type 10 has an invalid length. [ 649.272083][T11648] team0: Failed to send options change via netlink (err -105) [ 649.279640][T11648] team0: Port device dummy0 added [ 649.380576][T11651] tipc: Enabling of bearer rejected, already enabled [ 649.389025][ T5915] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 649.407481][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1328'. [ 649.436472][T11651] tipc: Disabling bearer [ 649.478915][T11655] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 649.478915][T11655] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 649.478915][T11655] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 649.478915][T11655] 1 3 ram3 0 0 0 0 0 0 0 0 0  (pid: 11655 comm: syz.6.1329) [ 649.517648][ T30] audit: type=1800 audit(1775509383.752:1015): pid=11655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1329" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=46908 res=0 errno=0 [ 649.527305][ T5915] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 649.678761][ T9694] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 649.722273][ T9694] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 649.753662][ T9694] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 649.789220][ T9694] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 649.823848][ T9694] usb 9-1: USB disconnect, device number 15 [ 649.843598][ T9694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 649.870779][ T9694] ftdi_sio 9-1:0.0: device disconnected [ 649.906811][ T5915] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 649.933382][ T5915] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 650.054748][ T5915] uvcvideo 2-1:166.34: No valid video chain found. [ 650.150087][T11676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.225235][ T5915] usb 2-1: USB disconnect, device number 73 [ 650.272455][T11679] No such timeout policy "syz1" [ 650.672356][ T8794] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 650.852018][ T8794] usb 6-1: Using ep0 maxpacket: 16 [ 650.863996][ T8794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.898179][ T8794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.947237][ T8794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 650.980622][ T8794] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 651.020606][ T8794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.060993][ T8794] usb 6-1: config 0 descriptor?? [ 651.336485][T11695] tipc: Started in network mode [ 651.350867][T11695] tipc: Node identity ba816e7b4a81, cluster identity 4711 [ 651.361360][T11695] tipc: Enabled bearer , priority 0 [ 651.425665][T11694] syzkaller0: entered promiscuous mode [ 651.433914][T11694] syzkaller0: entered allmulticast mode [ 651.458444][T11695] sch_tbf: peakrate 9 is lower than or equals to rate 8854291405993397989 ! [ 651.485842][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.510050][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.522619][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.536716][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.871040][T11696] tipc: Resetting bearer [ 651.884763][T11693] tipc: Resetting bearer [ 652.008077][T11693] tipc: Disabling bearer [ 652.075335][ T8794] usbhid 6-1:0.0: can't add hid device: -71 [ 652.087636][ T8794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 652.152220][ T8794] usb 6-1: USB disconnect, device number 41 [ 652.921893][ T8794] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 653.011997][ T5928] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 653.084568][ T8794] usb 7-1: Using ep0 maxpacket: 8 [ 653.103270][ T8794] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 653.117891][ T8794] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.144712][ T8794] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 653.172207][ T8794] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.195787][ T8794] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.211872][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 653.252370][T11698] delete_channel: no stack [ 653.260173][ T5928] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 653.268869][ T8794] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 653.278307][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.293830][ T8794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.320113][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.353071][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 653.376359][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.416455][ T5928] usb 6-1: config 0 descriptor?? [ 653.788082][ T5915] usb 7-1: USB disconnect, device number 47 [ 653.870961][ T5928] logitech 0003:046D:C29C.002B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 654.263651][ T5928] logitech 0003:046D:C29C.002B: no inputs found [ 654.293459][ T5928] usb 6-1: USB disconnect, device number 42 [ 654.701892][ T5915] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 654.743583][ T30] audit: type=1326 audit(1775509388.972:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f774619c819 code=0x7ffc0000 [ 654.812606][ T30] audit: type=1326 audit(1775509388.972:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f774619c819 code=0x7ffc0000 [ 654.850940][ T30] audit: type=1326 audit(1775509388.972:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f774619c819 code=0x7ffc0000 [ 654.877530][ T30] audit: type=1326 audit(1775509388.972:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f774619c819 code=0x7ffc0000 [ 654.901967][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 654.919250][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 654.983954][ T5915] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 655.024952][ T30] audit: type=1326 audit(1775509388.972:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f774619c819 code=0x7ffc0000 [ 655.025367][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 655.097892][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1357'. [ 655.128156][ T30] audit: type=1326 audit(1775509388.972:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f774619c819 code=0x7ffc0000 [ 655.174837][T11773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.212229][ T5915] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 655.252650][T11776] mac80211_hwsim hwsim14 wlan1: Caught tx_queue_len zero misconfig [ 655.261470][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.284116][ T5915] usb 2-1: Product: syz [ 655.311133][ T5915] usb 2-1: Manufacturer: syz [ 655.337483][ T5915] usb 2-1: SerialNumber: syz [ 655.376171][ T5915] usb 2-1: config 0 descriptor?? [ 655.587010][ T30] audit: type=1326 audit(1775509389.822:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11779 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76419c819 code=0x7ffc0000 [ 655.675696][ T30] audit: type=1326 audit(1775509389.852:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11779 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe76419c819 code=0x7ffc0000 [ 655.767314][ T30] audit: type=1326 audit(1775509389.852:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11779 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76419c819 code=0x7ffc0000 [ 655.795268][ T30] audit: type=1326 audit(1775509389.852:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11779 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76419c819 code=0x7ffc0000 [ 655.836969][ T5915] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 656.552266][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.763257][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.072257][ T5915] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 657.110396][T11801] netlink: 182 bytes leftover after parsing attributes in process `syz.8.1366'. [ 657.822982][ T5915] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 657.994124][ T5915] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 658.013299][ T5915] usb 9-1: config 0 has no interface number 0 [ 658.032646][ T5915] usb 9-1: config 0 interface 41 has no altsetting 0 [ 658.055944][ T5915] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 658.067743][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.079547][ T5915] usb 9-1: Product: syz [ 658.089564][ T5915] usb 9-1: Manufacturer: syz [ 658.098758][ T5915] usb 9-1: SerialNumber: syz [ 658.107836][ T5915] usb 9-1: config 0 descriptor?? [ 658.129048][ T8794] usb 2-1: USB disconnect, device number 74 [ 658.152677][ T5928] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 658.347383][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 658.355371][ T1146] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.377120][ T5928] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 658.412403][ T5928] usb 1-1: config 0 has no interface number 0 [ 658.494324][ T5928] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 658.517058][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.537793][ T5928] usb 1-1: Product: syz [ 658.548012][ T5928] usb 1-1: Manufacturer: syz [ 658.618625][ T5928] usb 1-1: SerialNumber: syz [ 658.642595][ T5928] usb 1-1: config 0 descriptor?? [ 658.894454][ T5915] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 658.933049][T11838] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 659.038333][T11838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1370'. [ 659.153801][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 659.241711][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 659.253697][T11846] netlink: 'syz.5.1372': attribute type 13 has an invalid length. [ 659.697732][ T5928] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 659.728078][ T5928] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 660.628537][T11876] fuse: Bad value for 'user_id' [ 660.636678][T11876] fuse: Bad value for 'user_id' [ 660.644207][ T8794] usb 9-1: USB disconnect, device number 16 [ 660.734057][T11878] lo: Caught tx_queue_len zero misconfig [ 661.111860][ T5832] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 661.257510][ T5832] usb 9-1: device descriptor read/64, error -71 [ 661.318393][T11897] tipc: Enabling of bearer rejected, failed to enable media [ 661.512268][ T5832] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 661.635850][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.653332][ T5832] usb 9-1: device descriptor read/64, error -71 [ 661.772141][ T5832] usb usb9-port1: attempt power cycle [ 661.885912][ T5915] usb 1-1: USB disconnect, device number 94 [ 661.924631][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 661.924649][ T30] audit: type=1326 audit(1775509396.162:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.5.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e7db9c819 code=0x0 [ 662.112314][ T5832] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 662.143486][ T5832] usb 9-1: device descriptor read/8, error -71 [ 662.391893][ T5832] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 662.432995][ T5832] usb 9-1: device descriptor read/8, error -71 [ 662.451949][T10636] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 662.552465][ T5832] usb usb9-port1: unable to enumerate USB device [ 662.613982][T10636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.647655][T10636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.671366][T10636] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 662.682125][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.708455][T10636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.745308][T10636] usb 1-1: config 0 descriptor?? [ 662.832278][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.992467][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.242915][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.305700][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.353495][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.372866][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.390167][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.415927][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.431892][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.431932][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.453227][T10636] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 663.472154][ T5894] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 663.501006][T10636] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 663.569331][T11918] ip6tnl0: Caught tx_queue_len zero misconfig [ 663.581640][T10636] cp2112 0003:10C4:EA90.002C: Part Number: 0x00 Device Version: 0x00 [ 663.632728][ T5894] usb 6-1: device descriptor read/64, error -71 [ 663.722145][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.804850][T10636] cp2112 0003:10C4:EA90.002C: error requesting SMBus config [ 663.819393][T10636] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -71 [ 663.834182][T10636] usb 1-1: USB disconnect, device number 95 [ 663.898007][ T5894] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 664.061949][ T5894] usb 6-1: device descriptor read/64, error -71 [ 664.121868][ T8794] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 664.172604][ T5894] usb usb6-port1: attempt power cycle [ 664.292111][ T8794] usb 2-1: Using ep0 maxpacket: 16 [ 664.317020][ T8794] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 664.344582][ T8794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.362754][ T8794] usb 2-1: Product: syz [ 664.367295][ T8794] usb 2-1: Manufacturer: syz [ 664.372405][ T8794] usb 2-1: SerialNumber: syz [ 664.392090][T11947] ipt_REJECT: TCP_RESET invalid for non-tcp [ 664.409545][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1395'. [ 664.417801][ T8794] usb 2-1: config 0 descriptor?? [ 664.516682][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1395'. [ 664.533979][ T5894] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 664.576524][ T5894] usb 6-1: device descriptor read/8, error -71 [ 664.682827][T11953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.737522][T11953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.751554][T11953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.775246][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.816217][T11959] syzkaller0: entered promiscuous mode [ 664.824402][T11959] syzkaller0: entered allmulticast mode [ 664.868957][ T8794] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 664.879685][ T5894] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 664.894972][ T8794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.908123][ T8794] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 664.918261][ T8794] usb 2-1: media controller created [ 664.924051][ T5894] usb 6-1: device descriptor read/8, error -71 [ 664.971010][ T8794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.035398][ T5894] usb usb6-port1: unable to enumerate USB device [ 665.223630][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.615838][ T8794] zl10353_read_register: readreg error (reg=127, ret==0) [ 665.628931][ T8794] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 665.645744][ T8794] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 665.662291][T11935] dtv5100: wlen = 0, aborting. [ 665.823711][ T8794] usb 2-1: USB disconnect, device number 75 [ 665.870744][ T8794] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 666.118569][T11976] input: syz1 as /devices/virtual/input/input50 [ 666.182179][ T5894] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 666.357176][ T5894] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 666.376104][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.401855][ T5894] usb 1-1: Product: syz [ 666.406686][ T5894] usb 1-1: Manufacturer: syz [ 666.427437][ T5894] usb 1-1: SerialNumber: syz [ 666.443600][ T5894] usb 1-1: config 0 descriptor?? [ 666.688286][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 666.832355][ T8794] net_ratelimit: 3 callbacks suppressed [ 666.832378][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.040468][T11987] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1406'. [ 667.262003][ T8794] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 667.282571][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 667.406791][ T5894] usb 1-1: Firmware version (0.0) predates our first public release. [ 667.416409][ T5894] usb 1-1: Please update to version 0.2 or newer [ 667.437775][ T8794] usb 6-1: unable to get BOS descriptor or descriptor too short [ 667.453117][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 667.467726][T12000] futex_wake_op: syz.1.1410 tries to shift op by 32; fix this program [ 667.479591][ T8794] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 667.488447][ T24] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 667.498192][ T8794] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 667.511377][ T5894] usb 1-1: USB disconnect, device number 96 [ 667.518859][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.528447][ T8794] usb 6-1: config 63 has no interface number 0 [ 667.541453][ T8794] usb 6-1: config 63 interface 66 has no altsetting 0 [ 667.555738][ T8794] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 667.574866][ T24] usb 9-1: config 0 descriptor?? [ 667.581744][ T8794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.595603][ T24] as10x_usb: device has been detected [ 667.615210][ T8794] usb 6-1: Product: syz [ 667.624133][ T8794] usb 6-1: Manufacturer: syz [ 667.628807][ T8794] usb 6-1: SerialNumber: syz [ 667.636764][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 667.684836][ T24] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 667.812670][T12005] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 667.821137][ T24] as10x_usb: error during firmware upload part1 [ 667.830071][ T24] Registered device nBox DVB-T Dongle [ 667.882444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.914634][ T8794] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 667.929212][T12005] bond1: entered promiscuous mode [ 667.939388][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 667.959010][T12005] bond1: entered allmulticast mode [ 667.982477][T12005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.989635][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 668.016204][T12009] erspan1: entered allmulticast mode [ 668.032361][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 668.058473][T12009] bond1: (slave erspan1): making interface the new active one [ 668.073899][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 668.092073][T12009] erspan1: entered promiscuous mode [ 668.101254][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 668.124406][T12009] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 668.133375][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 668.168685][ T8794] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 668.197009][ T8794] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 668.277338][ T8794] usb 6-1: USB disconnect, device number 47 [ 668.306974][T12005] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 668.361408][T12005] bond2: (slave lo): Enslaving as an active interface with an up link [ 668.400259][T12005] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 668.451306][T12013] bond1 (unregistering): (slave erspan1): Releasing active interface [ 668.459992][T12013] erspan1: left promiscuous mode [ 668.471989][T12013] bond1 (unregistering): Released all slaves [ 668.608457][T12008] kAFS: unable to lookup cell '' [ 668.612159][ T8794] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 668.624471][T12008] kAFS: unable to lookup cell '(,c' [ 668.785625][ T8794] usb 6-1: unable to get BOS descriptor or descriptor too short [ 668.797710][ T8794] usb 6-1: not running at top speed; connect to a high speed hub [ 668.808115][ T8794] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 668.817625][ T8794] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 668.830881][ T8794] usb 6-1: config 63 has no interface number 0 [ 668.841921][ T8794] usb 6-1: config 63 interface 66 has no altsetting 0 [ 668.851443][ T8794] usb 6-1: string descriptor 0 read error: -22 [ 668.859659][ T8794] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 668.869376][ T8794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.895506][ T8794] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 668.908105][T12021] syzkaller0: entered promiscuous mode [ 668.914309][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.923505][T12021] syzkaller0: entered allmulticast mode [ 668.947247][T12021] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 669.072103][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.094902][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.117233][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.156655][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: -71 (exp. 1). [ 669.190935][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 669.211732][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 669.225648][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 669.242764][ T8794] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 669.254632][ T8794] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 669.265809][ T8794] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 669.284836][ T8794] usb 6-1: USB disconnect, device number 48 [ 669.441921][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 669.591881][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 669.598969][ T24] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 669.610251][ T24] usb 1-1: config 0 has no interface number 0 [ 669.617931][ T24] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 669.630268][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.649253][ T24] usb 1-1: config 0 descriptor?? [ 669.775831][ T24] viperboard 1-1:0.143: version 0.00 found at bus 001 address 097 [ 669.786354][T12033] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 669.823540][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 669.846162][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 669.866621][T12025] fuse: Bad value for 'group_id' [ 669.885836][T12025] fuse: Bad value for 'group_id' [ 669.916409][ T24] usb 1-1: USB disconnect, device number 97 [ 669.952140][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.101704][ T5832] usb 9-1: USB disconnect, device number 21 [ 670.163910][ T5832] Unregistered device nBox DVB-T Dongle [ 670.175365][ T5832] as10x_usb: device has been disconnected [ 670.328757][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1421'. [ 670.391485][T12038] bridge_slave_1: left allmulticast mode [ 670.398155][T12038] bridge_slave_1: left promiscuous mode [ 670.406529][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.419653][T12038] bridge_slave_0: left allmulticast mode [ 670.439494][T12042] x_tables: duplicate underflow at hook 1 [ 670.456037][T12038] bridge_slave_0: left promiscuous mode [ 670.469447][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.479977][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1421'. [ 670.992421][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.132032][ T5832] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 671.295384][ T5832] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 671.324117][ T5832] usb 9-1: config 0 has no interface number 0 [ 671.344095][ T5832] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 671.355661][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.365760][ T5832] usb 9-1: Product: syz [ 671.370073][ T5832] usb 9-1: Manufacturer: syz [ 671.384992][ T5832] usb 9-1: SerialNumber: syz [ 671.405966][ T5832] usb 9-1: config 0 descriptor?? [ 671.832882][ T5832] usb 9-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 671.877708][ T5832] usb 9-1: Firmware version (0.0) predates our first public release. [ 671.886094][ T5915] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 671.917493][ T5832] usb 9-1: Please update to version 0.2 or newer [ 672.032235][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.071922][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 672.096536][ T5915] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 672.112166][ T9694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.120563][ T5915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.134379][ T5832] usb 9-1: USB disconnect, device number 22 [ 672.168618][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.231849][ T5915] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 672.286824][ T5915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 672.322858][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.379345][ T5915] usbtmc 6-1:16.0: bulk endpoints not found [ 672.432144][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.074136][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.161866][ T5832] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 673.341931][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 673.354128][ T5832] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 673.363354][ T5832] usb 9-1: config 0 has no interface number 0 [ 673.379367][ T5832] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 673.406342][ T5832] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 673.420543][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.436908][ T5832] usb 9-1: Product: syz [ 673.447262][ T5832] usb 9-1: Manufacturer: syz [ 673.458441][ T5832] usb 9-1: SerialNumber: syz [ 673.485865][ T5832] usb 9-1: config 0 descriptor?? [ 673.498331][T12081] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 673.714758][T12081] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 674.112208][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.135671][T12081] fuse: Invalid uid '00000000000000000004' [ 675.152236][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.165629][ T9694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.635860][ T9694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.645691][T10636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.691293][T12109] fuse: Bad value for 'rootmode' [ 675.698214][T12109] fuse: blksize only supported for fuseblk [ 675.705335][T12111] fuse: blksize only supported for fuseblk [ 675.802169][ T5832] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 675.833322][ T5832] asix 9-1:0.188: probe with driver asix failed with error -71 [ 675.860549][ T5832] usb 9-1: USB disconnect, device number 23 [ 675.912604][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1440'. [ 676.102622][ T24] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 676.202149][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.284066][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.296085][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.306350][T12134] netlink: 'syz.8.1444': attribute type 2 has an invalid length. [ 676.314336][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 676.327284][T12134] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1444'. [ 676.338135][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 676.347731][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.365422][ T24] usb 1-1: config 0 descriptor?? [ 676.574397][ T8794] usb 6-1: USB disconnect, device number 49 [ 676.855931][T12145] ptrace attach of "./syz-executor exec"[5846] was attempted by "  ./file0    N$   /sys/kernel/debug/binder/stats  @}P- \x09$  \x09 d \x09! 3\x22 \x09 8    \x0c   [ 676.861082][T12143] lo: Caught tx_queue_len zero misconfig [ 676.967216][ T5832] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 677.133805][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.146531][ T5832] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 677.157401][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.168296][ T5832] usb 2-1: Product: syz [ 677.176326][ T5832] usb 2-1: Manufacturer: syz [ 677.181647][ T5832] usb 2-1: SerialNumber: syz [ 677.200097][ T5832] usb 2-1: config 0 descriptor?? [ 677.218367][ T5832] usb 2-1: ucan: probing device on interface #0 [ 677.232981][ T5894] net_ratelimit: 2 callbacks suppressed [ 677.233000][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.242323][ T5832] usb 2-1: ucan: invalid EP count (0) [ 677.272425][ T5832] usb 2-1: ucan: probe failed; try to update the device firmware [ 677.326973][T12148] tunl0: Caught tx_queue_len zero misconfig [ 677.482805][T12141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.532669][T12141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.562025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.571141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.607631][ T5894] usb 2-1: USB disconnect, device number 77 [ 677.715733][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 678.198486][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.273953][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.337531][T12168] tipc: Enabling of bearer rejected, failed to enable media [ 679.312374][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.691894][ T8794] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 679.822068][ T8794] usb 2-1: device descriptor read/64, error -71 [ 680.050185][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 680.062933][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 680.075158][ T24] usb 1-1: USB disconnect, device number 98 [ 680.091901][ T8794] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 680.241882][ T8794] usb 2-1: device descriptor read/64, error -71 [ 680.352772][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.362727][ T8794] usb usb2-port1: attempt power cycle [ 680.721892][ T8794] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 680.752831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.765646][ T8794] usb 2-1: device descriptor read/8, error -71 [ 680.807988][T12192] netlink: 'syz.0.1462': attribute type 13 has an invalid length. [ 681.019602][ T8794] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 681.072782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.087148][ T24] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 681.104612][ T8794] usb 2-1: device descriptor read/8, error -71 [ 681.182134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.212216][ T8794] usb usb2-port1: unable to enumerate USB device [ 681.231951][ T24] usb 9-1: device descriptor read/64, error -71 [ 681.483506][ T24] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 681.642023][ T24] usb 9-1: device descriptor read/64, error -71 [ 681.752830][ T24] usb usb9-port1: attempt power cycle [ 681.989112][T12212] netlink: 'syz.0.1466': attribute type 10 has an invalid length. [ 682.001936][T12212] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 682.101989][ T24] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 682.123402][ T24] usb 9-1: device descriptor read/8, error -71 [ 682.361863][ T24] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 682.382890][ T24] usb 9-1: device descriptor read/8, error -71 [ 682.432132][ T5928] net_ratelimit: 2 callbacks suppressed [ 682.432189][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.492931][ T24] usb usb9-port1: unable to enumerate USB device [ 682.531890][ T8794] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 682.692107][ T8794] usb 6-1: Using ep0 maxpacket: 32 [ 682.699916][ T8794] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 682.710525][ T8794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.733792][ T8794] usb 6-1: config 0 descriptor?? [ 682.750844][ T8794] gspca_main: sq930x-2.14.0 probing 041e:403c [ 682.912442][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.927831][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.936232][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 682.963144][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.978266][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.101956][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 683.126445][ T24] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 683.147046][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.163841][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.178122][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 683.194333][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.231902][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.267412][ T24] usbtmc 2-1:16.0: bulk endpoints not found [ 683.381939][ T8794] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 683.387995][ T8794] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 683.425891][ T8794] usb 6-1: USB disconnect, device number 50 [ 683.474510][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.277236][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.524625][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.234398][T10636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.562102][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.880500][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.901325][T10636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.913600][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.920013][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.933593][ T8531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.943131][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.315380][ T8794] usb 2-1: USB disconnect, device number 82 [ 686.502125][ T24] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 686.668975][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 686.678547][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 686.688579][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.699851][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 686.711711][ T24] usb 1-1: config 1 has no interface number 0 [ 686.719377][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 686.730454][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.775959][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 687.052350][ T24] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 687.075689][ T24] snd_usb_pod 1-1:1.1: invalid control EP [ 687.081511][ T24] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 687.093341][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 687.123945][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 687.490528][T12299] fuse: Bad value for 'fd' [ 687.632737][ T24] net_ratelimit: 2 callbacks suppressed [ 687.632758][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.672239][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.922365][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.300401][ T24] usb 1-1: USB disconnect, device number 100 [ 689.598255][T12316] netlink: 'syz.0.1492': attribute type 5 has an invalid length. [ 689.712177][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.352415][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 690.549843][T12338] netlink: 'syz.0.1499': attribute type 4 has an invalid length. [ 690.618937][T12340] FAULT_INJECTION: forcing a failure. [ 690.618937][T12340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.654021][T12340] CPU: 1 UID: 0 PID: 12340 Comm: syz.6.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.654058][T12340] Tainted: [L]=SOFTLOCKUP [ 690.654067][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 690.654080][T12340] Call Trace: [ 690.654089][T12340] [ 690.654099][T12340] dump_stack_lvl+0xe8/0x150 [ 690.654135][T12340] should_fail_ex+0x412/0x560 [ 690.654165][T12340] _copy_to_user+0x31/0xb0 [ 690.654186][T12340] simple_read_from_buffer+0xe1/0x170 [ 690.654213][T12340] proc_fail_nth_read+0x1bb/0x230 [ 690.654239][T12340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.654265][T12340] ? rw_verify_area+0x2a6/0x4d0 [ 690.654282][T12340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.654306][T12340] vfs_read+0x20c/0xa70 [ 690.654322][T12340] ? fdget_pos+0x246/0x320 [ 690.654340][T12340] ? __pfx___mutex_lock+0x10/0x10 [ 690.654362][T12340] ? __pfx_vfs_read+0x10/0x10 [ 690.654380][T12340] ? __fget_files+0x2a/0x420 [ 690.654404][T12340] ? __fget_files+0x3a0/0x420 [ 690.654417][T12340] ? __fget_files+0x2a/0x420 [ 690.654438][T12340] ksys_read+0x150/0x270 [ 690.654457][T12340] ? __pfx_ksys_read+0x10/0x10 [ 690.654482][T12340] do_syscall_64+0x14d/0xf80 [ 690.654503][T12340] ? trace_irq_disable+0x3b/0x150 [ 690.654522][T12340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.654538][T12340] ? clear_bhb_loop+0x40/0x90 [ 690.654557][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.654573][T12340] RIP: 0033:0x7fe76415d04e [ 690.654588][T12340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 690.654601][T12340] RSP: 002b:00007fe764ffafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.654618][T12340] RAX: ffffffffffffffda RBX: 00007fe764ffb6c0 RCX: 00007fe76415d04e [ 690.654629][T12340] RDX: 000000000000000f RSI: 00007fe764ffb0a0 RDI: 0000000000000004 [ 690.654639][T12340] RBP: 00007fe764ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 690.654650][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.654659][T12340] R13: 00007fe764416038 R14: 00007fe764415fa0 R15: 00007fe76453fa48 [ 690.654683][T12340] [ 690.900351][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.910089][ T5928] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 691.018025][ T5832] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 691.159662][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 691.199146][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 691.338111][ T5928] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 691.390686][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 691.391100][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 691.411038][ T5928] usb 6-1: Product: syz [ 691.416149][ T5928] usb 6-1: Manufacturer: syz [ 691.424900][ T5928] usb 6-1: SerialNumber: syz [ 691.563365][ T5928] usb 6-1: config 0 descriptor?? [ 691.574467][ T5928] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 691.583522][ T5928] pctv452e: pctv452e_power_ctrl: 1 [ 691.583522][ T5928] [ 691.774311][ T5928] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 691.774311][ T5928] [ 691.815744][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 691.862949][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 691.937927][ T5928] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 691.953564][T10636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.962884][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.988844][ T5928] usb 6-1: USB disconnect, device number 51 [ 692.047179][ T5832] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 692.059141][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.085049][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.122342][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 692.136705][ T5832] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 692.146105][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.157181][ T5832] usb 2-1: config 0 descriptor?? [ 692.633870][T12358] netlink: 'syz.8.1504': attribute type 7 has an invalid length. [ 692.645908][T12358] netlink: 'syz.8.1504': attribute type 8 has an invalid length. [ 692.659595][T12359] netlink: 'syz.8.1504': attribute type 7 has an invalid length. [ 692.669926][T12359] netlink: 'syz.8.1504': attribute type 8 has an invalid length. [ 692.705227][ T5928] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 692.779608][T12364] ipt_REJECT: TCP_RESET invalid for non-tcp [ 692.809112][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1507'. [ 692.861897][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 692.869064][ T5928] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 692.879771][ T5928] usb 6-1: config 0 has no interface number 0 [ 692.889036][ T5928] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 692.891851][ T5894] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 692.911263][ T5928] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 692.937080][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1507'. [ 692.980874][ T5928] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 692.993518][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.005922][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.024546][ T5928] usb 6-1: Product: syz [ 693.030553][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.041816][ T5928] usb 6-1: Manufacturer: syz [ 693.046506][ T5928] usb 6-1: SerialNumber: syz [ 693.067345][ T5928] usb 6-1: config 0 descriptor?? [ 693.104148][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 693.112052][ T5894] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 693.170554][ T5894] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.182699][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.190655][ T5894] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 693.207134][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.472417][T12361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.488468][T12373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.497668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.506099][ T5928] radio-si470x 6-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 693.506127][ T5928] radio-si470x 6-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 693.526917][T12361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.558330][ T5915] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 693.566527][T12373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.576259][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.591970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.601331][ T5915] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 693.708518][ T5928] radio-si470x 6-1:0.35: software version 146, hardware version 66 [ 693.726453][ T5928] radio-si470x 6-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 693.780052][T12373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.789084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.926086][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 693.988825][ T5894] hub 1-1:32.0: bad descriptor, ignoring hub [ 694.012904][ T5894] hub 1-1:32.0: probe with driver hub failed with error -5 [ 694.033077][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.233878][ T5894] usb 1-1: USB disconnect, device number 101 [ 694.241904][ T5915] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 694.263171][ T5928] radio-si470x 6-1:0.35: si470x_set_report: usb_control_msg returned -110 [ 694.290883][ T5928] radio-si470x 6-1:0.35: submitting int urb failed (-90) [ 694.317319][ T5928] radio-si470x 6-1:0.35: si470x_set_report: usb_control_msg returned -32 [ 694.335749][ T5928] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -22 [ 694.384608][ T5928] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 694.437966][ T5915] usb 9-1: Using ep0 maxpacket: 32 [ 694.448311][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.480376][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.492433][ T5894] usb 6-1: USB disconnect, device number 52 [ 694.521071][ T5915] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 694.531562][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.577596][ T5915] usb 9-1: config 0 descriptor?? [ 694.811092][ T5915] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 694.831542][ T5915] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 695.006874][ T5915] ft260 0003:0403:6030.002E: failed to retrieve chip version [ 695.015888][T10636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.039862][ T5915] ft260 0003:0403:6030.002E: probe with driver ft260 failed with error -32 [ 695.171951][ T5915] usb 9-1: USB disconnect, device number 28 [ 695.472204][ T31] INFO: task syz.7.931:10049 blocked for more than 143 seconds. [ 695.522600][ T31] Tainted: G L syzkaller #0 [ 695.539247][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.554989][ T31] task:syz.7.931 state:D stack:28288 pid:10049 tgid:10043 ppid:9509 task_flags:0x400040 flags:0x00080002 [ 695.634242][ T31] Call Trace: [ 695.644112][ T31] [ 695.675937][ T31] __schedule+0x15dd/0x52d0 [ 695.724579][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 695.762455][ T31] ? __pfx___schedule+0x10/0x10 [ 695.792174][ T31] ? schedule+0x90/0x360 [ 695.807315][ T31] schedule+0x164/0x360 [ 695.811945][ T5894] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 695.835758][ T31] schedule_preempt_disabled+0x13/0x30 [ 695.865250][ T31] __mutex_lock+0x7fe/0x1300 [ 695.880882][ T31] ? __mutex_lock+0x5ac/0x1300 [ 695.890882][ T31] ? blk_trace_startstop+0x8f/0x610 [ 695.898002][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 695.904320][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 695.910533][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.934201][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 695.945049][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 695.977133][ T31] blk_trace_startstop+0x8f/0x610 [ 695.985367][ T31] ? __pfx_blk_trace_startstop+0x10/0x10 [ 695.986576][ T5894] usb 9-1: Using ep0 maxpacket: 32 [ 696.018944][ T31] blk_trace_ioctl+0x314/0x920 [ 696.034833][ T31] ? kernel_text_address+0xa5/0xe0 [ 696.051467][ T5894] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.068813][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 696.098153][ T5894] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x8 has invalid wMaxPacketSize 0 [ 696.102169][ T31] ? unwind_get_return_address+0x4d/0x90 [ 696.165564][ T5894] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 696.171989][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 696.209753][ T31] ? arch_stack_walk+0xfb/0x150 [ 696.221878][ T5894] usb 9-1: config 0 interface 0 has no altsetting 0 [ 696.228648][ T31] ? stack_trace_save+0xa9/0x100 [ 696.241964][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 696.255451][ T5894] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 696.255451][ T31] ? stack_depot_save_flags+0x33/0x810 [ 696.255502][ T31] ? kasan_save_track+0x4f/0x80 [ 696.295185][ T31] ? kasan_save_track+0x3e/0x80 [ 696.306629][ T31] ? kasan_save_free_info+0x46/0x50 [ 696.317283][ T31] ? __kasan_slab_free+0x5c/0x80 [ 696.317312][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.346298][ T5894] usb 9-1: config 0 descriptor?? [ 696.361497][ T31] ? kfree+0x1c1/0x630 [ 696.384065][ T31] ? tomoyo_path_number_perm+0x501/0x630 [ 696.420147][ T31] ? security_file_ioctl+0xc3/0x2a0 [ 696.432976][ T31] ? __se_sys_ioctl+0x47/0x170 [ 696.446982][ T31] ? do_syscall_64+0x14d/0xf80 [ 696.463343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.480233][ T31] blkdev_common_ioctl+0x13a7/0x3250 [ 696.489872][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 696.501865][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 696.516651][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 696.536111][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 696.554666][ T5832] usbhid 2-1:0.0: can't add hid device: -71 [ 696.566961][ T31] ? do_vfs_ioctl+0x1166/0x1530 [ 696.579516][ T5832] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 696.588153][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 696.609552][ T31] ? irqentry_exit+0x59e/0x620 [ 696.622590][ T5832] usb 2-1: USB disconnect, device number 83 [ 696.631058][ T31] blkdev_ioctl+0x528/0x740 [ 696.661046][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.678024][ T31] ? __fget_files+0x2a/0x420 [ 696.683760][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 696.691242][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.706337][ T31] __se_sys_ioctl+0xfc/0x170 [ 696.726649][ T31] do_syscall_64+0x14d/0xf80 [ 696.746884][ T31] ? trace_irq_disable+0x3b/0x150 [ 696.761240][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.773094][ T31] ? clear_bhb_loop+0x40/0x90 [ 696.777967][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.793423][ T31] RIP: 0033:0x7f184c39c819 [ 696.802590][ T31] RSP: 002b:00007f184d16f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.813649][ T31] RAX: ffffffffffffffda RBX: 00007f184c616270 RCX: 00007f184c39c819 [ 696.823804][ T31] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000005 [ 696.833511][ T31] RBP: 00007f184c432c91 R08: 0000000000000000 R09: 0000000000000000 [ 696.842020][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.875560][ T31] R13: 00007f184c616308 R14: 00007f184c616270 R15: 00007f184c73fa48 [ 696.925296][ T31] [ 696.930624][ T31] INFO: task syz.7.931:10050 blocked for more than 144 seconds. [ 696.951947][ T31] Tainted: G L syzkaller #0 [ 696.960026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 696.969349][ T31] task:syz.7.931 state:D stack:28664 pid:10050 tgid:10043 ppid:9509 task_flags:0x400040 flags:0x00080002 [ 696.984241][ T31] Call Trace: [ 696.987819][ T31] [ 696.991965][ T31] __schedule+0x15dd/0x52d0 [ 696.996711][ T31] ? __pfx___schedule+0x10/0x10 [ 697.001707][ T31] ? schedule+0x90/0x360 [ 697.006173][ T31] schedule+0x164/0x360 [ 697.010509][ T31] schedule_preempt_disabled+0x13/0x30 [ 697.019519][ T31] __mutex_lock+0x7fe/0x1300 [ 697.025724][ T31] ? __mutex_lock+0x5ac/0x1300 [ 697.031864][ T31] ? blk_trace_ioctl+0x39a/0x920 [ 697.036971][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.042282][ T31] blk_trace_ioctl+0x39a/0x920 [ 697.047247][ T31] ? kernel_text_address+0xa5/0xe0 [ 697.054764][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 697.060503][ T31] ? unwind_get_return_address+0x4d/0x90 [ 697.070574][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 697.080685][ T31] ? arch_stack_walk+0xfb/0x150 [ 697.090824][ T31] ? stack_trace_save+0xa9/0x100 [ 697.105128][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 697.117462][ T31] ? kasan_save_free_info+0x46/0x50 [ 697.130633][ T31] ? stack_depot_save_flags+0x33/0x810 [ 697.149262][ T31] ? format_decode+0xd0/0xe10 [ 697.158058][ T31] ? kasan_save_track+0x4f/0x80 [ 697.164509][ T31] ? kasan_save_track+0x3e/0x80 [ 697.169807][ T31] ? kasan_save_free_info+0x46/0x50 [ 697.175532][ T31] ? __kasan_slab_free+0x5c/0x80 [ 697.187148][ T31] ? kfree+0x1c1/0x630 [ 697.191533][ T31] ? tomoyo_path_number_perm+0x501/0x630 [ 697.197832][ T31] ? security_file_ioctl+0xc3/0x2a0 [ 697.207965][ T31] ? __se_sys_ioctl+0x47/0x170 [ 697.213252][ T31] ? do_syscall_64+0x14d/0xf80 [ 697.219450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.226502][ T31] blkdev_common_ioctl+0x13a7/0x3250 [ 697.237600][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 697.245579][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 697.257800][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 697.265383][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 697.271452][ T31] ? do_vfs_ioctl+0x1166/0x1530 [ 697.277719][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 697.283481][ T31] ? irqentry_exit+0x59e/0x620 [ 697.292090][ T31] blkdev_ioctl+0x528/0x740 [ 697.302270][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 697.318241][ T31] ? __fget_files+0x2a/0x420 [ 697.327779][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 697.333135][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 697.347578][ T31] __se_sys_ioctl+0xfc/0x170 [ 697.368674][ T31] do_syscall_64+0x14d/0xf80 [ 697.378811][ T31] ? trace_irq_disable+0x3b/0x150 [ 697.393170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.407276][ T31] ? clear_bhb_loop+0x40/0x90 [ 697.413365][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.422146][ T31] RIP: 0033:0x7f184c39c819 [ 697.430636][ T31] RSP: 002b:00007f1849df2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.451457][ T31] RAX: ffffffffffffffda RBX: 00007f184c616360 RCX: 00007f184c39c819 [ 697.475436][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000005 [ 697.492752][ T31] RBP: 00007f184c432c91 R08: 0000000000000000 R09: 0000000000000000 [ 697.510880][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.529390][ T31] R13: 00007f184c6163f8 R14: 00007f184c616360 R15: 00007f184c73fa48 [ 697.548374][ T31] [ 697.556752][ T31] [ 697.556752][ T31] Showing all locks held in the system: [ 697.613708][ T31] 1 lock held by khungtaskd/31: [ 697.624703][ T31] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 697.650121][ T31] 2 locks held by getty/5582: [ 697.659591][ T31] #0: ffff888032fdb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 697.685067][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 697.709159][ T31] 5 locks held by kworker/1:4/5894: [ 697.723212][ T31] #0: ffff888021aa1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 697.747112][ T31] #1: ffffc9000437fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 697.774752][ T31] #2: ffff88823beba1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 697.796756][ T31] #3: ffff88805be821e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 697.825245][ T31] #4: ffff88805be851a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 697.845683][ T31] 3 locks held by syz.7.931/10046: [ 697.857006][ T31] 1 lock held by syz.7.931/10049: [ 697.866761][ T31] #0: ffff888025645ea8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x8f/0x610 [ 697.889849][ T31] 1 lock held by syz.7.931/10050: [ 697.901569][ T31] #0: ffff888025645ea8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x39a/0x920 [ 697.925291][ T31] 1 lock held by syz.1.1493/12320: [ 697.938563][ T31] #0: ffffffff8e764780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 697.959689][ T31] 1 lock held by syz.5.1513/12393: [ 697.971184][ T31] #0: ffffffff8e764780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 697.993246][ T31] 1 lock held by syz.5.1513/12397: [ 698.001904][ C1] net_ratelimit: 117 callbacks suppressed [ 698.001921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.016684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.029021][ T31] [ 698.037351][ T31] ============================================= [ 698.037351][ T31] [ 698.058795][ T31] NMI backtrace for cpu 0 [ 698.058821][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 698.058851][ T31] Tainted: [L]=SOFTLOCKUP [ 698.058859][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.058872][ T31] Call Trace: [ 698.058881][ T31] [ 698.058891][ T31] dump_stack_lvl+0xe8/0x150 [ 698.058930][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 698.058948][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 698.058995][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 698.059023][ T31] sys_info+0x135/0x170 [ 698.059052][ T31] watchdog+0xfd9/0x1030 [ 698.059077][ T31] ? watchdog+0x21a/0x1030 [ 698.059104][ T31] kthread+0x388/0x470 [ 698.059120][ T31] ? __pfx_watchdog+0x10/0x10 [ 698.059132][ T31] ? __pfx_kthread+0x10/0x10 [ 698.059167][ T31] ret_from_fork+0x51e/0xb90 [ 698.059199][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 698.059226][ T31] ? __switch_to+0xc7d/0x1450 [ 698.059254][ T31] ? __pfx_kthread+0x10/0x10 [ 698.059276][ T31] ret_from_fork_asm+0x1a/0x30 [ 698.059338][ T31] [ 698.059348][ T31] Sending NMI from CPU 0 to CPUs 1: [ 698.072306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.075982][ C1] NMI backtrace for cpu 1 [ 698.076002][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.076026][ C1] Tainted: [L]=SOFTLOCKUP [ 698.076034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.076045][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 698.076074][ C1] Code: e8 6e 5e 84 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f ad ee fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 37 71 06 cc 44 89 f9 80 e1 07 [ 698.076090][ C1] RSP: 0018:ffffc90000a07eb0 EFLAGS: 00000002 [ 698.076107][ C1] RAX: 1ffffffff34bb520 RBX: 00000000000003fd RCX: 0000000000000000 [ 698.076119][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 698.076130][ C1] RBP: ffffffff9a5db150 R08: ffff8880252d0237 R09: 1ffff11004a5a046 [ 698.076143][ C1] R10: dffffc0000000000 R11: ffffffff85416110 R12: dffffc0000000000 [ 698.076157][ C1] R13: 0000000000000000 R14: ffffffff9a5daec0 R15: 0000000000000000 [ 698.076169][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 698.076183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.076196][ C1] CR2: 00002000001eb030 CR3: 0000000024bb4000 CR4: 00000000003526f0 [ 698.076212][ C1] DR0: 0000000000000678 DR1: 00000000000000e8 DR2: 8000000000000001 [ 698.076224][ C1] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 698.076235][ C1] Call Trace: [ 698.076242][ C1] [ 698.076252][ C1] wait_for_lsr+0x1a1/0x2f0 [ 698.076277][ C1] serial8250_console_write+0x1348/0x1ba0 [ 698.076307][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 698.076329][ C1] ? lock_acquire+0xf0/0x2e0 [ 698.076354][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 698.076374][ C1] ? console_flush_all+0x123/0xb20 [ 698.076392][ C1] console_flush_all+0x718/0xb20 [ 698.076412][ C1] ? console_flush_all+0x123/0xb20 [ 698.076432][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 698.076453][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 698.076475][ C1] console_unlock+0xd1/0x1c0 [ 698.076503][ C1] ? __pfx_console_unlock+0x10/0x10 [ 698.076531][ C1] ? vprintk_emit+0x2cf/0x560 [ 698.076555][ C1] ? vprintk_emit+0x2cf/0x560 [ 698.076581][ C1] vprintk_emit+0x485/0x560 [ 698.076608][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 698.076639][ C1] _printk+0xdd/0x130 [ 698.076659][ C1] ? __pfx__printk+0x10/0x10 [ 698.076676][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 698.076698][ C1] ? ___ratelimit+0x58c/0x8d0 [ 698.076721][ C1] gred_dequeue+0x4e6/0x6f0 [ 698.076742][ C1] __qdisc_run+0x26c/0x15d0 [ 698.076780][ C1] __dev_queue_xmit+0x1bad/0x3890 [ 698.076813][ C1] ? ktime_get+0x1d2/0x200 [ 698.076831][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 698.076858][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 698.076880][ C1] ? sched_clock+0x3f/0x60 [ 698.076901][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 698.076942][ C1] ? ip_finish_output2+0xa1e/0x1070 [ 698.076967][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 698.076989][ C1] ip_finish_output2+0xc68/0x1070 [ 698.077012][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 698.077039][ C1] ip_output+0x29f/0x450 [ 698.077061][ C1] ? ip_output+0x5b/0x450 [ 698.077081][ C1] ? __ip_queue_xmit+0x5c/0x1bb0 [ 698.077101][ C1] __ip_queue_xmit+0x116a/0x1bb0 [ 698.077122][ C1] ? csum_tcpudp_nofold+0x1f/0x60 [ 698.077145][ C1] ? __ip_queue_xmit+0x5c/0x1bb0 [ 698.077167][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 698.077187][ C1] __tcp_transmit_skb+0x2b30/0x43e0 [ 698.077224][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 698.077250][ C1] ? tcp_init_nondata_skb+0x1f7/0x370 [ 698.077272][ C1] ? __tcp_send_ack+0x21a/0x4f0 [ 698.077296][ C1] tcp_delack_timer_handler+0x366/0x530 [ 698.077324][ C1] tcp_delack_timer+0x205/0x3b0 [ 698.077348][ C1] ? call_timer_fn+0x178/0x640 [ 698.077371][ C1] call_timer_fn+0x192/0x640 [ 698.077394][ C1] ? __pfx_tcp_delack_timer+0x10/0x10 [ 698.077417][ C1] ? call_timer_fn+0xd4/0x640 [ 698.077438][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 698.077466][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.077486][ C1] ? __pfx_tcp_delack_timer+0x10/0x10 [ 698.077511][ C1] __run_timer_base+0x652/0x8b0 [ 698.077531][ C1] ? ktime_get+0x45/0x200 [ 698.077554][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 698.077578][ C1] ? sched_clock_cpu+0x74/0x440 [ 698.077605][ C1] run_timer_softirq+0xb7/0x170 [ 698.077626][ C1] handle_softirqs+0x22a/0x870 [ 698.077651][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 698.077678][ C1] __irq_exit_rcu+0x5f/0x150 [ 698.077700][ C1] irq_exit_rcu+0x9/0x30 [ 698.077721][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 698.077743][ C1] [ 698.077750][ C1] [ 698.077757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 698.077777][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 698.077804][ C1] Code: 9e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 698.077819][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 698.077833][ C1] RAX: 0000000000ab5be7 RBX: ffffffff819a9cfa RCX: 0000000080000001 [ 698.077846][ C1] RDX: 0000000000000001 RSI: ffffffff8defb7d5 RDI: ffffffff8c27d500 [ 698.077858][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 698.077872][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 698.077884][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 698.077899][ C1] ? do_idle+0x36a/0x5f0 [ 698.077928][ C1] default_idle+0x9/0x20 [ 698.077953][ C1] default_idle_call+0x72/0xb0 [ 698.077978][ C1] do_idle+0x36a/0x5f0 [ 698.078005][ C1] ? __pfx_do_idle+0x10/0x10 [ 698.078034][ C1] cpu_startup_entry+0x43/0x60 [ 698.078058][ C1] start_secondary+0x101/0x110 [ 698.078080][ C1] common_startup_64+0x13e/0x147 [ 698.078106][ C1] [ 698.773104][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 698.780032][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 698.790929][ T31] Tainted: [L]=SOFTLOCKUP [ 698.795287][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.805497][ T31] Call Trace: [ 698.808872][ T31] [ 698.811863][ T31] vpanic+0x56c/0xa60 [ 698.815915][ T31] ? __pfx___schedule+0x10/0x10 [ 698.820988][ T31] ? __pfx_vpanic+0x10/0x10 [ 698.825614][ T31] panic+0xc5/0xd0 [ 698.829553][ T31] ? __pfx_panic+0x10/0x10 [ 698.834028][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 698.839458][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 698.845837][ T31] watchdog+0x1023/0x1030 [ 698.850243][ T31] ? watchdog+0x21a/0x1030 [ 698.854924][ T31] kthread+0x388/0x470 [ 698.859061][ T31] ? __pfx_watchdog+0x10/0x10 [ 698.863881][ T31] ? __pfx_kthread+0x10/0x10 [ 698.868539][ T31] ret_from_fork+0x51e/0xb90 [ 698.873282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 698.878815][ T31] ? __switch_to+0xc7d/0x1450 [ 698.883545][ T31] ? __pfx_kthread+0x10/0x10 [ 698.888178][ T31] ret_from_fork_asm+0x1a/0x30 [ 698.893010][ T31] [ 698.896204][ T31] Kernel Offset: disabled [ 698.900587][ T31] Rebooting in 86400 seconds..