last executing test programs: 8m0.485173931s ago: executing program 1 (id=168): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000bdbb000020000e80130001"], 0x48}}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x5, 0x6, 0xffffffffffff5e9f}) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x6, @loopback, 0x3, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="9c3a2948535e77e70e65e40ab399718bb8014457267bbc0c2de1f8e1a860d684084450fdb01b9d0e62d9b2a3eb66c66aeafd2e9e7054450b05d93cf74ec81ef628cf71aa50700447d29f25449e07b94e3fd34e6e90ae0b120f251237e20d6db44d153f02b3cb3c344089d88d4e482ceba6b4dfb8560bcf3ae1031c905c15dd50cf5c757d442b43833bff6598", 0x8c}, {&(0x7f0000000380)="2a5c4c9c12b2df1c8bc05256219da2828c07405556bd82a7b51c56281b964afe57af4b5db2b8f08808350200ac67706446679afc656ed7843b2ece494104f556c5aa8ce0", 0x44}, {&(0x7f0000000400)="e4985ddf0f0c53f6987a8ac9ca0ef50b6e4389bd0867110835252acfdd0c85855021274491d54054d9c822f4e2f5db2281e58a4abc2554cf6249687db7b6f3a9e02a0cafe34c8a2f5a61604b64028f8e359348cbf3de9026327d5e139428cd4ff80b194bde9e8a8977a385f89e0deb9af31b37b90b198d6998b5cc7453dcb675ebdf0e987f46281d715c02b2fe146b7d6cf0c36fcc1d42631f555bf61a9f3cbca11b5cbb6f63db7ead", 0xa9}], 0x3, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x4000004) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000bdbb000020000e80130001"], 0x48}}, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x5, 0x6, 0xffffffffffff5e9f}) (async) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x6, @loopback, 0x3, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="9c3a2948535e77e70e65e40ab399718bb8014457267bbc0c2de1f8e1a860d684084450fdb01b9d0e62d9b2a3eb66c66aeafd2e9e7054450b05d93cf74ec81ef628cf71aa50700447d29f25449e07b94e3fd34e6e90ae0b120f251237e20d6db44d153f02b3cb3c344089d88d4e482ceba6b4dfb8560bcf3ae1031c905c15dd50cf5c757d442b43833bff6598", 0x8c}, {&(0x7f0000000380)="2a5c4c9c12b2df1c8bc05256219da2828c07405556bd82a7b51c56281b964afe57af4b5db2b8f08808350200ac67706446679afc656ed7843b2ece494104f556c5aa8ce0", 0x44}, {&(0x7f0000000400)="e4985ddf0f0c53f6987a8ac9ca0ef50b6e4389bd0867110835252acfdd0c85855021274491d54054d9c822f4e2f5db2281e58a4abc2554cf6249687db7b6f3a9e02a0cafe34c8a2f5a61604b64028f8e359348cbf3de9026327d5e139428cd4ff80b194bde9e8a8977a385f89e0deb9af31b37b90b198d6998b5cc7453dcb675ebdf0e987f46281d715c02b2fe146b7d6cf0c36fcc1d42631f555bf61a9f3cbca11b5cbb6f63db7ead", 0xa9}], 0x3, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x4000004) (async) 8m0.370124429s ago: executing program 1 (id=169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x18, 0x2, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x2000c804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) creat(0x0, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, 0x0) close_range(r8, r9, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r10, &(0x7f0000000bc0)={0x30}, 0x6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 7m54.537675394s ago: executing program 1 (id=180): socket$isdn(0x22, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r1], &(0x7f0000000600)=[0x3], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x200}) (async) r3 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffe00, 0xc0702) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {0x0, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 7m54.382795299s ago: executing program 1 (id=181): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)={0x398, 0x12, 0x200, 0x70bd2d, 0x25dfdbfd, {0x26, 0x0, 0x1, 0xb, {0x4e21, 0x4e21, [0x80000001, 0x7fffffff, 0x7, 0xfffffffd], [0x0, 0x7, 0x3, 0x80], 0x0, [0x1, 0x1]}, 0x7, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "3dba3f902df964be35d8e6c7c5487e27f3b965cc6c79634529583995656becea2928119d6c60f36612"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "ea472b5dba2fca39d829c5cfec41f21d1b85c08ef658d5df1f9559ca4f444fd69c1cb942b0073deddef040ced069afe45e56345e965a46731c91b564fc8b6b3ad09c4e76a83ccf3f2adb9082da24a6ec1807a40c0d5c"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "bdf1dd07a3f20e94a614710fac49db5d7a835c8fda7e76"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "cf4d1a2356cc16f7d38e6f1884e8b428d29f9f31937ad789f5528d8c889c23340501a2cbf29413c61e6b981002cb44472c27fb7f8b3d3f3ec1bfc0e78046747de7b341a49f18c3e31995d2e781d0160a341a8eded4bb42c493fdae40e44dd5828798684db2aef7e65a9804c3c28ce7d9ab94e54c7ef0db03e2bdb3ca385f607b759f91b72d4340a04abcffea37011d3d9d63bae2d75a23e23657d8fe29fa663e02b92d7b2c0a26d2553ba5aee0dfbe70c03fe2d683f8551a82804c59bc9b32d65a68212333"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "cea53fda6881667967c6f749e71d9f5ee5ae3ade9cc65f93df92bf36679c6da0cf1f3f64362a219889824d7a74933bbce7f062b3ebddb9d3086a067a9b09dcf350f1619e5fd4620a2daf1ae46cba8476f95b58345fae58a724996c55edc18de2bfad70db05a8561beb8434d032b8a4cf64df88ca1defccdab2e0516a3349aaab874c1fcea48e032caeb46278ae7d5b801a88d2b128d4e6b18f057ddd41ce6230f90460bffb64e5cada"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "63cee9592b8c1bef7516633fa4f208631d213ff66604269e36c8d40fa027877235cc9b215f3daab0852077047c628a30e7aba026c35fd63c1d6eda6b33648c95ccd2a8459df449a707"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "e74db8d21fe05b2e93fd868f2084b1bdaa79152e98a5ec9341be653a1ce190137a5a8db0e8130862954bd4d1b0dabb272a64f8a4fe5efa8ff470ddd958e9972ed6ebc424dd41a42bab893db74f65d1cf67724e96647e3014385e9598eaea80ba302cb2c99b830ff03032cbca86855c91ce9a3e16a95049a7c0140dc88bd7c2414d4be3d5ef3414f94d475d0e6f2be9a9cf6c8d3a88e49df2a926827bcb594b3ced7404023cfa84c873184409dd06d3945ceeb9962894c5fc06b0bd6fd83e642f155a65992ea157b3176e0054a27d66b2c84b9e68"}]}, 0x398}}, 0x4000000) (async) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 7m54.362684544s ago: executing program 1 (id=182): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x3, 0x1, "a23cfa355c349d2900", '\x00', "02050201", "50fb45c5", ["8b0b35cb03004900004000", "8e1500", "1c2a4d743c970f00", "ff81000000008000"]}) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000400)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) kexec_load(0x80a3, 0x0, 0x0, 0x2a0000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) syz_clone3(&(0x7f00000005c0)={0x35146100, 0x0, 0x0, &(0x7f0000000140), {0xfffffffc}, 0x0, 0xffffffffffffffa6, 0x0, 0x0}, 0x44) ioctl$FE_GET_FRONTEND(r4, 0x80246f4d, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r5 = io_uring_setup(0x622a, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d1}) r6 = io_uring_setup(0x66b7, &(0x7f0000000600)={0x0, 0x653f, 0x83, 0x0, 0x28e, 0x0, r5}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="93d1a08f92b356b16432b890622017c4e74de22c35e1939fdf47047d0975a1b97b19a376d76a498b651ebf8b5054438e6fed2c3b61e200b2d791c8958d395a84a854be3311dff3eea5b195fe0b00a8247a6d7127293ac9ab2e2108882891ec1c7c662444000000010000bbfcb5e86dfa27b6172b2aa4c8ff6f1ec929973307c0e424bc80bba14ca4706509000000000000001bb5f791b1b728abeea8730a563000000000000016000000000000000000000000000000000000007e2451866b74182ed867d5b562460af9dd65100d63ca3277b349af84710f92dfe4e9161066bdb7a4887b046c9810e04794f0f6cd769c709846873224e9896d55eb01985e89cf8a0f8705bfdc881cc3fabd66fc1f26ce508dab4d2db83c00c071b3587eb166041238310e7862ec8dcb829323850a770fa4adfb6b8a5fd0a3842f1780ff96e4bd8b5d06486f94271b2564d05647bf03285f27", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) 7m53.97937922s ago: executing program 1 (id=183): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)='M', 0x1}], 0x1}, 0x4000880) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) socket$inet(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) (async) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)='M', 0x1}], 0x1}, 0x4000880) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) 7m52.55049839s ago: executing program 32 (id=183): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)='M', 0x1}], 0x1}, 0x4000880) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) socket$inet(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) (async) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)='M', 0x1}], 0x1}, 0x4000880) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) 2m6.113648755s ago: executing program 5 (id=992): ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x8) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40104, 0xb0, 0x1}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes256, 0x1, '\x00', @a}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000100)={"206ebd5cb2ca8c026e3dea138b90c74fc15a6c4a7ad263dbea6874aaa6e16295204a0f39ded303b448c19e9a434c92c138a2ec9039d57221c70cfd205118994c80e793def8862bb1c560c5cab05705782b5a83532283b66de74bd7d7d62ddda665643ed2e5136bb2d11ed9dd13b676f8f08dfa8046d87f2e84ed504f2fdd4f6e792333f646ba9e915d7050c0a0b97f434e12da3269e629b59791ba9ec99e5e56816f7be9264845dce14b4f3446a7203bcac73d39b7341cd66d99bc23daaee7bddbf224e708c6aba2d107ee7ffd56115b99e18d4176f3c46a95dd54fe68ab350fb9a5699f3e4ffd712cee1a08408c503748cbca3975647d56a72631d979359130e28d64c6da0f966c466d003eda209e00b56b7fcf3e695236dbf461614c60952adf07d65f1a4455e75baedc4557e9da62d36d3e9db82a56b3dae5b1ad6585834b3a26ac934ba8b8796be773760737acff597bca6d6ba35cabd2de4197f6083cf3f62c6e5cdf2296ed417e5a0b34fa08c4b56e93364e95ca46e78109a497dabb0902d5b6da7dbb1ee230416332f085951d3bef3dd79a52436e271a003880a199c732db6ab5ef9cce9760070bd08c5b8afa55e8169d205510dfbf129b671a064eada25e2596797136f3dfad471c0e4b6a3c9acfdb95662545371373b43387973f93fdd8f96464d3afe8592dafc1c3d3792af56ee419f938d12161e5a09654d31ff8347e687e0ca8b4931aaddac2ff1fc45129de7acddca0e85b410964e39fa1c7c2c3840763e885bf89c4929708d47152c85652212564d3de904ea31b837b98a27d47dba240bf1cc055e58acdc95d30c8da3cb68ea93d40dcc76a801a80cd916acd6d17d77d38f8a6cbe9bdf1cc28be58fd4e6376e82f43fe8056b52900ed978f280fc5a8710a52491307851b4df1299bf4acee65f0b0efdde5ee2d61b54a8ad11605cecd355ec50408cfede5b08f8519c522b62f8c39a609b5e337dee1fd6901f05f94bafcb08c08e2fe99f0af1e91ff3e3b9cde6b6ef89fbae030fc77f95ebae35fcec6215005b6a2a8633355ed07da8ea5d80a624b8d88467a14cc7960212afb9a70580a623f14b26cb119e73e740feabf71b81fb3287e212cd7d0b570e6dc9f444dc583938842b96330886239b0fd60a350c67e56acf05566199000b30a800c6dc0f1607562450a7f69ab5b0fcccfeb49121418a53d72677c166347ffef60aa67a07d68b9d3ac22356bbef4a16b921f38ece616e78a2f81bf4b1f3e2dbde9370524c2912d842b592e32fa81eac8f963964d63609c600524f8b93281d27574d61a5981b198696948cd62a469ecf7892b92cf3c39d9bb71d7e71185dbb9cb7910f190130fafcf934a343d4213db062eb65ef2cb09917bd2ef63073e8789d99b0214f1775c278ddacffb4462edfc8f7bf5d29ca661749474debca89bb3f687ce0d"}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000500)=[@nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @cpuid={0x64, 0x18, {0x2, 0x2}}, @rdmsr={0x66, 0x18, {0x352}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4de, 0x7, 0x36d33f7c, 0x86d}}, @uexit={0x0, 0x18, 0x6}, @set_irq_handler={0xc8, 0x20, {0x26, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x1, 0x7fff}}, @nested_amd_vmload={0x182, 0x18}], 0x138}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) close_range(r2, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) open_by_handle_at(r0, &(0x7f0000000b00)=@nfs={0x90, 0x24, {0x5, 0xfc70, 0x2, 0x80, "ad95b97a76864701a66a8082285fc3da4fbef3194eb0edb30470f6e157745624ec55a13a84a2482a717ceb309b0e9ae70442fc2f3bf2194899b54be21c0b8a877f571f48b41f35d79e1f2b9cb6a0fcf159d024be56458dbccf0f0e1fd460dc9450fba62735d1e07a61d746e8f5bbbe844b492956847a7cfa30d0a5105f3fac87"}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x33060a71db3a5900}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x45}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000e80)={r4, &(0x7f0000000d80)='\x00', 0x11d000, &(0x7f0000000dc0)={@_ha_fsid={[0x4, 0x19]}, {0xcf5, 0x7, 0xf887, 0x8000000000000000}}, 0x2a6b, &(0x7f0000000e00)={@_ha_fsid}, &(0x7f0000000e40)=0xf}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @multicast1, @rand_addr=0x64010102}, 0xc) unshare(0x20000000) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000f00)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000f40)) ioctl$DVB_DEMUX_DMX_QUERYBUF(r6, 0xc0186f3d, &(0x7f0000000f80)={0x3d, 0x4, 0x0, 0x8, 0x0, 0x4}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000fc0)={"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"}) recvmmsg(r3, &(0x7f0000002840)=[{{&(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/35, 0x23}, {&(0x7f0000001480)=""/54, 0x36}, {&(0x7f00000014c0)=""/126, 0x7e}], 0x3}, 0x2}, {{&(0x7f0000001580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/243, 0xf3}, {&(0x7f0000002740)=""/168, 0xa8}], 0x4}, 0x1}], 0x2, 0x40000042, &(0x7f00000028c0)={0x0, 0x989680}) r7 = add_key$fscrypt_v1(&(0x7f0000002980), &(0x7f00000029c0)={'fscrypt:', @desc4}, &(0x7f0000002a00)={0x0, "b64fbdfd9f4d343e2041ac76630a6f2a3698498ed0782ffe748fe4d872730d3979a034f44944d650ec71a5e37eb67fd9580d6f2ecc6493e1eb96599223aa4682", 0x13}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x2}, 0x0, 0x0, r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002a80)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000002ac0)={0xaa, 0x101}) sendmsg$NFT_BATCH(r6, &(0x7f0000002e80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e40)={&(0x7f0000002b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xe8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14ebfb0}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4cc9b77}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4f6b91cf}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fe6fec5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x14c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x598}, @NFTA_SET_EXPRESSIONS={0x11c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x61d}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xc69}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x100}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x86}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x505d}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x500, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2e0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f40)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) 2m6.036386112s ago: executing program 5 (id=993): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, 0x0, 0xa000}, [@IFLA_MAP={0x24, 0xe, {0xc8, 0x7, 0x8, 0xffff, 0x80}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x14, 0x44, 0x107, 0x70bd2b, 0x25dfdbfb, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x5319) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv(0xffffffffffffffff, &(0x7f0000002380)=[{0x0}], 0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x2000400c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x100003, 0xfffffffc, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x40) 2m4.746906401s ago: executing program 5 (id=997): add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000616263646587fe"], 0x18, 0xfffffffffffffffd) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) (async) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000540)={{0x6, 0x0, 0x8000, 0x0, 'syz0\x00', 0x10000}, 0x3, 0x30, 0x4d27, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=['[#/\\@\'\x00'], 0x7}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000480)={0x0, 0x1, 0x5, 0x4, 0x1, [0x0, 0x0, 0x0], [0x0, 0xf730, 0x0, 0x6], [0x200, 0x101, 0x7, 0x5], [0x6, 0xff, 0x4, 0x4]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000001c0)={r5}) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async) socket$kcm(0x21, 0x2, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m4.678328847s ago: executing program 5 (id=998): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x7, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xffc, 0x2, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x9, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064d2, &(0x7f0000000080)={0x3, 0x80, 0xc4ff0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x1, 0x102, 0x3, {0x40, 0xffff, 0x5, 0xa}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000180), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r8, 0x8800000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) 2m3.522217708s ago: executing program 5 (id=1003): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}}) read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat(r3, 0x0, 0x400200, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x1003ff}) r5 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0xd070, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000006000/0x4000)=nil) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c040000100001040000000000000a0000480000", @ANYRES32=r9, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) recvmsg(r8, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000004240)=""/4124, 0x101c}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000000500)=""/38, 0x26}], 0x3}, 0x7}], 0x3, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000010fbffffff00000000090000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 2m2.169832011s ago: executing program 5 (id=1009): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050065000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r5}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xb08}, 0xc, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[], 0xe78}}, 0x24000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000000000007"], 0x50) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000440)="c4421dbc1836360f233b3667460f2338b9030300000f32660f080f32660f1ba900000000f30faed0420f017f0b0f40d3", 0x30}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m46.930241587s ago: executing program 33 (id=1009): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050065000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r5}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xb08}, 0xc, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[], 0xe78}}, 0x24000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000000000007"], 0x50) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000440)="c4421dbc1836360f233b3667460f2338b9030300000f32660f080f32660f1ba900000000f30faed0420f017f0b0f40d3", 0x30}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.483186288s ago: executing program 0 (id=1484): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x4, &(0x7f0000001c00)) fcntl$setown(r6, 0x8, r7) 8.06077951s ago: executing program 6 (id=1497): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r2, 0x10001}, &(0x7f00000004c0)=0x8) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x40, 0x23) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 7.962243672s ago: executing program 6 (id=1499): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f00000004c0)={0x40, 0x14, 0x6, "d6aaaba147a3"}, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) exit(0xffff) 7.914787113s ago: executing program 0 (id=1500): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) (async) splice(r1, 0x0, r3, 0x0, 0x81, 0x2) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090100000000000000004046ac9c05cb6d69a073797a31000000000c0004800800014000510000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x200048a5}, 0x2000000) (async) r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.877532877s ago: executing program 0 (id=1501): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x1000000, 0xffffffff, 0x258, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x310, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x1}, {0x4, 0x6, 0x2}, {0x2, 0x2, 0x3}, 0x1, 0x7f}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x408) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) syncfs(r2) r4 = socket$inet6(0xa, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x7ff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x20497000) r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) setsockopt$inet6_udp_int(r4, 0x11, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 7.441622423s ago: executing program 4 (id=1503): unshare(0x64000600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x443, 0x8081001, 0x4, r3, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x29a10f4c, 0xb, 0x2, 0x8, 0x3, 0x0, 0x0, 0x4}}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) unshare(0xa020480) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) fcntl$getflags(r6, 0x40a) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 7.203149161s ago: executing program 3 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) r4 = socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000000)={0xdc, 0x0, 0x7fffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) 5.545631939s ago: executing program 3 (id=1506): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="fa4cb98e59e17a8e11c5227447ee3b7c4b6a1dad6a6b4e7d12a002ff8f79b7b8caf062da182739a29a3d026c267df9522b0a77000318b29ffbe464467d9e849642440f735c2c71148bea5313713c9950033eb5d336f43656259a343da91f24149ae28589244419a214fafba55b7f7f19eaca1230c4bf86e1d8864f1badff5d1145b4e5693833f9ba7cb768a5acc336e7288f12a0c4017818fc7471c7faa0a23cff57e355d7e43ddc06abeb0fa56d0fc9b0cd1ed74c82b0e1cb670f9d0806ea03b64be186550b972bf3a9e5", 0xcb) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xc}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_CLASSID={0x0, 0x1, {0x2, 0xd}}]}}]}, 0x68}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="0002003970673bc2efb73370fcdabf73e2847f53287cb7fb1a326fd9462be19e80532f609b6b101d9e6ea1c6e74d7cc0416285e8c7c3e8e93d554a675a22235092d89ed0"]) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160001002cbd7000000000000a00"], 0x2c}}, 0x0) 5.303625974s ago: executing program 4 (id=1507): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x50000, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0), 0x0, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETVAL(r2, 0x4, 0x10, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) recvfrom(r0, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f711031000000000046050000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000c14000829bd04000000000000000300010000000800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x41) dup(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240240000030900020073797a320000"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) 4.815706701s ago: executing program 6 (id=1509): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffa9adb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 4.460852967s ago: executing program 6 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x44010}, 0x44000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) 4.211332893s ago: executing program 4 (id=1512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000007500)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2931, r1, 0xaa59e000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402942, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newtaction={0x11c0, 0x1e, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{0x11ac, 0x1, [@m_police={0x11a8, 0x15, 0x0, 0x0, {{0xb}, {0x1108, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x10001, 0x3, 0x8, {0x5, 0x2, 0x8, 0x0, 0x491, 0x7}, {0x3, 0x0, 0x9f88, 0x7f, 0x7, 0x8}, 0x4, 0x40, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0xffffffff, 0xe2e4, 0x1, {0x7f, 0x1, 0x9, 0x6, 0x1}, {0xdb, 0x1, 0x7, 0x2, 0x6, 0x16}, 0x8, 0x6, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0xffffffffffffffff, 0x5f, 0xffffffff, 0x7, {0x7, 0x0, 0x3, 0x7, 0x4, 0x5}, {0x3, 0x0, 0x1, 0x2, 0xfc, 0x8}, 0x8, 0x23, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x73a}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x8001, 0x1000, 0xbd9a, 0x1a4e77b0, 0xffffff00, 0x6, 0x10, 0x5, 0x5, 0x9, 0xc9, 0x0, 0x6, 0x6, 0x3, 0x7fff, 0x1ff, 0xfffffffe, 0x42, 0xfffffffb, 0x9, 0x6, 0x9, 0x8001, 0xdb, 0xfffffff7, 0x9, 0x7, 0x0, 0x4, 0x1ff, 0xd, 0x2, 0x4, 0x47e, 0xaf9e, 0x0, 0x8, 0x1, 0x0, 0x2e05, 0x2, 0x485, 0x8, 0x80000001, 0x137, 0x8, 0x2f, 0x8, 0xe, 0x8c, 0xfffffff7, 0x8, 0xc9, 0x1, 0x8, 0x1, 0x80, 0x44, 0x9, 0xffff, 0x0, 0x6, 0x0, 0x101, 0x6, 0xd83, 0x5, 0x9, 0x4, 0xa, 0x4, 0xd, 0x2, 0x80000001, 0x5, 0xa, 0xb16, 0x7, 0x6, 0x0, 0x1, 0x7f, 0x6, 0x8, 0x5, 0x8, 0xfffffffc, 0x1, 0x0, 0x4dc2, 0x0, 0x4, 0x3, 0x10, 0x1, 0xa, 0x3162, 0x0, 0x5d9e5572, 0x8, 0x80000001, 0x2, 0xa7, 0x1, 0x4, 0x4, 0x9, 0xcb2e, 0x4, 0xc, 0x1000, 0x10000, 0x0, 0x10001, 0x6, 0x9, 0x101, 0x1, 0x81, 0xe6, 0x3ff, 0x5, 0xfffffffa, 0x0, 0x3, 0x10, 0x0, 0x0, 0x19cd, 0x0, 0x4, 0xffffff9d, 0xffffff66, 0x0, 0x200, 0x800, 0x8000, 0x2, 0x32, 0x1, 0x6, 0x6, 0x0, 0x5, 0x2, 0x3, 0xfffffff7, 0x8, 0xbe, 0x3, 0x5, 0x2b1, 0x8fa4, 0x2, 0x80000001, 0x4, 0x5, 0x8, 0x6, 0x8, 0x1, 0x2e21, 0x5, 0x5f27, 0x0, 0x9, 0x7e, 0x7, 0xd, 0x48a, 0x0, 0x9, 0x8001, 0x9, 0xff97, 0xc, 0x15ef, 0x4, 0x24, 0x1375, 0x8, 0x5, 0xffffffff, 0x3, 0x2, 0x4, 0x0, 0x3a, 0xa801, 0x10000, 0xe81c6b8, 0x0, 0x7, 0x1, 0x10000, 0x10, 0x9, 0x44ef, 0x2, 0x2752dfc0, 0xf6, 0x329dbab7, 0x2, 0x10001, 0x4, 0x5, 0x40, 0x4, 0x4, 0x5, 0x4, 0xdd, 0x9, 0x3, 0x6, 0x144, 0x2d2b, 0x0, 0x1dbc652, 0xc, 0x2, 0x0, 0x5, 0x0, 0x3, 0xf, 0x0, 0xfffffffa, 0x3, 0x9, 0x5, 0x2fa, 0x1, 0x4, 0x2, 0x6, 0x2584, 0x2, 0x1, 0x6, 0x2, 0x3, 0x4, 0x0, 0x0, 0x8, 0xecd0, 0x30a47b0f, 0x200000, 0x10, 0x1ff, 0x8, 0x16]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000000, 0x8, 0x7e, 0x4, 0x8, 0x3, 0xa, 0x8, 0x0, 0xffffffa4, 0x0, 0x100, 0x9c8a, 0x80000000, 0xd8, 0x2, 0x7, 0x200, 0xac, 0x9, 0xffffffff, 0x0, 0x1c0000, 0x1, 0x2, 0x9, 0x4, 0x3, 0x1, 0x9, 0xfffffffd, 0x5, 0x1, 0x65, 0x4, 0x7ff, 0x7ff, 0x10000, 0xfffffff8, 0x2, 0x489, 0x400, 0x8, 0x7, 0x8, 0x3ff, 0xa1ca, 0x4, 0x8001, 0x6, 0xa3, 0x200, 0x4, 0x8, 0xff, 0x4, 0x8, 0x4, 0x9, 0x3, 0x8000, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0x0, 0x9, 0xd76f, 0x80000000, 0x0, 0x1, 0x9, 0x1, 0x4, 0xfffffffc, 0x81, 0x940, 0x1ff, 0x668c, 0x800000, 0x10001, 0x1ff, 0x2, 0x200, 0x4, 0x8000000, 0x8, 0x30, 0x2, 0x139780, 0x8, 0x1ff, 0x9, 0x6, 0x2, 0x0, 0xffffff31, 0xfff, 0x10001, 0xfff, 0xe170, 0xc0000000, 0xb53, 0x4, 0xffffff6f, 0x80000000, 0xfff, 0x4, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x9, 0x8, 0x5, 0xfff, 0x3, 0xfffffffa, 0x9, 0x53c9, 0x81, 0x7, 0x6, 0x40, 0xe, 0xdf9, 0x96, 0x7a0, 0xffffffc0, 0xd, 0x0, 0x7, 0x7, 0x7, 0x80, 0x0, 0x7, 0x1, 0x370, 0x6, 0x4, 0x9, 0xffffffff, 0x0, 0x444, 0x8, 0x7, 0x7fffffff, 0xf5, 0x5, 0xff, 0x1, 0x6, 0x3, 0x9649, 0x4, 0x390ef4ec, 0x1, 0x9bb, 0x0, 0xb3c9, 0x1, 0x7, 0xd9, 0x0, 0x7, 0x0, 0x8000, 0xfffff801, 0x7, 0x800, 0x8, 0xa, 0xf, 0x1, 0x0, 0x7, 0x4, 0x7, 0x7f, 0x100, 0x7fffffff, 0x1, 0xfffffffe, 0x8, 0x0, 0x6, 0x6, 0x1, 0x481ee6f6, 0x8, 0x2, 0x4, 0xfffffffc, 0x1cb94c9d, 0xfffffff3, 0x3740, 0x2, 0x1, 0x9, 0x8, 0x1, 0xfffffffc, 0x8, 0x2, 0x1000, 0x0, 0xb98, 0x7ff, 0x40, 0x0, 0x0, 0xffff0000, 0x7, 0x0, 0x0, 0x80, 0x6, 0x9, 0x2, 0xc55, 0x2a, 0xffffffff, 0x7, 0x8, 0x4, 0x8, 0x8, 0x66f, 0x2, 0xa29c, 0x2, 0x100, 0x80, 0xff, 0x8ac, 0x3, 0xff, 0x6c76, 0x6, 0x7f, 0x0, 0x4, 0x9, 0x3, 0x747c, 0x1, 0x5, 0x7, 0x6, 0x1, 0x2, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf0bf, 0x3, 0x0, 0x200, 0x9, 0x8, 0x9bc, 0x7, 0x6, 0x3, 0x52b85708, 0x8, 0x2, 0x48b8, 0xd, 0x4, 0x0, 0x8, 0x8001, 0xfc, 0x6, 0xff, 0xf7, 0x80000000, 0x6, 0x26a, 0x701, 0x80000001, 0x7, 0x9, 0x83, 0xb, 0x8, 0xfffffff7, 0x6, 0xa, 0x7, 0x265, 0x1000, 0x2, 0x8, 0x1, 0x8, 0xffff, 0x0, 0x4, 0x8, 0x100, 0x4, 0x6, 0xd, 0x0, 0x10001, 0x4, 0x4, 0x0, 0x5, 0x51d91574, 0xffffffcd, 0x9, 0xfff, 0x400, 0x7, 0xffff, 0x6, 0x8, 0x8001, 0x15, 0x4, 0x7, 0x3, 0x8, 0x3, 0x5, 0x9, 0x6, 0x4, 0xff, 0x3, 0x85, 0x8, 0x8, 0x3, 0x800, 0xfffffffa, 0x401, 0x3, 0xfffffeff, 0x3, 0x9, 0x10, 0xb, 0x8, 0x3ff, 0x2, 0x1ff, 0x8, 0x101, 0x3, 0xffff, 0x0, 0x6, 0x26, 0x401, 0x5, 0x80, 0xc, 0x4, 0x3, 0xe, 0x6, 0xffffffff, 0x7f, 0x7, 0x3, 0x3, 0x1, 0x7f, 0x5, 0xb726, 0x4, 0xe79, 0x80, 0x4, 0x8001, 0x5, 0x6, 0x2e, 0x80000001, 0x3, 0x8, 0x40, 0x1, 0x8, 0x8, 0x8, 0x7, 0x10001, 0x3, 0x0, 0x2, 0x5, 0x4, 0x1, 0x3ff, 0x9, 0x9, 0x2, 0x0, 0x6, 0x1, 0x5, 0xa, 0x24ce504c, 0x0, 0x0, 0x9, 0x9, 0x4, 0x9, 0x8, 0x401, 0x7, 0x6, 0x1, 0x80000001, 0x2, 0x5, 0x80000000, 0xff, 0x1, 0x8, 0x5, 0xfda, 0x8, 0x400, 0x5, 0x7, 0xf, 0x180000, 0xfffffffb, 0xfffffffd, 0x3f0d94a5, 0x5d, 0x8, 0x1, 0x95d, 0x3, 0x3, 0x3, 0x1000, 0x3, 0x92, 0xfffffff8, 0xc8bf, 0xafe9, 0x3, 0xe080, 0xfffffffe, 0x80, 0x0, 0x2, 0x40, 0x80000001, 0x40, 0x8, 0x3, 0x5, 0x75, 0x1, 0xd66, 0xba49, 0x0, 0x66, 0x1, 0x28c0, 0x2, 0x2, 0x219, 0x5f, 0x1, 0x5, 0x2, 0x100, 0x2b0, 0x1, 0x3, 0x3, 0x8, 0x2, 0x9, 0x5, 0x1, 0x9, 0x5, 0x5, 0xb, 0x4, 0x8, 0x2, 0x9, 0xe3, 0x9, 0x6c95, 0x0, 0x3, 0x6, 0x1000, 0x6, 0xd1ba56e4, 0x40, 0x4, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xce5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x4b5, 0x0, 0x401, 0x7fff, 0x6, 0x4, 0xd, 0x7ff, 0x9cb, 0x0, 0x1, 0x4, 0x25c, 0x983, 0x3c, 0x4, 0x495, 0xffffffff, 0x3, 0x2, 0x4, 0x1, 0x5b9, 0x6, 0x0, 0x7f39, 0x7ff, 0x7, 0x80, 0xfffffffa, 0x9, 0xd07, 0x8000, 0xfffffff9, 0x1, 0x7, 0xc2000, 0x2, 0x9, 0x9, 0x7b, 0x0, 0xc, 0x8001, 0x9, 0x1, 0xe4, 0x9, 0x9, 0x4, 0x64aa0e70, 0xff, 0x3, 0x40, 0x6, 0x8, 0x2, 0x4, 0x476, 0x0, 0x6, 0x6, 0x3ff, 0xe, 0x0, 0x1, 0xfffffc00, 0x7, 0x6, 0x80, 0x1, 0x40000007, 0x9, 0x2, 0x3, 0x5, 0xcc, 0x2, 0x0, 0x7, 0x400, 0x1000, 0x8, 0x80, 0x4, 0x5, 0x7224, 0x7fff, 0x2894, 0x5, 0xf, 0x4, 0xbd, 0x8, 0x80000001, 0x6b, 0x8, 0x0, 0x6, 0x6, 0xb0, 0x0, 0xb0, 0x4, 0x6, 0x4, 0x3, 0x1, 0xffff, 0x4, 0x2, 0x7, 0x1, 0x3, 0x7, 0x0, 0x2, 0x4, 0xfffffffa, 0x1, 0x3, 0x8, 0x5, 0x26, 0x3, 0xd, 0x9, 0x2, 0x4, 0xf, 0x543c5c0c, 0x2, 0xffffffff, 0x10001, 0x1, 0x2, 0x253, 0x8, 0x7, 0x3, 0x0, 0x0, 0x948, 0x77, 0x6, 0x2, 0x7, 0x0, 0x8, 0x7, 0x3, 0x8, 0x2a8, 0x12, 0x272, 0x3a8, 0x12, 0x3, 0xfffff19f, 0x3, 0x404, 0xbd, 0x40, 0x9, 0x4, 0xcac, 0x4a8a, 0x9, 0x4, 0xcc15, 0x3, 0x815, 0x0, 0x3, 0x8, 0x1, 0x6, 0x5, 0x7, 0x38, 0x9, 0x1ff, 0x4, 0x68e3, 0x3e0, 0x5, 0x0, 0x6, 0x0, 0x7, 0x3, 0x81, 0x3, 0x9, 0x8, 0x10001, 0x1c000000, 0x4, 0x81, 0x3, 0x23, 0x90, 0xffffff49, 0xe2e, 0x7, 0x3ff, 0x6c, 0x5, 0xa, 0x4, 0x5, 0x40, 0x1000000, 0x2, 0x3b, 0x100, 0xd, 0x3, 0x6, 0x1, 0xffffffff, 0xfffffff9, 0xb24, 0xe, 0x3ff, 0x9, 0x5, 0x1, 0xcb, 0x10, 0x7, 0x4, 0x7, 0x5, 0x5, 0x1, 0x3, 0xc799, 0x0, 0x17, 0x792a293e, 0x8, 0x6, 0x10000, 0xa163, 0x7, 0x8247, 0x9, 0x5a5, 0x3, 0x80000001, 0x7, 0x7]}]]}, {0x78, 0x6, "8053c44351271446814da66ac1fbbb411ac4320a680698c0cec115ded53c4d1713b2a47118b3794d6665f9a3f259bd5f9bea3fe1e5342df979ef29a378f3a5b9d6ef52c9cda32e06579d1bfc88c7742f6e6085eafb433c5ab5ff28756a0e4b1be6f7832f2699c2dcd9314697d7bc7b62e04859d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x11c0}, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x664e, &(0x7f0000000500)={0x0, 0x1010e4, 0x800, 0x1, 0x1de}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x4007, 0x10, 0x6, 0xa0, 0x1}) 3.971582682s ago: executing program 0 (id=1513): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) r5 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x15) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000100)='.\x00', r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000000c0)=0x7fff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000010008aa80ef470000000000000000000689cd6fcd18f17ee2bd115d3332781bbf8a2b65c7bbd4a13c1c2a9d84d5da432a3c875bf7e0bbfe3e2f36f4f5c84ee371b64afaa05", @ANYRESOCT=r6, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb21002200daf66385613135cdb5b5ef4e28a8737e04072b190679105ccc6679b813000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 3.859094137s ago: executing program 2 (id=1514): syz_open_dev$swradio(0x0, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ec0), 0x141800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000f40)=@l={0x92, 0x2, 0xb0, 0x1c, 0x2, 0x9c, 0x50}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000f40)=@l={0x92, 0x2, 0xb0, 0x1c, 0x2, 0x9c, 0x50}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sysfs$3(0x3) (async) sysfs$3(0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') read$FUSE(r5, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000000)=0x4) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000000)=0x4) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c0800034000000000080003400000001708230800014000000012080002400000001808000200"/115], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c0800034000000000080003400000001708230800014000000012080002400000001808000200"/115], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000980)=""/52, 0x34}], 0x3, &(0x7f0000000a00)=""/150, 0x96}, 0xb6c}], 0x1, 0x20, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000040, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.80796167s ago: executing program 3 (id=1515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x62, @private2, 0x3}, {0xa, 0x4e24, 0xd61, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1, {[0x0, 0x401, 0x5, 0x7, 0x4, 0x6, 0xfffffffc, 0x4]}}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.691689147s ago: executing program 3 (id=1516): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x1, 0x8001, 0x97}, 0x35, [0x1dc, 0xd409, 0xffff, 0x6, 0x7, 0x0, 0xffffffff, 0x127, 0x800, 0x3, 0x48a8, 0x5, 0x8001, 0x1c00, 0x0, 0x7ff, 0x1, 0xfffffffa, 0x29c, 0x9, 0x1000, 0x1, 0x4, 0x6, 0xa, 0xfff, 0x80000, 0x9, 0x6e6, 0x3, 0x9, 0x73f2, 0x4, 0x9, 0x91de, 0x9a, 0x1, 0x200, 0xc8dc, 0x8c, 0x9, 0x80000000, 0x6, 0x40, 0x4a2, 0xcc, 0x3, 0x10, 0x9, 0x6, 0x4, 0x6, 0x483, 0x2e2d, 0xa86, 0x10000, 0x1, 0x3, 0x80, 0x8001, 0x5, 0x3ff, 0x3ff, 0x5], [0x7, 0x0, 0xfffffff7, 0x7, 0xc, 0x1, 0x9, 0xbd, 0x5, 0x7fff, 0x5, 0x7, 0x100, 0x4, 0x8, 0x4, 0x40, 0x1000, 0x9, 0x6, 0x3, 0x7, 0x1, 0x9, 0x336, 0x4, 0x6, 0x9, 0x4, 0xffff6fa7, 0x7, 0x6, 0x7, 0x0, 0x3, 0x0, 0x0, 0xd, 0x100, 0x3, 0x4cb, 0x9, 0x3cd9, 0x2, 0x3, 0x6, 0x0, 0x8, 0x0, 0x15, 0x8000, 0x8, 0xe, 0xa2, 0x6, 0x1, 0x5, 0x7, 0x6, 0x8, 0xf, 0x7ff, 0x8, 0x2], [0x9, 0x1, 0x4, 0x30a, 0x9, 0x8, 0x2, 0x2, 0xffffffff, 0x2, 0x7f, 0x5, 0x6, 0x810, 0xfffffff7, 0x1, 0x1, 0xff, 0x2, 0x80000000, 0x4, 0x84, 0xfffffffe, 0x3ff, 0x8, 0x441, 0x0, 0x40000, 0x0, 0x5, 0x6, 0x95d, 0x4, 0xfc9, 0x7, 0x80000001, 0x0, 0x3, 0xdb3, 0xd, 0x4, 0x40, 0x4, 0x8, 0x8, 0x2, 0x2c2, 0x6, 0x80000001, 0x7, 0x2, 0x1d1, 0xf8b, 0x7800, 0x4, 0x7, 0x3, 0x5, 0x8, 0x8, 0x2, 0x3, 0x95f6, 0x7], [0xa, 0x7d0, 0x4, 0x7fff, 0x5, 0xaa, 0x6, 0xffffffff, 0x4, 0x1, 0x2, 0x1, 0x5, 0xa, 0x8, 0x8, 0x0, 0x401, 0x8, 0x4, 0x200, 0x10001, 0x83, 0x2, 0x6, 0x4, 0xc6, 0x0, 0x3, 0x1, 0x1, 0x4, 0x10001, 0x1000, 0x5, 0x4, 0x5, 0x9, 0x10000010, 0x7, 0xfad4, 0xffffffff, 0x8000, 0x5, 0xfff, 0x1ff, 0x9, 0x2, 0x7, 0x8, 0x0, 0x5, 0xa102, 0x2, 0x10000, 0xfd43, 0x0, 0x400, 0x3f6cea4a, 0x1, 0x4, 0x4, 0x8, 0xa]}, 0x45c) (async) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'rose0\x00'}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000880)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 3.450769265s ago: executing program 3 (id=1517): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x5089, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = io_uring_setup(0x2e01, &(0x7f0000000700)={0x0, 0xd4ab, 0x1000, 0x2, 0x2d3}) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) sendto$packet(r0, &(0x7f0000000180)="05031600d3fc14000000ff7f0000000000003fd23356a39a746c00000080a6394fc402250653", 0x26, 0x40041, &(0x7f0000000280)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0x9, @win={{0xe, 0xfffffffa, 0xe, 0x975}, 0x7, 0xc53, 0x0, 0x5, 0x0, 0xff}}}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.293042939s ago: executing program 4 (id=1518): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3ed9, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000979000/0x1000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000311ffc)=0x1, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x10, 0x10, "6972a16387920cfad256559f58af1ac31147a8bd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x4]}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2.958839221s ago: executing program 6 (id=1519): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_open_pts(r0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xb8, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xe1cf4bc5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x4]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) (async) epoll_create(0x8) (async) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}}, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xb8, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xe1cf4bc5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x4]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) (async) 2.883087967s ago: executing program 2 (id=1520): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000396000/0x3000)=nil, 0x3000}}) r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x25, 0x0, 0x2000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x7}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13201}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x6a}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4840) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000000)={0x0, 0x2, 0x400, 0x3, 0x80069}, &(0x7f0000000080), &(0x7f0000ff4000)) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r10 = fspick(r9, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r9, &(0x7f0000000300)="dd5b24639954ac87055490d0098903af1f09c552c1e89c70fd136bfdde0409337b6c6bfbedbb09bc8b2d7cba4af087250a59940deb8729d4a5354fdbbda794c16910f3a3f9d023f0df2c", &(0x7f00000003c0)=""/209}, 0xfffffffffffffd2c) r11 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) pwritev2(r11, &(0x7f00000002c0)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000140)="b0f046530eaae7031578d2dafde91563395a40d99d3406760b34ab97951b124dbe7b1ab6fa939e6fce58869e28335bdd83a8908370b2bb254441c39865ed1960f051a03139c9cf4ab2110ce411e8d3223ceb36e2cb514e7404b6a27491166c7e1dc41f99c3b04e6e4d768781dc91c7122b79aa576d38f11b58ce771549f25d060fcc8f841dde9a73b38a50978f5376c13cea7760888aae3acd1809da6439876acdea08268eb4e692c5869411", 0xac}, {&(0x7f0000000200)="4340fda22d7304001a4a", 0xa}, {&(0x7f0000000280)="0096cf7b6616f38d60aa6edf96e1db", 0xf}], 0x4, 0x1200, 0x1, 0x1) getsockopt$inet_int(r11, 0x0, 0x32, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2.783739527s ago: executing program 2 (id=1521): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x3, 0x4b, "2a4fe33e61c552ded3e0b5b79e3c4775adddeb486f8d1e39688762125afacd5923773db140b6d46e7e8094ab1ac293e565cb3e39ed0ed3ba37790342b6a77f12aa0769fcc17130559a41f5"}, 0x53) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) write$ppp(0xffffffffffffffff, &(0x7f0000000780)="4667860ea123f089c5da86ea40c38e6aac84e81fb30b9f96954da2d0f8cd7cf378e607b919b0478b644fa6762128b40049ad3311529bfc13b84b24a3d2c45deefb62e79cbcb8c52bfb54fec3ecf0474b847d4e5e104f3dfba430d662b0f4822c1779d30abffa55cd03639b6686da63c48d8f3611355f972093ecee3bc27e99f8e403d7042bc889f7589910867b1c24abb70ef582e14c8a62623dbad57cc13ad84aa038159943b12b34ce6d37d7700d8065d1d3ad199e8748ebbcd620383f1c", 0xbf) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x218, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1e8, 0x2, [@TCA_BASIC_ACT={0x1e4, 0x3, [@m_vlan={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x84, 0x6, "5a0ca25b7438c93246018f7c82a55b68a84eb3c64c14f5bdb3e75689c3512fcad0130f85654dca4d3e84da923d3cb1a96373aded8a837044fe3fd52e5a2690c87d84ab8c90fef034383b9bb884867930aa980cac9377b78749f1f1fed0ea5b718a4858ed29e37e4f6aa3f09976e62961c07626f5f240935fd35064c82087568a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x100, 0x1, 0x0, 0x0, {{0xb}, {0x6b, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x710, 0x20000000, 0xb, 0x80000000}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0xffffffff, 0x1, 0xf, 0x6}, 0x1, r4}}]}, {0xfffffffffffffdfa, 0x6, "371a038d0cce3b434eb7849ef817695c8f3e9fd425d251d9c7203cd92463ac21147e14e5319a8b444160566dad756f99520525e6e701cf3436f996322b877ebe743d60cde1d2e8e48c3f329fc9dd3c14ef5e6135d99ee96ca12bc1d57def7ef0720a1af17c20f8d0d8dc89ae11a3124dce86f79a737ce298854a6ad8407ee7b85e14e3c04d111a010697397d9c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r5, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x577b, &(0x7f0000000440)={0x0, 0xd3d8, 0x8, 0x0, 0x234}, &(0x7f0000000180), &(0x7f0000000240)) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe3fe, 0x200, 0x2, 0x40000144, 0x0, r6}, 0x0, &(0x7f0000000380)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) 2.706157533s ago: executing program 0 (id=1522): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0'}, 0xb) pwrite64(r3, &(0x7f0000000040)='\n', 0x1, 0x2) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.431280516s ago: executing program 4 (id=1523): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x80000000) 2.37487394s ago: executing program 4 (id=1524): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x20007, 0x1, 0x2, 0x0, 0x20}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0x22e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e0800"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 1.930584414s ago: executing program 3 (id=1525): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0xfffffffe, 0x1) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x0, r2}) syz_usb_connect$uac1(0x5, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x80, 0x40, 0x9}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.263147697s ago: executing program 6 (id=1526): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000020c0), 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x34565348, 0x4, 0x800, 0x4, 0x5, 0x4, 0x0, 0x4, 0x1, 0x6}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_freeze_timeout', 0x101a02, 0xc8) sendfile(r3, r3, 0x0, 0x101) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) r4 = syz_usb_connect(0x6, 0x442, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0xf9, 0x88, 0xd, 0xff, 0x1199, 0x68a5, 0xa38d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x430, 0x2, 0x5c, 0x9, 0x40, 0x81, "", [{{0x9, 0x4, 0x0, 0xff, 0xc, 0x37, 0x52, 0xac, 0x2, [@hid_hid={0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x94a}}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0xff, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x3, 0xca, [@generic={0xbc, 0xd, "331cf5a0270ee5a8f9dce75d5c6b18fd818edd254bd7dbca1856b1bca60653d6f72298994344138a9d77263d9342f70039eae81d6c3552151bdba194aaad43260a45e61a30ca6c2dff0ea730757d8c99d89beac5f6340d49df9401e8ac4b88bcb7aef5e1b13c9ad5db2e97ca0fca6ececea192703ed6b6a53bf2545e751b7f719cb57a87bdfafe793255f302b3554f55e407ba8f681570e7d59a07206c7290d51f14a01b96fa4941467077deef05a3da64fad719717ad58ca8e9"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x1d, 0x7, 0x5b}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x58, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x13, 0x3}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3df610eb7ec89bda, 0xf, 0x9, 0x8}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x2, 0x4, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xa}]}}, {{0x9, 0x5, 0x8f, 0x8, 0x200, 0xc, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x32, 0x3, 0xae}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x10, 0xff, 0x6}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x1, 0xb, 0x9, [@generic={0xe1, 0x7, "8cb0122b8ea304380e004c2cb8ae8da5c53a00297cce65e11eb7f92d1eadf7d87fac071af80b529ecd61f6cd268b6348e94f936bda3a222311e33040f31dc2c85132430956a6535c105254def4706f13e221905cb89cd4d3245148a03f2b9d81426d034527982fdd9e02c55dabdefda5a37c88b3d956196844f0bb3f8c7fa31a41353f7b6369950f5fa8ea273b6a8bb98f08eaec215e7eecf84d0a9a26f25663d9149c87a8ff52a939b23452fd77655daf4ceb6c457479be00aa4fef604798d85fb9d402cddb993b78d9d65b28253dfad42b557de63d1ae5d07ac73039b029"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x1, 0x2a, 0x7c}}]}}, {{0x9, 0x4, 0xd8, 0x9, 0x4, 0x90, 0xab, 0xca, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9a, 0xa}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "13057c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x2, 0x88}, {0x6, 0x24, 0x1a, 0x6f4f, 0x19}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x54}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x0, 0x9, 0xb8, 0x4, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0xfc01, 0x4, 0xfe24}, @mdlm={0x15, 0x24, 0x12, 0xf}]}], [{{0x9, 0x5, 0xe, 0x3, 0x8, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x12, 0xfffc}, @generic={0x8c, 0x21, "393d368b6aa137c1611710ce110e560f2af123392906ab1bccce3f9b6cb603a7b7d3fbd8758cbc25c7318c10e5fc9ed9fdc1cf09e0295ec09e87a011ec64317b0bede40d4de07029adbee39bd67217f4146b024fdda438f41f201e0f6841f1aaabc29ad532e3b51af3281f136cd0bd3694c54a35fbf427359a0bd2f416c2fe8a337652dd2396e1e07246"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x806}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x1, 0x1, 0x1, [@generic={0xc3, 0x24, "a0313150c3c64fbb9117ff7731c98294e11fd62fe1ce35f483e2907e7a0308b94a7dea78e2ce8964d03a876e26a52239e8867acae9cf9ac1d1e4d1dfe9ef4ba2cbf994512ce915a0f9941852f31d8d884dc308ae3ce59debf279ad72fa2a2934942182cbad07c002e465818c9b3d94fcea415f8c31234a80bca5c1c09617178c73042a712cb0fd5146b38e24728c25c4765558e52b011f625837966f6c395c0d348dd2792e8a1b660f0dc941a3b634ad3131fc379b5d8f959e25a7daa39fb23377"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xb2f}]}}, {{0x9, 0x5, 0xc, 0x9, 0x20, 0x3, 0xf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x9, 0x2d, 0xd6b2686dce5213e1, 0x4}, 0x7a, &(0x7f00000001c0)={0x5, 0xf, 0x7a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x2, 0x2d55}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x5, 0xffff}, @generic={0x57, 0x10, 0x2, "17adf0d47bca8854e2964e933b5b4fceb318d0c1093bc69c0bd68cf87e3cecb26992cc2a5f209cebe1140bf333ab733e34344869fb2c1715b63039cc12bb77fc72fabdafa319bb7f126c60491b72307598bfcfb7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x8, 0x7, 0x5}]}, 0x3, [{0x93, &(0x7f00000005c0)=@string={0x93, 0x3, "c893bd223b44cebef263484f760300bc3acad4e6521a92fcbd221b468eb9dfa314bf1da616c22fc5a13869de81f59a9586ab9a8dceab35a7f979f03cbd7b9ec594a051a856fdaf85758d6e59320835bfca5428dd4c9e040ed1dc954159e0246f59bd993eab3fa387c4de2f159637140459b2c8992d6a2391c29b85934fb54bd8c585466e62da330df0b78770ba81c55b49"}}, {0x4, &(0x7f00000000c0)=@lang_id={0xffffffffffffff72, 0x3, 0x300a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x40, 0xf, 0x59, {0x59, 0x21, "0a3c34f8acec3b5620db66896eb8c833cdc26fb2e0a4a0a107d8200baece11e02cf276976ba7735a3e34b9b8827cf092b302c6d9a3ce93041da63a9da5d7c7d14cbb63226684d58ced59e6a5fb934fd176b75dba4a0df3"}}, &(0x7f00000004c0)={0x0, 0x3, 0x32, @string={0x32, 0x3, "d750a4ffeb9d26bdcea0c2233b6302264167b52e03596a46fc0cc8fe49a94f781fb63ec81afc024884b97e7e48b64ffc"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000900)={0x2c, &(0x7f0000000780)={0x40, 0x9, 0xa3, {0xa3, 0xc, "00f0ee9be4ad05989ee1e2a57885054d09f19494717256692661812a95c18890e45f478a9750c665b8e258a22dbdb26a9814547a59ec254e1bc0b7516200c213ef37e423ff133aa9a25852d52fdb108b3e3980f39d17f2d51e8898fd17be014216129400c8d334da99be5e2ff03a3e84d9dada1719b2e21873afbe601633a636a814ec47f52a43e7486baa81ceb035ad79dc749ae8b26ac255109d9436b4eead11"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000000840)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "95241a764f8cd3ee188082a921e46a9e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0xf9, 0x4a}, @ssp_cap={0x24, 0x10, 0xa, 0x8b, 0x6, 0x495ce2d, 0xf00, 0xa0, [0xc0, 0xc0, 0xcf, 0x0, 0x0, 0xff0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e9dea53f13d9edc6e44e7c7382be6dca"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0xe, 0xff, "2cac3582", "6003b19c"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0xc, 0x2, 0x3, 0x101, 0x5}}}, &(0x7f0000001240)={0x84, &(0x7f0000000940)={0x40, 0x16, 0x64, "51583587e35ddd2fd521264b405a8c1e538f8075fa8af0166d37020917422cd8463a5567122153b5576409fc43f557b671b94a6e8ffb4ff63e28d9620a827cb75c18e2ffacb5905304e61fd82f0b2b162fdc50c7c3e3bd09e4c88b47eca7f7a18fbc4aa8"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001000)={0x40, 0xb, 0x2, "c01d"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000001080)={0x40, 0x13, 0x6, @remote}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001100)={0x40, 0x19, 0x2, "acb8"}, &(0x7f0000001140)={0x40, 0x1a, 0x2}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x4c}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="1202030109025c0002010f70060904000001020d0000052406000107240008000d240f0104000000000002000806241a002a300700810300042b08c0ad565db80f42810904010000020d00000904010102020d000009058202001df5f5215202"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000009"], 0x48) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x840, 0x0) 1.129158863s ago: executing program 2 (id=1527): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x8000, 0xfffffc01, 0xd, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r0 = socket$netlink(0x10, 0x3, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r8}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x0, 0x3f}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) syz_pidfd_open(r2, 0x0) 880.634031ms ago: executing program 0 (id=1528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000007500)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2931, r1, 0xaa59e000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402942, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newtaction={0x11c0, 0x1e, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{0x11ac, 0x1, [@m_police={0x11a8, 0x15, 0x0, 0x0, {{0xb}, {0x1108, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x10001, 0x3, 0x8, {0x5, 0x2, 0x8, 0x0, 0x491, 0x7}, {0x3, 0x0, 0x9f88, 0x7f, 0x7, 0x8}, 0x4, 0x40, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0xffffffff, 0xe2e4, 0x1, {0x7f, 0x1, 0x9, 0x6, 0x1}, {0xdb, 0x1, 0x7, 0x2, 0x6, 0x16}, 0x8, 0x6, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0xffffffffffffffff, 0x5f, 0xffffffff, 0x7, {0x7, 0x0, 0x3, 0x7, 0x4, 0x5}, {0x3, 0x0, 0x1, 0x2, 0xfc, 0x8}, 0x8, 0x23, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x73a}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x8001, 0x1000, 0xbd9a, 0x1a4e77b0, 0xffffff00, 0x6, 0x10, 0x5, 0x5, 0x9, 0xc9, 0x0, 0x6, 0x6, 0x3, 0x7fff, 0x1ff, 0xfffffffe, 0x42, 0xfffffffb, 0x9, 0x6, 0x9, 0x8001, 0xdb, 0xfffffff7, 0x9, 0x7, 0x0, 0x4, 0x1ff, 0xd, 0x2, 0x4, 0x47e, 0xaf9e, 0x0, 0x8, 0x1, 0x0, 0x2e05, 0x2, 0x485, 0x8, 0x80000001, 0x137, 0x8, 0x2f, 0x8, 0xe, 0x8c, 0xfffffff7, 0x8, 0xc9, 0x1, 0x8, 0x1, 0x80, 0x44, 0x9, 0xffff, 0x0, 0x6, 0x0, 0x101, 0x6, 0xd83, 0x5, 0x9, 0x4, 0xa, 0x4, 0xd, 0x2, 0x80000001, 0x5, 0xa, 0xb16, 0x7, 0x6, 0x0, 0x1, 0x7f, 0x6, 0x8, 0x5, 0x8, 0xfffffffc, 0x1, 0x0, 0x4dc2, 0x0, 0x4, 0x3, 0x10, 0x1, 0xa, 0x3162, 0x0, 0x5d9e5572, 0x8, 0x80000001, 0x2, 0xa7, 0x1, 0x4, 0x4, 0x9, 0xcb2e, 0x4, 0xc, 0x1000, 0x10000, 0x0, 0x10001, 0x6, 0x9, 0x101, 0x1, 0x81, 0xe6, 0x3ff, 0x5, 0xfffffffa, 0x0, 0x3, 0x10, 0x0, 0x0, 0x19cd, 0x0, 0x4, 0xffffff9d, 0xffffff66, 0x0, 0x200, 0x800, 0x8000, 0x2, 0x32, 0x1, 0x6, 0x6, 0x0, 0x5, 0x2, 0x3, 0xfffffff7, 0x8, 0xbe, 0x3, 0x5, 0x2b1, 0x8fa4, 0x2, 0x80000001, 0x4, 0x5, 0x8, 0x6, 0x8, 0x1, 0x2e21, 0x5, 0x5f27, 0x0, 0x9, 0x7e, 0x7, 0xd, 0x48a, 0x0, 0x9, 0x8001, 0x9, 0xff97, 0xc, 0x15ef, 0x4, 0x24, 0x1375, 0x8, 0x5, 0xffffffff, 0x3, 0x2, 0x4, 0x0, 0x3a, 0xa801, 0x10000, 0xe81c6b8, 0x0, 0x7, 0x1, 0x10000, 0x10, 0x9, 0x44ef, 0x2, 0x2752dfc0, 0xf6, 0x329dbab7, 0x2, 0x10001, 0x4, 0x5, 0x40, 0x4, 0x4, 0x5, 0x4, 0xdd, 0x9, 0x3, 0x6, 0x144, 0x2d2b, 0x0, 0x1dbc652, 0xc, 0x2, 0x0, 0x5, 0x0, 0x3, 0xf, 0x0, 0xfffffffa, 0x3, 0x9, 0x5, 0x2fa, 0x1, 0x4, 0x2, 0x6, 0x2584, 0x2, 0x1, 0x6, 0x2, 0x3, 0x4, 0x0, 0x0, 0x8, 0xecd0, 0x30a47b0f, 0x200000, 0x10, 0x1ff, 0x8, 0x16]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000000, 0x8, 0x7e, 0x4, 0x8, 0x3, 0xa, 0x8, 0x0, 0xffffffa4, 0x0, 0x100, 0x9c8a, 0x80000000, 0xd8, 0x2, 0x7, 0x200, 0xac, 0x9, 0xffffffff, 0x0, 0x1c0000, 0x1, 0x2, 0x9, 0x4, 0x3, 0x1, 0x9, 0xfffffffd, 0x5, 0x1, 0x65, 0x4, 0x7ff, 0x7ff, 0x10000, 0xfffffff8, 0x2, 0x489, 0x400, 0x8, 0x7, 0x8, 0x3ff, 0xa1ca, 0x4, 0x8001, 0x6, 0xa3, 0x200, 0x4, 0x8, 0xff, 0x4, 0x8, 0x4, 0x9, 0x3, 0x8000, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0x0, 0x9, 0xd76f, 0x80000000, 0x0, 0x1, 0x9, 0x1, 0x4, 0xfffffffc, 0x81, 0x940, 0x1ff, 0x668c, 0x800000, 0x10001, 0x1ff, 0x2, 0x200, 0x4, 0x8000000, 0x8, 0x30, 0x2, 0x139780, 0x8, 0x1ff, 0x9, 0x6, 0x2, 0x0, 0xffffff31, 0xfff, 0x10001, 0xfff, 0xe170, 0xc0000000, 0xb53, 0x4, 0xffffff6f, 0x80000000, 0xfff, 0x4, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x9, 0x8, 0x5, 0xfff, 0x3, 0xfffffffa, 0x9, 0x53c9, 0x81, 0x7, 0x6, 0x40, 0xe, 0xdf9, 0x96, 0x7a0, 0xffffffc0, 0xd, 0x0, 0x7, 0x7, 0x7, 0x80, 0x0, 0x7, 0x1, 0x370, 0x6, 0x4, 0x9, 0xffffffff, 0x0, 0x444, 0x8, 0x7, 0x7fffffff, 0xf5, 0x5, 0xff, 0x1, 0x6, 0x3, 0x9649, 0x4, 0x390ef4ec, 0x1, 0x9bb, 0x0, 0xb3c9, 0x1, 0x7, 0xd9, 0x0, 0x7, 0x0, 0x8000, 0xfffff801, 0x7, 0x800, 0x8, 0xa, 0xf, 0x1, 0x0, 0x7, 0x4, 0x7, 0x7f, 0x100, 0x7fffffff, 0x1, 0xfffffffe, 0x8, 0x0, 0x6, 0x6, 0x1, 0x481ee6f6, 0x8, 0x2, 0x4, 0xfffffffc, 0x1cb94c9d, 0xfffffff3, 0x3740, 0x2, 0x1, 0x9, 0x8, 0x1, 0xfffffffc, 0x8, 0x2, 0x1000, 0x0, 0xb98, 0x7ff, 0x40, 0x0, 0x0, 0xffff0000, 0x7, 0x0, 0x0, 0x80, 0x6, 0x9, 0x2, 0xc55, 0x2a, 0xffffffff, 0x7, 0x8, 0x4, 0x8, 0x8, 0x66f, 0x2, 0xa29c, 0x2, 0x100, 0x80, 0xff, 0x8ac, 0x3, 0xff, 0x6c76, 0x6, 0x7f, 0x0, 0x4, 0x9, 0x3, 0x747c, 0x1, 0x5, 0x7, 0x6, 0x1, 0x2, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf0bf, 0x3, 0x0, 0x200, 0x9, 0x8, 0x9bc, 0x7, 0x6, 0x3, 0x52b85708, 0x8, 0x2, 0x48b8, 0xd, 0x4, 0x0, 0x8, 0x8001, 0xfc, 0x6, 0xff, 0xf7, 0x80000000, 0x6, 0x26a, 0x701, 0x80000001, 0x7, 0x9, 0x83, 0xb, 0x8, 0xfffffff7, 0x6, 0xa, 0x7, 0x265, 0x1000, 0x2, 0x8, 0x1, 0x8, 0xffff, 0x0, 0x4, 0x8, 0x100, 0x4, 0x6, 0xd, 0x0, 0x10001, 0x4, 0x4, 0x0, 0x5, 0x51d91574, 0xffffffcd, 0x9, 0xfff, 0x400, 0x7, 0xffff, 0x6, 0x8, 0x8001, 0x15, 0x4, 0x7, 0x3, 0x8, 0x3, 0x5, 0x9, 0x6, 0x4, 0xff, 0x3, 0x85, 0x8, 0x8, 0x3, 0x800, 0xfffffffa, 0x401, 0x3, 0xfffffeff, 0x3, 0x9, 0x10, 0xb, 0x8, 0x3ff, 0x2, 0x1ff, 0x8, 0x101, 0x3, 0xffff, 0x0, 0x6, 0x26, 0x401, 0x5, 0x80, 0xc, 0x4, 0x3, 0xe, 0x6, 0xffffffff, 0x7f, 0x7, 0x3, 0x3, 0x1, 0x7f, 0x5, 0xb726, 0x4, 0xe79, 0x80, 0x4, 0x8001, 0x5, 0x6, 0x2e, 0x80000001, 0x3, 0x8, 0x40, 0x1, 0x8, 0x8, 0x8, 0x7, 0x10001, 0x3, 0x0, 0x2, 0x5, 0x4, 0x1, 0x3ff, 0x9, 0x9, 0x2, 0x0, 0x6, 0x1, 0x5, 0xa, 0x24ce504c, 0x0, 0x0, 0x9, 0x9, 0x4, 0x9, 0x8, 0x401, 0x7, 0x6, 0x1, 0x80000001, 0x2, 0x5, 0x80000000, 0xff, 0x1, 0x8, 0x5, 0xfda, 0x8, 0x400, 0x5, 0x7, 0xf, 0x180000, 0xfffffffb, 0xfffffffd, 0x3f0d94a5, 0x5d, 0x8, 0x1, 0x95d, 0x3, 0x3, 0x3, 0x1000, 0x3, 0x92, 0xfffffff8, 0xc8bf, 0xafe9, 0x3, 0xe080, 0xfffffffe, 0x80, 0x0, 0x2, 0x40, 0x80000001, 0x40, 0x8, 0x3, 0x5, 0x75, 0x1, 0xd66, 0xba49, 0x0, 0x66, 0x1, 0x28c0, 0x2, 0x2, 0x219, 0x5f, 0x1, 0x5, 0x2, 0x100, 0x2b0, 0x1, 0x3, 0x3, 0x8, 0x2, 0x9, 0x5, 0x1, 0x9, 0x5, 0x5, 0xb, 0x4, 0x8, 0x2, 0x9, 0xe3, 0x9, 0x6c95, 0x0, 0x3, 0x6, 0x1000, 0x6, 0xd1ba56e4, 0x40, 0x4, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xce5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x4b5, 0x0, 0x401, 0x7fff, 0x6, 0x4, 0xd, 0x7ff, 0x9cb, 0x0, 0x1, 0x4, 0x25c, 0x983, 0x3c, 0x4, 0x495, 0xffffffff, 0x3, 0x2, 0x4, 0x1, 0x5b9, 0x6, 0x0, 0x7f39, 0x7ff, 0x7, 0x80, 0xfffffffa, 0x9, 0xd07, 0x8000, 0xfffffff9, 0x1, 0x7, 0xc2000, 0x2, 0x9, 0x9, 0x7b, 0x0, 0xc, 0x8001, 0x9, 0x1, 0xe4, 0x9, 0x9, 0x4, 0x64aa0e70, 0xff, 0x3, 0x40, 0x6, 0x8, 0x2, 0x4, 0x476, 0x0, 0x6, 0x6, 0x3ff, 0xe, 0x0, 0x1, 0xfffffc00, 0x7, 0x6, 0x80, 0x1, 0x40000007, 0x9, 0x2, 0x3, 0x5, 0xcc, 0x2, 0x0, 0x7, 0x400, 0x1000, 0x8, 0x80, 0x4, 0x5, 0x7224, 0x7fff, 0x2894, 0x5, 0xf, 0x4, 0xbd, 0x8, 0x80000001, 0x6b, 0x8, 0x0, 0x6, 0x6, 0xb0, 0x0, 0xb0, 0x4, 0x6, 0x4, 0x3, 0x1, 0xffff, 0x4, 0x2, 0x7, 0x1, 0x3, 0x7, 0x0, 0x2, 0x4, 0xfffffffa, 0x1, 0x3, 0x8, 0x5, 0x26, 0x3, 0xd, 0x9, 0x2, 0x4, 0xf, 0x543c5c0c, 0x2, 0xffffffff, 0x10001, 0x1, 0x2, 0x253, 0x8, 0x7, 0x3, 0x0, 0x0, 0x948, 0x77, 0x6, 0x2, 0x7, 0x0, 0x8, 0x7, 0x3, 0x8, 0x2a8, 0x12, 0x272, 0x3a8, 0x12, 0x3, 0xfffff19f, 0x3, 0x404, 0xbd, 0x40, 0x9, 0x4, 0xcac, 0x4a8a, 0x9, 0x4, 0xcc15, 0x3, 0x815, 0x0, 0x3, 0x8, 0x1, 0x6, 0x5, 0x7, 0x38, 0x9, 0x1ff, 0x4, 0x68e3, 0x3e0, 0x5, 0x0, 0x6, 0x0, 0x7, 0x3, 0x81, 0x3, 0x9, 0x8, 0x10001, 0x1c000000, 0x4, 0x81, 0x3, 0x23, 0x90, 0xffffff49, 0xe2e, 0x7, 0x3ff, 0x6c, 0x5, 0xa, 0x4, 0x5, 0x40, 0x1000000, 0x2, 0x3b, 0x100, 0xd, 0x3, 0x6, 0x1, 0xffffffff, 0xfffffff9, 0xb24, 0xe, 0x3ff, 0x9, 0x5, 0x1, 0xcb, 0x10, 0x7, 0x4, 0x7, 0x5, 0x5, 0x1, 0x3, 0xc799, 0x0, 0x17, 0x792a293e, 0x8, 0x6, 0x10000, 0xa163, 0x7, 0x8247, 0x9, 0x5a5, 0x3, 0x80000001, 0x7, 0x7]}]]}, {0x78, 0x6, "8053c44351271446814da66ac1fbbb411ac4320a680698c0cec115ded53c4d1713b2a47118b3794d6665f9a3f259bd5f9bea3fe1e5342df979ef29a378f3a5b9d6ef52c9cda32e06579d1bfc88c7742f6e6085eafb433c5ab5ff28756a0e4b1be6f7832f2699c2dcd9314697d7bc7b62e04859d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x11c0}, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x664e, &(0x7f0000000500)={0x0, 0x1010e4, 0x800, 0x1, 0x1de}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x4007, 0x10, 0x6, 0xa0, 0x1}) 102.891652ms ago: executing program 2 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = syz_io_uring_complete(0x0) write$tun(r4, &(0x7f0000000140)={@void, @void, @llc={@llc={0x42, 0x4, "1025", "ea994d2e2b53df1390f32fbc12f998aaa6cd5b41fe51fd5b748396187bcfc56ff7ce8f215d2ab8c7ba4b0006e59c398ee3c62dc5818007b6abbb88fb9982587f20f625bf13e17cd52204191401f62b"}}}, 0x53) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\t\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x5, 0xe}, {0x0, 0xe}, {0x0, 0xfff8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xe, 0x7, 0x6361, 0x1, 0x1, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7864}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=1530): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x18a) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000100)='usrquota', &(0x7f00000002c0)='./file1\x00', r3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3cee6b8, 0xfffffe0000000004, 0xfa13, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xff) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x1000005, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x26a, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r6, r7, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)={0x10, 0x2c, 0x15, 0x70bd2b, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x810}, 0x44800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) kernel console output (not intermixed with test programs): 5] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 834.234306][ T7625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.255635][ T7625] usb 5-1: config 0 descriptor?? [ 834.295328][T10633] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 834.305377][T10633] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1131'. [ 834.348523][ T7625] usb 5-1: selecting invalid altsetting 0 [ 834.581885][ T7625] usb 5-1: USB disconnect, device number 87 [ 834.694267][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.705250][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.741967][ T10] video4linux radio48: keene_cmd_set failed (-71) [ 834.749102][ T10] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 834.767589][ T10] usb 7-1: USB disconnect, device number 9 [ 834.824338][T10637] lo: Caught tx_queue_len zero misconfig [ 834.991057][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.062820][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.466825][T10647] binder: 10646:10647 ioctl c0306201 0 returned -14 [ 835.518886][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'. [ 836.092815][T10667] netlink: 'syz.4.1141': attribute type 3 has an invalid length. [ 836.141166][T10667] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1141'. [ 836.831249][T10677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1145'. [ 837.221829][T10686] input: syz1 as /devices/virtual/input/input28 [ 837.345681][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 837.399609][T10686] netlink: 'syz.6.1148': attribute type 21 has an invalid length. [ 837.424528][T10686] IPv6: NLM_F_CREATE should be specified when creating new route [ 837.499431][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 837.506727][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 837.518333][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.543514][ T10] usb 4-1: config 0 descriptor?? [ 837.992702][T10640] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1134'. [ 838.278375][ T5857] IPVS: starting estimator thread 0... [ 838.417461][T10710] IPVS: using max 36 ests per chain, 86400 per kthread [ 838.708137][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.719602][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.809372][ T10] video4linux radio48: keene_cmd_set failed (-71) [ 838.820501][ T10] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 838.833826][ T10] usb 4-1: USB disconnect, device number 85 [ 838.950718][T10724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1156'. [ 839.555720][ T10] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 839.712121][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 839.721101][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 839.734097][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.745390][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.764334][ T10] usb 5-1: string descriptor 0 read error: -22 [ 839.770973][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 839.781137][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.805616][ T5951] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 839.820517][ T10] usb 5-1: 0:2 : does not exist [ 839.993945][ T5951] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 840.003808][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.020985][ T5951] usb 7-1: Product: syz [ 840.025433][ T5951] usb 7-1: Manufacturer: syz [ 840.075881][ T5951] usb 7-1: SerialNumber: syz [ 840.137882][ T5951] usb 7-1: config 0 descriptor?? [ 840.265098][T10745] dlm: no locking on control device [ 840.375842][T10736] tipc: Started in network mode [ 840.380942][T10736] tipc: Node identity 0e67b85db1e7, cluster identity 4711 [ 840.388882][T10736] tipc: Enabled bearer , priority 0 [ 840.402620][T10736] syzkaller0: entered promiscuous mode [ 840.412765][T10736] syzkaller0: entered allmulticast mode [ 840.442646][T10736] tipc: Resetting bearer [ 840.455955][ T7625] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 840.516562][T10758] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1165'. [ 840.627370][ T7625] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 840.639268][ T7625] usb 3-1: config 0 has no interface number 0 [ 840.656582][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.667272][ T7625] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 840.680671][ T7625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.689693][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.690863][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.700317][ T7625] usb 3-1: Product: syz [ 840.718572][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.727231][ T7625] usb 3-1: Manufacturer: syz [ 840.732496][ T7625] usb 3-1: SerialNumber: syz [ 840.739156][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.750424][ T7625] usb 3-1: config 0 descriptor?? [ 840.760280][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.100543][T10764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1168'. [ 841.165353][T10769] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0 [ 841.260679][T10770] kvm: user requested TSC rate below hardware speed [ 841.276693][ T7625] usb 3-1: Firmware version (0.0) predates our first public release. [ 841.287028][ T7625] usb 3-1: Please update to version 0.2 or newer [ 841.442173][T10736] tipc: Resetting bearer [ 841.463684][T10736] tipc: Disabling bearer [ 841.475942][ T7626] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 841.530482][ T5951] usb 7-1: Firmware version (0.0) predates our first public release. [ 841.553974][ T5951] usb 7-1: Please update to version 0.2 or newer [ 841.655242][ T7625] usb 3-1: USB disconnect, device number 65 [ 841.667071][ T7626] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 841.669349][ T5951] usb 7-1: USB disconnect, device number 10 [ 841.679097][ T7626] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 841.698959][ T7626] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 841.712261][ T7626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.949955][ T7626] usb 4-1: string descriptor 0 read error: -71 [ 841.966403][ T7626] hub 4-1:32.0: bad descriptor, ignoring hub [ 841.974609][ T7626] hub 4-1:32.0: probe with driver hub failed with error -5 [ 842.029455][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.043114][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.165026][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.194793][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.270993][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 842.292745][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 842.310367][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 842.325233][T10798] loop2: detected capacity change from 0 to 7 [ 842.326485][ T10] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 842.341129][T10798] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 842.380463][T10798] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 842.387826][T10798] Dev loop2: unable to read RDB block 7 [ 842.392268][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 842.393600][T10798] loop2: unable to read partition table [ 842.434726][T10798] loop2: partition table beyond EOD, truncated [ 842.438497][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 842.446649][T10798] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 842.586482][ T10] usb 5-1: USB disconnect, device number 88 [ 842.769378][ T7626] usb 4-1: USB disconnect, device number 86 [ 842.795984][ T47] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 842.943836][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 842.961586][T10814] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 842.973288][T10814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1184'. [ 842.985879][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 842.997534][ T47] usb 7-1: config 2 has an invalid interface number: 13 but max is 0 [ 843.015600][ T47] usb 7-1: config 2 has no interface number 0 [ 843.021947][ T47] usb 7-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.051572][ T47] usb 7-1: config 2 interface 13 has no altsetting 0 [ 843.061151][ T47] usb 7-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 843.074347][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.082870][ T47] usb 7-1: Product: syz [ 843.087227][ T47] usb 7-1: Manufacturer: syz [ 843.091936][ T47] usb 7-1: SerialNumber: syz [ 843.165633][ T7626] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 843.173601][T10825] binder: 10824:10825 ioctl c0306201 200000000040 returned -14 [ 843.322567][ T7626] usb 4-1: Using ep0 maxpacket: 16 [ 843.336801][ T47] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.347316][ T7626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.366532][ T7626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.378245][ T7626] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 843.418320][ T7626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.448668][ T7626] usb 4-1: config 0 descriptor?? [ 843.494528][ T47] usb 7-1: USB disconnect, device number 11 [ 843.883174][ T7626] vrc2 0003:07C0:1125.0014: fixing up VRC-2 report descriptor [ 843.913553][ T7626] input: HID 07c0:1125 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:07C0:1125.0014/input/input29 [ 843.962921][ T7626] vrc2 0003:07C0:1125.0014: input,hidraw0: USB HID v10.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.3-1/input0 [ 844.079922][ T7625] usb 4-1: USB disconnect, device number 87 [ 844.145603][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 844.148575][ T7626] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 844.305641][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 844.315778][ T7626] usb 3-1: Using ep0 maxpacket: 16 [ 844.332801][ T7626] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.334276][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 844.352297][ T10] usb 7-1: config 0 has no interface number 0 [ 844.355590][ T7626] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 844.358513][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 844.369091][ T7626] usb 3-1: config 1 has no interface number 1 [ 844.379352][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 844.387472][ T7626] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 844.399389][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 844.419465][ T7626] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 844.419465][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 844.419521][ T7626] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 844.433153][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 844.475698][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.477861][ T7626] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.493825][ T10] usb 7-1: config 0 descriptor?? [ 844.495755][ T7626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.507009][ T7626] usb 3-1: Product: syz [ 844.511273][ T7626] usb 3-1: Manufacturer: syz [ 844.514462][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 844.517898][ T7626] usb 3-1: SerialNumber: syz [ 844.705063][ T10] usb 7-1: USB disconnect, device number 12 [ 844.719940][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 844.813033][ T7626] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 844.821147][ T7626] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 844.873963][T10850] loop2: detected capacity change from 0 to 7 [ 844.881520][T10850] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 844.892161][T10850] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 844.901946][T10850] Dev loop2: unable to read RDB block 7 [ 844.908766][T10850] loop2: unable to read partition table [ 844.914794][T10850] loop2: partition table beyond EOD, truncated [ 844.930733][T10850] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 844.960362][ T7626] usb 3-1: USB disconnect, device number 66 [ 845.095660][ T7750] udevd[7750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.715618][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 845.884004][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 845.890935][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 845.911025][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.943451][ T10] usb 7-1: config 0 descriptor?? [ 846.285858][ T7626] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 846.438179][ T7626] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 846.464355][ T7626] usb 4-1: config 0 has no interface number 0 [ 846.475753][ T7626] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 846.515679][ T7626] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 846.565715][ T7626] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 846.595698][ T7626] usb 4-1: config 0 interface 2 has no altsetting 0 [ 846.620681][ T7626] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 846.631700][ T7626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.640836][ T7626] usb 4-1: Product: syz [ 846.645146][ T7626] usb 4-1: Manufacturer: syz [ 846.652814][ T7626] usb 4-1: SerialNumber: syz [ 846.666343][ T7626] usb 4-1: config 0 descriptor?? [ 846.672578][T10861] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 846.680677][T10861] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 846.858142][T10881] block device autoloading is deprecated and will be removed. [ 846.900938][ T7626] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.106079][ T7626] usb 4-1: USB disconnect, device number 88 [ 847.202995][ T8057] udevd[8057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.268337][T10859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.268607][T10859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.269823][ T10] video4linux radio48: keene_cmd_set failed (-71) [ 847.269847][ T10] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 847.271732][ T10] usb 7-1: USB disconnect, device number 13 [ 847.706195][T10889] vti1: entered promiscuous mode [ 847.711402][T10889] vti1: entered allmulticast mode [ 847.906914][T10900] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 847.924173][T10900] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 847.941963][T10901] fuse: Bad value for 'group_id' [ 847.947755][T10901] fuse: Bad value for 'group_id' [ 848.046858][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1208'. [ 848.437980][T10918] fuse: Unknown parameter '0x00000000000000060x0000000000000007' [ 848.499234][T10919] team0: Device gtp0 is of different type [ 848.742848][T10924] loop2: detected capacity change from 0 to 7 [ 848.751698][T10924] Dev loop2: unable to read RDB block 7 [ 848.764308][T10924] loop2: unable to read partition table [ 848.774400][T10924] loop2: partition table beyond EOD, truncated [ 848.813820][T10924] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 850.056154][ T7625] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 850.237684][ T7625] usb 7-1: unable to get BOS descriptor or descriptor too short [ 850.246790][ T7625] usb 7-1: not running at top speed; connect to a high speed hub [ 850.254639][ T7625] usb 7-1: no configurations [ 850.270438][ T7625] usb 7-1: can't read configurations, error -22 [ 850.375180][T10939] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 850.445630][ T7625] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 850.456993][T10935] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 850.556008][T10935] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 850.588474][T10935] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 850.599244][ T7625] usb 7-1: unable to get BOS descriptor or descriptor too short [ 850.630831][ T7625] usb 7-1: not running at top speed; connect to a high speed hub [ 850.638925][ T7625] usb 7-1: no configurations [ 850.645186][ T7625] usb 7-1: can't read configurations, error -22 [ 850.653891][ T7625] usb usb7-port1: attempt power cycle [ 850.995687][ T7625] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 851.018970][ T7625] usb 7-1: unable to get BOS descriptor or descriptor too short [ 851.027686][ T7625] usb 7-1: not running at top speed; connect to a high speed hub [ 851.036029][ T7625] usb 7-1: no configurations [ 851.040876][ T7625] usb 7-1: can't read configurations, error -22 [ 851.176794][ T7625] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 851.199481][ T7625] usb 7-1: unable to get BOS descriptor or descriptor too short [ 851.208200][ T7625] usb 7-1: not running at top speed; connect to a high speed hub [ 851.215794][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 851.224271][ T7625] usb 7-1: no configurations [ 851.230819][ T7625] usb 7-1: can't read configurations, error -22 [ 851.239225][ T7625] usb usb7-port1: unable to enumerate USB device [ 851.377544][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 851.389426][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 851.421305][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.448612][ T10] usb 3-1: config 0 descriptor?? [ 851.730493][T10960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.743180][T10960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.172192][T10970] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 852.180694][T10970] bond2: option packets_per_slave: allowed values 0 - 65535 [ 852.190943][T10970] bond2 (unregistering): Released all slaves [ 852.215731][ T5887] Bluetooth: hci5: command 0x0c1a tx timeout [ 852.241952][T10973] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 852.253202][T10973] bond2: option packets_per_slave: allowed values 0 - 65535 [ 852.293019][T10973] bond2 (unregistering): Released all slaves [ 852.323376][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 852.323394][ T29] audit: type=1326 audit(1773143052.352:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.4.1226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f335639c799 code=0x0 [ 852.382722][T10978] geneve2: entered promiscuous mode [ 852.389465][T10978] geneve2: entered allmulticast mode [ 852.441532][T10982] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 852.593519][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.614445][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.656792][ T10] video4linux radio48: keene_cmd_set failed (-71) [ 852.666009][ T10] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 852.737204][ T10] usb 3-1: USB disconnect, device number 67 [ 853.256019][T10998] use of bytesused == 0 is deprecated and will be removed in the future, [ 853.264622][T10998] use the actual size instead. [ 853.265636][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 853.437572][ T10] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 853.456828][ T10] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 853.520741][ T10] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 853.539981][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 853.542659][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.555928][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.570322][T10996] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 853.596257][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.611049][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.625659][ T7625] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 853.626536][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.635434][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.673714][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.703393][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.717435][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.719531][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.738090][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.747358][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.755786][ T7625] usb 5-1: device descriptor read/64, error -71 [ 853.762407][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.773802][T11010] netlink: 'syz.0.1235': attribute type 3 has an invalid length. [ 853.782411][T11010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1235'. [ 853.785734][ T7626] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 853.955637][ T7626] usb 4-1: Using ep0 maxpacket: 16 [ 853.962282][ T7626] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 853.971381][ T7626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.983200][ T7626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.994793][ T7626] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 854.003997][ T7625] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 854.011702][ T7626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.020024][ T7626] usb 4-1: Product: syz [ 854.024528][ T7626] usb 4-1: Manufacturer: syz [ 854.030880][ T7626] usb 4-1: SerialNumber: syz [ 854.165677][ T7625] usb 5-1: device descriptor read/64, error -71 [ 854.249753][ T7626] usb 4-1: 0:2 : does not exist [ 854.286126][ T7625] usb usb5-port1: attempt power cycle [ 854.295995][ T5887] Bluetooth: hci5: command 0x0c1a tx timeout [ 854.318033][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.339190][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.369982][ T7626] usb 4-1: USB disconnect, device number 89 [ 854.412267][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.448324][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.462328][ T8060] udevd[8060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.545864][ T5993] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 854.655691][ T7625] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 854.676694][ T7625] usb 5-1: device descriptor read/8, error -71 [ 854.685842][ T5993] usb 3-1: device descriptor read/64, error -71 [ 854.925763][ T5993] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 854.935680][ T7625] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 854.956431][ T7625] usb 5-1: device descriptor read/8, error -71 [ 854.963537][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 855.067096][ T7625] usb usb5-port1: unable to enumerate USB device [ 855.075760][ T5993] usb 3-1: device descriptor read/64, error -71 [ 855.158719][ T10] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 855.175460][ T10] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input31 [ 855.196529][ T5993] usb usb3-port1: attempt power cycle [ 855.262136][ T10] usb 7-1: USB disconnect, device number 18 [ 855.268505][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 855.545614][ T5993] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 855.576663][ T5993] usb 3-1: device descriptor read/8, error -71 [ 855.935658][ T5993] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 855.956244][ T5993] usb 3-1: device descriptor read/8, error -71 [ 856.065614][ T7626] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 856.109052][ T5993] usb usb3-port1: unable to enumerate USB device [ 856.205323][ T7626] usb 7-1: device descriptor read/64, error -71 [ 856.388296][ T5887] Bluetooth: hci5: command 0x0c1a tx timeout [ 856.445661][ T7626] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 856.495649][ T5876] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 856.595642][ T7626] usb 7-1: device descriptor read/64, error -71 [ 856.730290][ T7626] usb usb7-port1: attempt power cycle [ 856.785846][ T5876] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.796734][ T5876] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.812353][ T5876] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 856.874570][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.105654][ T7626] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 857.168778][ T7626] usb 7-1: device descriptor read/8, error -71 [ 857.279663][ T5876] usb 4-1: usb_control_msg returned -32 [ 857.286473][ T5876] usbtmc 4-1:16.0: can't read capabilities [ 857.425918][ T7626] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 857.456420][ T7626] usb 7-1: device descriptor read/8, error -71 [ 857.546401][T11053] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 857.565964][ T7626] usb usb7-port1: unable to enumerate USB device [ 857.635584][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 858.032275][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.041181][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.203293][T11066] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 858.235346][T11066] bond1: entered promiscuous mode [ 858.240846][T11066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 858.260245][T11066] bond1: (slave bridge2): making interface the new active one [ 858.268264][T11066] bridge2: entered promiscuous mode [ 858.274634][T11066] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 858.298090][T11066] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 858.312927][T11066] macvlan2: entered promiscuous mode [ 858.320170][T11066] macvlan2: entered allmulticast mode [ 858.327033][T11066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 858.395888][ T10] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 858.526305][ T10] usb 5-1: device descriptor read/64, error -71 [ 858.766001][ T10] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 858.917901][ T10] usb 5-1: device descriptor read/64, error -71 [ 859.039284][ T7626] usb 4-1: USB disconnect, device number 90 [ 859.061881][ T10] usb usb5-port1: attempt power cycle [ 859.202473][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'. [ 859.416259][ T10] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 859.446783][ T10] usb 5-1: device descriptor read/8, error -71 [ 859.685609][ T10] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 859.705632][ T7626] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 859.706343][ T10] usb 5-1: device descriptor read/8, error -71 [ 859.825866][ T10] usb usb5-port1: unable to enumerate USB device [ 859.855706][ T7626] usb 4-1: Using ep0 maxpacket: 8 [ 859.865168][ T7626] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 859.885258][ T7626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.893633][ T7626] usb 4-1: Product: syz [ 859.901994][ T7626] usb 4-1: Manufacturer: syz [ 859.906770][ T7626] usb 4-1: SerialNumber: syz [ 859.915294][ T7626] usb 4-1: config 0 descriptor?? [ 860.035343][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.046602][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.131950][ T7626] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 860.185606][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 860.256595][ T5993] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 860.336222][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 860.346118][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 860.354980][ T10] usb 7-1: config 8 has an invalid interface number: 24 but max is 0 [ 860.363312][ T10] usb 7-1: config 8 has no interface number 0 [ 860.369722][ T10] usb 7-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 860.380832][ T10] usb 7-1: config 8 interface 24 has no altsetting 0 [ 860.390131][ T10] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 860.399794][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.408381][ T10] usb 7-1: Product: syz [ 860.412566][ T10] usb 7-1: Manufacturer: syz [ 860.417616][ T10] usb 7-1: SerialNumber: syz [ 860.423744][ T5993] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 860.438167][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.450263][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.460652][ T5993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 860.476814][ T5993] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 860.486494][ T5993] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 860.494967][ T5993] usb 3-1: Manufacturer: syz [ 860.502943][ T5993] usb 3-1: config 0 descriptor?? [ 860.533727][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.555180][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.663560][ T10] vmk80xx 7-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 860.683665][ T10] usb 7-1: USB disconnect, device number 23 [ 860.916751][ T5993] hid_parser_main: 28 callbacks suppressed [ 860.916775][ T5993] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 860.934371][ T5993] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 861.685675][ T7625] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 861.853737][ T7626] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 861.886211][ T7626] usb 4-1: USB disconnect, device number 91 [ 861.926736][ T7625] usb 5-1: Using ep0 maxpacket: 32 [ 861.937508][ T7625] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 861.946180][ T7625] usb 5-1: config 0 has no interface number 0 [ 861.952427][ T7625] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.966270][ T7625] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 861.976864][ T7625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.984953][ T7625] usb 5-1: Product: syz [ 861.989642][ T7625] usb 5-1: Manufacturer: syz [ 861.994336][ T7625] usb 5-1: SerialNumber: syz [ 862.008934][ T7625] usb 5-1: config 0 descriptor?? [ 862.023042][ T7625] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 862.033297][ T7625] em28xx 5-1:0.132: Video interface 132 found: [ 862.223223][T11115] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 862.296454][ T7625] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 862.330104][T11130] syz_tun: entered allmulticast mode [ 862.351846][ T7626] usb 3-1: reset high-speed USB device number 72 using dummy_hcd [ 862.398154][ T7625] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 862.440091][ T7625] em28xx 5-1:0.132: board has no eeprom [ 862.515667][ T7625] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 862.539862][ T7625] em28xx 5-1:0.132: analog set to bulk mode. [ 862.556880][ T5960] em28xx 5-1:0.132: Registering V4L2 extension [ 862.583080][ T7625] usb 5-1: USB disconnect, device number 97 [ 862.623317][ T7625] em28xx 5-1:0.132: Disconnecting em28xx [ 862.890600][ T5960] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 862.902111][ T5960] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 862.919612][ T5960] em28xx 5-1:0.132: No AC97 audio processor [ 862.943778][ T5960] usb 5-1: Decoder not found [ 862.951637][ T5960] em28xx 5-1:0.132: failed to create media graph [ 862.965926][ T5960] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 862.988918][ T5960] em28xx 5-1:0.132: Remote control support is not available for this card. [ 863.010388][ T7625] em28xx 5-1:0.132: Closing input extension [ 863.041936][ T7625] em28xx 5-1:0.132: Freeing device [ 863.265670][ T5993] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 863.362583][T11148] tipc: Resetting bearer [ 863.400171][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.407797][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.447209][ T5993] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 863.460712][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.487138][ T5993] usb 7-1: config 0 descriptor?? [ 863.508462][ T5993] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 863.561458][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.603966][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.845744][T11148] bond2: left allmulticast mode [ 863.855891][T11148] dummy0: left allmulticast mode [ 863.866534][T11148] ip6tnl1: left allmulticast mode [ 863.875717][T11166] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 863.941997][ T5876] usb 3-1: USB disconnect, device number 72 [ 863.944651][ T5993] gp8psk: usb in 137 operation failed. [ 863.950465][T11157] geneve2: entered promiscuous mode [ 863.982539][ T5993] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 864.002740][ T5993] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 864.023393][ T5959] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.043214][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 33508 - 0 [ 864.043460][ T5993] usb 7-1: USB disconnect, device number 24 [ 864.058935][T11166] usb 4-1: Using ep0 maxpacket: 8 [ 864.070227][ T5959] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.079567][T11166] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.105681][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 33508 - 0 [ 864.120025][T11166] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 864.131536][ T5959] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.152529][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 33508 - 0 [ 864.162238][ T5959] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.172100][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 33508 - 0 [ 864.184887][T11166] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 864.195794][T11166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.220130][T11166] usb 4-1: Product: syz [ 864.224525][T11166] usb 4-1: Manufacturer: syz [ 864.232949][T11166] usb 4-1: SerialNumber: syz [ 864.257918][T11166] usb 4-1: config 0 descriptor?? [ 864.340106][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.355489][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.372014][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.432342][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.470080][T11166] usb 4-1: USB disconnect, device number 92 [ 864.655606][ T5876] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 864.755614][T11167] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 864.805664][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 864.812819][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.825377][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 864.839519][ T5876] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 864.850162][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.862295][ T5876] usb 5-1: config 0 descriptor?? [ 864.911668][T11167] usb 7-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 864.921146][T11167] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.929336][T11167] usb 7-1: Product: syz [ 864.934114][T11167] usb 7-1: Manufacturer: syz [ 864.939259][T11167] usb 7-1: SerialNumber: syz [ 865.157823][T11167] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 865.165444][T11167] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 865.173822][T11167] usb 7-1: 0:3 : does not exist [ 865.179414][T11167] usb 7-1: 0:4 : does not exist [ 865.184398][T11167] usb 7-1: 0:5 : does not exist [ 865.190268][T11167] usb 7-1: 0:6 : does not exist [ 865.195964][T11167] usb 7-1: 0:7 : does not exist [ 865.201058][T11167] usb 7-1: 0:8 : does not exist [ 865.206496][T11167] usb 7-1: 0:9 : does not exist [ 865.211537][T11167] usb 7-1: 0:10 : does not exist [ 865.217352][T11167] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 865.234361][T11167] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 865.266528][T11195] fuse: Bad value for 'fd' [ 865.282802][ T5876] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 865.295127][ T5876] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 865.297446][T11173] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 865.303663][ T5876] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 865.312371][T11195] fuse: Bad value for 'fd' [ 865.321367][ T5876] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 865.332887][T11167] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 865.346965][T11167] usb 7-1: USB disconnect, device number 25 [ 865.353072][ T5876] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 865.358069][T11195] fuse: Bad value for 'fd' [ 865.381494][T11195] fuse: Bad value for 'fd' [ 865.383252][ T5876] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 865.387222][T11195] fuse: Bad value for 'fd' [ 865.396131][ T5876] HID 045e:07da: Invalid code 65791 type 1 [ 865.402531][ T8060] udevd[8060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.404995][ T5876] HID 045e:07da: Invalid code 768 type 1 [ 865.427649][T11195] fuse: Bad value for 'fd' [ 865.432371][ T5876] HID 045e:07da: Invalid code 769 type 1 [ 865.433724][T11195] fuse: Bad value for 'fd' [ 865.440288][ T5876] HID 045e:07da: Invalid code 770 type 1 [ 865.445980][T11195] fuse: Bad value for 'fd' [ 865.449279][ T5876] HID 045e:07da: Invalid code 771 type 1 [ 865.461073][ T5876] HID 045e:07da: Invalid code 772 type 1 [ 865.466150][T11195] fuse: Bad value for 'fd' [ 865.469939][ T5876] HID 045e:07da: Invalid code 773 type 1 [ 865.477976][T11173] usb 4-1: config 0 has no interfaces? [ 865.479099][ T5876] HID 045e:07da: Invalid code 774 type 1 [ 865.483486][T11173] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 865.493085][ T5876] HID 045e:07da: Invalid code 775 type 1 [ 865.501155][T11195] fuse: Bad value for 'fd' [ 865.505796][ T5876] HID 045e:07da: Invalid code 776 type 1 [ 865.510567][T11195] fuse: Bad value for 'fd' [ 865.520294][T11173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.530623][T11195] fuse: Bad value for 'fd' [ 865.535362][T11195] fuse: Bad value for 'fd' [ 865.542265][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input32 [ 865.552020][T11173] usb 4-1: config 0 descriptor?? [ 865.568274][T11195] fuse: Bad value for 'fd' [ 865.582973][T11195] fuse: Bad value for 'fd' [ 865.593149][T11195] fuse: Bad value for 'fd' [ 865.599187][T11195] fuse: Bad value for 'fd' [ 865.603973][T11195] fuse: Bad value for 'fd' [ 865.609494][T11195] fuse: Bad value for 'fd' [ 865.614285][T11195] fuse: Bad value for 'fd' [ 865.615747][T11170] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 865.622127][T11195] fuse: Bad value for 'fd' [ 865.632986][T11195] fuse: Bad value for 'fd' [ 865.639973][ T5876] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 865.653863][T11195] fuse: Bad value for 'fd' [ 865.666234][T11195] fuse: Bad value for 'fd' [ 865.673383][T11195] fuse: Bad value for 'fd' [ 865.684321][T11195] fuse: Bad value for 'fd' [ 865.690079][T11195] fuse: Bad value for 'fd' [ 865.699671][T11195] fuse: Bad value for 'fd' [ 865.738815][T11195] fuse: Bad value for 'fd' [ 865.748938][T11195] fuse: Bad value for 'fd' [ 865.759282][T11170] usb 3-1: device descriptor read/64, error -71 [ 865.767416][T11195] fuse: Bad value for 'fd' [ 865.772238][T11195] fuse: Bad value for 'fd' [ 865.779704][ T5951] usb 4-1: USB disconnect, device number 93 [ 865.790678][T11195] fuse: Bad value for 'fd' [ 865.796145][T11195] fuse: Bad value for 'fd' [ 865.802406][T11195] fuse: Bad value for 'fd' [ 865.809427][T11195] fuse: Bad value for 'fd' [ 865.846127][T11195] fuse: Bad value for 'fd' [ 865.857870][T11195] fuse: Bad value for 'fd' [ 865.879707][T11195] fuse: Bad value for 'fd' [ 865.892049][T11195] fuse: Bad value for 'fd' [ 865.907634][T11195] fuse: Bad value for 'fd' [ 865.912490][T11195] fuse: Bad value for 'fd' [ 865.939235][T11195] fuse: Bad value for 'fd' [ 865.956376][T11195] fuse: Bad value for 'fd' [ 865.972781][T11195] fuse: Bad value for 'fd' [ 865.989323][T11195] fuse: Bad value for 'fd' [ 866.003544][T11195] fuse: Bad value for 'fd' [ 866.008281][T11170] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 866.017978][T11195] fuse: Bad value for 'fd' [ 866.022353][T11206] loop5: detected capacity change from 0 to 7 [ 866.022873][T11195] fuse: Bad value for 'fd' [ 866.034048][T11195] fuse: Bad value for 'fd' [ 866.034280][T11206] loop5: [ 866.043257][T11206] loop5: partition table partially beyond EOD, truncated [ 866.043561][T11195] fuse: Bad value for 'fd' [ 866.066068][T11195] fuse: Bad value for 'fd' [ 866.071416][T11195] fuse: Bad value for 'fd' [ 866.086136][T11195] fuse: Bad value for 'fd' [ 866.091644][T11195] fuse: Bad value for 'fd' [ 866.097403][T11195] fuse: Bad value for 'fd' [ 866.105943][T11195] fuse: Bad value for 'fd' [ 866.112587][T11195] fuse: Bad value for 'fd' [ 866.122623][T11195] fuse: Bad value for 'fd' [ 866.130159][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.135381][T11195] fuse: Bad value for 'fd' [ 866.145347][T11195] fuse: Bad value for 'fd' [ 866.150482][T11170] usb 3-1: device descriptor read/64, error -71 [ 866.156755][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.157995][ T5951] usb 5-1: USB disconnect, device number 98 [ 866.166132][T11195] fuse: Bad value for 'fd' [ 866.202463][T11195] fuse: Bad value for 'fd' [ 866.216520][T11195] fuse: Bad value for 'fd' [ 866.224190][T11195] fuse: Bad value for 'fd' [ 866.288512][T11170] usb usb3-port1: attempt power cycle [ 866.645794][T11170] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 866.655603][ T5993] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 866.666464][T11170] usb 3-1: device descriptor read/8, error -71 [ 866.807295][ T5993] usb 4-1: Using ep0 maxpacket: 32 [ 866.816823][ T5993] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 866.832329][ T5993] usb 4-1: config 0 has no interface number 0 [ 866.843736][ T5993] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.880394][ T5993] usb 4-1: config 0 interface 89 has no altsetting 0 [ 866.898777][ T5993] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 866.912914][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.926433][T11170] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 866.939754][ T5993] usb 4-1: Product: syz [ 866.947332][T11170] usb 3-1: device descriptor read/8, error -71 [ 866.958100][ T5993] usb 4-1: Manufacturer: syz [ 866.966812][ T5993] usb 4-1: SerialNumber: syz [ 866.979744][ T5993] usb 4-1: config 0 descriptor?? [ 866.999123][ T5993] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 867.009597][ T5951] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 867.027286][ T5993] em28xx 4-1:0.89: Video interface 89 found: [ 867.056233][T11170] usb usb3-port1: unable to enumerate USB device [ 867.107444][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.159951][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.210960][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 867.232281][ T5951] usb 5-1: config 0 interface 0 has no altsetting 1 [ 867.269586][ T5951] usb 5-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 867.284713][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 867.334763][ T5951] usb 5-1: Product: syz [ 867.343775][ T5951] usb 5-1: Manufacturer: syz [ 867.347719][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.363148][ T5951] usb 5-1: SerialNumber: syz [ 867.365039][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.587668][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.588397][ T5951] usb 5-1: config 0 descriptor?? [ 867.624415][ T5993] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 868.215485][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.479467][ T5951] usb 5-1: USB disconnect, device number 99 [ 868.481560][ T7716] udevd[7716]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.675648][T11167] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 868.695904][T11174] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 868.792904][T11242] loop2: detected capacity change from 0 to 7 [ 868.815315][ T7716] Dev loop2: unable to read RDB block 7 [ 868.821881][ T7716] loop2: unable to read partition table [ 868.827711][T11167] usb 3-1: Using ep0 maxpacket: 16 [ 868.833922][ T7716] loop2: partition table beyond EOD, truncated [ 868.835860][ T5993] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 868.849927][T11167] usb 3-1: unable to get BOS descriptor or descriptor too short [ 868.863332][T11167] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.879220][T11167] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.879792][T11242] Dev loop2: unable to read RDB block 7 [ 868.891259][T11167] usb 3-1: string descriptor 0 read error: -22 [ 868.902200][T11167] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 868.922538][T11174] usb 7-1: config 0 has no interfaces? [ 868.941380][T11174] usb 7-1: string descriptor 0 read error: -22 [ 868.948416][T11167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.952602][T11174] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 868.994448][T11174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 869.041439][T11167] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 869.084006][T11242] loop2: unable to read partition table [ 869.122549][T11174] usb 7-1: config 0 descriptor?? [ 869.149415][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 869.280004][T11244] netlink: 'syz.4.1295': attribute type 11 has an invalid length. [ 869.287930][T11244] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1295'. [ 869.299294][T11244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1295'. [ 869.784298][T11167] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 869.814328][T11167] usb 3-1: USB disconnect, device number 77 [ 869.896350][ T5993] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 869.904601][ T5993] em28xx 4-1:0.89: board has no eeprom [ 869.955761][T11242] loop2: partition table beyond EOD, truncated [ 869.980084][ T5993] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 869.988727][ T5993] em28xx 4-1:0.89: analog set to bulk mode. [ 869.996692][ T29] audit: type=1326 audit(1773143070.022:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.4.1295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335639c799 code=0x0 [ 870.006568][T11242] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 870.019750][T11158] em28xx 4-1:0.89: Registering V4L2 extension [ 870.119345][T11158] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 870.140895][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.152171][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.169894][T11158] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 870.180551][T11158] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 870.191848][T11158] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 870.204921][T11158] em28xx 4-1:0.89: Config register raw data: 0xfffffffb [ 870.215030][T11158] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 870.222459][T11158] em28xx 4-1:0.89: No AC97 audio processor [ 870.245274][T11167] usb 4-1: USB disconnect, device number 94 [ 870.252473][T11167] em28xx 4-1:0.89: Disconnecting em28xx [ 870.322625][T11158] usb 4-1: Decoder not found [ 870.342916][T11158] em28xx 4-1:0.89: failed to create media graph [ 870.355311][T11158] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 870.381387][T11158] em28xx 4-1:0.89: Registering snapshot button... [ 870.405851][T11158] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input33 [ 870.439481][T11158] em28xx 4-1:0.89: Remote control support is not available for this card. [ 870.460046][T11167] em28xx 4-1:0.89: Closing input extension [ 870.473430][T11167] em28xx 4-1:0.89: Deregistering snapshot button [ 870.577699][T11167] em28xx 4-1:0.89: Freeing device [ 870.739689][T11265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1298'. [ 870.754794][T11265] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 870.995673][T11167] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 871.176094][T11167] usb 4-1: Using ep0 maxpacket: 8 [ 871.190071][T11167] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 871.253490][T11167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.269645][T11167] usb 4-1: Product: syz [ 871.278390][T11167] usb 4-1: Manufacturer: syz [ 871.291006][T11167] usb 4-1: SerialNumber: syz [ 871.306351][T11167] usb 4-1: config 0 descriptor?? [ 871.320397][T11167] gspca_main: se401-2.14.0 probing 047d:5003 [ 871.448365][T11165] usb 7-1: USB disconnect, device number 26 [ 871.521006][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.547306][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.797613][T11167] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 871.812097][T11167] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 871.842787][T11167] usb 4-1: USB disconnect, device number 95 [ 872.515288][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.608751][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.625345][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.731750][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.771660][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.801370][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.812716][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.823444][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.837893][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.853561][T11158] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 872.873448][T11314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1313'. [ 872.887435][T11158] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 872.981942][T11314] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 873.070588][T11301] delete_channel: no stack [ 873.078254][T11301] delete_channel: no stack [ 873.235821][T11170] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 873.395794][T11170] usb 7-1: device descriptor read/64, error -71 [ 873.635850][T11170] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 873.785691][T11170] usb 7-1: device descriptor read/64, error -71 [ 873.896274][T11170] usb usb7-port1: attempt power cycle [ 874.077832][T11342] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 874.091777][T11343] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 874.119742][T11342] !: entered promiscuous mode [ 874.132205][T11343] !: left promiscuous mode [ 874.265600][T11170] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 874.293823][T11170] usb 7-1: device descriptor read/8, error -71 [ 874.350463][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.361907][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.535872][T11170] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 874.580518][T11170] usb 7-1: device descriptor read/8, error -71 [ 874.696070][T11170] usb usb7-port1: unable to enumerate USB device [ 874.826747][T11379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1330'. [ 874.841483][T11379] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 874.934600][T11382] tipc: Enabled bearer , priority 0 [ 874.956453][T11382] syzkaller0: entered promiscuous mode [ 874.969583][T11382] syzkaller0: entered allmulticast mode [ 874.992336][T11382] sch_fq: defrate 127 ignored. [ 875.041856][T11382] tipc: Resetting bearer [ 875.059498][T11380] tipc: Resetting bearer [ 875.126222][T11380] tipc: Disabling bearer [ 875.313672][T11388] loop2: detected capacity change from 0 to 7 [ 875.330492][ T8060] Dev loop2: unable to read RDB block 7 [ 875.338884][ T8060] loop2: unable to read partition table [ 875.352156][ T8060] loop2: partition table beyond EOD, truncated [ 875.369785][T11388] Dev loop2: unable to read RDB block 7 [ 875.375942][T11388] loop2: unable to read partition table [ 875.381900][T11388] loop2: partition table beyond EOD, truncated [ 875.388694][T11388] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 875.539053][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 875.548184][T11170] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 875.561352][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 875.570768][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 875.731217][T11170] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 875.741038][T11170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.757984][T11170] usb 3-1: Product: syz [ 875.777405][T11170] usb 3-1: Manufacturer: syz [ 875.782794][T11170] usb 3-1: SerialNumber: syz [ 876.125642][T11174] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 876.241014][T11170] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 876.254407][T11170] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 876.302165][T11174] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.310711][T11174] usb 4-1: not running at top speed; connect to a high speed hub [ 876.327266][T11174] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 876.337202][T11174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.345242][T11174] usb 4-1: Product: syz [ 876.349995][T11174] usb 4-1: Manufacturer: syz [ 876.354620][T11174] usb 4-1: SerialNumber: syz [ 876.582390][T11414] dlm: non-version read from control device 7 [ 876.844660][T11174] usb 4-1: USB disconnect, device number 96 [ 877.217596][T11421] loop2: detected capacity change from 0 to 7 [ 877.224721][T11421] Dev loop2: unable to read RDB block 7 [ 877.230954][T11421] loop2: unable to read partition table [ 877.237841][T11421] loop2: partition table beyond EOD, truncated [ 877.244681][T11421] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 877.517343][T11170] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 877.565869][ T5993] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 877.705758][T11431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1347'. [ 877.760961][ T5993] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 877.776316][ T5993] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 877.785224][ T5993] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 877.796061][ T5993] usb 7-1: config 220 has no interface number 2 [ 877.802394][ T5993] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 877.817446][ T5993] usb 7-1: config 220 interface 0 has no altsetting 0 [ 877.824426][ T5993] usb 7-1: config 220 interface 76 has no altsetting 0 [ 877.843152][ T5993] usb 7-1: config 220 interface 1 has no altsetting 0 [ 877.857858][ T5993] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 877.867234][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.875363][ T5993] usb 7-1: Product: syz [ 877.882958][ T5993] usb 7-1: Manufacturer: syz [ 877.888044][ T5993] usb 7-1: SerialNumber: syz [ 878.021993][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1348'. [ 878.034560][T11439] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 878.064681][T11440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.072002][T11440] IPv6: NLM_F_CREATE should be set when creating new route [ 878.079362][T11440] IPv6: NLM_F_CREATE should be set when creating new route [ 878.086844][T11440] IPv6: NLM_F_CREATE should be set when creating new route [ 878.110349][ T5993] usb 7-1: selecting invalid altsetting 0 [ 878.121357][ T5993] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 878.129049][ T5993] uvcvideo 7-1:220.0: No valid video chain found. [ 878.219749][T11386] netlink: zone id is out of range [ 878.223850][T11440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.224995][T11386] netlink: zone id is out of range [ 878.225007][T11386] netlink: zone id is out of range [ 878.266761][T11386] netlink: zone id is out of range [ 878.274993][T11386] netlink: zone id is out of range [ 878.281918][ T5993] usb 7-1: selecting invalid altsetting 0 [ 878.290307][ T5993] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 878.333203][T11386] netlink: zone id is out of range [ 878.343261][T11386] netlink: zone id is out of range [ 878.353798][ T5993] usb 7-1: USB disconnect, device number 31 [ 878.372967][T11170] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 878.426744][T11170] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 878.467715][T11170] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 878.498994][T11170] usb 3-1: USB disconnect, device number 78 [ 879.398543][T11456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.599425][T11458] loop2: detected capacity change from 0 to 7 [ 879.621611][T11458] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 879.660167][T11458] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 879.680383][T11458] Dev loop2: unable to read RDB block 7 [ 879.700635][T11458] loop2: unable to read partition table [ 879.730405][T11458] loop2: partition table beyond EOD, truncated [ 879.762376][T11458] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 879.951091][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'. [ 880.155626][T11167] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 880.155636][ T5951] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 880.245661][ T5993] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 880.305657][T11167] usb 4-1: device descriptor read/64, error -71 [ 880.316657][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 880.323229][ T5951] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 880.339688][ T5951] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 880.361425][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 880.381148][ T5951] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 880.399690][ T5993] usb 7-1: device descriptor read/64, error -71 [ 880.419077][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.435644][ T5951] usb 5-1: Product: syz [ 880.445759][ T5951] usb 5-1: Manufacturer: syz [ 880.456107][ T5951] usb 5-1: SerialNumber: syz [ 880.471494][ T5951] usb 5-1: config 0 descriptor?? [ 880.545662][T11167] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 880.655621][ T5993] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 880.698414][T11167] usb 4-1: device descriptor read/64, error -71 [ 880.815728][ T5993] usb 7-1: device descriptor read/64, error -71 [ 880.817284][T11167] usb usb4-port1: attempt power cycle [ 880.890721][ T5951] gs_usb 5-1:0.0: Configuring for 14 interfaces [ 880.926157][ T5993] usb usb7-port1: attempt power cycle [ 881.185676][T11167] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 881.214695][T11167] usb 4-1: device descriptor read/8, error -71 [ 881.265691][ T5993] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 881.307726][ T5993] usb 7-1: device descriptor read/8, error -71 [ 881.465605][T11167] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 881.506310][T11167] usb 4-1: device descriptor read/8, error -71 [ 881.565814][ T5993] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 881.596562][ T5993] usb 7-1: device descriptor read/8, error -71 [ 881.626035][T11167] usb usb4-port1: unable to enumerate USB device [ 881.717209][ T5993] usb usb7-port1: unable to enumerate USB device [ 882.139535][ T5951] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 882.179071][ T5951] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 882.257380][ T5951] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 882.607090][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.652713][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.825633][T11170] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 882.961082][T11170] usb 3-1: device descriptor read/64, error -71 [ 883.020270][T11496] tipc: Enabling of bearer rejected, failed to enable media [ 883.082347][T11500] usb usb8: usbfs: process 11500 (syz.4.1366) did not claim interface 0 before use [ 883.092047][T11500] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 883.112769][T11500] net_ratelimit: 352 callbacks suppressed [ 883.112788][T11500] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 883.215731][T11170] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 883.238317][ T29] audit: type=1326 audit(1773143083.272:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.1369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335639c799 code=0x0 [ 883.345649][T11170] usb 3-1: device descriptor read/64, error -71 [ 883.385645][T11174] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 883.426680][T11165] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 883.458741][T11167] usb 5-1: USB disconnect, device number 100 [ 883.473487][T11170] usb usb3-port1: attempt power cycle [ 883.535659][T11174] usb 7-1: Using ep0 maxpacket: 8 [ 883.545395][T11174] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 883.555303][T11174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.563992][T11174] usb 7-1: Product: syz [ 883.568883][T11174] usb 7-1: Manufacturer: syz [ 883.573696][T11174] usb 7-1: SerialNumber: syz [ 883.606216][T11174] usb 7-1: config 0 descriptor?? [ 883.612824][T11165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 883.615073][T11174] gspca_main: se401-2.14.0 probing 047d:5003 [ 883.625925][T11165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 136, setting to 64 [ 883.641628][T11165] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.658278][T11165] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 883.667432][T11165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.689049][T11165] usb 4-1: config 0 descriptor?? [ 883.714508][T11505] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 883.814231][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.827745][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.835889][T11170] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 883.851063][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.862462][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.872505][T11170] usb 3-1: device descriptor read/8, error -71 [ 883.882772][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.904351][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.913873][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.922781][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.932185][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.941281][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.085973][T11174] usb 7-1: reset high-speed USB device number 36 using dummy_hcd [ 884.117372][T11170] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 884.143403][T11165] hid_parser_main: 22 callbacks suppressed [ 884.143427][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.156963][T11170] usb 3-1: device descriptor read/8, error -71 [ 884.164000][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.172688][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.181347][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.188655][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.197031][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.204026][T11165] acrux 0003:1A34:F705.0018: unknown main item tag 0x0 [ 884.222028][T11165] acrux 0003:1A34:F705.0018: hidraw0: USB HID v0.07 Device [HID 1a34:f705] on usb-dummy_hcd.3-1/input0 [ 884.233319][T11165] acrux 0003:1A34:F705.0018: no inputs found [ 884.240602][T11165] acrux 0003:1A34:F705.0018: Failed to enable force feedback support, error: -19 [ 884.264606][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1371'. [ 884.266119][T11170] usb usb3-port1: unable to enumerate USB device [ 884.349357][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.366165][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.388349][ T5993] usb 4-1: USB disconnect, device number 101 [ 884.636673][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.646086][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.685006][ T29] audit: type=1326 audit(1773143084.712:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.713046][ T29] audit: type=1326 audit(1773143084.742:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.738953][ T29] audit: type=1326 audit(1773143084.742:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.763342][ T29] audit: type=1326 audit(1773143084.742:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.787825][ T29] audit: type=1326 audit(1773143084.742:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.813370][ T29] audit: type=1326 audit(1773143084.742:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.836856][ T29] audit: type=1326 audit(1773143084.742:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.837264][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 884.859899][ T29] audit: type=1326 audit(1773143084.742:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4859c799 code=0x7ffc0000 [ 884.859942][ T29] audit: type=1326 audit(1773143084.742:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.6.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab4853db19 code=0x7ffc0000 [ 884.920036][T11530] veth0_to_bond: Caught tx_queue_len zero misconfig [ 884.965475][T11530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.974820][T11530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.985680][T11174] usb 7-1: device descriptor read/64, error -71 [ 885.046941][T11534] xt_hashlimit: size too large, truncated to 1048576 [ 885.275632][T11174] usb 7-1: reset high-speed USB device number 36 using dummy_hcd [ 885.375694][T11165] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 885.415653][T11174] usb 7-1: device descriptor read/64, error -71 [ 885.497889][ T5876] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 885.542759][T11165] usb 5-1: config 0 has no interfaces? [ 885.579112][T11165] usb 5-1: string descriptor 0 read error: -22 [ 885.595276][T11165] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 885.613957][T11165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 885.635610][ T5876] usb 4-1: device descriptor read/64, error -71 [ 885.660557][T11165] usb 5-1: config 0 descriptor?? [ 885.677629][T11174] usb 7-1: reset high-speed USB device number 36 using dummy_hcd [ 885.710958][T11174] usb 7-1: device descriptor read/8, error -71 [ 885.875612][ T5876] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 886.075674][T11174] usb 7-1: reset high-speed USB device number 36 using dummy_hcd [ 886.096516][T11174] usb 7-1: device descriptor read/8, error -71 [ 886.146385][ T5876] usb 4-1: device descriptor read/64, error -71 [ 886.208016][T11174] gspca_se401: read req failed req 0x06 error -19 [ 886.219305][T11174] usb 7-1: USB disconnect, device number 36 [ 886.255953][ T5876] usb usb4-port1: attempt power cycle [ 886.365615][T11174] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 886.499239][T11174] usb 7-1: device descriptor read/64, error -71 [ 886.596214][ T5876] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 886.618400][ T5876] usb 4-1: device descriptor read/8, error -71 [ 886.745631][T11174] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 886.825649][T11165] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 886.865658][ T5876] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 886.875636][T11174] usb 7-1: device descriptor read/64, error -71 [ 886.886284][ T5876] usb 4-1: device descriptor read/8, error -71 [ 886.985620][T11165] usb 3-1: Using ep0 maxpacket: 32 [ 886.992374][T11165] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 886.996853][T11174] usb usb7-port1: attempt power cycle [ 887.002357][ T5876] usb usb4-port1: unable to enumerate USB device [ 887.013854][T11165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.025686][T11165] usb 3-1: config 0 descriptor?? [ 887.034512][T11165] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 887.238168][T11555] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 887.365792][T11174] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 887.396338][T11174] usb 7-1: device descriptor read/8, error -71 [ 887.487865][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.500435][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.635676][T11174] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 887.668658][T11555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.693258][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.702694][T11165] gspca_nw80x: reg_w err -71 [ 887.708017][T11165] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 887.709036][T11174] usb 7-1: device descriptor read/8, error -71 [ 887.729415][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.738224][T11165] usb 3-1: USB disconnect, device number 83 [ 887.835918][T11174] usb usb7-port1: unable to enumerate USB device [ 888.119470][T11165] usb 5-1: USB disconnect, device number 101 [ 888.502270][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 888.502290][ T29] audit: type=1804 audit(1773143088.522:722): pid=11567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1387" name="/newroot/291/file0" dev="fuse" ino=1 res=1 errno=0 [ 888.676422][ T5951] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 888.817277][ T5951] usb 7-1: device descriptor read/64, error -71 [ 889.096614][ T5951] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 889.165653][T11174] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 889.265770][ T5951] usb 7-1: device descriptor read/64, error -71 [ 889.438079][T11174] usb 5-1: device descriptor read/64, error -71 [ 889.487042][ T5951] usb usb7-port1: attempt power cycle [ 889.489226][T11592] netlink: 'syz.3.1394': attribute type 39 has an invalid length. [ 889.745813][T11174] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 889.889768][T11174] usb 5-1: device descriptor read/64, error -71 [ 889.956357][ T5951] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 889.976753][ T5951] usb 7-1: device descriptor read/8, error -71 [ 890.006051][T11174] usb usb5-port1: attempt power cycle [ 890.259204][ T5951] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 890.286534][ T5951] usb 7-1: device descriptor read/8, error -71 [ 890.385717][T11165] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 890.385717][T11158] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 890.395671][T11174] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 890.410710][ T5951] usb usb7-port1: unable to enumerate USB device [ 890.436153][T11174] usb 5-1: device descriptor read/8, error -71 [ 890.547777][T11165] usb 4-1: config 0 has no interfaces? [ 890.556936][T11165] usb 4-1: string descriptor 0 read error: -22 [ 890.563231][T11165] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9e.7c [ 890.573122][T11165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 890.575603][T11158] usb 3-1: Using ep0 maxpacket: 32 [ 890.597965][T11165] usb 4-1: config 0 descriptor?? [ 890.606812][T11158] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 890.623292][T11158] usb 3-1: config 0 has no interface number 0 [ 890.635170][T11158] usb 3-1: config 0 interface 184 has no altsetting 0 [ 890.651535][T11158] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 890.665756][T11158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.675631][T11174] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 890.688436][T11158] usb 3-1: Product: syz [ 890.695842][T11158] usb 3-1: Manufacturer: syz [ 890.700477][T11158] usb 3-1: SerialNumber: syz [ 890.715632][T11174] usb 5-1: device descriptor read/8, error -71 [ 890.729880][T11158] usb 3-1: config 0 descriptor?? [ 890.836025][T11174] usb usb5-port1: unable to enumerate USB device [ 891.836019][ T5951] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 891.990156][ T5951] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 892.005824][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.024371][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.043167][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 892.066338][ T5951] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 892.078777][ T5951] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 892.095082][ T5951] usb 7-1: Manufacturer: syz [ 892.108887][ T5951] usb 7-1: config 0 descriptor?? [ 892.511371][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.522310][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.533993][ T5951] appleir 0003:05AC:8243.0019: item fetching failed at offset 0/1 [ 892.542765][ T5951] appleir 0003:05AC:8243.0019: parse failed [ 892.550425][ T5951] appleir 0003:05AC:8243.0019: probe with driver appleir failed with error -22 [ 892.588784][T11610] ip6tnl2: entered allmulticast mode [ 892.979152][T11158] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 893.001913][T11158] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 893.012762][T11158] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 893.034189][T11158] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 893.058500][T11158] usb 3-1: USB disconnect, device number 84 [ 893.069669][T11165] usb 4-1: USB disconnect, device number 106 [ 893.652984][T11167] usb 7-1: USB disconnect, device number 45 [ 893.935624][T11174] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 893.945657][T11165] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 894.107887][T11165] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 894.117175][T11165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.127914][T11165] usb 4-1: config 0 descriptor?? [ 894.143102][T11174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 894.145628][T11167] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 894.165690][T11174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 894.180566][T11174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 894.190759][T11174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 894.201996][T11174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 894.212346][T11174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 894.225684][T11174] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 894.234542][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 894.243883][T11174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.252344][T11174] usb 3-1: Product: syz [ 894.256642][T11174] usb 3-1: Manufacturer: syz [ 894.261255][T11174] usb 3-1: SerialNumber: syz [ 894.269498][T11174] usb 3-1: config 0 descriptor?? [ 894.291863][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 894.314103][T11174] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 894.323281][T11174] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 894.342870][T11167] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.372230][T11167] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.381733][T11165] usb 4-1: Cannot set MAC address [ 894.388337][T11165] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 894.400030][T11167] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 894.414589][T11167] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 894.457965][T11165] usb 4-1: USB disconnect, device number 107 [ 894.464676][T11167] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 894.479470][T11167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 894.492087][T11167] usb 7-1: SerialNumber: syz [ 895.107711][T11170] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 895.167616][T11651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.259111][T11651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.395773][T11170] usb 5-1: config 0 has no interfaces? [ 895.417245][T11170] usb 5-1: string descriptor 0 read error: -22 [ 895.423682][T11170] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 895.453384][T11170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 895.484455][T11170] usb 5-1: config 0 descriptor?? [ 895.517955][T11167] usb 7-1: 0:2 : does not exist [ 895.554677][T11167] usb 7-1: unit 5 not found! [ 895.757244][T11167] usb 7-1: USB disconnect, device number 46 [ 896.316985][T11167] usb 3-1: USB disconnect, device number 85 [ 896.695230][T11174] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 896.858203][T11174] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 896.866905][T11174] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 896.875333][T11174] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 896.884805][T11174] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 896.896915][T11174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 896.908145][T11174] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 896.923291][T11174] usb 7-1: language id specifier not provided by device, defaulting to English [ 896.957174][T11174] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 896.966697][T11174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.975247][T11174] usb 7-1: Manufacturer: 躔煟祚肂濬즰 [ 896.996382][T11174] usb 7-1: config 0 descriptor?? [ 897.002025][T11682] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 897.022831][T11174] hub 7-1:0.0: bad descriptor, ignoring hub [ 897.032042][T11174] hub 7-1:0.0: probe with driver hub failed with error -5 [ 897.050457][T11174] input: 躔煟祚肂濬즰 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input36 [ 897.353162][T11167] usb 7-1: USB disconnect, device number 47 [ 897.558081][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 897.685459][ T29] audit: type=1326 audit(1773143097.702:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.2.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903d59c799 code=0x7ffc0000 [ 897.714998][T11174] usb 5-1: USB disconnect, device number 106 [ 897.732784][ T29] audit: type=1326 audit(1773143097.702:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.2.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903d59c799 code=0x7ffc0000 [ 899.196862][T11735] dlm: non-version read from control device 7 [ 899.768156][T11755] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1434'. [ 900.765619][T11158] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 900.937659][T11158] usb 7-1: config 0 has no interfaces? [ 900.951123][T11158] usb 7-1: string descriptor 0 read error: -22 [ 900.976969][T11158] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 900.997769][T11158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 901.021493][T11158] usb 7-1: config 0 descriptor?? [ 902.276130][T11158] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 902.436102][T11174] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 902.446636][T11158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.457890][T11158] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 902.470031][T11158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.528141][T11158] usb 5-1: config 0 descriptor?? [ 902.549291][T11158] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 902.622895][T11174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.650588][T11174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.679332][T11174] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 902.710875][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.716002][T11174] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 902.727507][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.751070][T11174] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 902.786565][T11785] kvm: pic: level sensitive irq not supported [ 902.797852][T11174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 902.812707][T11174] usb 3-1: SerialNumber: syz [ 902.839018][T11165] usb 5-1: USB disconnect, device number 107 [ 902.905607][T11170] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 903.065825][T11170] usb 4-1: device descriptor read/64, error -71 [ 903.133695][T11158] usb 7-1: USB disconnect, device number 48 [ 903.225897][T11174] usb 3-1: 0:2 : does not exist [ 903.236505][T11174] usb 3-1: unit 5 not found! [ 903.315699][T11170] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 903.334297][T11174] usb 3-1: USB disconnect, device number 86 [ 903.355209][T11803] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 903.394365][ T8060] udevd[8060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.476050][T11170] usb 4-1: device descriptor read/64, error -71 [ 903.600221][T11170] usb usb4-port1: attempt power cycle [ 903.619374][T11813] dlm: non-version read from control device 7 [ 904.386416][T11170] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 904.456539][T11170] usb 4-1: device descriptor read/8, error -71 [ 904.517920][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'. [ 904.527079][T11824] netlink: 145 bytes leftover after parsing attributes in process `syz.6.1453'. [ 904.705586][T11170] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 904.727122][T11170] usb 4-1: device descriptor read/8, error -71 [ 904.835655][T11165] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 904.843765][T11170] usb usb4-port1: unable to enumerate USB device [ 905.045613][T11165] usb 7-1: Using ep0 maxpacket: 8 [ 905.058111][T11165] usb 7-1: unable to get BOS descriptor or descriptor too short [ 905.068026][T11165] usb 7-1: config 8 has an invalid interface number: 59 but max is 0 [ 905.085644][T11165] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 905.110828][T11165] usb 7-1: config 8 has an invalid interface number: 147 but max is 0 [ 905.278409][T11165] usb 7-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 905.298405][T11165] usb 7-1: config 8 has no interface number 0 [ 905.304696][T11165] usb 7-1: config 8 has no interface number 1 [ 905.324660][T11165] usb 7-1: config 8 interface 59 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 905.338238][T11165] usb 7-1: config 8 interface 59 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 905.350989][T11165] usb 7-1: config 8 interface 59 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 905.371563][T11165] usb 7-1: too many endpoints for config 8 interface 147 altsetting 198: 94, using maximum allowed: 30 [ 905.412444][T11165] usb 7-1: config 8 interface 147 altsetting 198 has a duplicate endpoint with address 0x2, skipping [ 905.428785][T11165] usb 7-1: config 8 interface 147 altsetting 198 has 1 endpoint descriptor, different from the interface descriptor's value: 94 [ 905.442590][T11165] usb 7-1: config 8 interface 59 has no altsetting 0 [ 905.449578][T11165] usb 7-1: config 8 interface 147 has no altsetting 0 [ 905.470618][T11165] usb 7-1: New USB device found, idVendor=0a46, idProduct=0268, bcdDevice= 6.40 [ 905.505806][T11165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.519362][T11165] usb 7-1: Product: syz [ 905.523697][T11165] usb 7-1: Manufacturer: syz [ 905.530327][T11165] usb 7-1: SerialNumber: syz [ 905.632632][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.643567][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.698792][T11846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1457'. [ 905.781044][T11165] dm9601 7-1:8.59: probe with driver dm9601 failed with error -22 [ 905.812306][T11165] dm9601 7-1:8.147: probe with driver dm9601 failed with error -22 [ 905.859208][T11165] usb 7-1: USB disconnect, device number 49 [ 906.195649][T11165] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 906.355616][T11165] usb 4-1: Using ep0 maxpacket: 8 [ 906.369258][T11165] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 906.382118][T11165] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 906.400610][T11165] usb 4-1: config 0 has no interface number 0 [ 906.415032][T11165] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 906.431667][T11165] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 906.445025][T11165] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 906.461704][T11868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.462738][T11165] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 906.502059][T11165] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 906.512058][T11165] usb 4-1: Product: syz [ 906.516542][T11165] usb 4-1: Manufacturer: syz [ 906.523333][T11165] usb 4-1: config 0 descriptor?? [ 906.740911][T11165] usb 4-1: USB disconnect, device number 112 [ 907.355599][T11174] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 907.605710][T11174] usb 4-1: Using ep0 maxpacket: 16 [ 907.614428][T11174] usb 4-1: unable to get BOS descriptor or descriptor too short [ 907.624231][T11174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.635437][T11174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.649218][T11174] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.750043][T11174] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 907.774181][T11174] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 907.792685][T11174] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 907.840597][T11174] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.872532][T11174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.901359][T11174] usb 4-1: Product: syz [ 907.905870][T11174] usb 4-1: SerialNumber: syz [ 908.126117][ T5876] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 908.300942][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 908.339781][ T5876] usb 5-1: config 0 has an invalid interface number: 236 but max is 1 [ 908.367512][ T5876] usb 5-1: config 0 has an invalid interface number: 129 but max is 1 [ 908.396169][ T5876] usb 5-1: config 0 has no interface number 0 [ 908.416871][ T5876] usb 5-1: config 0 has no interface number 1 [ 908.423023][ T5876] usb 5-1: config 0 interface 236 has no altsetting 0 [ 908.448342][ T5876] usb 5-1: config 0 interface 129 has no altsetting 0 [ 908.459294][ T5876] usb 5-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 908.486998][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.496557][ T5876] usb 5-1: Product: syz [ 908.502193][ T5876] usb 5-1: Manufacturer: syz [ 908.507409][ T5876] usb 5-1: SerialNumber: syz [ 908.523948][ T5876] usb 5-1: config 0 descriptor?? [ 908.688432][T11895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1471'. [ 909.169079][T11174] cdc_ncm 4-1:1.0: bind() failure [ 909.176239][T11165] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 909.212466][T11174] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 909.231851][T11174] cdc_ncm 4-1:1.1: bind() failure [ 909.253104][T11174] usb 4-1: USB disconnect, device number 113 [ 909.264884][ T5876] ir_usb 5-1:0.236: required endpoints missing [ 909.369127][T11165] usb 3-1: Using ep0 maxpacket: 8 [ 909.417268][T11165] usb 3-1: unable to get BOS descriptor or descriptor too short [ 909.454329][ T5876] usb 5-1: selecting invalid altsetting 0 [ 909.462119][T11165] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.482950][ T5876] uvcvideo 5-1:0.129: Found UVC 2.26 device syz (1ace:e9b2) [ 909.493656][ T5876] uvcvideo 5-1:0.129: No valid video chain found. [ 909.503705][T11165] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.536053][ T5876] usb 5-1: USB disconnect, device number 108 [ 909.549730][T11165] usb 3-1: config 1 interface 0 has no altsetting 0 [ 909.567042][T11165] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 909.599450][T11165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.637265][T11165] usb 3-1: Product: syz [ 909.641940][T11165] usb 3-1: Manufacturer: syz [ 909.647292][T11165] usb 3-1: SerialNumber: syz [ 909.914086][T11898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.931452][T11898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.714822][T11918] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.1476'. [ 910.891222][T11165] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input38 [ 911.047357][ T5180] bcm5974 3-1:1.0: could not read from device [ 911.525687][T11158] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 911.576239][ T5180] bcm5974 3-1:1.0: could not read from device [ 911.610371][ T5180] bcm5974 3-1:1.0: could not read from device [ 911.614292][T11165] usb 3-1: USB disconnect, device number 87 [ 911.623400][ T5180] bcm5974 3-1:1.0: could not read from device [ 911.695623][T11158] usb 5-1: Using ep0 maxpacket: 32 [ 911.701993][T11158] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 911.711712][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 911.797609][T11158] usb 5-1: config 0 has no interface number 0 [ 911.804585][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 911.904118][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 911.917155][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 911.925182][T11158] usb 5-1: config 0 has no interface number 0 [ 911.932018][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.085634][T11170] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 912.235695][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.254301][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 912.284619][T11158] usb 5-1: config 0 has no interface number 0 [ 912.330486][ T7716] udevd[7716]: Error opening device "/dev/input/event4": No such file or directory [ 912.354858][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.375441][ T7716] udevd[7716]: Unable to EVIOCGABS device "/dev/input/event4" [ 912.376094][T11170] usb 7-1: config 0 has no interfaces? [ 912.388627][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.389816][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 912.407736][T11170] usb 7-1: string descriptor 0 read error: -22 [ 912.417990][ T7716] udevd[7716]: Unable to EVIOCGABS device "/dev/input/event4" [ 912.421322][T11170] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 912.436123][T11170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 912.439832][T11158] usb 5-1: config 0 has no interface number 0 [ 912.451321][ T7716] udevd[7716]: Unable to EVIOCGABS device "/dev/input/event4" [ 912.463209][T11170] usb 7-1: config 0 descriptor?? [ 912.468495][ T7716] udevd[7716]: Unable to EVIOCGABS device "/dev/input/event4" [ 912.470118][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.505734][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.528823][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 912.547524][T11158] usb 5-1: config 0 has no interface number 0 [ 912.561152][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.574652][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.586243][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 912.594453][T11158] usb 5-1: config 0 has no interface number 0 [ 912.602663][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.613010][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.624844][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 912.633777][T11158] usb 5-1: config 0 has no interface number 0 [ 912.640048][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.650390][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.660499][T11174] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 912.670673][T11158] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 912.679836][T11158] usb 5-1: config 0 has no interface number 0 [ 912.686268][T11158] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.696698][T11158] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.708776][T11158] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 912.717969][T11158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.726348][T11158] usb 5-1: Product: syz [ 912.730812][T11158] usb 5-1: Manufacturer: syz [ 912.736506][T11158] usb 5-1: SerialNumber: syz [ 912.747828][T11158] usb 5-1: config 0 descriptor?? [ 912.764273][T11158] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 912.818638][T11174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 912.827865][T11174] usb 4-1: config 1 has no interface number 0 [ 912.834669][T11174] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.855807][T11174] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 912.917769][T11174] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.929808][T11174] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 912.941433][T11174] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 912.955621][T11174] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.965183][T11174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.973638][T11174] usb 4-1: Product: syz [ 912.978361][T11174] usb 4-1: Manufacturer: syz [ 912.983279][T11158] etas_es58x 5-1:0.2: could not retrieve the product info string [ 912.992606][T11174] usb 4-1: SerialNumber: syz [ 913.055805][T11158] usb 5-1: USB disconnect, device number 109 [ 913.067632][T11158] etas_es58x 5-1:0.2: Disconnecting syz syz [ 913.212541][T11942] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 913.468478][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 913.595787][T11165] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 913.756172][T11165] usb 3-1: Using ep0 maxpacket: 32 [ 913.773294][T11165] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.813119][T11165] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.834831][T11165] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 913.845587][T11165] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 913.857711][T11165] usb 3-1: Product: syz [ 913.862008][T11165] usb 3-1: Manufacturer: syz [ 913.884901][T11165] hub 3-1:4.0: USB hub found [ 913.902152][T11978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1493'. [ 914.057408][T11980] VFS: Lookup of 'binder0' in fuse fuse would have caused loop [ 914.090138][T11965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.124722][T11965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.149732][T11165] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 914.157143][T11174] cdc_ncm 4-1:1.1: bind() failure [ 914.187880][T11165] usb 3-1: USB disconnect, device number 88 [ 914.191260][T11174] usb 4-1: USB disconnect, device number 114 [ 914.609821][T11174] usb 7-1: USB disconnect, device number 50 [ 914.940603][T12006] Cannot find del_set index 4 as target [ 914.975609][ T5951] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 915.065637][T11174] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 915.115578][ T5951] usb 3-1: device descriptor read/64, error -71 [ 915.215622][T11174] usb 7-1: Using ep0 maxpacket: 16 [ 915.237194][T11174] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 915.258669][T11174] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 915.269853][T11174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.278609][T11174] usb 7-1: Product: syz [ 915.282931][T11174] usb 7-1: Manufacturer: syz [ 915.288726][T11174] usb 7-1: SerialNumber: syz [ 915.303388][T11174] usb 7-1: config 0 descriptor?? [ 915.328457][T11174] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 915.346475][T12009] bond2: (slave ip6gretap1): making interface the new active one [ 915.357928][T12009] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 915.367017][ T5951] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 915.375741][T11174] usb 7-1: Detected FT232R [ 915.527464][ T5951] usb 3-1: device descriptor read/64, error -71 [ 915.536548][T11174] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 915.565891][ T5993] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 915.651240][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 915.702559][ T5951] usb usb3-port1: attempt power cycle [ 915.774894][T12022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 915.786684][T12022] block device autoloading is deprecated and will be removed. [ 915.877099][ T5993] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 915.911038][T11174] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 915.924157][ T5993] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 915.933684][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.971486][ T5993] usb 5-1: Product: syz [ 915.975936][ T5993] usb 5-1: Manufacturer: syz [ 915.980625][ T5993] usb 5-1: SerialNumber: syz [ 916.115626][ T5951] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 916.137285][ T5951] usb 3-1: device descriptor read/8, error -71 [ 916.575643][ T5951] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 916.596404][ T5951] usb 3-1: device descriptor read/8, error -71 [ 916.716218][ T5951] usb usb3-port1: unable to enumerate USB device [ 917.264446][ T5993] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 917.278873][ T5993] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 917.294988][ T5993] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 917.322082][ T5993] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 917.362276][ T5993] usb 5-1: USB disconnect, device number 110 [ 917.437560][T11165] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 917.506620][T12033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.668724][T11165] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 917.678004][T11165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.686675][T11165] usb 4-1: Product: syz [ 917.693048][T11165] usb 4-1: Manufacturer: syz [ 917.701234][T11165] usb 4-1: SerialNumber: syz [ 917.725335][T11165] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 917.743755][T11167] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 917.838891][T11174] usb 7-1: USB disconnect, device number 51 [ 917.857952][T11174] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 917.907313][T11174] ftdi_sio 7-1:0.0: device disconnected [ 917.969953][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1506'. [ 917.980383][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 917.992514][T12037] netlink: 'syz.6.1509': attribute type 10 has an invalid length. [ 918.006636][T12035] netlink: 'syz.2.1508': attribute type 21 has an invalid length. [ 918.076981][T12037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 918.348901][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1506'. [ 918.368920][T11174] usb 4-1: USB disconnect, device number 115 [ 918.478409][T12045] netlink: 'syz.6.1511': attribute type 11 has an invalid length. [ 918.735623][T11173] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 918.788873][T11167] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 918.805860][T11167] ath9k_htc: Failed to initialize the device [ 918.815335][T11174] usb 4-1: ath9k_htc: USB layer deinitialized [ 918.890986][T11173] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 918.905428][T11173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.933479][T11173] usb 7-1: Product: syz [ 918.938573][T11173] usb 7-1: Manufacturer: syz [ 918.943406][T11173] usb 7-1: SerialNumber: syz [ 918.951520][T11173] usb 7-1: config 0 descriptor?? [ 918.960183][T11173] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 919.057690][ T29] audit: type=1326 audit(1773143119.092:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.058405][T12061] input: syz0 as /devices/virtual/input/input40 [ 919.110721][ T29] audit: type=1326 audit(1773143119.122:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.160345][T11173] sonixb 7-1:0.0: Error reading register 00: -71 [ 919.184883][T11173] usb 7-1: USB disconnect, device number 52 [ 919.274609][ T29] audit: type=1326 audit(1773143119.302:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.306178][ T29] audit: type=1326 audit(1773143119.302:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.336847][ T29] audit: type=1326 audit(1773143119.342:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.365440][ T29] audit: type=1326 audit(1773143119.342:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.406270][ T29] audit: type=1326 audit(1773143119.342:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.429886][ T29] audit: type=1326 audit(1773143119.362:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.456420][ T29] audit: type=1326 audit(1773143119.362:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 919.479879][ T29] audit: type=1326 audit(1773143119.362:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.0.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa94af9c799 code=0x7ffc0000 [ 920.087960][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1521'. [ 920.107805][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1521'. [ 920.117333][T12084] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1521'. [ 920.126630][T11173] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 920.243915][T12086] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 920.258862][T12084] netlink: 'syz.2.1521': attribute type 2 has an invalid length. [ 920.267045][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1521'. [ 920.295794][T11173] usb 7-1: Using ep0 maxpacket: 8 [ 920.302709][T11173] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.313276][T11173] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.324161][T11173] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.344549][T11173] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.358801][T11173] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.368213][T11173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.475765][T12091] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 920.793372][T11173] usb 7-1: GET_CAPABILITIES returned 0 [ 920.855578][T11174] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 920.874260][T11173] usbtmc 7-1:16.0: can't read capabilities [ 920.994527][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.004010][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.013140][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.022260][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.031456][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.063215][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.072680][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.081935][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.109099][T11174] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.154839][T11174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.159331][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.175762][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.184874][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.193961][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.226425][T11174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 921.266392][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.275485][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.284568][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.293756][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 921.303099][T11170] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 921.315563][T11174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 921.337474][T11167] usb 7-1: USB disconnect, device number 53 [ 921.398933][T11174] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 921.437320][T11174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.445988][T11170] usb 4-1: device descriptor read/64, error -71 [ 921.476087][T11174] usb 5-1: config 0 descriptor?? [ 921.685589][T11170] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 921.735985][T11167] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 921.744644][T12105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.815699][T11170] usb 4-1: device descriptor read/64, error -71 [ 921.898012][T11167] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.909707][T11167] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 921.920400][T11167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.929533][T11170] usb usb4-port1: attempt power cycle [ 921.947747][T11167] usb 7-1: config 0 descriptor?? [ 921.993851][T11174] plantronics 0003:047F:FFFF.001A: item fetching failed at offset 13/15 [ 922.003314][T11174] plantronics 0003:047F:FFFF.001A: parse failed [ 922.010474][T11174] plantronics 0003:047F:FFFF.001A: probe with driver plantronics failed with error -22 [ 922.275629][T11170] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 922.296386][T11170] usb 4-1: device descriptor read/8, error -71 [ 922.369727][T11167] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 922.382559][T11167] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001B/input/input41 [ 922.504723][T11167] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 922.545688][T11170] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 922.587108][T11170] usb 4-1: device descriptor read/8, error -71 [ 922.590118][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.633678][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.706445][T11170] usb usb4-port1: unable to enumerate USB device [ 922.718758][ C1] Mem-Info: [ 922.718858][ C1] active_anon:25879 inactive_anon:0 isolated_anon:0 [ 922.718858][ C1] active_file:17289 inactive_file:40418 isolated_file:0 [ 922.718858][ C1] unevictable:768 dirty:203 writeback:0 [ 922.718858][ C1] slab_reclaimable:11572 slab_unreclaimable:104703 [ 922.718858][ C1] mapped:38337 shmem:18924 pagetables:1604 [ 922.718858][ C1] sec_pagetables:1 bounce:0 [ 922.718858][ C1] kernel_misc_reclaimable:0 [ 922.718858][ C1] free:1265582 free_pcp:10262 free_cma:0 [ 922.718987][ C1] Node 0 active_anon:103516kB inactive_anon:0kB active_file:69140kB inactive_file:161472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153332kB dirty:812kB writeback:0kB shmem:74160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13936kB pagetables:6276kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 922.719050][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 922.719107][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.719177][ C1] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 922.719221][ C1] Node 0 DMA32 free:1100448kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103516kB inactive_anon:0kB active_file:69140kB inactive_file:161472kB unevictable:1536kB writepending:812kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:35988kB local_pcp:13232kB free_cma:0kB [ 922.719296][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 922.719342][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 922.719404][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 922.719449][ C1] Node 1 Normal free:3946520kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5044kB local_pcp:0kB free_cma:0kB [ 922.719520][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 922.719562][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 922.719785][ C1] Node 0 DMA32: 3670*4kB (UME) 3023*8kB (UME) 1103*16kB (UM) 501*32kB (UME) 787*64kB (UME) 363*128kB (UME) 219*256kB (UM) 115*512kB (UM) 49*1024kB (UME) 14*2048kB (UM) 180*4096kB (UM) = 1100448kB [ 922.719991][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 922.720115][ C1] Node 1 Normal: 4*4kB (UM) 13*8kB (UM) 10*16kB (UM) 10*32kB (UM) 15*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 961*4096kB (M) = 3946520kB [ 922.720320][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 922.720342][ C1] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 922.720361][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 922.720382][ C1] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 922.720402][ C1] 76394 total pagecache pages [ 922.720424][ C1] 0 pages in swap cache [ 922.720434][ C1] Free swap = 124996kB [ 922.720444][ C1] Total swap = 124996kB [ 922.720454][ C1] 2097051 pages RAM [ 922.720464][ C1] 0 pages HighMem/MovableOnly [ 922.720473][ C1] 427021 pages reserved [ 922.720482][ C1] 0 pages cma reserved [ 923.236633][T11167] usb 7-1: USB disconnect, device number 54 [ 923.266002][ T30] INFO: task kworker/0:6:5961 blocked for more than 143 seconds. [ 923.266034][ T30] Tainted: G L syzkaller #0 [ 923.266046][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 923.266053][ T30] task:kworker/0:6 state:D stack:21760 pid:5961 tgid:5961 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 923.266100][ T30] Workqueue: usb_hub_wq hub_event [ 923.266127][ T30] Call Trace: [ 923.266134][ T30] [ 923.266145][ T30] __schedule+0x15dd/0x52d0 [ 923.266173][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 923.266197][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 923.266227][ T30] ? __pfx___schedule+0x10/0x10 [ 923.266266][ T30] ? schedule+0x90/0x360 [ 923.266291][ T30] schedule+0x164/0x360 [ 923.266315][ T30] schedule_timeout+0xc3/0x2c0 [ 923.266337][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.266353][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 923.266372][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.266394][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.266415][ T30] ? wait_for_completion+0x274/0x5e0 [ 923.266437][ T30] wait_for_completion+0x2cc/0x5e0 [ 923.266468][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 923.266498][ T30] i2c_del_adapter+0x5c0/0x790 [ 923.266532][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.266560][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 923.266580][ T30] ? dvb_usbv2_exit+0x935/0xb60 [ 923.266606][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 923.266668][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 923.266688][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.266710][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 923.266736][ T30] usb_probe_interface+0x668/0xc90 [ 923.266762][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 923.266779][ T30] really_probe+0x267/0xaf0 [ 923.266802][ T30] __driver_probe_device+0x18c/0x320 [ 923.266822][ T30] driver_probe_device+0x4f/0x240 [ 923.266843][ T30] __device_attach_driver+0x279/0x430 [ 923.266864][ T30] bus_for_each_drv+0x258/0x2f0 [ 923.266886][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 923.266905][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 923.266926][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.266949][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.266974][ T30] __device_attach+0x2c5/0x450 [ 923.266996][ T30] ? __pfx___device_attach+0x10/0x10 [ 923.267015][ T30] ? _raw_spin_unlock+0x28/0x50 [ 923.267035][ T30] device_initial_probe+0xa1/0xd0 [ 923.267053][ T30] bus_probe_device+0x12a/0x220 [ 923.267072][ T30] ? device_add+0x726/0xb70 [ 923.267089][ T30] device_add+0x7b6/0xb70 [ 923.267108][ T30] usb_set_configuration+0x1a87/0x2110 [ 923.267146][ T30] usb_generic_driver_probe+0x8d/0x150 [ 923.267165][ T30] usb_probe_device+0x1c4/0x3b0 [ 923.267184][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 923.267198][ T30] really_probe+0x267/0xaf0 [ 923.267221][ T30] __driver_probe_device+0x18c/0x320 [ 923.267241][ T30] driver_probe_device+0x4f/0x240 [ 923.267272][ T30] __device_attach_driver+0x279/0x430 [ 923.267293][ T30] bus_for_each_drv+0x258/0x2f0 [ 923.267315][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 923.267333][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 923.267355][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.267376][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.267400][ T30] __device_attach+0x2c5/0x450 [ 923.267420][ T30] ? __pfx___device_attach+0x10/0x10 [ 923.267440][ T30] ? _raw_spin_unlock+0x28/0x50 [ 923.267465][ T30] device_initial_probe+0xa1/0xd0 [ 923.267486][ T30] bus_probe_device+0x12a/0x220 [ 923.267510][ T30] ? device_add+0x726/0xb70 [ 923.267530][ T30] device_add+0x7b6/0xb70 [ 923.267553][ T30] usb_new_device+0xa08/0x16f0 [ 923.267585][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 923.267608][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.267629][ T30] hub_event+0x2a1c/0x4f30 [ 923.267643][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 923.267702][ T30] ? __pfx_hub_event+0x10/0x10 [ 923.267724][ T30] ? process_scheduled_works+0xa25/0x1830 [ 923.267744][ T30] ? process_scheduled_works+0xa25/0x1830 [ 923.267765][ T30] process_scheduled_works+0xb02/0x1830 [ 923.267804][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 923.267828][ T30] ? assign_work+0x3d5/0x5e0 [ 923.267851][ T30] worker_thread+0xa50/0xfc0 [ 923.267891][ T30] kthread+0x388/0x470 [ 923.267907][ T30] ? __pfx_worker_thread+0x10/0x10 [ 923.267924][ T30] ? __pfx_kthread+0x10/0x10 [ 923.267941][ T30] ret_from_fork+0x51e/0xb90 [ 923.267964][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 923.267983][ T30] ? __switch_to+0xc7d/0x1450 [ 923.268006][ T30] ? __pfx_kthread+0x10/0x10 [ 923.268024][ T30] ret_from_fork_asm+0x1a/0x30 [ 923.268880][ T30] [ 923.281628][ T30] [ 923.281628][ T30] Showing all locks held in the system: [ 923.281648][ T30] 1 lock held by khungtaskd/30: [ 923.281660][ T30] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 923.281768][ T30] 2 locks held by getty/5580: [ 923.281846][ T30] #0: ffff888032d4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 923.281902][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 923.281961][ T30] 5 locks held by kworker/0:6/5961: [ 923.281972][ T30] #0: ffff88801e6d2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 923.282023][ T30] #1: ffffc900046ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 923.282072][ T30] #2: ffff888029748198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 923.282110][ T30] #3: ffff888031b4c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 923.282151][ T30] #4: ffff888031b48160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 923.282201][ T30] 1 lock held by syz.5.1009/10149: [ 923.282211][ T30] #0: ffff888029748198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 923.282267][ T30] 1 lock held by syz.5.1009/10153: [ 923.282276][ T30] #0: ffff888029748198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 923.282329][ T30] 4 locks held by kworker/1:9/11165: [ 923.282340][ T30] 9 locks held by kworker/1:11/11167: [ 923.282355][ T30] 1 lock held by syz.0.1528/12108: [ 923.282365][ T30] 3 locks held by poweroff/12115: [ 923.282377][ T30] 1 lock held by syz.2.1530/12119: [ 923.282388][ T30] 3 locks held by syz.2.1530/12120: [ 923.282399][ T30] #0: ffff88804f896420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 923.282449][ T30] #1: ffff8880574d4048 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 923.282496][ T30] #2: ffff8880574d44f8 (&fi->mutex){+.+.}-{4:4}, at: fuse_lock_inode+0xd3/0x120 [ 923.282538][ T30] [ 923.282544][ T30] ============================================= [ 923.282544][ T30] [ 923.282559][ T30] NMI backtrace for cpu 0 [ 923.282618][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 923.282641][ T30] Tainted: [L]=SOFTLOCKUP [ 923.282646][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.282655][ T30] Call Trace: [ 923.282663][ T30] [ 923.282670][ T30] dump_stack_lvl+0xe8/0x150 [ 923.282690][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 923.282708][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 923.282728][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 923.282746][ T30] sys_info+0x135/0x170 [ 923.282761][ T30] watchdog+0xfd9/0x1030 [ 923.282786][ T30] ? watchdog+0x21a/0x1030 [ 923.282809][ T30] kthread+0x388/0x470 [ 923.282822][ T30] ? __pfx_watchdog+0x10/0x10 [ 923.282839][ T30] ? __pfx_kthread+0x10/0x10 [ 923.282852][ T30] ret_from_fork+0x51e/0xb90 [ 923.282872][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 923.282888][ T30] ? __switch_to+0xc7d/0x1450 [ 923.282906][ T30] ? __pfx_kthread+0x10/0x10 [ 923.282920][ T30] ret_from_fork_asm+0x1a/0x30 [ 923.282948][ T30] [ 923.282954][ T30] Sending NMI from CPU 0 to CPUs 1: [ 923.282978][ C1] NMI backtrace for cpu 1 [ 923.282994][ C1] CPU: 1 UID: 0 PID: 11167 Comm: kworker/1:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.283015][ C1] Tainted: [L]=SOFTLOCKUP [ 923.283021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.283032][ C1] Workqueue: usb_hub_wq hub_event [ 923.283049][ C1] RIP: 0010:__lock_acquire+0x197b/0x2cf0 [ 923.283070][ C1] Code: 14 25 ff 0f 00 00 39 05 6f 04 82 12 73 06 89 05 67 04 82 12 48 8b 02 48 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 18 fe ff ff 48 89 fb 48 c7 c7 b0 c5 62 [ 923.283082][ C1] RSP: 0018:ffffc900036d6960 EFLAGS: 00000006 [ 923.283095][ C1] RAX: ffffffff96c52478 RBX: 00000000000003dd RCX: 0000000000000152 [ 923.283106][ C1] RDX: ffffffff96a99248 RSI: ffff88807bbae908 RDI: 00000000000003dd [ 923.283117][ C1] RBP: 49a219849c194ea9 R08: ffffc900036d6928 R09: 0000000000000020 [ 923.283128][ C1] R10: dffffc0000000000 R11: ffffffff81a1f560 R12: ffffffff96b22538 [ 923.283139][ C1] R13: ffffffff93c647c8 R14: ffff88807bbadb80 R15: 0000000000000151 [ 923.283150][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 923.283162][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.283172][ C1] CR2: 000020000011d030 CR3: 00000000412b6000 CR4: 00000000003526f0 [ 923.283186][ C1] Call Trace: [ 923.283192][ C1] [ 923.283200][ C1] ? lockdep_unlock+0x5d/0xd0 [ 923.283216][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 923.283239][ C1] lock_acquire+0xf0/0x2e0 [ 923.283256][ C1] ? raw_spin_rq_lock_nested+0xb6/0x150 [ 923.283309][ C1] _raw_spin_lock_nested+0x32/0x50 [ 923.283330][ C1] ? raw_spin_rq_lock_nested+0xb6/0x150 [ 923.283347][ C1] raw_spin_rq_lock_nested+0xb6/0x150 [ 923.283368][ C1] try_to_wake_up+0x638/0x1390 [ 923.283386][ C1] ep_autoremove_wake_function+0x38/0x130 [ 923.283406][ C1] __wake_up_common_lock+0x137/0x1f0 [ 923.283425][ C1] ep_poll_callback+0x5b1/0xac0 [ 923.283443][ C1] __wake_up_common_lock+0x137/0x1f0 [ 923.283460][ C1] sock_def_readable+0x1eb/0x580 [ 923.283478][ C1] ? sock_def_readable+0xae/0x580 [ 923.283495][ C1] netlink_broadcast_filtered+0xc4b/0x1020 [ 923.283521][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 923.283539][ C1] ? alloc_uevent_skb+0xeb/0x230 [ 923.283557][ C1] ? __asan_memcpy+0x40/0x70 [ 923.283573][ C1] netlink_broadcast+0x37/0x50 [ 923.283594][ C1] kobject_uevent_net_broadcast+0x378/0x560 [ 923.283618][ C1] kobject_uevent_env+0x55c/0x9e0 [ 923.283637][ C1] led_trigger_set+0x724/0x960 [ 923.283662][ C1] ? down_write+0x16d/0x200 [ 923.283676][ C1] ? __pfx_led_trigger_set+0x10/0x10 [ 923.283698][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 923.283713][ C1] led_classdev_unregister+0xa8/0x280 [ 923.283734][ C1] input_leds_disconnect+0xba/0x180 [ 923.283759][ C1] __input_unregister_device+0x3a3/0x640 [ 923.283779][ C1] input_unregister_device+0x9b/0x100 [ 923.283796][ C1] hidinput_disconnect+0x226/0x2d0 [ 923.283820][ C1] hid_device_remove+0x123/0x370 [ 923.283838][ C1] ? __pfx_hid_device_remove+0x10/0x10 [ 923.283856][ C1] device_release_driver_internal+0x46f/0x860 [ 923.283875][ C1] bus_remove_device+0x34d/0x440 [ 923.283898][ C1] device_del+0x527/0x8f0 [ 923.283915][ C1] ? __pfx_device_del+0x10/0x10 [ 923.283936][ C1] hid_destroy_device+0x6b/0x1b0 [ 923.283955][ C1] usbhid_disconnect+0x9f/0xc0 [ 923.283971][ C1] usb_unbind_interface+0x26e/0x910 [ 923.283990][ C1] ? __pfx_usb_unbind_interface+0x10/0x10 [ 923.284006][ C1] device_release_driver_internal+0x4d9/0x860 [ 923.284025][ C1] bus_remove_device+0x34d/0x440 [ 923.284046][ C1] device_del+0x527/0x8f0 [ 923.284063][ C1] ? __pfx_device_del+0x10/0x10 [ 923.284077][ C1] ? kobject_put+0x51d/0x560 [ 923.284095][ C1] usb_disable_device+0x3d4/0x8d0 [ 923.284111][ C1] usb_disconnect+0x32f/0x990 [ 923.284133][ C1] hub_event+0x1cc9/0x4f30 [ 923.284155][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 923.284179][ C1] ? __pfx_hub_event+0x10/0x10 [ 923.284196][ C1] ? process_scheduled_works+0xa25/0x1830 [ 923.284214][ C1] ? process_scheduled_works+0xa25/0x1830 [ 923.284232][ C1] process_scheduled_works+0xb02/0x1830 [ 923.284259][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 923.284279][ C1] ? assign_work+0x3d5/0x5e0 [ 923.284297][ C1] worker_thread+0xa50/0xfc0 [ 923.284324][ C1] kthread+0x388/0x470 [ 923.284337][ C1] ? __pfx_worker_thread+0x10/0x10 [ 923.284355][ C1] ? __pfx_kthread+0x10/0x10 [ 923.284368][ C1] ret_from_fork+0x51e/0xb90 [ 923.284386][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 923.284403][ C1] ? __switch_to+0xc7d/0x1450 [ 923.284420][ C1] ? __pfx_kthread+0x10/0x10 [ 923.284433][ C1] ret_from_fork_asm+0x1a/0x30 [ 923.284458][ C1] [ 923.284998][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 923.285019][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 923.285039][ T30] Tainted: [L]=SOFTLOCKUP [ 923.285045][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.285053][ T30] Call Trace: [ 923.285060][ T30] [ 923.285067][ T30] vpanic+0x56c/0xa60 [ 923.285093][ T30] ? __pfx_vpanic+0x10/0x10 [ 923.285119][ T30] panic+0xc5/0xd0 [ 923.285136][ T30] ? __pfx_panic+0x10/0x10 [ 923.285151][ T30] ? printk_trigger_flush+0x13d/0x180 [ 923.285168][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.285193][ T30] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 923.285214][ T30] watchdog+0x1023/0x1030 [ 923.285240][ T30] ? watchdog+0x21a/0x1030 [ 923.285273][ T30] kthread+0x388/0x470 [ 923.285288][ T30] ? __pfx_watchdog+0x10/0x10 [ 923.285308][ T30] ? __pfx_kthread+0x10/0x10 [ 923.285322][ T30] ret_from_fork+0x51e/0xb90 [ 923.285342][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 923.285357][ T30] ? __switch_to+0xc7d/0x1450 [ 923.285376][ T30] ? __pfx_kthread+0x10/0x10 [ 923.285395][ T30] ret_from_fork_asm+0x1a/0x30 [ 923.285427][ T30] [ 923.285961][ T30] Kernel Offset: disabled