last executing test programs: 28m53.657644096s ago: executing program 1 (id=718): syz_usb_connect(0x2, 0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000012e7c820dd0407808edf0102030109024600010000000a09047ef30002060000052406000005240048000d240f01060000000300500036052406000105260009000d240f"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x12, 0x5, 0x1, {0x22, 0x5d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x50, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0xff, 0x7}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x4e, 0x69, 0x1d, 0xff, 0xf7}, 0x11b, &(0x7f0000000080)={0x5, 0xf, 0x11b, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb0, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0xe, 0x92, 0x38, 0xe0, 0x3, 0xb0}, @generic={0xfe, 0x10, 0x4, "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"}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0xfa, &(0x7f0000000200)=@string={0xfa, 0x3, "fff5372cbdf82d352a845e80a60e3d09e48f598cb627045dd745522013ab3bbd20085a395da5d2bcfb9171a28429895b37a69fb16aa1a1646a934892eed7c2dbd6b636eda36e9b9df9acc0915619f5ac5a232195bfae8693542ba5bed523ec22a072a02097194dd4f741b859073e35dfd6e50b9dcf2430216b99ab25ba26f812de7aad2d4318865d67707c967db379c3f902e330461759e53c8f15f5aa4107e97774cf44f2770c0872c4b0374e18d294d23b083db4dfd33103f14fc8ff28a2724ee4d356732f0266cd37f3170d8f9e9d252d7632804d9143184ea9b0a6ef9e28f0d665f6039d3f0ae3638d5abc4df8e9e449357b5e87f96c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x437}}, {0x6b, &(0x7f0000000440)=@string={0x6b, 0x3, "3d6e5e2d60011bf2e73d674b64f821c10d01e8000b37e78b81b2742e6179986f6e8d0141775bc9aee7f7f99dd131fcaec1dba99552abd029fd1334c44ce4490c522d861d687c335488694c6f94b767aab2dcd70244be14ac80245ee097a35939d5e6ed59190573b401"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "5e800b559f7241cf27ddb5fbd0fb71b569c7d8c26bd0483e1d8d17082bd0a4a2344b"}}, {0xa3, &(0x7f0000000540)=@string={0xa3, 0x3, "142c4d695fa57bf65c7c5e1628c887cc9f9edc8c9507df31a9e0c2c44deddbc565e0b5365c28841cc393856643e47a454ebdaf6edf640a32594acd720d657322454526deef1c6f1dba968fae2a6159d6a2514de5ed017b0475f10566a5ced4be0212c596e7bd89f1dd7b45e65e970a8f4828611a046b02f830af53c644cd9349f607d908d8101e54f0042b463b34d05ce664d92030d1d27de206efb7daeab66238"}}]}) syz_usb_connect(0x2, 0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000012e7c820dd0407808edf0102030109024600010000000a09047ef30002060000052406000005240048000d240f01060000000300500036052406000105260009000d240f"], 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x12, 0x5, 0x1, {0x22, 0x5d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x50, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0xff, 0x7}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x4e, 0x69, 0x1d, 0xff, 0xf7}, 0x11b, &(0x7f0000000080)={0x5, 0xf, 0x11b, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb0, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0xe, 0x92, 0x38, 0xe0, 0x3, 0xb0}, @generic={0xfe, 0x10, 0x4, "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"}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0xfa, &(0x7f0000000200)=@string={0xfa, 0x3, "fff5372cbdf82d352a845e80a60e3d09e48f598cb627045dd745522013ab3bbd20085a395da5d2bcfb9171a28429895b37a69fb16aa1a1646a934892eed7c2dbd6b636eda36e9b9df9acc0915619f5ac5a232195bfae8693542ba5bed523ec22a072a02097194dd4f741b859073e35dfd6e50b9dcf2430216b99ab25ba26f812de7aad2d4318865d67707c967db379c3f902e330461759e53c8f15f5aa4107e97774cf44f2770c0872c4b0374e18d294d23b083db4dfd33103f14fc8ff28a2724ee4d356732f0266cd37f3170d8f9e9d252d7632804d9143184ea9b0a6ef9e28f0d665f6039d3f0ae3638d5abc4df8e9e449357b5e87f96c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x437}}, {0x6b, &(0x7f0000000440)=@string={0x6b, 0x3, "3d6e5e2d60011bf2e73d674b64f821c10d01e8000b37e78b81b2742e6179986f6e8d0141775bc9aee7f7f99dd131fcaec1dba99552abd029fd1334c44ce4490c522d861d687c335488694c6f94b767aab2dcd70244be14ac80245ee097a35939d5e6ed59190573b401"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "5e800b559f7241cf27ddb5fbd0fb71b569c7d8c26bd0483e1d8d17082bd0a4a2344b"}}, {0xa3, &(0x7f0000000540)=@string={0xa3, 0x3, "142c4d695fa57bf65c7c5e1628c887cc9f9edc8c9507df31a9e0c2c44deddbc565e0b5365c28841cc393856643e47a454ebdaf6edf640a32594acd720d657322454526deef1c6f1dba968fae2a6159d6a2514de5ed017b0475f10566a5ced4be0212c596e7bd89f1dd7b45e65e970a8f4828611a046b02f830af53c644cd9349f607d908d8101e54f0042b463b34d05ce664d92030d1d27de206efb7daeab66238"}}]}) (async) 28m50.587081617s ago: executing program 1 (id=748): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x57bb, 0x40000002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000004540)={0x44, &(0x7f0000003f00)={0x40, 0x17, 0x2, "ce17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28m47.499218656s ago: executing program 1 (id=767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0xc01}], 0x1}, 0x40000) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47", 0x2f}, {&(0x7f0000000400)="6c23fe5e77b828dcd600126a9a4b5ef3ae578c4751f2456ea314b6d95e238e7d4733c114f56680e6905a48b50920a132c32365698bad56173e669d4b9b5bee30cc0285481b820174ec37cd79c02361701b0bc2550749b4fd1ca6ef7a66c704f71b977eb0dd0289c6c0fb9283712acd80db2b9918292e5775fa2417279dee25ff29d002de", 0x84}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40810) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = epoll_create1(0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) (async) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}, {}, {0x8, 0x6558, 0x4}}}}}}, 0x0) (async) close(0x3) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2004}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x80000001) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x99bb, 0xfffffffb, 0x2, 0xfffffffc, 0x0, "28f2f14faa5118780aacd8860f9b17ea078340", 0x18, 0xc}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2b9646a5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008004) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000300)) 28m47.407124556s ago: executing program 1 (id=769): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x80100020}, 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000300)={0xffffbb9f, 0xe8a, 0xc, 0x1, 0x1, 0x3, 0x7f, 0x3}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r11], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="00175a0f0000ecff"], 0x0, 0x0, 0x0, 0x0}) 28m44.405232061s ago: executing program 1 (id=784): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = gettid() fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x1, 0x4, 0xfd8b, 0x401, r0}) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xada52000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0xb}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x152, 0x3, 0x3}, 0x18, 0x0) io_uring_setup(0x605, &(0x7f00000001c0)={0x0, 0x4000e5e4, 0x400, 0x6, 0x1b, 0x0, r1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={0x0}) landlock_restrict_self(r3, 0x9) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000100)={0xfffff000, 0x2, 0xfffffff3, 0x1, 0x9, 0x4, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 28m43.957164659s ago: executing program 1 (id=786): socket$nl_generic(0x10, 0x3, 0x10) (async) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000001600)=""/4119, 0x1017) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, 0x0, 0x3e}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="001a000000008000"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xc}, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "4b51c07a93865f5ca0645a296621c8d1d437d5d3d98efdc8be827c6ba0bd1aa3d3328a11cf0c905adfc9a22a5c947d"}}) (async) r1 = syz_open_dev$media(&(0x7f0000000540), 0x3, 0x200) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f000000a2c0), 0x0}) 28m28.902563993s ago: executing program 32 (id=786): socket$nl_generic(0x10, 0x3, 0x10) (async) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000001600)=""/4119, 0x1017) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, 0x0, 0x3e}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="001a000000008000"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xc}, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "4b51c07a93865f5ca0645a296621c8d1d437d5d3d98efdc8be827c6ba0bd1aa3d3328a11cf0c905adfc9a22a5c947d"}}) (async) r1 = syz_open_dev$media(&(0x7f0000000540), 0x3, 0x200) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f000000a2c0), 0x0}) 12m44.1541552s ago: executing program 5 (id=4947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000090}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x30, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 12m44.019292531s ago: executing program 5 (id=4949): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000440)="cddf", 0x12, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) (async) ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 12m43.912791769s ago: executing program 5 (id=4951): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(&(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x2000, 0x2000, &(0x7f000000f000/0x2000)=nil}) r2 = socket(0x1e, 0x4, 0x0) shutdown(r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="0f20d835080000000f22d8640f117127f3470f1efab8010000000f01d966bad104edc482612b40b40f20d835080000000f22d8c744240018000000c74424025c000000ff1c24440f01c266f04029832cef0000", 0x53}], 0x1, 0x11, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200000, 0x18, 0x20}, 0x18) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x208000, 0x28) renameat(r4, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m43.590885667s ago: executing program 5 (id=4953): r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000040)=""/44, 0x2c) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) write$FUSE_LK(r1, &(0x7f0000000240)={0x28, 0x0, r4, {{0x5, 0x5, 0x0, r5}}}, 0x28) unshare(0x26020480) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r8, 0x20, 0x70bd2a, 0x2ddfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xc4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1d1008126883f6f}, 0x4044041) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 12m40.549520833s ago: executing program 5 (id=4964): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x80) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0x203, 0x9}) r2 = syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x11, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0xf, &(0x7f0000000040)=@string={0xf, 0x3, "85a1f68fb05e4be6af3391e6ba"}}]}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x101) r3 = open(&(0x7f0000000180)='./control\x00', 0x400000, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='lock i'], 0xc) r5 = socket(0xa, 0x3, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f00000021c0)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x20, 0x800}, 0x880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 12m40.181199388s ago: executing program 5 (id=4967): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = socket$netlink(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000540)=""/234, 0xea}], 0x7, &(0x7f00000006c0)=""/154, 0x9a}, 0x3}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/116, 0x74}], 0x2, &(0x7f00000018c0)=""/139, 0x8b}, 0x22}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/71, 0x47}, {&(0x7f0000001a80)=""/216, 0xd8}, {&(0x7f0000001b80)=""/27, 0x1b}, {&(0x7f0000001c00)=""/81, 0x51}], 0x4, &(0x7f0000001cc0)=""/191, 0xbf}, 0x2}, {{0x0, 0x0, &(0x7f0000001d80)}, 0x5}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/29, 0x1d}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000002040)=""/3, 0x3}, {&(0x7f0000002080)=""/57, 0x39}], 0x7, &(0x7f0000002140)=""/97, 0x61}}], 0x5, 0xa1, &(0x7f0000002300)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_io_uring_setup(0x5fce, &(0x7f00000000c0)={0x0, 0xf962, 0x100, 0xfffffffd, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000004000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x2}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000340)={&(0x7f0000002000)={[{0x0}]}, 0x1, 0x2}, 0x1) close(r4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008110000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="28395cc139de359a000000000042abe57eb5ac02", @ANYRES32=0x0, @ANYBLOB="01980000000000001c00128009000100626f6e64000000000c00028008001c0007000000"], 0x3c}}, 0x0) 12m39.981451004s ago: executing program 33 (id=4967): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = socket$netlink(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000540)=""/234, 0xea}], 0x7, &(0x7f00000006c0)=""/154, 0x9a}, 0x3}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/116, 0x74}], 0x2, &(0x7f00000018c0)=""/139, 0x8b}, 0x22}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/71, 0x47}, {&(0x7f0000001a80)=""/216, 0xd8}, {&(0x7f0000001b80)=""/27, 0x1b}, {&(0x7f0000001c00)=""/81, 0x51}], 0x4, &(0x7f0000001cc0)=""/191, 0xbf}, 0x2}, {{0x0, 0x0, &(0x7f0000001d80)}, 0x5}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/29, 0x1d}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000002040)=""/3, 0x3}, {&(0x7f0000002080)=""/57, 0x39}], 0x7, &(0x7f0000002140)=""/97, 0x61}}], 0x5, 0xa1, &(0x7f0000002300)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_io_uring_setup(0x5fce, &(0x7f00000000c0)={0x0, 0xf962, 0x100, 0xfffffffd, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000004000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x2}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000340)={&(0x7f0000002000)={[{0x0}]}, 0x1, 0x2}, 0x1) close(r4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008110000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="28395cc139de359a000000000042abe57eb5ac02", @ANYRES32=0x0, @ANYBLOB="01980000000000001c00128009000100626f6e64000000000c00028008001c0007000000"], 0x3c}}, 0x0) 12m9.999221758s ago: executing program 3 (id=5158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000010000000000000000000584000aac2a00000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300006c2a0380301100800c0005407fffffffffffffff0c000440fffffffffffffff8141101"], 0x2ad4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000080) 12m9.997279845s ago: executing program 3 (id=5159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe00, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfff, 0x55}}}}}, 0x28}}, 0x4c044) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 12m9.979847029s ago: executing program 3 (id=5160): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf256700000008000300", @ANYRES32, @ANYBLOB="0800c3"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x62a, 0x7100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x30, 0x4, "", [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x3, 0x1, 0xb3fcd73191d01f0a, 0x8, {0x9, 0x21, 0x3, 0xa, 0x1, {0x22, 0xe75}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x72, 0x8, 0x2}}}}}]}}]}}, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xc0080) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x20, 0x82, 0xc, 0x3, "7f72177848150010e1b9cb93f0f36fad2d9d4aee0640d3b1f1ce72842741067a"}) 12m9.415943865s ago: executing program 3 (id=5166): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4e4, 0x0, 0x4, 0x3, 0xd12d, 0x57, 0x8, 0x1}, &(0x7f00000000c0)=0x20) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', r4, 0x0, 0x40) 12m9.297487153s ago: executing program 3 (id=5167): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 12m9.031039577s ago: executing program 3 (id=5169): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@ipv4_getaddr={0x6c, 0x16, 0xa08, 0x70bd2b, 0x25dfdbfc, {0x2, 0x1f, 0x2, 0xc8}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x81, 0x3, 0x6}}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffb, 0x80000000, 0x8000, 0x5}}, @IFA_CACHEINFO={0x14, 0x6, {0xd7, 0x82, 0x8, 0xff}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r9, 0x80000001}, 0x8) 12m8.705145816s ago: executing program 34 (id=5169): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@ipv4_getaddr={0x6c, 0x16, 0xa08, 0x70bd2b, 0x25dfdbfc, {0x2, 0x1f, 0x2, 0xc8}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x81, 0x3, 0x6}}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffb, 0x80000000, 0x8000, 0x5}}, @IFA_CACHEINFO={0x14, 0x6, {0xd7, 0x82, 0x8, 0xff}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r9, 0x80000001}, 0x8) 3m2.351677074s ago: executing program 7 (id=6709): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0xb, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0x1, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x18, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101}}}], 0x20}, 0x400c804) 3m2.272574828s ago: executing program 7 (id=6710): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000004c000000060a010500000000000000000100000008000b400000000024000480200001800e000100696d6d656469610d000000000000008008000140000000000900010073797a30"], 0xc0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="002e0000000000f3", 0x8) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="002e0000000000f3", 0x8) 3m2.175935917s ago: executing program 7 (id=6711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m2.069335929s ago: executing program 7 (id=6713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) write$tun(r1, &(0x7f0000000240)={@void, @void, @llc={@snap={0xab, 0x1, "10", "76409d", 0x88f5, "db7806a0628c1afd4a07c43d35604e8533b713633bc0685f9bcd28b393481093c7ddee1d4c42dd71dff34a9ef399dc9c7b9718760bde7e46bf5c54de2c872b2f07cfcffd1b13fc6bac0b"}}}, 0x52) socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000001c0)={0x1, 0x20, [0x2, 0x2, 0x1, 0x8000, 0x9, 0x4, 0xfffffff9, 0x0]}) write$tun(r1, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x19e) 3m1.883818258s ago: executing program 7 (id=6716): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r1, 0x23}, {r1, 0x8110}], 0x2, 0x4) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x50d4, 0x0, 0x1, {0x22, 0x43e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xbe, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x3, 0x6, 0xff, 0x7}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xe7, 0x1, 0x4f, 0x80, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x9, 0x4}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xe2a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1809}}, {0xc6, &(0x7f0000000340)=@string={0xc6, 0x3, "a77a4d920f3f7cd801749fa715d34c112dbb957ee3b95762a1b8497b75c8d261800e7233685a96c6aa0cb2f2024b33c9db35c766044449c9f90b29d27cfa995c758ae57d3a340c4681df707cb9e2f16983bd91309a977878e08caf264fe18485f25afbaa21a826d7eb56a6445d751fd36931135ceb2ad9b9cd21b861d496d2363147215925f4910634c7d8fa138f49ccea8c6d0cf03d075c20840933dca53a0213d978672f0ba62bba41bae12f38854a56f0e4a6532486c01ea0c055b08350d3e0712e00"}}, {0x35, &(0x7f0000000440)=@string={0x35, 0x3, "ca26ceacfb9f04a2762832088d4444d9edd88435992ca38b4018bc317f5d6370b5d51c75adbe803447a57004bb1d480553b810"}}, {0x4, &(0x7f0000000480)=@string={0x4, 0x3, "f277"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "790febef0369619817566276deede16c76e1040001b3f49ff1f6e0dbe952c8135201471f01d61988788ef94edc449e7a42e57d35431f8efb95e6b822ef2264377feb5ae62a817f5e68baaaf30ba85b23e23f66a5c9e66cf6c28608858139d499f551624d2e9bbc6b993b734baa9b892fe658d2badbf3ce84fd6cd09e2866f97e5f5d07ace48ba41d9e0e6bdae4ba892d0b1a96c99c3cdc13ef3bf392645e1432daf1cfb087f42ff2657cd09518e5517bc8130d6a156f775898db5e4a9bfaa1c7c8c85d44b5beea9f1c05c7039f2f791a0fc05ec210ee499b1a81d24fb5d189be100e1d9593e41f81d5790f5e0a1626"}}, {0x6a, &(0x7f0000000700)=@string={0x6a, 0x3, "9ca51bc012014ebd246f4d74f98dcd582fc1df49c4cd6cff4da03af681d7e7f1bc560d28d8c58663300b36f16a369473a04540fe6692aba26e4c2f49639aac20890a9938d5b2a048e224acdfcd491ebdac52fe27d8b64cb93287815d9781e67b7915f89ab25804eb"}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x50d4, 0x0, 0x1, {0x22, 0x43e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xbe, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x3, 0x6, 0xff, 0x7}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xe7, 0x1, 0x4f, 0x80, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x9, 0x4}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xe2a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1809}}, {0xc6, &(0x7f0000000340)=@string={0xc6, 0x3, "a77a4d920f3f7cd801749fa715d34c112dbb957ee3b95762a1b8497b75c8d261800e7233685a96c6aa0cb2f2024b33c9db35c766044449c9f90b29d27cfa995c758ae57d3a340c4681df707cb9e2f16983bd91309a977878e08caf264fe18485f25afbaa21a826d7eb56a6445d751fd36931135ceb2ad9b9cd21b861d496d2363147215925f4910634c7d8fa138f49ccea8c6d0cf03d075c20840933dca53a0213d978672f0ba62bba41bae12f38854a56f0e4a6532486c01ea0c055b08350d3e0712e00"}}, {0x35, &(0x7f0000000440)=@string={0x35, 0x3, "ca26ceacfb9f04a2762832088d4444d9edd88435992ca38b4018bc317f5d6370b5d51c75adbe803447a57004bb1d480553b810"}}, {0x4, &(0x7f0000000480)=@string={0x4, 0x3, "f277"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "790febef0369619817566276deede16c76e1040001b3f49ff1f6e0dbe952c8135201471f01d61988788ef94edc449e7a42e57d35431f8efb95e6b822ef2264377feb5ae62a817f5e68baaaf30ba85b23e23f66a5c9e66cf6c28608858139d499f551624d2e9bbc6b993b734baa9b892fe658d2badbf3ce84fd6cd09e2866f97e5f5d07ace48ba41d9e0e6bdae4ba892d0b1a96c99c3cdc13ef3bf392645e1432daf1cfb087f42ff2657cd09518e5517bc8130d6a156f775898db5e4a9bfaa1c7c8c85d44b5beea9f1c05c7039f2f791a0fc05ec210ee499b1a81d24fb5d189be100e1d9593e41f81d5790f5e0a1626"}}, {0x6a, &(0x7f0000000700)=@string={0x6a, 0x3, "9ca51bc012014ebd246f4d74f98dcd582fc1df49c4cd6cff4da03af681d7e7f1bc560d28d8c58663300b36f16a369473a04540fe6692aba26e4c2f49639aac20890a9938d5b2a048e224acdfcd491ebdac52fe27d8b64cb93287815d9781e67b7915f89ab25804eb"}}]}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0x7, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0x7, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m59.903170748s ago: executing program 7 (id=6726): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) 2m59.52514831s ago: executing program 35 (id=6726): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) 3.930551626s ago: executing program 4 (id=7806): r0 = socket(0x2, 0x80805, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) syz_clone3(&(0x7f0000000680)={0x1000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x3a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 3.880079101s ago: executing program 6 (id=7807): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x80, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x9, 0x82000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) 3.810967527s ago: executing program 6 (id=7809): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x10000006, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf250300000005000300180c47a7180001801400020076657468315f746f5f6272696467650005000200"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f00000000c0)=0x8) io_setup(0xe, &(0x7f0000000080)=0x0) io_getevents(r6, 0x3a, 0x80000000000012c, &(0x7f0000000400), &(0x7f0000000200)={0x0, 0x3938700}) 3.608187336s ago: executing program 2 (id=7812): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050001007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044094}, 0x20008800) syz_usb_connect(0x0, 0x59, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202", @ANYRESHEX, @ANYRESHEX=r0], 0x0) 3.123483836s ago: executing program 0 (id=7814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x20008800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000900)={0xa3902480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x15, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 3.065239419s ago: executing program 0 (id=7815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f0000000040)=0xfffffb1b) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000a00)={0x50, 0x0, &(0x7f00000008c0)=[@register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f0000000980)="e1e14bfe"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000e00)="f590"}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000000)={0x9cd, {"6e44e7d970fbb9903c938a87fc778411", "a831e2aa714df6e7a7b68511f1472331", "86a6b913339f62814fe6c3dd13a3e32a"}, 0x10000, 0x1}) r9 = dup(r6) syz_ublk_setup_queues(r9, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysinfo(&(0x7f0000000280)=""/24) unshare(0x22020400) capset(&(0x7f00000002c0)={0x20071026}, 0x0) r10 = socket(0x2d, 0x2, 0x0) connect$qrtr(r10, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) 2.849634077s ago: executing program 6 (id=7816): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) unshare(0x400) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, 0x0) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x18a) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000d000000000000000000000100800309000100c9797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000ac0000001a0a010400000000000000000100000008000b4000000000840004"], 0x120}}, 0x80) r5 = fsmount(r3, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0) io_setup(0xa, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}, {&(0x7f0000000600)="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"}, {&(0x7f0000001600)="3f3e801633d45d59372dbbf170a1c76baacca8ad76a1b9748ea60b5fa634aa70d07714b31af443778e00a08cf210d7aca288334451419be7500fed44b3934fd0a06d826c94c94cb2cce771a7be4c32e70c26fc449a53a4976ec8428729a78c3feb6478013e5a771e5748b57ee31ed2c66278cfd3f3446c71b87afd04d2f54967363935690bfadb9a743daf0c069db83fe7ad2405"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x1}], 0xfffffd0b}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000280)={{0x7fd0d658, 0x2, 0x4, 0x9}, [{0x8, 0x5, 0x3, 0x1}, {0x4396, 0x0, 0x0, 0xa9}, {0x5, 0x7f, 0xf, 0x7}, {0x2, 0x3, 0x6, 0x1}, {0x10, 0x100000001, 0xc2, 0x2}]}) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xfffff000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.572789617s ago: executing program 4 (id=7818): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = socket$netlink(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000540)=""/234, 0xea}], 0x6, &(0x7f00000006c0)=""/154, 0x9a}, 0x3}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/116, 0x74}], 0x2, &(0x7f00000018c0)=""/139, 0x8b}, 0x22}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/71, 0x47}, {&(0x7f0000001a80)=""/216, 0xd8}, {&(0x7f0000001b80)=""/27, 0x1b}, {0x0}], 0x4, &(0x7f0000001cc0)=""/191, 0xbf}, 0x2}, {{0x0, 0x0, &(0x7f0000001d80)}, 0x5}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/29, 0x1d}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000002040)=""/3, 0x3}, {&(0x7f0000002080)=""/57, 0x39}], 0x7, &(0x7f0000002140)=""/97, 0x61}}], 0x5, 0xa1, &(0x7f0000002300)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_io_uring_setup(0x5fce, &(0x7f00000000c0)={0x0, 0xf962, 0x100, 0xfffffffd, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000004000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x2}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000340)={&(0x7f0000002000)={[{0x0}]}, 0x1, 0x2}, 0x1) close(r4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008110000b703000007000000850000000c0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="28395cc139de359a000000000042abe57eb5ac02", @ANYRES32=0x0, @ANYBLOB="01980000000000001c00128009000100626f6e64000000000c00028008001c0007000000"], 0x3c}}, 0x0) 2.007310844s ago: executing program 8 (id=7820): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) write$binfmt_elf32(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x3, 0x5, 0x8, 0x200}, [{0x4, 0x7, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x3049, 0x8000, 0x7}]}, 0x98) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000002c0)={0x4, 0x1, 0x6, 0x7, &(0x7f0000000540)=[{}]}) close(r3) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x9}, {0xc0d, 0x3}, 0x54d, 0x1}) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x1ff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) (async) creat(&(0x7f0000000000)='./file0\x00', 0x6b) (async) write$binfmt_elf32(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x3, 0x5, 0x8, 0x200}, [{0x4, 0x7, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x3049, 0x8000, 0x7}]}, 0x98) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000002c0)={0x4, 0x1, 0x6, 0x7, &(0x7f0000000540)=[{}]}) (async) close(r3) (async) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x9}, {0xc0d, 0x3}, 0x54d, 0x1}) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x1ff) (async) 1.993028882s ago: executing program 6 (id=7821): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000240)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) 1.933118567s ago: executing program 8 (id=7822): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"$\x00\x00UBH\x00\x00'], 0x0}, 0x0) 1.823331462s ago: executing program 0 (id=7823): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa1c7, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x4, r2}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd25, 0xfffffff7, {0x0, 0x0, 0x0, r6, {0x7}, {0x4, 0xfff2}, {0xfff1, 0xffff}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.600825976s ago: executing program 0 (id=7824): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x2}}, 0x2e) (async, rerun: 64) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) (async) socket(0x10, 0x803, 0x0) (async) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e700090588ee010000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x1070bd2e, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c805}, 0x8030) (async, rerun: 64) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = memfd_create(&(0x7f0000000900)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\x80fi2\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\xd6)\xbe\xe8c\x11\x96\xe6h\xfd\xb1\x95\xb3Z\xf8\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa1\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\b\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\x1c\xd78U\x91\x10\xe1h\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x9c\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xb4m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\x00\x00\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12', 0x7) fcntl$addseals(r5, 0x409, 0xe) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x100000a, 0x13, r5, 0x7fa4a000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async, rerun: 32) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 32) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 1.568905218s ago: executing program 0 (id=7825): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f00000002c0)=[{0x40, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfdfff034}, {0x6, 0x2, 0x2, 0x5}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x81}], 0x7, 0x10100, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r8, &(0x7f00000022c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r8, &(0x7f00000076c0)={0x14}, 0x14) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x2a50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2a20, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x867}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x220, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4b0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7120d0a43aab6534fac124d833da918e0969be3ba8aa24f18b0a072b507281bb81dd8b9156c65f4820c350315f23a02372504efb116be802c8efc5d3b10aa48a2ec796acbd139030c964f8517bde1fcca32be"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xb98, 0x2, 0x2}, {0x8, 0x5, 0x0, "a9bc9d17bf"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d91f6ae5dd441a2a52078ba960bb2e32aeeb697206186243acc6562a78d4d4739eabc5dcb03050f3d465b77e4bfa227e969f8aaaca75046470d5e0095d809792203733489986de8060bd895ce0769894233ef33212dbfe4f65c48ec6cce8fe96ee096fb6c9fff8e55fb66808b58fb007ad49fbfa4245af29fe7181d1"}}]}]}, @TCA_CGROUP_EMATCHES={0x117c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "70731e9d973322ed263781be205faed4861362b731b71c69857d5f8e487782e0abbd4b4a366fb8c1c8ac2ab18a7e539166b79662209dda88e9ea8cc35f29762d483490f5cb09f457e6d5bbafd26dfacfa78896bdf79b5d1699cfcfbd65e359b7cce20823ab657c754bfaa6c7e244eb3c1fe050b079d81f498a5d8660f16536c4"}}, @TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x0, 0x4, 0xee}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="070595ccf100a20f144c", @TCF_META_TYPE_VAR="86384dfe31a394", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x6}, {0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8f01}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xac}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x81}, {0x2, 0x7, 0x38ff, 0x2, 0x6, 0x1}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x90, 0x8, 0xc}, {0x1, 0x1, 0x5}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x40}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x7, 0x40, 0x3, 0x2f, 0x7, 0x2, 0x1, 0x2641, 0xffffffbf, 0x0, 0xf, 0xc1, 0x5, 0x9, 0x5, 0xfffffff7, 0xff, 0xfffbff7f, 0x3, 0x8, 0xffffffff, 0x1, 0x4e4b, 0x4, 0x0, 0x6, 0x5, 0x1, 0x7, 0x10, 0x5, 0x74, 0x4, 0xe5d, 0x400, 0x10000, 0x7, 0x7, 0xffffffff, 0x9, 0x81, 0x0, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x3d, 0x2, 0x2, 0x8, 0x713, 0x8, 0x1, 0x8, 0x4b2, 0x20f3, 0x3eb, 0x65ad8de0, 0xfffffffd, 0x1, 0x4fe, 0x10001, 0xdafa, 0xc8, 0x827, 0x9, 0x7, 0x1, 0x0, 0x7, 0x7, 0x0, 0x1, 0xcc9, 0x0, 0xc0000000, 0xc07f, 0x95e, 0x80000000, 0xf, 0x9, 0x2, 0x100, 0x25c, 0x3f6ca3f6, 0xd, 0x36f, 0x73b, 0x3, 0xdf72, 0x3, 0x9, 0x4, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0xffffffff, 0x5, 0x2, 0x1000, 0x8008001, 0x4, 0x6, 0x3, 0xfffffff7, 0x7, 0x4, 0x40, 0x7, 0x3, 0xd, 0xa3e7, 0x6, 0x401, 0x1, 0x4, 0xfffffff9, 0x3, 0x2, 0x800, 0x4, 0xfffffff7, 0x10, 0x1, 0xa, 0xffffffff, 0xfff, 0x7, 0x7, 0x10000, 0xc, 0x1, 0x800, 0x1, 0x1000, 0x800, 0x0, 0x9, 0xfffffff7, 0xc74e, 0x81, 0x7, 0x7, 0xf6, 0x8, 0x5, 0x7fffffff, 0x5, 0x46db, 0x9, 0x0, 0x8000, 0x0, 0x1, 0x200, 0x4, 0x5, 0x8, 0xfffffff7, 0x4f, 0xea7, 0x6, 0xd, 0xfb4, 0xd5df, 0x9, 0x1, 0x9, 0x3817, 0xa324, 0x3ff, 0x44620000, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x3a, 0x2, 0xe, 0x6, 0x1d8d, 0x101, 0x2, 0x2, 0xff, 0x1, 0x1, 0xffffffff, 0x81, 0xfffffffc, 0x7, 0x3, 0x8, 0xe648, 0x1, 0x9, 0x2, 0x2, 0x6, 0x1000000, 0x8, 0xfffffff0, 0x2, 0x0, 0x9, 0xc, 0x3ff, 0x100, 0x7, 0x2, 0x6, 0x30, 0x9, 0x1, 0x9, 0xae4, 0x9, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0xb56b, 0xf, 0x11812, 0x8, 0x23, 0x0, 0x4, 0x9, 0x200, 0x81, 0x3, 0x4, 0x99, 0x2, 0xfffffffa, 0xe, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x2, 0x7, 0x6, 0x8, 0x7fffffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8e7f}]}, @TCA_CGROUP_POLICE={0xc58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xef84, 0x4, 0x9, {0xe, 0x0, 0x5, 0x5b9f, 0x2, 0xf}, {0x5d, 0x0, 0x81, 0x0, 0x8, 0x9}, 0x60b0, 0x0, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x33f1, 0x1, 0x8, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, 0x72, 0x9, 0x7fffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x7ea6, 0xfffffffd, 0x9, 0x0, 0x4, 0x8, 0xd, 0x8, 0xc, 0xa3d8, 0x1, 0x270c, 0xc24a, 0xfffffffa, 0x81, 0x1, 0xc, 0x7, 0x10, 0x400, 0x9, 0x0, 0x10, 0x3, 0xa, 0xb, 0x80, 0xd, 0x4, 0x9, 0x8, 0xa3, 0x5, 0x3, 0x40, 0x1, 0x3, 0x3, 0x9, 0x9, 0xffffff7f, 0x6, 0x9f, 0x4, 0x8000, 0x4, 0x8, 0xf, 0xffffffff, 0x9, 0x7f, 0x7f, 0x5, 0xb25, 0x6, 0x4, 0x1000, 0x4, 0x7, 0x40, 0x8, 0x5, 0x4, 0x9, 0x200, 0x1ce5, 0x8000, 0xa3c, 0x6df30703, 0x80000001, 0x8, 0x527, 0x2, 0x7ff, 0x1, 0x400, 0x9, 0x1, 0x7, 0x0, 0x7, 0x1, 0x2, 0x3ff, 0xdd36, 0x4, 0x800, 0x8, 0x1, 0xffffff7f, 0x4, 0x2a897e25, 0x401, 0x0, 0x7, 0x5, 0xffff, 0x7, 0x2, 0x5, 0x1, 0x4, 0xd, 0xa4, 0x7f, 0xa9, 0xa, 0x2, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0x3, 0x7fffffff, 0xfffffff9, 0xfffffffb, 0x7, 0x7fffffff, 0x0, 0x1, 0xe3, 0x3, 0x80, 0xfffffffa, 0x559, 0xdd4, 0x1c, 0x3ff, 0x6, 0x2, 0x1, 0x188b, 0x0, 0x3, 0xfff, 0x0, 0xd755, 0x5, 0x1, 0x9, 0x5, 0x7, 0x2c667b41, 0x2, 0x7c, 0x4, 0x0, 0x85d, 0xebab, 0x6, 0x5, 0x8001, 0xffffff8d, 0x5, 0x4, 0x3, 0x6912b3a9, 0x4e5f, 0x7, 0xb, 0x80, 0x8000, 0x8, 0x8, 0x3, 0x8, 0x2, 0xe19, 0x3, 0x3, 0xd, 0x5, 0xab, 0x9, 0x5, 0x9, 0xfffffff7, 0x401, 0x3, 0x4, 0x80, 0xa, 0x8000, 0x5, 0x6, 0x5, 0xb, 0x4, 0x40, 0x3e, 0x6, 0x7, 0xd114, 0x50e3aa14, 0x8, 0x1000, 0x2, 0x7fff, 0xb4, 0x8, 0x2, 0x7, 0x57c, 0x0, 0x8, 0x4, 0x8, 0x8, 0x7, 0x400, 0x3, 0x9, 0xff0, 0x5, 0xffffffd9, 0x9, 0x2, 0x6, 0xfffffffd, 0x2, 0xb, 0x5, 0x4, 0x7, 0x7, 0x200, 0x7ff, 0x2, 0x2, 0x3, 0x32, 0x77b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x16, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x6cf, 0x3, 0x9, 0x8, 0xd7, 0x10, 0x7, 0x5, 0x6, 0x6, 0x5ec6, 0x67c2, 0x9, 0x400, 0x9, 0x4, 0x18, 0x0, 0x25, 0xfffffffb, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x9, 0x28, 0x6, 0x4, 0x4, 0xb1, 0x7, 0x2, 0x8001, 0x2, 0x6, 0xd, 0x0, 0x0, 0x7, 0x26f, 0x4, 0x2, 0x38, 0x6, 0x1, 0x1, 0xffff1e20, 0x3, 0xb, 0x81, 0xaea0, 0x4, 0xa, 0x8, 0x401, 0x0, 0x3, 0xd90, 0x68d, 0x814c, 0x7, 0x2, 0x0, 0x3, 0x8, 0x81, 0x4, 0x401, 0x4, 0x4, 0x8, 0xffffff01, 0x7, 0x4, 0x1, 0x4, 0x3, 0x6, 0xe, 0x9, 0x5, 0xb, 0x2, 0x3, 0x4, 0x409, 0x3, 0x8, 0xe7, 0x2, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc9a, 0x1, 0x81, 0xfff, 0x3, 0x7, 0x80, 0xffffffff, 0x401, 0x0, 0x1, 0xffffffff, 0x3, 0x85, 0x68, 0x1, 0x7, 0x1, 0x40, 0x7, 0x6, 0x100, 0xffffffff, 0xb1, 0x1, 0x2, 0xfffffffc, 0x5, 0xc, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, 0xfff, 0x1, 0x0, 0xfffffffa, 0x3, 0x3, 0x3, 0x7, 0x9, 0x6, 0x101, 0x7, 0x0, 0x3, 0x2, 0x40, 0x7ff, 0x88e6, 0x0, 0x8, 0x101, 0x3, 0x3, 0x2, 0x7, 0x208, 0x7fff, 0x1, 0xad4, 0x2, 0x0, 0xc1, 0x1, 0x6, 0x8, 0x3, 0x3, 0xffff, 0x10001, 0x6, 0x9, 0x7, 0xfffffff8, 0x460f0cda, 0xffff7a33, 0xffffffff, 0x7, 0x1, 0x8, 0x4, 0x1, 0x33, 0x1, 0x2, 0x80, 0x9026, 0x3, 0x1, 0x879, 0x2, 0x0, 0x100, 0x6, 0x5, 0xc00000, 0x8, 0x6, 0x8, 0x5, 0x1, 0x71, 0x444e, 0x9, 0x4, 0x1, 0xdf, 0x4, 0x3, 0x7, 0x200, 0xfffffffa, 0x4, 0x9, 0x6, 0x40, 0x8b7, 0x10000, 0xfffffff8, 0x1, 0x8, 0xa8, 0x7ff, 0x7, 0x2, 0x9, 0x5, 0x3, 0x4, 0x4, 0x1, 0x10001, 0x3, 0x87, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff, 0xffff2f1f, 0x4, 0x0, 0x9, 0x8f8, 0x5, 0x971, 0x575, 0x3, 0x6, 0x1, 0x0, 0x8, 0x7ff, 0xffffff95, 0x4e923fee, 0x200000, 0x1, 0xf764, 0x8, 0x2, 0x9a, 0x1020000, 0x4, 0x1, 0x1, 0xea0, 0x6, 0x7fffffff, 0x1c3c6bca, 0x1, 0x0, 0x80, 0x9, 0xa, 0x5, 0x2, 0x4, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x3, 0xff, 0xff, 0x4, 0x830, 0x3, 0x7, 0x4, 0x2, 0x1, 0x1, 0xfffffffe, 0x8, 0x6b, 0x4, 0x6, 0x4, 0x7, 0x7, 0x3, 0x10, 0x0, 0xe, 0x80000001, 0x8, 0xb, 0x7, 0x20a, 0xb, 0x8, 0x3, 0x5, 0xffffffff, 0x200, 0xf89b, 0x9, 0x4, 0x8, 0x3, 0xfffffc00, 0x7, 0x7, 0x0, 0xfffffffe, 0x0, 0x5, 0x200, 0x0, 0x4, 0x9, 0x28, 0x7, 0xa, 0x0, 0xd3b, 0x23be, 0x7, 0x5, 0x1ff, 0x8, 0x7f, 0x4, 0x4322, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0x3, 0x7, 0x800, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0x18b, 0x6a, 0x7, 0x5a, 0x1, 0x400, 0x1f21, 0x4, 0x4, 0x3ff, 0x8, 0x3, 0x1, 0x6, 0x8fd1, 0x1c000000, 0x9, 0x7, 0x1, 0x9, 0x2, 0x5, 0x2, 0xa, 0x1ff, 0x5, 0x3, 0x0, 0xfffffffc, 0x9, 0x8, 0x1, 0x0, 0x2, 0x10000, 0x2, 0x4, 0xa, 0x2, 0x1c6f, 0x6, 0x6, 0x10, 0x30000000, 0x2, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x100, 0xd792, 0x5, 0x3, 0x40, 0x101, 0x3, 0x4, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x401, 0x5, 0x6, 0x735, 0x3, 0x7, 0x7abba55c, 0x8, 0xa8fd, 0xb, 0x9, 0x6, 0xe7d, 0x9, 0x4, 0x7, 0x7fff, 0x2, 0x400, 0x1, 0x0, 0xa, 0x200, 0x7, 0x7f, 0x2, 0x3310, 0x401, 0x3, 0x4, 0x8, 0x5, 0xfffffff9, 0x2, 0x1, 0xde000000, 0x2, 0x4068d107, 0x1, 0x100, 0x2, 0x80000001, 0x2a92, 0x4, 0xfffffeff, 0x0, 0x9, 0xfffffffd, 0x0, 0x2, 0x4, 0x4, 0x32a6, 0x8, 0x40000000, 0xf, 0x5, 0x8, 0x101, 0x2, 0x7, 0x0, 0xa4, 0x3, 0x100, 0x40, 0xe03b, 0x4, 0x6]}]}, @TCA_CGROUP_ACT={0x394, 0x1, [@m_pedit={0xd0, 0x10, 0x0, 0x0, {{0xa}, {0x1}, {0xa4, 0x6, "7df2b8770dac8b0d2fec9af709aa3b5c850449a033ca7477144080226789cda42cc5b84fe202a6a0cec99190e5cf876ef6f8b1317c7d7ed2cf3c0b2e190ab07a71f1bd011d5e0c69694dde33cf48a60371ab0a4a446c4e9f9a7b156519122de0c76152fdf94f336cb4ff24f72c474f40c7fabb62eb507547e52790d761b45365c8a249b364aa90318bec827239736716b2fab26585c345cbb7781d9c492acbc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x170, 0x10, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xe5, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4739dd9e0579f2fe6007f81d0f542bab7aa23912effec59f99ba7ee5ac798997d17b3f8724cf913f4785508065d972b88564f71f577bc955f6326d8f3c45c22578190d999eb975f16f68bfbbe9b8ee7f239a77f19eb1e9fe3bd2ffaa6a7973aa04f781659f6563d6755c81f3c84a1bc5fe431e59dcb2d85b18b6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x150, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x1000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbdc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff9}]}, {0xea, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdaea84391a4bd60089b4c221b02c5b6ce7b15dee519249b163b98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x2a50}}, 0x20040054) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000000280)=[{}], 0x4000) 1.480723517s ago: executing program 4 (id=7826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0fffdffb702003e0800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.447380217s ago: executing program 4 (id=7827): r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) wait4(r5, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x70044000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.398997811s ago: executing program 0 (id=7828): syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca348800800000000000000080003802e001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a000005000600000000000800010000000000180025"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x101, &(0x7f00000002c0)) chmod(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x22) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) unshare(0x28000600) r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8e) unshare(0x8000280) r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0x300) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x309c}}, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) syz_usb_control_io$printer(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x23, 0x70, {0x70, 0x1, "36f1d2f764f1842c16d9f4edb27068f2e3d7ca9d4e551aa2393ed8e244dc069413b57a152c3660c450c965a253f5f15a0aabd305ee9426a6e7e7c11b857ea72eb88a2f7cc8ebbfbea22fd4aa297d405f0dbdcaf237f8da27ec9c0fd422ecca1d6d444e2dc49f3f9b730e99c9b08e"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000000440)={0x34, &(0x7f0000000300)={0x60, 0x15, 0xad, "7e54269c086ba010f1c2c2c4d66ed094d348ec4fcc6bad0f964112c600d8ff075eb1caaf004bb0a8c128bbefd6e54ce9c1c9ec96846f2857d41d4af423fb4af99c24abb14e76a046947ae12c413ef60eceb6bb68b67f76b88a1f061c8acb974581c8cf7c1fd3de8e70f915c2af91bfda6af2a591f5f56ae7d93927dbddab5c8abb4589c6788dd45bda7977033b64ecd260918fef0cdc669a0bdd83f4fa45522779fbb69fbae085625d174fc211"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)=ANY=[@ANYRESHEX=r2], &(0x7f0000000540)={0x20, 0x1, 0x1, 0xf3}, &(0x7f0000000240)={0x20, 0x0, 0x1, 0x1}}) r8 = syz_open_dev$audion(&(0x7f0000000500), 0xfffffffffffffffb, 0x404002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="000016000000007b"], 0x0}, 0x94) r9 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x59b300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x100, @loopback}}, @sadb_key={0x21, 0x8, 0x7f8, 0x0, "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"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x8}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3504}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd27, 0xfffffffd}]}, 0x1b8}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f00000004c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xa081, 0x0) 1.355919184s ago: executing program 8 (id=7829): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.228534375s ago: executing program 8 (id=7830): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r0, 0x0, 0x80, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r0, 0x0, 0x9, 0x82000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) 1.163293888s ago: executing program 8 (id=7831): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000200)=[{r0, 0x1210}], 0x1, 0x1ff8) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'caif0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x958d, 0xb8c, "4caaf6e7c988"}}) accept4(r0, 0x0, 0x0, 0x0) 1.131228965s ago: executing program 6 (id=7832): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x111100) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x891f, &(0x7f0000000100)=0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0xd8, 0xf}, {0x80, 0x9}, 0x800, 0x1}) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5433, 0x0) 1.051355288s ago: executing program 4 (id=7833): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0xfffffffffffff29d, 0x9}, {0x6, 0x10001}, {0x6, 0xd}, {0xffffffff, 0x56}, {0x4, 0x7}, {0x3, 0x16}, {0x2, 0x9}, {0x9, 0xfb4}, {0x6, 0x800}, {0xad, 0x8}, {0x9, 0x2}, {0x0, 0x4}, {0x8, 0x5}, {0x7, 0xd}, {0x8, 0x100000001}, {0x6, 0x2d7}, {0x8, 0x3}, {0x7, 0x9}, {0xfffffffffffffffd, 0x6}, {0x8, 0x7fffffff}, {0x5, 0x2}, {0xffffffffffffffff, 0x5}, {0x6}, {0x4f, 0x5}, {0xac, 0x5}, {0x0, 0x1}, {0xa00, 0x6}, {0xffffffff, 0x6}, {0x8, 0x1}, {0x5, 0x7fff}, {0x7, 0xfffffffffffffff5}, {0x100000000, 0x400}, {0x7, 0x1}, {0x8000000000000001, 0x101}, {0x0, 0x7}, {0x7, 0x1}, {0x8, 0xbfa}, {0x6, 0xfffffffffffffff3}, {0x6dc, 0x7fa1}, {0xffffffffffffffff, 0x7}, {0xc42, 0xb}, {0xc12, 0x10000}, {0x80000001, 0x3b84e560}, {0x400, 0x7}, {0x307d88f5, 0x9}, {0x8000, 0x8000000000000001}, {0x3, 0x3}, {0xc00, 0x3}, {0x9, 0x5}, {0x9, 0x8}, {0x5, 0x9}, {0x101, 0xd6}, {0x8, 0x3}, {0xc, 0xa93}, {0x7, 0x68e}, {0x200, 0x8000}, {0x8000, 0x7}, {0x7ffffffffffffffd, 0x280}, {0xffffffff80000000}, {0xf, 0x4c}, {0x0, 0x80}, {0x5, 0xab5}, {0x4000001ff, 0x2}, {0x9, 0x5}, {0x8, 0x7}, {0x18000, 0x53f78878}, {0x2, 0x5}, {0x81, 0x7b0}, {0x6, 0x6}, {0x3, 0x6}, {0x9, 0x800}, {0x6, 0x7}, {0x1000, 0x7}, {0xfffffffffffffffd, 0x8c}, {0x9e5, 0x7fffffffffffffff}, {0x2, 0x9}, {0x8, 0xffffffffffffff01}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x76, 0x3}, {0xe, 0x4}, {0x80000000, 0x433c50c9}, {0x4, 0x100000000}, {0x7fffffff, 0x6}, {0x7a63fbff, 0x7}, {0x1, 0x65d6}, {0x2, 0x5c8}, {0x8, 0x8}, {0x8, 0x8}, {0x7}, {0x8, 0xb84a}, {0x1, 0x1}, {0x9, 0xb52f}, {0xff, 0x9}, {0x1, 0x1}, {0x200, 0x4}, {0x12, 0x5}, {0x5, 0x9}, {0xf}, {0x4d, 0x9}, {0x7, 0x6}, {0x9, 0xc742}, {0xd, 0xfffffffffffffe01}, {0x4, 0x7}, {0x8, 0x5}, {0x2, 0x3}, {0xbd0c, 0x80000000}, {0x1, 0xf}, {0x0, 0x8}, {0x8000000000000001, 0xfffffffffffffff3}, {0x3, 0x6}, {0x0, 0x1000}, {0x7fffffffffffffff, 0x8}, {0x7, 0x200}, {0x7fffffff}, {0xd5, 0x8}, {0x8b, 0x40b4421f}, {0x800, 0x2}, {0xf2, 0x6}, {0x80, 0x853d}, {0xf3e, 0x3522dbc3}, {0xdad, 0x5}, {0x7, 0x3}, {0x10001, 0x8000000000000000}, {0x6, 0x1}, {0xc, 0x6}, {0x3, 0x1ff}, {0x2, 0x5}, {0x3d, 0x9}, {0xac99, 0x10000}, {0x10000, 0x9}, {0xfffffffffffffff7, 0x8}, {0x1000, 0x653}, {0x4bcbe926, 0x5}, {0x3, 0x9}, {0x40, 0x6}, {0x7, 0x2}, {0xf5a5, 0x5}, {0x2471e8df, 0x3}, {0x4, 0x74f0}, {0x7, 0xffffffff}, {0xb, 0x8}, {0x1, 0xcc}, {0x5ae5d7cb, 0xffffffffffffffff}, {0x5, 0x1}, {0x8, 0x7}, {0x80000000, 0xfffffffffffff68c}, {0x5, 0x1}, {0x15}, {0xfffffffffffffbfa, 0xf740}, {0x5, 0x7}, {0x800, 0x7}, {0x7ff, 0x6}, {0x1, 0x1}, {0x59bd5112, 0x3b7}, {0x3, 0x8}, {0x2, 0xcbd4}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0xa9}, {0x9, 0xf81}, {0x3}, {0x8, 0x3}, {0x18, 0x7ff}, {0xfffffffffffffff9, 0x3}, {0x5, 0x7fffffffffffffff}, {0x3, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x1, 0x100000001}, {0x3, 0x200}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x8, 0x6}, {0x4, 0x3}, {0x4, 0x79}, {0x0, 0x5}, {0xffffffffffffffff, 0x1}, {0x490, 0x37}, {0xb, 0x9}, {0x9, 0x62b60558}, {0x1, 0xffffffffffffffff}, {0x0, 0x5}, {0x100000000, 0x2}, {0x28000000000, 0xffffffffffffffff}, {0x8, 0x5}, {0x690b, 0x8}, {0xc0, 0xd}, {0x9, 0xe133}, {0x10, 0x498e6a20}, {0x101, 0x3b}, {0x3, 0x3}, {0x5}, {0xc, 0x7}, {0x1, 0x9}, {0xb3, 0x8b}, {0x200, 0x80}, {0x8}, {0x8001, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x7d, 0x7}, {0x0, 0x7ff}, {0x6, 0x5a}, {0x5, 0xfffffffffffffff8}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x80000000}, {0x3, 0xb22d}, {0x10001, 0x5}, {0xffffffff, 0x4}, {0x7b0, 0x8000c306}, {0x4000100, 0x10}, {0x3, 0x1}, {0xa540, 0x8000000000000000}, {0xfffffffffffffff8}, {0x3, 0x5}, {0x821f, 0x8}, {0x7f, 0x3}, {0x3, 0x3}, {0xce, 0x9}, {0x9, 0xffffffffffffffff}, {0x586, 0x7fffffffffffffff}, {0x387, 0xffff}, {0xc, 0x1}, {0x702, 0x7e3ed378}, {0x5, 0x8}, {0x3, 0x4}, {0x6367d524, 0x5}, {0x5e265bbc, 0x1}, {0x6, 0x1}, {0x4, 0x3}, {0x100, 0x8}, {0x1, 0x3}, {0x1, 0xfffffffffffffffe}, {0x2, 0x6}, {0x7, 0x7ff}, {0x0, 0x7}, {0x8000, 0xffffffffffffff01}, {0x3, 0x6}, {0x2}, {0x3, 0x1}, {0x9, 0x400}, {0x10, 0x3}, {0x9, 0x8d}, {0x99f, 0x2}, {0x1, 0x7f}, {0xffffffffffff8001, 0x1751}, {0x6d}, {0xe70f, 0x7}, {0x9, 0x400000000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x121001) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001c06f51f0f2f3002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1], 0x1a4}}, 0x0) (async) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x8, 0x3b6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) bind$packet(r2, &(0x7f0000000440)={0x11, 0x15, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) (async) socket$netlink(0x10, 0x3, 0x9) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 959.152791ms ago: executing program 4 (id=7834): r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'S'}, @main=@item_4={0x3, 0x0, 0x9, "e2d83f12"}]}}, 0x0}, 0x0) syz_usb_connect$midi(0x1, 0xb8, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1026, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x1, 0x1, 0x2, 0x20, 0x61, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x5, 0x7}], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0x6, 0x4, 0x8, {0x10, 0x25, 0x1, 0xc, "d521298676ece02f5711b985"}}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x0, 0x79, 0x40, {0x14, 0x25, 0x1, 0x10, "587c1688ff264879a248b2a96945db31"}}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x72, 0x9, 0xa, {0x7, 0x25, 0x1, 0x3, "f4a80a"}}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x10, 0x6, 0x8, {0xc, 0x25, 0x1, 0x8, "90c0febb1a142f40"}}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0xb3, 0x1, {0xb, 0x25, 0x1, 0x7, "0bcb41235bd08c"}}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0x7, 0x4, {0xf, 0x25, 0x1, 0xb, "229a39f3dc853e6c2f462a"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0x40, 0x10, 0x7}, 0x27, &(0x7f0000000300)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f59a332c14c9026ae7faa7a2ee651702"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x9, 0xfc00}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x7, 0x2}]}, 0x1, [{0x57, &(0x7f0000000340)=@string={0x57, 0x3, "f1dd8615e946f3a686acd032f6055fb16b962ec54f85740ef927e61906adbe9d0467b19890e9c12c005f40a4c231e418bb3b8dc89ab5645a144d17b80a6ab007447b9d07e2e8e167192bef8249291a81f867c321f7"}}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x20f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010212c82b10e1092151d172010203010902fd0101010110040904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 524.74706ms ago: executing program 2 (id=7835): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 378.323072ms ago: executing program 2 (id=7836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='dctcp', 0x5) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6cd00000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x1bc, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdc6c}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x545cd90d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x87}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) (async) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) (async, rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (rerun: 64) sendfile(r3, r3, 0x0, 0x200000) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) r5 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100002738eaf79359630a2c000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a3000000000140000002900010000000000000000000000000a"], 0x54}}, 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) (async, rerun: 64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000680)={0x1fd, 0x6, 0xeee89000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200001}, 0x0, [0x9, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x55, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x5, 0x3, 0x0, 0x2000000000800, 0x0, 0x0, 0x0, 0x5, 0x8, 0x800000000000c, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x80000000, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x4, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x7fffffff, 0x0, 0x0, 0xffffffffffffffff]}) (async, rerun: 64) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xa, 0x5, 0x2, 0x4002804c4, 0x9, 0x5, 0x5, 0x0, 0x4, 0xfff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x11500}) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) splice(r0, &(0x7f0000000080)=0xffff, r3, &(0x7f00000000c0)=0x8, 0x3ff, 0xc) 299.216509ms ago: executing program 6 (id=7837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0fffdffb702003f0800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 294.747156ms ago: executing program 2 (id=7838): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000052e000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x29}, {0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x2, 0x100000000}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x9}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000001b00)="a6", 0x1, 0x20000045, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa7, 0x4, 0x9, 0x0, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x8, 0x1, 0x4, 0x7]}}, {{0x1c, 0x1, {0x2, 0xc, 0x3, 0x10001, 0x1, 0x9, 0xbacc, 0x4}}, {0xc, 0x2, [0xd, 0x4, 0x2, 0x100]}}, {{0x1c, 0x1, {0xf8, 0x9, 0x845e, 0xb, 0x1, 0x2, 0x7fffffff, 0x3}}, {0xa, 0x2, [0x6846, 0x2, 0x400]}}, {{0x1c, 0x1, {0x9, 0x2, 0x0, 0x10000, 0x2, 0x7, 0x2, 0x8}}, {0x14, 0x2, [0xfff7, 0xfffb, 0x2, 0xd, 0xe, 0x14, 0x4, 0xc]}}, {{0x1c, 0x1, {0xf5, 0x6, 0x9, 0x40, 0x2, 0xfffffff8, 0x1, 0x1}}, {0x6, 0x2, [0x30]}}]}]}, 0xf8}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x0, 0x8, {0x5, 0x2, 0x0, 0xa, 0xccc}, {0x5, 0x1, 0x0, 0x6, 0x2, 0x4}, 0x1, 0x0, 0x800000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth1_virt_wifi\x00', {0x4}, 0x9}) recvmsg(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000000640)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x3, &(0x7f0000002000)=""/4096, 0x1000}, 0x1a020) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) io_uring_setup(0x8, &(0x7f0000000240)={0x0, 0x16a4, 0xc002, 0x2000, 0x2e2}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090088beffff0000"}}}}}, 0x0) 289.216531ms ago: executing program 8 (id=7839): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0) unshare(0x26020480) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 83.025149ms ago: executing program 2 (id=7840): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8004) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x5, {0x2, 0x0, 0x1}, 0xfd}, 0x18) r3 = epoll_create(0x9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000fc0)=[@request_death], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x44001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 0s ago: executing program 2 (id=7841): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 32 [ 1827.230433][T26590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.245218][T26590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.261874][T26590] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1827.271814][T26590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.285205][T26590] usb 5-1: config 0 descriptor?? [ 1827.353549][T18710] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1827.443425][T26587] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1827.473432][T26587] usb 3-1: device descriptor read/8, error -71 [ 1827.483765][T18710] usb 1-1: device descriptor read/64, error -71 [ 1827.593971][T26587] usb usb3-port1: unable to enumerate USB device [ 1827.605809][T18710] usb usb1-port1: attempt power cycle [ 1827.908724][T26590] usbhid 5-1:0.0: can't add hid device: -71 [ 1827.926040][T26590] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1827.949206][T26590] usb 5-1: USB disconnect, device number 86 [ 1827.964110][T18710] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1828.003664][T18710] usb 1-1: device descriptor read/8, error -71 [ 1828.253125][T18710] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1828.295422][T18710] usb 1-1: device descriptor read/8, error -71 [ 1828.403362][T18710] usb usb1-port1: unable to enumerate USB device [ 1828.706069][T18710] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1828.758597][ T8514] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7380'. [ 1828.884470][T18710] usb 5-1: Using ep0 maxpacket: 8 [ 1828.901981][T18710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1828.925428][T18710] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1828.946258][T18710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.975469][T18710] usb 5-1: config 0 descriptor?? [ 1829.230726][T18710] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1829.309110][T18710] usb 5-1: USB disconnect, device number 87 [ 1829.517959][ T8578] ip6t_srh: unknown srh invflags 4000 [ 1829.546067][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1829.598402][ T8564] could not allocate digest TFM handle sha3-224-ce [ 1829.722162][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1830.308236][ T8615] syz.0.7390 (8615): drop_caches: 2 [ 1830.412873][T18710] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1830.523240][T26590] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1830.574376][T18710] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1830.596606][T18710] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1830.606544][T18710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1830.616129][T18710] usb 3-1: Product: syz [ 1830.620519][T18710] usb 3-1: Manufacturer: syz [ 1830.629339][T18710] usb 3-1: SerialNumber: syz [ 1830.683629][T26590] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1830.704870][T26590] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1830.734766][T26590] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1830.749953][T26590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1830.770826][T26590] usb 1-1: SerialNumber: syz [ 1830.790835][T26590] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1830.852826][T26592] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1830.881973][T18710] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1831.004387][T26592] usb 5-1: config 251 has an invalid interface number: 243 but max is 0 [ 1831.030051][T26592] usb 5-1: config 251 has no interface number 0 [ 1831.051589][T26592] usb 5-1: config 251 interface 243 has no altsetting 0 [ 1831.073658][T26592] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 1831.093092][T26592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.110787][T26592] usb 5-1: Product: syz [ 1831.120560][T26592] usb 5-1: Manufacturer: syz [ 1831.131424][T26592] usb 5-1: SerialNumber: syz [ 1831.242697][T18710] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1831.394902][T18710] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1831.403704][T18710] usb 9-1: not running at top speed; connect to a high speed hub [ 1831.412750][T18710] usb 9-1: config 5 has an invalid interface number: 246 but max is 0 [ 1831.421138][T18710] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.432296][T18710] usb 9-1: config 5 has no interface number 0 [ 1831.440782][T18710] usb 9-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1831.452913][T18710] usb 9-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1831.466868][T18710] usb 9-1: config 5 interface 246 has no altsetting 0 [ 1831.476010][T18710] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1831.485878][T18710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.495796][T18710] usb 9-1: Product: syz [ 1831.499991][T18710] usb 9-1: Manufacturer: syz [ 1831.505157][T18710] usb 9-1: SerialNumber: syz [ 1831.576749][T26590] usb 1-1: USB disconnect, device number 108 [ 1831.800804][T18710] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1831.801069][ T6538] usb 9-1: Failed to submit usb control message: -71 [ 1831.818795][T18710] usb 9-1: USB disconnect, device number 34 [ 1831.827151][ T6538] usb 9-1: unable to send the bmi data to the device: -71 [ 1831.837989][ T6538] usb 9-1: unable to get target info from device [ 1831.845149][ T6538] usb 9-1: could not get target info (-71) [ 1831.851110][ T6538] usb 9-1: could not probe fw (-71) [ 1832.583530][T18710] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1832.658782][ T8693] geneve2: entered promiscuous mode [ 1832.754189][T18710] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1832.763273][T18710] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1832.774640][T18710] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1832.783437][T18710] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1832.793925][T18710] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1832.802109][T18710] usb 9-1: Product: syz [ 1832.807198][T18710] usb 9-1: Manufacturer: syz [ 1832.811815][T18710] usb 9-1: SerialNumber: syz [ 1832.819840][T18710] usb 9-1: config 0 descriptor?? [ 1832.826923][T18710] hub 9-1:0.0: bad descriptor, ignoring hub [ 1832.833491][T18710] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1832.843345][T18710] usb 9-1: selecting invalid altsetting 0 [ 1832.908060][T26590] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1832.931504][T26597] usb 3-1: USB disconnect, device number 6 [ 1832.945573][T26597] usblp0: removed [ 1833.085823][T26590] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1833.098976][T26590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 208, changing to 11 [ 1833.114239][T26590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9756, setting to 1024 [ 1833.127094][T26590] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1833.143277][T26587] usb 9-1: USB disconnect, device number 35 [ 1833.150589][T26590] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1833.163360][T26590] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1833.173662][T26590] usb 1-1: Manufacturer: syz [ 1833.194151][T26590] usb 1-1: config 0 descriptor?? [ 1833.200925][ T8693] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1833.522764][T26592] sisusb 5-1:251.243: Invalid USB2VGA device [ 1833.529297][T26592] sisusb 5-1:251.243: probe with driver sisusb failed with error -22 [ 1833.540952][T26592] usb 5-1: USB disconnect, device number 88 [ 1833.588098][ T8768] kvm: user requested TSC rate below hardware speed [ 1833.816313][T26590] usbhid 1-1:0.0: can't add hid device: -71 [ 1833.824618][T26590] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1833.840388][T26590] usb 1-1: USB disconnect, device number 109 [ 1833.862730][T26587] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1834.003033][T26592] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1834.012860][T26587] usb 9-1: Using ep0 maxpacket: 16 [ 1834.021157][T26587] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1834.031121][T26587] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.039503][T26587] usb 9-1: Product: syz [ 1834.043971][T26587] usb 9-1: Manufacturer: syz [ 1834.048986][T26587] usb 9-1: SerialNumber: syz [ 1834.154238][T26592] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1834.165681][T26592] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.176195][T26592] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1834.189792][T26592] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1834.196932][T26592] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1834.206548][T26592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.216735][T26592] usb 5-1: config 0 descriptor?? [ 1834.361570][ T8799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1834.378211][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1834.387941][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1834.429572][T26587] usb 9-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1834.439043][T26587] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1834.446437][T26587] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1834.476571][T26587] usb 9-1: USB disconnect, device number 36 [ 1834.506347][T29794] udevd[29794]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1834.828495][T26592] hid_parser_main: 495 callbacks suppressed [ 1834.828520][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x0 [ 1834.842864][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x0 [ 1834.850308][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x0 [ 1834.858273][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x0 [ 1834.867196][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x0 [ 1834.875023][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x0 [ 1834.882987][T26592] gt683r_led 0003:1770:FF00.007A: unknown main item tag 0x7 [ 1834.890402][T26592] gt683r_led 0003:1770:FF00.007A: unknown global tag 0xd [ 1834.897913][T26592] gt683r_led 0003:1770:FF00.007A: item 0 2 1 13 parsing failed [ 1834.906422][T26592] gt683r_led 0003:1770:FF00.007A: hid parsing failed [ 1834.913727][T26592] gt683r_led 0003:1770:FF00.007A: probe with driver gt683r_led failed with error -22 [ 1835.055402][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.067778][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.083030][T26587] usb 5-1: USB disconnect, device number 89 [ 1835.281828][ T8853] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1835.302901][T26592] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1835.376703][ T8865] tipc: Enabled bearer , priority 0 [ 1835.463023][T26592] usb 9-1: Using ep0 maxpacket: 8 [ 1835.469734][T26592] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1835.479887][T26592] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1835.490604][T26592] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1835.501190][T26592] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1835.514678][T26592] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1835.524272][T26592] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.687737][T18710] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1835.740020][T26592] usb 9-1: GET_CAPABILITIES returned 0 [ 1835.752977][T26592] usbtmc 9-1:16.0: can't read capabilities [ 1835.854458][T18710] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1835.867804][T18710] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.878401][T18710] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1835.885557][T18710] usb 1-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 1835.895770][T18710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.906970][T18710] usb 1-1: config 0 descriptor?? [ 1836.000049][ T8894] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7408'. [ 1836.315021][ T8898] : renamed from vlan0 (while UP) [ 1836.331616][T18710] apple 0003:05AC:0320.007B: unknown main item tag 0x0 [ 1836.343275][T18710] apple 0003:05AC:0320.007B: unknown main item tag 0x0 [ 1836.350238][T18710] apple 0003:05AC:0320.007B: unknown main item tag 0x0 [ 1836.369292][T18710] apple 0003:05AC:0320.007B: hidraw0: USB HID v7f.fd Device [HID 05ac:0320] on usb-dummy_hcd.0-1/input0 [ 1836.493001][T26592] tipc: Node number set to 1 [ 1836.763867][ T8961] x_tables: duplicate underflow at hook 2 [ 1836.783830][T26592] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1836.922883][T26592] usb 3-1: device descriptor read/64, error -71 [ 1836.953079][T18710] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1837.078169][T26590] usb 1-1: USB disconnect, device number 110 [ 1837.113684][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 1837.113700][ T29] audit: type=1326 audit(1781966715.716:24284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.0.7428" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4211d9ce59 code=0x0 [ 1837.146775][T18710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1837.158023][T18710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1837.164131][T26592] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1837.170386][T18710] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1837.185831][T18710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.196421][T18710] usb 5-1: config 0 descriptor?? [ 1837.229052][ T8983] netlink: 'syz.0.7428': attribute type 1 has an invalid length. [ 1837.303023][T26592] usb 3-1: device descriptor read/64, error -71 [ 1837.412976][T26592] usb usb3-port1: attempt power cycle [ 1837.752967][T26592] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1837.793561][T26592] usb 3-1: device descriptor read/8, error -71 [ 1838.032991][T26592] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1838.053894][T26592] usb 3-1: device descriptor read/8, error -71 [ 1838.119428][T26590] usb 9-1: USB disconnect, device number 37 [ 1838.173411][T26592] usb usb3-port1: unable to enumerate USB device [ 1838.263255][T18710] ath6kl: Failed to submit usb control message: -110 [ 1838.270026][T18710] ath6kl: unable to send the bmi data to the device: -110 [ 1838.278390][T18710] ath6kl: Unable to send get target info: -110 [ 1838.285509][T18710] ath6kl: Failed to init ath6kl core: -110 [ 1838.292074][T18710] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1838.443019][T26580] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1838.472721][T26590] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1838.602738][T26580] usb 1-1: Using ep0 maxpacket: 32 [ 1838.609311][T26580] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1838.618625][T26580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.625233][T26590] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1838.628234][T26580] usb 1-1: config 0 descriptor?? [ 1838.648626][T26580] as10x_usb: device has been detected [ 1838.656600][T26580] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1838.660903][T26590] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1838.667430][T26580] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1838.686701][T26580] as10x_usb: error during firmware upload part1 [ 1838.689353][T26590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1838.693381][T26580] Registered device nBox DVB-T Dongle [ 1838.703512][T26590] usb 9-1: SerialNumber: syz [ 1838.718786][T26590] hub 9-1:1.0: bad descriptor, ignoring hub [ 1838.725314][T26590] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1838.856623][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.866403][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.879230][T26592] usb 1-1: USB disconnect, device number 111 [ 1838.897597][T26592] Unregistered device nBox DVB-T Dongle [ 1838.898299][T26592] as10x_usb: device has been disconnected [ 1838.935576][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.945901][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.959462][ T9026] binder_alloc: 9025: pid 9025 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1839.545291][ T9074] x_tables: duplicate underflow at hook 1 [ 1839.635890][ T29] audit: type=1326 audit(1781966718.236:24285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.664128][T26592] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1839.674297][ T29] audit: type=1326 audit(1781966718.236:24286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.700536][ T29] audit: type=1326 audit(1781966718.256:24287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.729031][ T9086] veth0_to_team: entered promiscuous mode [ 1839.736239][ T29] audit: type=1326 audit(1781966718.256:24288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.766242][ T29] audit: type=1326 audit(1781966718.256:24289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.774524][ T9085] veth0_to_team: left promiscuous mode [ 1839.792607][ T29] audit: type=1326 audit(1781966718.266:24290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.821705][ T29] audit: type=1326 audit(1781966718.266:24291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.823526][T26597] usb 5-1: USB disconnect, device number 90 [ 1839.890698][ T29] audit: type=1326 audit(1781966718.266:24292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.916911][ T29] audit: type=1326 audit(1781966718.266:24293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.2.7437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1839.933007][T26592] usb 1-1: Using ep0 maxpacket: 8 [ 1839.950026][T26592] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1839.959318][T26592] usb 1-1: config 0 has no interface number 0 [ 1839.967049][T26592] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1839.981623][T26592] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1839.995861][T26592] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1840.008517][T26592] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1840.031470][T26592] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1840.052287][T26592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.075380][T26592] usb 1-1: config 0 descriptor?? [ 1840.096855][T26592] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1840.332279][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.354726][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.783077][T26587] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1840.932949][T26587] usb 5-1: device descriptor read/64, error -71 [ 1840.949813][ T9150] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1840.969013][ T9150] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1841.091219][ T9158] netlink: 'syz.6.7448': attribute type 2 has an invalid length. [ 1841.107131][ T9158] netlink: 'syz.6.7448': attribute type 2 has an invalid length. [ 1841.192888][T26587] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1841.332976][T26587] usb 5-1: device descriptor read/64, error -71 [ 1841.454187][T26587] usb usb5-port1: attempt power cycle [ 1841.530143][ T9176] blktrace: Concurrent blktraces are not allowed on sg0 [ 1841.538328][ T9177] blktrace: Concurrent blktraces are not allowed on sg0 [ 1841.667504][ T9194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1841.783036][T31056] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1841.813018][T26587] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1841.834147][T26587] usb 5-1: device descriptor read/8, error -71 [ 1841.935955][T31056] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1841.945667][T31056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.954242][T31056] usb 3-1: Product: syz [ 1841.958436][T31056] usb 3-1: Manufacturer: syz [ 1841.963597][T31056] usb 3-1: SerialNumber: syz [ 1841.969802][T31056] usb 3-1: config 0 descriptor?? [ 1842.073051][T26587] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1842.093882][T26587] usb 5-1: device descriptor read/8, error -71 [ 1842.203607][T26587] usb usb5-port1: unable to enumerate USB device [ 1842.378160][T31056] usb 3-1: Firmware version (0.0) predates our first public release. [ 1842.386973][T31056] usb 3-1: Please update to version 0.2 or newer [ 1842.394324][T31056] usb 3-1: Firmware: build [ 1842.417459][T26580] usb 1-1: USB disconnect, device number 112 [ 1842.440179][T26580] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1842.616202][T31056] usb 3-1: USB disconnect, device number 11 [ 1842.820617][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.836722][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.849648][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.861312][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.983164][T18710] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1843.149997][T18710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1843.161489][T18710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.170336][T18710] usb 1-1: Product: syz [ 1843.175251][T18710] usb 1-1: Manufacturer: syz [ 1843.203679][T18710] usb 1-1: SerialNumber: syz [ 1843.505239][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.541327][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.650334][ T9278] loop5: detected capacity change from 0 to 6 [ 1843.692995][ T9278] Dev loop5: unable to read RDB block 6 [ 1843.730681][ T9278] loop5: unable to read partition table [ 1843.750827][T18710] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1843.760560][ T9278] loop5: partition table beyond EOD, truncated [ 1843.770544][T18710] cdc_ncm 1-1:1.0: bind() failure [ 1843.795012][T26590] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -110 [ 1843.808911][ T9278] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1843.844136][T18710] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1843.894635][T18710] cdc_ncm 1-1:1.1: bind() failure [ 1843.921843][T18710] usb 1-1: USB disconnect, device number 113 [ 1843.933038][T26587] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1844.077769][ T9326] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1844.115917][T26587] usb 3-1: Using ep0 maxpacket: 8 [ 1844.138342][T26587] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1844.176944][T26587] usb 3-1: config 179 has no interface number 0 [ 1844.213583][T26587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1844.259091][T26587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1844.270965][T26587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1844.284686][T26587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1844.301921][T26587] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1844.317207][T26587] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1844.335889][T26587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.364577][ T9294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1844.375804][ T9343] kvm: pic: non byte write [ 1844.383001][T18710] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1844.422522][T31054] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1844.562985][T18710] usb 5-1: Using ep0 maxpacket: 16 [ 1844.569902][T18710] usb 5-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1844.592073][T31054] usb 1-1: descriptor type invalid, skip [ 1844.609006][T31054] usb 1-1: descriptor type invalid, skip [ 1844.628826][T18710] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1844.650808][T31054] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.680653][T26587] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input161 [ 1844.705883][T18710] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 1844.746878][T31054] usb 1-1: language id specifier not provided by device, defaulting to English [ 1844.757179][T18710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.797350][T31054] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 1844.809457][T18710] usb 5-1: Product: syz [ 1844.832137][T18710] usb 5-1: Manufacturer: syz [ 1844.865813][T31054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.878983][T18710] usb 5-1: SerialNumber: syz [ 1844.946307][T31054] usb 1-1: Product: Г [ 1844.975631][T31054] usb 1-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ [ 1845.177787][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1845.217455][T18710] usbhid 5-1:1.0: can't add hid device: -71 [ 1845.243238][T18710] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1845.279051][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7473'. [ 1845.291266][T18710] usb 5-1: USB disconnect, device number 95 [ 1845.327912][ T9403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7473'. [ 1846.023166][T26587] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1846.184600][T26587] usb 5-1: too many endpoints for config 0 interface 0 altsetting 29: 129, using maximum allowed: 30 [ 1846.196275][T26587] usb 5-1: config 0 interface 0 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1846.210814][T26587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1846.218306][T26587] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1846.228191][T26587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.239950][T26587] usb 5-1: config 0 descriptor?? [ 1846.356434][T26597] usb 3-1: USB disconnect, device number 12 [ 1846.363003][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1846.363046][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1846.504841][T26587] usb 5-1: string descriptor 0 read error: -71 [ 1846.521090][T26587] cp210x 5-1:0.0: cp210x converter detected [ 1846.537444][T26587] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1846.547463][T26587] cp210x 5-1:0.0: querying part number failed [ 1846.560739][T26587] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1846.585876][T26587] usb 5-1: USB disconnect, device number 96 [ 1846.596310][T26587] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1846.606303][T26587] cp210x 5-1:0.0: device disconnected [ 1846.631951][ T9486] syzkaller0: entered promiscuous mode [ 1846.638704][ T9486] syzkaller0: entered allmulticast mode [ 1846.652043][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.665032][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.852418][T26597] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1846.948310][T31054] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1846.958829][T31054] usb 1-1: USB disconnect, device number 114 [ 1847.004664][T26597] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1847.013588][T26597] usb 3-1: can't read configurations, error -61 [ 1847.146182][T26597] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1847.298280][ T9520] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7481'. [ 1847.314121][T26597] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1847.327352][T26580] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1847.347175][T26597] usb 3-1: can't read configurations, error -61 [ 1847.354912][T26597] usb usb3-port1: attempt power cycle [ 1847.514447][T26580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.529743][T26580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.541990][T26580] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1847.556162][T26580] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1847.567901][T26580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.585192][T26580] usb 5-1: config 0 descriptor?? [ 1847.693071][T26597] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1847.728104][T26597] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1847.748523][T26597] usb 3-1: can't read configurations, error -61 [ 1847.806188][T26580] usbhid 5-1:0.0: can't add hid device: -71 [ 1847.812854][T26580] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1847.828168][T26580] usb 5-1: USB disconnect, device number 97 [ 1847.892641][T26597] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1847.915283][T26597] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1847.923355][T26597] usb 3-1: can't read configurations, error -61 [ 1847.929856][T26597] usb usb3-port1: unable to enumerate USB device [ 1847.944175][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.950517][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.142730][T26580] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1848.206775][ T9565] x_tables: unsorted underflow at hook 1 [ 1848.308735][T26580] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1848.318362][T26580] usb 5-1: config 0 has no interface number 0 [ 1848.331511][T26580] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1848.345400][T26580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.355765][T26580] usb 5-1: config 0 descriptor?? [ 1848.362151][T26580] ums-realtek 5-1:0.2: USB Mass Storage device detected [ 1848.453594][T18710] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1848.489252][ T9597] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7487'. [ 1848.569479][T26580] usb 5-1: USB disconnect, device number 98 [ 1848.604260][T18710] usb 1-1: device descriptor read/64, error -71 [ 1848.863054][T18710] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1848.992992][T18710] usb 1-1: device descriptor read/64, error -71 [ 1849.112692][T18710] usb usb1-port1: attempt power cycle [ 1849.343014][T26580] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1849.462988][T18710] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1849.483691][T18710] usb 1-1: device descriptor read/8, error -71 [ 1849.495793][T26580] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1849.508038][T26580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1849.519956][T26580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1849.532998][T26580] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1849.542135][T26580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.550748][T26580] usb 5-1: Product: syz [ 1849.556323][T26580] usb 5-1: Manufacturer: syz [ 1849.560957][T26580] usb 5-1: SerialNumber: syz [ 1849.569167][T26580] usb 5-1: config 0 descriptor?? [ 1849.723191][T18710] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1849.743621][T18710] usb 1-1: device descriptor read/8, error -71 [ 1849.782275][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1849.794199][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1849.827673][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.837003][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.863837][T18710] usb usb1-port1: unable to enumerate USB device [ 1849.923074][T31056] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1850.093053][T31056] usb 3-1: Using ep0 maxpacket: 8 [ 1850.099463][T31056] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.110023][T31056] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1850.125103][T31056] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1850.132054][T31056] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1850.141660][T31056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.151876][T31056] usb 3-1: config 0 descriptor?? [ 1850.501671][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.513603][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.570598][T31056] hid_parser_main: 442 callbacks suppressed [ 1850.570655][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.587315][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.598184][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.607179][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.616247][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.625916][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.634830][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.644509][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.653443][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.661792][T31056] logitech-hidpp-device 0003:046D:C086.007C: unknown main item tag 0x0 [ 1850.672680][T31056] logitech-hidpp-device 0003:046D:C086.007C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 1850.761019][T26592] usb 3-1: USB disconnect, device number 17 [ 1851.241971][ T9714] sctp: [Deprecated]: syz.8.7499 (pid 9714) Use of int in maxseg socket option. [ 1851.241971][ T9714] Use struct sctp_assoc_value instead [ 1851.267442][ T9716] tap0: tun_chr_ioctl cmd 1074025675 [ 1851.278483][ T9716] tap0: persist enabled [ 1851.295107][ T9716] tap0: tun_chr_ioctl cmd 1074025675 [ 1851.301912][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1851.301926][ T29] audit: type=1326 audit(1781966729.896:24311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9720 comm="syz.4.7501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x0 [ 1851.314489][ T9716] tap0: persist enabled [ 1851.403232][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7503'. [ 1851.471739][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.494480][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.583227][T31056] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1851.639107][ T9731] loop8: detected capacity change from 0 to 1 [ 1851.647404][ T9731] Dev loop8: unable to read RDB block 1 [ 1851.653986][ T9731] loop8: unable to read partition table [ 1851.660895][ T9731] loop8: partition table beyond EOD, truncated [ 1851.690847][ T9731] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1851.749862][T31056] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1851.785665][T31056] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1851.801473][ T9754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7505'. [ 1851.805714][T31056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1851.819313][T31056] usb 1-1: SerialNumber: syz [ 1851.836820][T31056] hub 1-1:1.0: bad descriptor, ignoring hub [ 1851.847498][T31056] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1851.976858][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7507'. [ 1852.570569][ T9824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1852.793502][T31056] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1852.885536][T31056] usb 1-1: USB disconnect, device number 119 [ 1853.156218][ T9848] geneve1: entered promiscuous mode [ 1853.203863][ T9848] macsec1: entered promiscuous mode [ 1853.229779][ T9848] macsec1: entered allmulticast mode [ 1853.258319][ T9848] geneve1: entered allmulticast mode [ 1853.314142][ T9848] geneve1: left allmulticast mode [ 1853.344184][ T9848] geneve1: left promiscuous mode [ 1853.811470][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.838726][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.909433][ T29] audit: type=1326 audit(1781966732.506:24312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1853.938348][ T29] audit: type=1326 audit(1781966732.506:24313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1853.969444][ T29] audit: type=1326 audit(1781966732.506:24314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.018385][ T29] audit: type=1326 audit(1781966732.506:24315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.046374][ T29] audit: type=1326 audit(1781966732.506:24316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.075111][ T29] audit: type=1326 audit(1781966732.506:24317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.100356][ T29] audit: type=1326 audit(1781966732.506:24318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.126113][ T29] audit: type=1326 audit(1781966732.536:24319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.150951][ T29] audit: type=1326 audit(1781966732.536:24320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.2.7523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4099ce59 code=0x7ffc0000 [ 1854.312981][T26597] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1854.312981][T31056] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1854.463137][T26597] usb 1-1: Using ep0 maxpacket: 16 [ 1854.469705][T26597] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1854.478509][T26597] usb 1-1: config 0 has no interface number 0 [ 1854.485518][T26597] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.494604][T31056] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1854.509621][T26597] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.509666][T26597] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1854.509690][T26597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.511237][T26597] usb 1-1: config 0 descriptor?? [ 1854.546649][T31056] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1854.556564][T31056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1854.590353][T31056] usb 3-1: SerialNumber: syz [ 1854.608707][T31056] hub 3-1:1.0: bad descriptor, ignoring hub [ 1854.617579][T31056] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1854.832145][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.848229][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.270046][T26597] uclogic 0003:28BD:0071.007D: failed retrieving string descriptor #100: -71 [ 1855.296372][T26597] uclogic 0003:28BD:0071.007D: failed retrieving pen parameters: -71 [ 1855.313070][T26597] uclogic 0003:28BD:0071.007D: pen probing failed: -71 [ 1855.330411][T26597] uclogic 0003:28BD:0071.007D: failed probing parameters: -71 [ 1855.341695][T26597] uclogic 0003:28BD:0071.007D: probe with driver uclogic failed with error -71 [ 1855.375030][T26597] usb 1-1: USB disconnect, device number 120 [ 1855.529775][T31056] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1855.585700][T31056] usb 3-1: USB disconnect, device number 18 [ 1856.434382][T10024] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1856.445538][T10024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1856.476754][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1857.080666][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.091589][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.150280][ T2867] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1857.166165][ T2867] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1857.175860][ T2867] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1857.186946][ T2867] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1857.753038][T31054] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1857.903109][T31054] usb 3-1: Using ep0 maxpacket: 16 [ 1857.915509][T31054] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1857.931354][T31054] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1857.941514][T31054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.956856][T31054] usb 3-1: config 0 descriptor?? [ 1858.000015][T10084] netlink: 'syz.6.7546': attribute type 3 has an invalid length. [ 1858.376073][T31054] hid_parser_main: 30 callbacks suppressed [ 1858.376096][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.390315][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.398368][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.406519][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.414178][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.422207][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.430399][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.437922][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.445552][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.453091][T31054] zeroplus 0003:0C12:0030.007E: unknown main item tag 0x0 [ 1858.460308][T31054] zeroplus 0003:0C12:0030.007E: item fetching failed at offset 12/41 [ 1858.468966][T31054] zeroplus 0003:0C12:0030.007E: parse failed [ 1858.475102][T31054] zeroplus 0003:0C12:0030.007E: probe with driver zeroplus failed with error -22 [ 1858.522973][T26592] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1858.673297][T26592] usb 1-1: Using ep0 maxpacket: 16 [ 1858.679843][T26592] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1858.688649][T26592] usb 1-1: config 0 has no interface number 0 [ 1858.695363][T26592] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1858.705918][T26592] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1858.717926][T26592] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1858.728153][T26592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.736731][T26592] usb 1-1: Product: syz [ 1858.740912][T26592] usb 1-1: Manufacturer: syz [ 1858.747952][T26592] usb 1-1: SerialNumber: syz [ 1858.754723][T26592] usb 1-1: config 0 descriptor?? [ 1858.760674][T10099] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1858.768445][T10099] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1858.978386][T10099] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1858.986217][T10099] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1859.196170][T26592] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1859.208537][T26592] asix 1-1:0.34: probe with driver asix failed with error -61 [ 1859.228728][T26592] usb 1-1: USB disconnect, device number 121 [ 1860.104650][T26580] iguanair 5-1:0.0: failed to get version [ 1860.111208][T26580] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 1860.125997][T26580] usb 5-1: USB disconnect, device number 99 [ 1860.367932][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.378400][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.393654][T10134] binder: 10133:10134 ioctl c0306201 200000000640 returned -22 [ 1860.401577][T10134] binder: 10133:10134 ioctl 4040aea0 2000000002c0 returned -22 [ 1860.427373][T26592] usb 3-1: USB disconnect, device number 19 [ 1860.466842][T10147] input: syz1 as /devices/virtual/input/input163 [ 1860.520771][T10151] netlink: 57 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1860.864509][T26592] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1861.024601][T26592] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.035103][T26592] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1861.044613][T26592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.055798][T26592] usb 3-1: config 0 descriptor?? [ 1861.063586][T26592] pwc: Askey VC010 type 2 USB webcam detected. [ 1861.265531][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.281201][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.343261][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.356690][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.380941][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.394009][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.495080][T26592] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1861.503985][T26592] pwc: recv_control_msg error -32 req 02 val 2700 [ 1861.511660][T26592] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1861.519552][T26592] pwc: recv_control_msg error -32 req 04 val 1000 [ 1861.529186][T26592] pwc: recv_control_msg error -32 req 04 val 1300 [ 1861.537140][T26592] pwc: recv_control_msg error -32 req 04 val 1400 [ 1861.621610][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.643533][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.665951][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.683140][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.022498][T31054] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1862.172971][T31054] usb 1-1: Using ep0 maxpacket: 32 [ 1862.179521][T31054] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1862.189280][T31054] usb 1-1: config 0 has no interface number 0 [ 1862.196121][T31054] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1862.208492][T31054] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1862.220376][T31054] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1862.230072][T31054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.238824][T31054] usb 1-1: Product: syz [ 1862.243545][T31054] usb 1-1: Manufacturer: syz [ 1862.248156][T31054] usb 1-1: SerialNumber: syz [ 1862.255786][T31054] usb 1-1: config 0 descriptor?? [ 1862.281908][T26592] pwc: recv_control_msg error -71 req 02 val 2100 [ 1862.305350][T26592] pwc: recv_control_msg error -71 req 04 val 1500 [ 1862.314408][T26592] pwc: recv_control_msg error -71 req 02 val 2500 [ 1862.321183][T26592] pwc: recv_control_msg error -71 req 02 val 2400 [ 1862.339819][T26592] pwc: recv_control_msg error -71 req 02 val 2600 [ 1862.355952][T26592] pwc: recv_control_msg error -71 req 02 val 2900 [ 1862.364773][T26592] pwc: recv_control_msg error -71 req 02 val 2800 [ 1862.376377][T26592] pwc: recv_control_msg error -71 req 04 val 1100 [ 1862.384282][T26592] pwc: recv_control_msg error -71 req 04 val 1200 [ 1862.392186][T26592] pwc: Registered as video103. [ 1862.406398][T26592] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input164 [ 1862.449420][T26592] usb 3-1: USB disconnect, device number 20 [ 1862.516678][T31054] radio-si470x 1-1:0.35: this is not a si470x device. [ 1862.726339][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7560'. [ 1862.784287][T26592] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1862.923189][T26580] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1862.944262][T26592] usb 3-1: Using ep0 maxpacket: 32 [ 1862.950788][T26592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.965913][T26592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1862.977199][T26592] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1862.977230][T31054] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1862.986677][T26592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.004541][T26592] usb 3-1: config 0 descriptor?? [ 1863.014511][T31054] usb 1-1: USB disconnect, device number 122 [ 1863.084616][T26580] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1863.094983][T26580] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1863.107354][T26580] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1863.117327][T26580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.126115][T26580] usb 5-1: Product: syz [ 1863.130510][T26580] usb 5-1: Manufacturer: syz [ 1863.135814][T26580] usb 5-1: SerialNumber: syz [ 1863.142060][T26580] usb 5-1: config 0 descriptor?? [ 1863.149362][T10280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1863.157246][T10280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1863.201788][T10313] fuse: Unknown parameter '00000000000000000003000000000000000000000030000000000000000000400000000000000000000' [ 1863.299438][T10316] netlink: 'syz.8.7572': attribute type 5 has an invalid length. [ 1863.360148][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7572'. [ 1863.379002][T10280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1863.387762][T10280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1863.429288][T26592] savu 0003:1E7D:2D5A.007F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1863.609716][T10326] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 1863.685329][T31056] usb 3-1: USB disconnect, device number 21 [ 1863.800323][T26580] Error reading MAC address [ 1863.893112][T31054] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1864.003744][T26580] usb 5-1: USB disconnect, device number 100 [ 1864.054227][T31054] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1864.066092][T31054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1864.078607][T31054] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1864.089016][T31054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.106165][T31054] usb 1-1: Product: syz [ 1864.110369][T31054] usb 1-1: Manufacturer: syz [ 1864.115299][T31054] usb 1-1: SerialNumber: syz [ 1864.121467][T31054] usb 1-1: config 0 descriptor?? [ 1864.481051][T10371] syzkaller0: entered promiscuous mode [ 1864.488221][T10371] syzkaller0: entered allmulticast mode [ 1864.817917][T31056] usb 1-1: USB disconnect, device number 123 [ 1864.882471][T26580] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1864.890711][T31054] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1865.052960][T26580] usb 3-1: Using ep0 maxpacket: 32 [ 1865.078150][T26580] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1865.087513][T31054] usb 5-1: Using ep0 maxpacket: 16 [ 1865.110893][T31054] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.124815][T26580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.151345][T31054] usb 5-1: config 3 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 24 [ 1865.176838][T26580] usb 3-1: config 0 descriptor?? [ 1865.200440][T31054] usb 5-1: config 3 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1865.220065][T26580] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1865.228418][T31054] usb 5-1: config 3 interface 0 has no altsetting 0 [ 1865.239466][T31054] usb 5-1: New USB device found, idVendor=03f0, idProduct=0404, bcdDevice= 0.40 [ 1865.250253][T31054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.262159][T31054] usb 5-1: Product: syz [ 1865.270317][T31054] usb 5-1: Manufacturer: syz [ 1865.276104][T31054] usb 5-1: SerialNumber: syz [ 1865.319197][T10390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1865.553280][T31054] usb 5-1: USB disconnect, device number 101 [ 1865.670762][T10455] FAULT_INJECTION: forcing a failure. [ 1865.670762][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.684014][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.0.7585 Tainted: G L syzkaller #0 PREEMPT(full) [ 1865.684032][T10455] Tainted: [L]=SOFTLOCKUP [ 1865.684036][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1865.684043][T10455] Call Trace: [ 1865.684047][T10455] [ 1865.684055][T10455] dump_stack_lvl+0xe8/0x150 [ 1865.684071][T10455] should_fail_ex+0x40c/0x560 [ 1865.684084][T10455] should_failslab+0xa8/0x100 [ 1865.684095][T10455] __kmalloc_noprof+0xe8/0x750 [ 1865.684109][T10455] ? get_pid_task+0x20/0x1f0 [ 1865.684119][T10455] ? tomoyo_realpath_from_path+0xef/0x640 [ 1865.684131][T10455] tomoyo_realpath_from_path+0xef/0x640 [ 1865.684142][T10455] ? lock_release+0x4b/0x3c0 [ 1865.684152][T10455] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1865.684166][T10455] tomoyo_path_number_perm+0x246/0x5f0 [ 1865.684179][T10455] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1865.684201][T10455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1865.684215][T10455] ? preempt_count_add+0x91/0x190 [ 1865.684229][T10455] ? rcu_is_watching+0x15/0xb0 [ 1865.684242][T10455] ? hook_file_ioctl+0x1f0/0x5f0 [ 1865.684254][T10455] ? lock_release+0x4b/0x3c0 [ 1865.684275][T10455] ? __fget_files+0x2a/0x420 [ 1865.684288][T10455] ? __fget_files+0x3a2/0x420 [ 1865.684305][T10455] ? __fget_files+0x2a/0x420 [ 1865.684327][T10455] security_file_ioctl+0xc3/0x2a0 [ 1865.684352][T10455] __se_sys_ioctl+0x47/0x170 [ 1865.684366][T10455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.684376][T10455] do_syscall_64+0x174/0x580 [ 1865.684386][T10455] ? trace_irq_disable+0x3b/0x140 [ 1865.684400][T10455] ? clear_bhb_loop+0x40/0x90 [ 1865.684411][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.684421][T10455] RIP: 0033:0x7f4211d9ce59 [ 1865.684431][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.684440][T10455] RSP: 002b:00007f4212c01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1865.684452][T10455] RAX: ffffffffffffffda RBX: 00007f4212015fa0 RCX: 00007f4211d9ce59 [ 1865.684459][T10455] RDX: 0000200000002b00 RSI: 00000000c0745645 RDI: 0000000000000003 [ 1865.684466][T10455] RBP: 00007f4212c01090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.684473][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1865.684479][T10455] R13: 00007f4212016038 R14: 00007f4212015fa0 R15: 00007f421213fa48 [ 1865.684489][T10455] [ 1865.684508][T10455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1866.116446][T10466] x_tables: duplicate underflow at hook 1 [ 1866.123783][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1866.123799][ T29] audit: type=1326 audit(1781966744.726:24341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.156457][T26580] gspca_sunplus: reg_w_riv err -71 [ 1866.160829][ T29] audit: type=1326 audit(1781966744.726:24342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.187067][T26580] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1866.191257][T10466] geneve2: entered allmulticast mode [ 1866.211301][T26580] usb 3-1: USB disconnect, device number 22 [ 1866.261861][ T29] audit: type=1326 audit(1781966744.756:24343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.263284][T26579] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1866.341415][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7591'. [ 1866.350416][ T29] audit: type=1326 audit(1781966744.756:24344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.350459][ T29] audit: type=1326 audit(1781966744.756:24345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.350494][ T29] audit: type=1326 audit(1781966744.756:24346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.350527][ T29] audit: type=1326 audit(1781966744.756:24347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.350557][ T29] audit: type=1326 audit(1781966744.786:24348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.350588][ T29] audit: type=1326 audit(1781966744.786:24349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.350623][ T29] audit: type=1326 audit(1781966744.786:24350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.7588" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84cef9ce59 code=0x7ffc0000 [ 1866.402130][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7591'. [ 1866.533166][T26579] usb 1-1: Using ep0 maxpacket: 32 [ 1866.542179][T26579] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 1866.556215][T26579] usb 1-1: config 2 has no interface number 0 [ 1866.563724][T26579] usb 1-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 1866.579909][T26579] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 1866.605317][T26579] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 26565, setting to 1024 [ 1866.617888][T26579] usb 1-1: config 2 interface 194 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1866.629184][T26579] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1866.639956][T26579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.650884][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7593'. [ 1866.668336][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7593'. [ 1866.681165][T10459] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1866.761719][T10502] bond1: option resend_igmp: invalid value (18446744072266711048) [ 1866.780978][T10502] bond1: option resend_igmp: allowed values 0 - 255 [ 1866.793529][T10502] bond1 (unregistering): Released all slaves [ 1866.839905][T10459] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1866.849379][T10459] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1866.904265][T10495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1867.413839][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7598'. [ 1867.461221][T10641] xt_hashlimit: size too large, truncated to 1048576 [ 1867.626184][T26579] usb 1-1: string descriptor 0 read error: -71 [ 1867.657161][T26579] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1867.784389][T26579] usb 1-1: USB disconnect, device number 124 [ 1868.173616][T26597] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1868.345425][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.358390][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.442936][T26592] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1868.783051][T26592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.802992][T26592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.823102][T26592] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1868.842650][T26592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.865225][T26592] usb 1-1: config 0 descriptor?? [ 1869.288859][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.305865][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.341916][T26592] hid-steam 0003:28DE:1142.0080: unknown main item tag 0x0 [ 1869.364325][T26592] hid-steam 0003:28DE:1142.0080: unknown main item tag 0x0 [ 1869.373755][T26592] hid-steam 0003:28DE:1142.0080: unknown main item tag 0x0 [ 1869.381968][T26592] hid-steam 0003:28DE:1142.0080: unknown main item tag 0x0 [ 1869.390090][T26592] hid-steam 0003:28DE:1142.0080: unknown main item tag 0x0 [ 1869.428680][T26592] hid-steam 0003:28DE:1142.0080: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1869.429515][T10773] tap0: tun_chr_ioctl cmd 1074812118 [ 1869.583191][T26597] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1869.744857][T26597] usb 3-1: Using ep0 maxpacket: 16 [ 1869.758625][T26597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1869.771949][T26597] usb 3-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 1869.788157][T26597] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1869.811225][T26597] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 1869.821169][T26597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.833112][T26597] usb 3-1: Product:   [ 1869.838495][T26597] usb 3-1: Manufacturer:   [ 1869.850399][T26597] usb 3-1: SerialNumber: syz [ 1870.079878][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.097887][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.203046][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.216838][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.315795][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.327647][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.663870][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7622'. [ 1870.823764][T26587] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1870.867381][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.876981][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.943069][T10833] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7623'. [ 1870.961696][T10833] tipc: Enabled bearer , priority 0 [ 1870.970390][T10833] syzkaller0: entered promiscuous mode [ 1870.976369][T26587] usb 5-1: Using ep0 maxpacket: 32 [ 1870.981593][T10833] syzkaller0: entered allmulticast mode [ 1870.989877][T26587] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1870.999196][T26587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.009888][T26587] usb 5-1: config 0 has no interface number 0 [ 1871.016620][T26587] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1871.031979][T26587] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1871.041465][T26587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.050111][T26587] usb 5-1: Product: syz [ 1871.054734][T26587] usb 5-1: Manufacturer: syz [ 1871.059512][T26587] usb 5-1: SerialNumber: syz [ 1871.066647][T26587] usb 5-1: config 0 descriptor?? [ 1871.106303][T29662] udevd[29662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1871.433577][T26579] usb 1-1: USB disconnect, device number 125 [ 1872.074431][T26587] tipc: Node number set to 4093199294 [ 1872.293988][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1872.309204][T10872] netlink: 'syz.0.7627': attribute type 1 has an invalid length. [ 1872.380894][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7629'. [ 1872.448909][T26597] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1872.505145][T26597] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1872.522014][T26597] usb 3-1: can't set first interface for hiFace device. [ 1872.529969][T26597] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1872.543099][T26597] usb 3-1: USB disconnect, device number 23 [ 1872.566776][T29794] udevd[29794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1872.602665][T10893] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in; [ 1872.602665][T10893] program syz.0.7630 not setting count and/or reply_len properly [ 1873.607068][T26597] usb 5-1: USB disconnect, device number 103 [ 1873.639791][T10958] binder: 10955:10958 ioctl c018620b 0 returned -14 [ 1873.770618][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7633'. [ 1873.848929][T10967] loop8: detected capacity change from 0 to 7 [ 1873.859079][T10967] Dev loop8: unable to read RDB block 7 [ 1873.865417][T10967] loop8: unable to read partition table [ 1873.873553][T10967] loop8: partition table beyond EOD, truncated [ 1873.880050][T10967] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1873.893058][T26579] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1873.938896][T10830] tipc: Resetting bearer [ 1873.958234][T10830] tipc: Disabling bearer [ 1873.991596][T10952] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7633'. [ 1874.042643][T10996] "syz.8.7637" (10996) uses obsolete ecb(arc4) skcipher [ 1874.057015][T10996] fuse: Bad value for 'fd' [ 1874.073203][T26579] usb 3-1: Using ep0 maxpacket: 16 [ 1874.083584][T26579] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1874.108077][T26579] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.132959][T26579] usb 3-1: config 0 has no interface number 0 [ 1874.144857][T26579] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1874.164035][T26579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.173122][T26579] usb 3-1: Product: syz [ 1874.177645][T26579] usb 3-1: Manufacturer: syz [ 1874.185769][T26579] usb 3-1: SerialNumber: syz [ 1874.210007][T26579] usb 3-1: config 0 descriptor?? [ 1874.358448][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.378183][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.401925][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.417071][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.627165][T26579] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1874.635449][T26579] uvcvideo 3-1:0.105: No valid video chain found. [ 1874.644713][T26579] usb 3-1: USB disconnect, device number 24 [ 1875.072971][T26597] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1875.137922][T11069] syzkaller0: entered promiscuous mode [ 1875.145095][T11069] syzkaller0: entered allmulticast mode [ 1875.248804][T26597] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.261840][T26597] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1875.274547][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.287186][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.303860][T26597] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1875.314954][T26597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.334383][T26597] usb 1-1: Product: syz [ 1875.342213][T26597] usb 1-1: Manufacturer: syz [ 1875.354259][T26597] usb 1-1: SerialNumber: syz [ 1875.372653][T26597] cdc_mbim 1-1:1.0: skipping garbage [ 1875.469531][T11087] fuse: Bad value for 'fd' [ 1875.844819][T11095] netlink: 'syz.8.7652': attribute type 18 has an invalid length. [ 1875.854490][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7652'. [ 1875.878163][T11095] FAULT_INJECTION: forcing a failure. [ 1875.878163][T11095] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.894225][T11095] CPU: 0 UID: 0 PID: 11095 Comm: syz.8.7652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1875.894245][T11095] Tainted: [L]=SOFTLOCKUP [ 1875.894251][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1875.894264][T11095] Call Trace: [ 1875.894271][T11095] [ 1875.894280][T11095] dump_stack_lvl+0xe8/0x150 [ 1875.894303][T11095] should_fail_ex+0x40c/0x560 [ 1875.894324][T11095] ? alloc_inode+0x6a/0x1b0 [ 1875.894344][T11095] should_failslab+0xa8/0x100 [ 1875.894362][T11095] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1875.894385][T11095] ? simple_start_creating+0xcc/0x110 [ 1875.894403][T11095] ? __pfx_simple_start_creating+0x10/0x10 [ 1875.894418][T11095] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1875.894431][T11095] alloc_inode+0x6a/0x1b0 [ 1875.894444][T11095] new_inode+0x1f/0x170 [ 1875.894457][T11095] __debugfs_create_file+0xb8/0x400 [ 1875.894469][T11095] debugfs_create_file_full+0x3f/0x60 [ 1875.894481][T11095] ref_tracker_dir_debugfs+0x197/0x360 [ 1875.894494][T11095] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1875.894510][T11095] ? __kvmalloc_node_noprof+0x53d/0x890 [ 1875.894519][T11095] ? alloc_netdev_mqs+0xa9/0x1260 [ 1875.894531][T11095] ? __raw_spin_lock_init+0x45/0x100 [ 1875.894544][T11095] alloc_netdev_mqs+0x275/0x1260 [ 1875.894556][T11095] ? __pfx_vxlan_setup+0x10/0x10 [ 1875.894639][T11095] rtnl_create_link+0x321/0xd70 [ 1875.894653][T11095] rtnl_newlink_create+0x25f/0xb00 [ 1875.894665][T11095] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1875.894676][T11095] ? __pfx___mutex_lock+0x10/0x10 [ 1875.894687][T11095] ? full_name_hash+0x92/0xe0 [ 1875.894701][T11095] rtnl_newlink+0x167f/0x1bd0 [ 1875.894713][T11095] ? __pfx_rtnl_newlink+0x10/0x10 [ 1875.894722][T11095] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1875.894741][T11095] ? rcu_is_watching+0x15/0xb0 [ 1875.894752][T11095] ? trace_irq_enable+0x3b/0x140 [ 1875.894767][T11095] ? nlmon_xmit+0xb0/0x100 [ 1875.894779][T11095] ? kmem_cache_free+0x182/0x650 [ 1875.894794][T11095] ? dev_hard_start_xmit+0x7c7/0x830 [ 1875.894805][T11095] ? __dev_queue_xmit+0x29b/0x37f0 [ 1875.894816][T11095] ? __dev_queue_xmit+0x29b/0x37f0 [ 1875.894826][T11095] ? rcu_is_watching+0x15/0xb0 [ 1875.894836][T11095] ? __dev_queue_xmit+0x29b/0x37f0 [ 1875.894846][T11095] ? trace_irq_enable+0x3b/0x140 [ 1875.894859][T11095] ? __dev_queue_xmit+0x29b/0x37f0 [ 1875.894869][T11095] ? __dev_queue_xmit+0x29b/0x37f0 [ 1875.894879][T11095] ? __local_bh_enable_ip+0xd0/0x130 [ 1875.894892][T11095] ? __dev_queue_xmit+0x29b/0x37f0 [ 1875.894905][T11095] ? __pfx_rtnl_newlink+0x10/0x10 [ 1875.894913][T11095] ? lock_release+0x4b/0x3c0 [ 1875.894921][T11095] ? bpf_lsm_capable+0x9/0x20 [ 1875.894930][T11095] ? security_capable+0x7e/0x2c0 [ 1875.894940][T11095] ? __pfx_rtnl_newlink+0x10/0x10 [ 1875.894948][T11095] rtnetlink_rcv_msg+0x802/0xc00 [ 1875.894958][T11095] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1875.894966][T11095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1875.894975][T11095] ? ref_tracker_free+0x689/0x830 [ 1875.894986][T11095] ? __pfx_ref_tracker_free+0x10/0x10 [ 1875.894999][T11095] netlink_rcv_skb+0x226/0x4a0 [ 1875.895011][T11095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1875.895020][T11095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1875.895032][T11095] ? netlink_deliver_tap+0x2e/0x1b0 [ 1875.895043][T11095] netlink_unicast+0x7bb/0x940 [ 1875.895054][T11095] netlink_sendmsg+0x813/0xb40 [ 1875.895066][T11095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1875.895077][T11095] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1875.895089][T11095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1875.895099][T11095] sock_sendmsg_nosec+0x13a/0x180 [ 1875.895112][T11095] ____sys_sendmsg+0x54e/0x850 [ 1875.895122][T11095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1875.895132][T11095] ? lock_release+0x4b/0x3c0 [ 1875.895142][T11095] ? import_iovec+0x73/0xa0 [ 1875.895156][T11095] ___sys_sendmsg+0x2a5/0x360 [ 1875.895165][T11095] ? _parse_integer_limit+0x1ae/0x1f0 [ 1875.895177][T11095] ? __pfx____sys_sendmsg+0x10/0x10 [ 1875.895188][T11095] ? kstrtouint+0x6e/0xe0 [ 1875.895203][T11095] ? rcu_is_watching+0x15/0xb0 [ 1875.895213][T11095] ? lock_release+0x4b/0x3c0 [ 1875.895226][T11095] ? __might_fault+0xcb/0x130 [ 1875.895239][T11095] __sys_sendmmsg+0x273/0x4d0 [ 1875.895250][T11095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1875.895261][T11095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1875.895273][T11095] ? ksys_write+0x242/0x270 [ 1875.895284][T11095] ? __pfx_ksys_write+0x10/0x10 [ 1875.895294][T11095] __x64_sys_sendmmsg+0xa0/0xc0 [ 1875.895304][T11095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.895314][T11095] do_syscall_64+0x174/0x580 [ 1875.895324][T11095] ? clear_bhb_loop+0x40/0x90 [ 1875.895334][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.895344][T11095] RIP: 0033:0x7f314ff9ce59 [ 1875.895354][T11095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.895363][T11095] RSP: 002b:00007f3150d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1875.895375][T11095] RAX: ffffffffffffffda RBX: 00007f3150215fa0 RCX: 00007f314ff9ce59 [ 1875.895382][T11095] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1875.895389][T11095] RBP: 00007f3150d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.895395][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1875.895401][T11095] R13: 00007f3150216038 R14: 00007f3150215fa0 R15: 00007f315033fa48 [ 1875.895411][T11095] [ 1875.895475][T11095] debugfs: out of free dentries, can not create file 'netdev@ffff888061b086f0' [ 1876.457938][T11095] netlink: 'syz.8.7652': attribute type 18 has an invalid length. [ 1876.457955][T10920] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.466636][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7652'. [ 1876.486906][T11060] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1876.496253][T10920] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.506104][T10920] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.515293][T10920] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.656538][T11100] loop2: detected capacity change from 0 to 7 [ 1876.669532][T11100] Dev loop2: unable to read RDB block 7 [ 1876.676137][T11100] loop2: AHDI p1 p2 p3 [ 1876.680347][T11100] loop2: partition table partially beyond EOD, truncated [ 1876.688485][T11100] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1876.695543][T11100] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1877.233631][T26579] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 1877.263009][T26592] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1877.270899][T11060] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1877.288049][T26597] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 1877.318442][T26597] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1877.331936][T26597] wwan wwan0: port wwan0mbim0 attached [ 1877.350871][T26597] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 32:9a:cd:dd:4f:67 [ 1877.422938][T26579] usb 5-1: Invalid ep0 maxpacket: 32 [ 1877.423149][T26592] usb 3-1: Using ep0 maxpacket: 32 [ 1877.458117][T26592] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1877.497796][T26592] usb 3-1: config 0 has no interface number 0 [ 1877.529279][T26592] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1877.550493][T26592] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1877.573090][T26579] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 1877.599604][T26592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.640657][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.645975][T26592] usb 3-1: Product: syz [ 1877.647368][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.648055][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.664319][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.671549][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.678246][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.685397][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.692091][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.698884][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.705578][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.712531][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.719227][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.720023][T26592] usb 3-1: Manufacturer: syz [ 1877.726125][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.736696][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.744126][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.750826][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.757697][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.764418][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.771210][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1877.777900][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1877.786411][T26592] usb 3-1: SerialNumber: syz [ 1877.811321][T26592] usb 3-1: config 0 descriptor?? [ 1877.863835][T26579] usb 5-1: Invalid ep0 maxpacket: 32 [ 1877.890026][T26579] usb usb5-port1: attempt power cycle [ 1878.037928][T11113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1878.081431][T26592] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1878.116775][T26592] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1878.139599][T26592] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1878.171500][T26592] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1878.252116][T26592] usb 3-1: USB disconnect, device number 25 [ 1878.265224][T26579] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1878.313533][T26579] usb 5-1: Invalid ep0 maxpacket: 32 [ 1878.473021][T26579] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 1878.526901][T26579] usb 5-1: Invalid ep0 maxpacket: 32 [ 1878.536845][T26579] usb usb5-port1: unable to enumerate USB device [ 1878.547471][ T5288] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1878.717303][T31056] usb 1-1: USB disconnect, device number 126 [ 1878.730148][T31056] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1878.797160][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1878.797175][ T29] audit: type=1326 audit(1781966757.396:24375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1878.861358][ T29] audit: type=1326 audit(1781966757.426:24376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1878.907105][T31056] wwan wwan0: port wwan0mbim0 disconnected [ 1878.909601][ T29] audit: type=1326 audit(1781966757.436:24377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1878.997699][T11256] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1879.031952][ T29] audit: type=1326 audit(1781966757.436:24378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1879.103952][T11274] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1879.103952][T11274] program syz.8.7666 not setting count and/or reply_len properly [ 1879.124691][T11256] netlink: 'syz.8.7666': attribute type 1 has an invalid length. [ 1879.183467][ T29] audit: type=1326 audit(1781966757.436:24379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1879.243667][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.271796][ T29] audit: type=1326 audit(1781966757.436:24380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1879.298691][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.343679][ T29] audit: type=1326 audit(1781966757.436:24381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1879.368941][ T29] audit: type=1326 audit(1781966757.436:24382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.7664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314ff9ce59 code=0x7ffc0000 [ 1879.402812][T26579] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1879.464369][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.474677][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.585237][T26579] usb 3-1: Using ep0 maxpacket: 8 [ 1879.600889][T26579] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 1879.609906][T26579] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 1879.618596][T26579] usb 3-1: config 0 has no interface number 0 [ 1879.625292][T26579] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1879.635932][T26579] usb 3-1: config 0 interface 200 has no altsetting 0 [ 1879.650807][T26579] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1879.660768][T26579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.669954][T26579] usb 3-1: Product: syz [ 1879.674950][T26579] usb 3-1: Manufacturer: syz [ 1879.679573][T26579] usb 3-1: SerialNumber: syz [ 1879.687106][T26579] usb 3-1: config 0 descriptor?? [ 1879.899431][T26579] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input166 [ 1879.947046][T26579] usb 3-1: USB disconnect, device number 26 [ 1880.184887][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7670'. [ 1880.246545][T11324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1880.497759][ T29] audit: type=1800 audit(1781966759.096:24383): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7673" name="SYSV00000000" dev="tmpfs" ino=66 res=0 errno=0 [ 1880.869814][T11420] IPv6: NLM_F_CREATE should be specified when creating new route [ 1880.878219][T11420] netlink: 'syz.2.7677': attribute type 1 has an invalid length. [ 1880.999453][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7678'. [ 1881.030742][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7678'. [ 1881.063164][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7678'. [ 1881.140970][T11446] tipc: Enabled bearer , priority 0 [ 1881.150317][T11446] syzkaller0: entered promiscuous mode [ 1881.167544][T11446] syzkaller0: entered allmulticast mode [ 1881.229560][T11446] tipc: Resetting bearer [ 1881.264916][T11445] tipc: Resetting bearer [ 1881.281845][T11445] tipc: Disabling bearer [ 1881.438328][T11480] netlink: 'syz.4.7685': attribute type 6 has an invalid length. [ 1881.449514][T11480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1881.610989][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.621381][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.801916][T11512] netlink: 'syz.6.7690': attribute type 18 has an invalid length. [ 1881.814347][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7690'. [ 1881.833511][T10920] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.843213][T11512] netlink: 'syz.6.7690': attribute type 18 has an invalid length. [ 1881.853991][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7690'. [ 1881.863906][T10920] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.878948][T15288] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1881.923149][T31054] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1881.933465][T10904] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1882.095864][T31054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.114145][T31054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.137470][T31054] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1882.165865][T31054] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1882.190488][T31054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.227092][T31054] usb 5-1: config 0 descriptor?? [ 1882.299107][T11528] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1882.337383][T11528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.358882][T11528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.463198][T26592] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1882.488182][T11536] overlayfs: missing 'lowerdir' [ 1882.609067][T11539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1882.624915][T26592] usb 1-1: Using ep0 maxpacket: 32 [ 1882.643334][T26592] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1882.651081][T26592] usb 1-1: can't read configurations, error -61 [ 1883.003060][T26592] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1883.031409][T31054] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1883.285431][T11555] netlink: 'syz.8.7696': attribute type 6 has an invalid length. [ 1883.340899][T26592] usb 1-1: Using ep0 maxpacket: 32 [ 1883.404798][T11557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1883.648436][T26592] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1883.668441][T26592] usb 1-1: can't read configurations, error -61 [ 1883.683196][T26592] usb usb1-port1: attempt power cycle [ 1884.153013][T26592] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1884.562980][ T8265] usb 5-1: reset high-speed USB device number 108 using dummy_hcd [ 1884.652986][T26592] usb 1-1: Using ep0 maxpacket: 32 [ 1884.694007][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.063010][ T8265] usb 5-1: device descriptor read/64, error -32 [ 1885.275741][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.470752][T26592] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1885.479272][T26592] usb 1-1: can't read configurations, error -71 [ 1885.513008][ T8265] usb 5-1: reset high-speed USB device number 108 using dummy_hcd [ 1885.565023][T11584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7700'. [ 1885.644202][T11590] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1885.653899][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1885.663098][T11590] netlink: 1532 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1885.673827][T11590] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1885.850918][T11614] netlink: 'syz.0.7702': attribute type 18 has an invalid length. [ 1885.862228][T11614] netlink: 'syz.0.7702': attribute type 18 has an invalid length. [ 1885.956238][T11633] netlink: 'syz.8.7708': attribute type 6 has an invalid length. [ 1885.968535][T11633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1886.025218][T26590] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1886.182846][T26590] usb 3-1: Using ep0 maxpacket: 8 [ 1886.190816][T26590] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1886.200459][T26590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.209253][T26590] usb 3-1: Product: syz [ 1886.213950][T26590] usb 3-1: Manufacturer: syz [ 1886.218560][T26590] usb 3-1: SerialNumber: syz [ 1886.220202][T11652] __nla_validate_parse: 6 callbacks suppressed [ 1886.220218][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7710'. [ 1886.225362][T26590] usb 3-1: config 0 descriptor?? [ 1886.241096][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7710'. [ 1886.313519][T26592] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1886.333392][T26592] usb 1-1: Using ep0 maxpacket: 32 [ 1886.339747][T26592] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1886.349025][T26592] usb 1-1: config 0 has no interface number 0 [ 1886.355564][T26592] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1886.366971][T26592] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1886.377231][ T8265] usb 5-1: device descriptor read/64, error -71 [ 1886.385296][T26592] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1886.394766][T26592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.403468][T26592] usb 1-1: Product: syz [ 1886.407655][T26592] usb 1-1: Manufacturer: syz [ 1886.412264][T26592] usb 1-1: SerialNumber: syz [ 1886.419095][T26592] usb 1-1: config 0 descriptor?? [ 1886.449258][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.458674][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.622986][ T8265] usb 5-1: reset high-speed USB device number 108 using dummy_hcd [ 1886.631377][T26592] radio-si470x 1-1:0.35: this is not a si470x device. [ 1886.644481][ T8265] usb 5-1: device reset changed ep0 maxpacket size! [ 1886.652088][T26597] usb 5-1: USB disconnect, device number 108 [ 1886.668455][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.673731][T26592] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1886.680471][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.691015][T26592] usb 1-1: USB disconnect, device number 4 [ 1886.792988][T26597] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1886.899858][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.914154][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.939717][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.942651][T26597] usb 5-1: Using ep0 maxpacket: 16 [ 1886.950664][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.957390][T26597] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 1886.981489][T26597] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 1887.000151][T26597] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1887.011896][T26597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.020632][T26597] usb 5-1: Product: syz [ 1887.025382][T26597] usb 5-1: Manufacturer: syz [ 1887.030016][T26597] usb 5-1: SerialNumber: syz [ 1887.048113][T26597] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1887.153850][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7715'. [ 1887.181035][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7715'. [ 1887.974554][T11730] netlink: 'syz.8.7719': attribute type 6 has an invalid length. [ 1888.214498][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.227092][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.244586][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.253851][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.573059][ T8265] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 1888.724757][ T8265] usb 1-1: descriptor type invalid, skip [ 1888.730769][ T8265] usb 1-1: descriptor type invalid, skip [ 1888.737680][ T8265] usb 1-1: descriptor type invalid, skip [ 1888.748678][ T8265] usb 1-1: string descriptor 0 read error: -22 [ 1888.755829][ T8265] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1888.765989][ T8265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.796848][T26590] usb write operation failed. (-71) [ 1888.817566][T26590] usb write operation failed. (-71) [ 1888.829610][T26590] usb write operation failed. (-71) [ 1888.837822][T26590] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1888.848269][T26590] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1888.858683][T26590] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1889.044516][T26597] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1889.054279][ T8265] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1889.062091][ T8265] usb 1-1: MIDIStreaming interface descriptor not found [ 1889.076993][T26597] usb 5-1: USB disconnect, device number 109 [ 1889.154638][T29662] udevd[29662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1889.175762][ T8265] usb 1-1: USB disconnect, device number 5 [ 1889.478673][T12092] netlink: 'syz.2.7730': attribute type 6 has an invalid length. [ 1889.569237][ T29] audit: type=1800 audit(1781966768.166:24384): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7732" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1889.618721][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7733'. [ 1889.665290][ T8265] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1889.675683][T12111] kvm: user requested TSC rate below hardware speed [ 1889.690267][T12111] kvm: user requested TSC rate below hardware speed [ 1889.701203][T12111] kvm: user requested TSC rate below hardware speed [ 1889.709262][T12111] kvm: user requested TSC rate below hardware speed [ 1889.726759][T12111] kvm: user requested TSC rate below hardware speed [ 1889.741209][T12111] kvm: user requested TSC rate below hardware speed [ 1889.758949][T12111] kvm: user requested TSC rate below hardware speed [ 1889.766960][T12111] kvm: user requested TSC rate below hardware speed [ 1889.774978][T12111] kvm: user requested TSC rate below hardware speed [ 1889.783573][T12111] kvm: user requested TSC rate below hardware speed [ 1889.845776][ T8265] usb 5-1: Using ep0 maxpacket: 16 [ 1889.853451][ T8265] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1889.863228][ T8265] usb 5-1: config 0 has no interface number 0 [ 1889.869422][ T8265] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1889.880421][ T8265] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1889.906560][ T8265] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1889.919416][ T8265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.936633][ T8265] usb 5-1: Product: syz [ 1889.940900][ T8265] usb 5-1: Manufacturer: syz [ 1889.946713][ T8265] usb 5-1: SerialNumber: syz [ 1889.963130][ T8265] usb 5-1: config 0 descriptor?? [ 1889.982111][T12086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1889.994244][T12086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1890.075005][T12145] netlink: 'syz.6.7741': attribute type 6 has an invalid length. [ 1890.116041][T12147] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007' [ 1890.205925][T12086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1890.214676][T12086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1890.282988][T31054] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1890.424277][ T8265] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1890.443233][T31054] usb 1-1: Using ep0 maxpacket: 8 [ 1890.451791][T31054] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1890.461515][T31054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.470156][T31054] usb 1-1: Product: syz [ 1890.475039][T31054] usb 1-1: Manufacturer: syz [ 1890.479694][T31054] usb 1-1: SerialNumber: syz [ 1890.689661][T12140] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1890.701862][T32090] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1890.713303][T12140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.724816][T12140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.824785][ T8265] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1890.836146][ T8265] asix 5-1:0.34: probe with driver asix failed with error -32 [ 1890.905001][ T8265] usb 5-1: USB disconnect, device number 110 [ 1890.928007][T31054] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1890.951973][T31054] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1890.968734][T31054] usb 1-1: USB disconnect, device number 6 [ 1890.996293][T29662] udevd[29662]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1891.244605][T12190] tipc: New replicast peer: 172.30.0.9 [ 1891.250248][T12190] tipc: Enabled bearer , priority 10 [ 1891.258816][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7743'. [ 1891.268228][T12190] tipc: Disabling bearer [ 1891.276535][T12190] fuse: Bad value for 'group_id' [ 1891.281503][T12190] fuse: Bad value for 'group_id' [ 1891.507685][ T29] audit: type=1800 audit(1781966770.106:24385): pid=12242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7745" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1891.550165][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7747'. [ 1891.559692][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7747'. [ 1891.758001][T12245] veth1_vlan: left allmulticast mode [ 1891.789911][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.802245][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7747'. [ 1891.814773][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7747'. [ 1891.824408][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.852028][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.874006][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.895124][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.906694][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.934701][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.944650][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.100190][T12292] netlink: 'syz.4.7752': attribute type 6 has an invalid length. [ 1892.140767][T12296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1892.240882][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7755'. [ 1892.313752][T26597] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1892.453916][ T29] audit: type=1800 audit(1781966771.056:24386): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7757" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1892.474498][T26597] usb 1-1: Using ep0 maxpacket: 8 [ 1892.493768][T26597] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1892.503629][T26597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.511992][T26597] usb 1-1: Product: syz [ 1892.517460][T26597] usb 1-1: Manufacturer: syz [ 1892.529684][T26597] usb 1-1: SerialNumber: syz [ 1892.537887][T26597] usb 1-1: config 0 descriptor?? [ 1892.554107][T26597] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1892.562151][T26597] pctv452e: pctv452e_power_ctrl: 1 [ 1892.562151][T26597] [ 1892.570394][T26597] usb 1-1: selecting invalid altsetting 3 [ 1892.587307][T26597] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1892.587307][T26597] [ 1892.601374][T26597] dvb-usb: bulk message failed: -22 (5/0) [ 1892.628019][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.630113][T26597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1892.640147][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.655342][T26597] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1892.655386][T26597] usb 1-1: media controller created [ 1892.655500][T26597] dvb-usb: bulk message failed: -22 (8/0) [ 1892.655516][T26597] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1892.655673][T26597] dvb-usb: MAC address reading failed. [ 1892.665377][T26597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1892.670848][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.708576][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.711895][T26597] DVB: Unable to find symbol stb0899_attach() [ 1892.726411][T26597] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1892.778145][T12284] dvb-usb: bulk message failed: -22 (7/0) [ 1892.786229][T12284] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1892.803957][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1892.803971][T26597] rc_core: IR keymap rc-tt-1500 not found [ 1892.803983][T26597] Registered IR keymap rc-empty [ 1892.813014][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1892.817758][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1892.828902][T26597] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1892.835821][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1892.856046][T26597] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input167 [ 1892.880155][T26597] dvb-usb: schedule remote query interval to 100 msecs. [ 1892.917712][T26597] pctv452e: pctv452e_power_ctrl: 0 [ 1892.917712][T26597] [ 1892.926559][T26597] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1893.023093][T26597] dvb-usb: bulk message failed: -22 (4/0) [ 1893.031996][T26597] dvb-usb: error -22 while querying for an remote control event. [ 1893.084110][T12364] netlink: 'syz.2.7763': attribute type 6 has an invalid length. [ 1893.163153][T26597] dvb-usb: bulk message failed: -22 (4/0) [ 1893.169042][T26597] dvb-usb: error -22 while querying for an remote control event. [ 1893.179666][T26581] usb 1-1: USB disconnect, device number 7 [ 1893.241251][T26581] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1893.260282][T12388] netlink: 'syz.2.7766': attribute type 1 has an invalid length. [ 1893.304650][T12388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1893.315250][T12388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1893.336730][T12388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1893.365546][T12430] input: syz0 as /devices/virtual/input/input168 [ 1893.376773][T12388] bond2: (slave batadv_slave_1): making interface the new active one [ 1893.398436][T12388] bond2: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 1893.470429][T12435] sg_write: data in/out 211/120 bytes for SCSI command 0x0-- guessing data in; [ 1893.470429][T12435] program syz.8.7767 not setting count and/or reply_len properly [ 1893.513695][ T29] audit: type=1800 audit(1781966772.116:24387): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7768" name="SYSV00000000" dev="tmpfs" ino=67 res=0 errno=0 [ 1894.005010][T12466] netlink: 'syz.6.7774': attribute type 6 has an invalid length. [ 1894.253025][T26581] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1894.268551][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.277966][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.289245][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.298350][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.424547][T26581] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1894.434625][T26581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.444931][T26581] usb 1-1: config 0 descriptor?? [ 1894.454414][T26581] cp210x 1-1:0.0: cp210x converter detected [ 1894.753261][ T29] audit: type=1800 audit(1781966773.356:24388): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7772" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1894.855451][T26581] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1894.877807][T26581] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1894.963622][ T29] audit: type=1800 audit(1781966773.566:24389): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7780" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1895.079444][T26597] usb 1-1: USB disconnect, device number 8 [ 1895.086717][T26597] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1895.143977][T26597] cp210x 1-1:0.0: device disconnected [ 1895.184125][T26581] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1895.266839][T12555] netlink: 'syz.8.7785': attribute type 6 has an invalid length. [ 1895.271778][T12556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1895.317375][T12564] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1895.352997][T26581] usb 5-1: Using ep0 maxpacket: 8 [ 1895.359634][T26581] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1895.368257][T26581] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1895.378831][T26581] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1895.389006][T26581] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1895.400614][T26581] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1895.414076][T26581] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1895.423562][T26581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.602839][T26597] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1895.732921][T26597] usb 1-1: device descriptor read/64, error -71 [ 1895.972842][T26597] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1896.102637][T26597] usb 1-1: device descriptor read/64, error -71 [ 1896.180256][T26581] usb 5-1: usb_control_msg returned -71 [ 1896.200291][T26581] usbtmc 5-1:16.0: can't read capabilities [ 1896.213684][T26597] usb usb1-port1: attempt power cycle [ 1896.232289][T26581] usb 5-1: USB disconnect, device number 111 [ 1896.553011][T26597] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1896.581960][T12600] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1896.588483][T12600] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1896.599997][T12600] vhci_hcd vhci_hcd.0: Device attached [ 1896.614446][T12600] netlink: 'syz.4.7789': attribute type 1 has an invalid length. [ 1896.622940][T12600] netlink: 'syz.4.7789': attribute type 2 has an invalid length. [ 1896.631202][T26597] usb 1-1: device descriptor read/8, error -71 [ 1896.649335][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.676763][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.701756][T32090] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1896.872594][T26597] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1896.882735][T26581] usb 42-1: SetAddress Request (6) to port 0 [ 1896.894718][T26581] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1896.909273][T12602] vhci_hcd: connection closed [ 1896.909454][T10925] vhci_hcd vhci_hcd.4: stop threads [ 1896.921763][T10925] vhci_hcd vhci_hcd.4: release socket [ 1896.930757][T10925] vhci_hcd vhci_hcd.4: disconnect device [ 1896.946103][T26597] usb 1-1: device descriptor read/8, error -71 [ 1897.065386][T26597] usb usb1-port1: unable to enumerate USB device [ 1897.299203][T12657] netlink: 'syz.6.7800': attribute type 1 has an invalid length. [ 1897.346173][T12655] __nla_validate_parse: 8 callbacks suppressed [ 1897.346184][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7799'. [ 1897.365997][T12657] bond3: entered promiscuous mode [ 1897.372015][T12657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1897.409722][T12689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1897.437096][T12689] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 1897.462222][T12689] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1897.489881][T12689] bond3: (slave gre2): Opening slave failed [ 1897.606805][T12701] fuse: Unknown parameter 'fd' [ 1897.618983][T12701] loop3: detected capacity change from 0 to 7 [ 1897.627522][T12701] Dev loop3: unable to read RDB block 7 [ 1897.644109][T12701] loop3: AHDI p3 p4 [ 1897.651767][T12701] loop3: partition table partially beyond EOD, truncated [ 1897.661284][T12701] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1897.859812][T12731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.886953][T12731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.900293][T12731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7808'. [ 1897.916110][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7808'. [ 1898.113142][T12256] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1898.274922][T12256] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 1898.286153][T12256] usb 5-1: config 255 has no interface number 0 [ 1898.296594][T12256] usb 5-1: config 255 interface 97 has no altsetting 0 [ 1898.314703][T12256] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1898.324785][T12256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.335653][T12256] usb 5-1: Product: syz [ 1898.340398][T12256] usb 5-1: Manufacturer: syz [ 1898.347964][T12256] usb 5-1: SerialNumber: syz [ 1898.488992][T12763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.505445][T12763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.583328][T12256] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 1898.599917][T12256] usb 5-1: USB disconnect, device number 112 [ 1898.851903][T12797] netlink: 'syz.6.7816': attribute type 4 has an invalid length. [ 1898.860533][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7816'. [ 1899.079760][T12839] FAULT_INJECTION: forcing a failure. [ 1899.079760][T12839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.103142][T12839] CPU: 0 UID: 0 PID: 12839 Comm: syz.8.7817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1899.103170][T12839] Tainted: [L]=SOFTLOCKUP [ 1899.103177][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1899.103188][T12839] Call Trace: [ 1899.103196][T12839] [ 1899.103203][T12839] dump_stack_lvl+0xe8/0x150 [ 1899.103228][T12839] should_fail_ex+0x40c/0x560 [ 1899.103249][T12839] _copy_to_user+0x31/0xb0 [ 1899.103272][T12839] simple_read_from_buffer+0xe1/0x170 [ 1899.103299][T12839] proc_fail_nth_read+0x1bb/0x230 [ 1899.103325][T12839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1899.103350][T12839] ? rw_verify_area+0x24a/0x4c0 [ 1899.103369][T12839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1899.103393][T12839] vfs_read+0x213/0xa80 [ 1899.103412][T12839] ? __pfx___mutex_lock+0x10/0x10 [ 1899.103429][T12839] ? __pfx_vfs_read+0x10/0x10 [ 1899.103450][T12839] ? __fget_files+0x3a2/0x420 [ 1899.103472][T12839] ? __fget_files+0x2a/0x420 [ 1899.103498][T12839] ksys_read+0x150/0x270 [ 1899.103516][T12839] ? __pfx_ksys_read+0x10/0x10 [ 1899.103532][T12839] ? __se_sys_kcmp+0x53b/0x8f0 [ 1899.103553][T12839] ? rcu_is_watching+0x15/0xb0 [ 1899.103572][T12839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.103591][T12839] do_syscall_64+0x174/0x580 [ 1899.103607][T12839] ? trace_irq_disable+0x3b/0x140 [ 1899.103630][T12839] ? clear_bhb_loop+0x40/0x90 [ 1899.103649][T12839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.103665][T12839] RIP: 0033:0x7f314ff5d68e [ 1899.103682][T12839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1899.103697][T12839] RSP: 002b:00007f3150d8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1899.103717][T12839] RAX: ffffffffffffffda RBX: 00007f3150d8b6c0 RCX: 00007f314ff5d68e [ 1899.103730][T12839] RDX: 000000000000000f RSI: 00007f3150d8b0a0 RDI: 0000000000000003 [ 1899.103742][T12839] RBP: 00007f3150d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.103754][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1899.103765][T12839] R13: 00007f3150216038 R14: 00007f3150215fa0 R15: 00007f315033fa48 [ 1899.103784][T12839] [ 1899.669867][T12854] team0: entered allmulticast mode [ 1899.677606][T12854] team_slave_0: entered allmulticast mode [ 1899.684747][T12854] team_slave_1: entered allmulticast mode [ 1899.699955][T12854] team0: left allmulticast mode [ 1899.705364][T12854] team_slave_0: left allmulticast mode [ 1899.710900][T12854] team_slave_1: left allmulticast mode [ 1899.719133][T12854] team0: entered allmulticast mode [ 1899.725080][T12854] team_slave_0: entered allmulticast mode [ 1899.735111][T12854] team_slave_1: entered allmulticast mode [ 1899.778132][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.788583][T12861] binder: 12855:12861 ioctl c0306201 200000000000 returned -14 [ 1899.790028][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.888487][T12869] netlink: 'syz.0.7823': attribute type 1 has an invalid length. [ 1899.915638][T12869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1899.938099][T12869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1899.947419][T12869] bond6: (slave batadv1): making interface the new active one [ 1899.958334][T12869] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1899.981817][T12869] bond6 (unregistering): (slave batadv1): Releasing active interface [ 1899.991706][T12869] bond6 (unregistering): Released all slaves [ 1900.136743][T12946] netlink: 'syz.0.7825': attribute type 10 has an invalid length. [ 1900.145069][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7825'. [ 1900.156482][T12946] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1900.563131][T12256] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1900.647450][T13001] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7833'. [ 1900.743010][T12256] usb 1-1: Using ep0 maxpacket: 8 [ 1900.751329][T12256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1900.763539][T12256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1900.774933][T12256] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1900.786003][T12256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1900.800288][T12256] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1900.811344][T12256] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1900.821471][T12256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.834714][T12256] usb 1-1: config 0 descriptor?? [ 1900.845947][T12956] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1900.962525][T12257] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1901.115466][T12257] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1901.125048][T12257] usb 5-1: config 0 has no interface number 0 [ 1901.131432][T12257] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.144330][T12257] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.181271][T12257] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1901.209000][T12257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.225376][T12257] usb 5-1: config 0 descriptor?? [ 1901.246458][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.257965][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.453855][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.470016][T13043] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7838'. [ 1901.476169][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.658540][T12257] prodikeys 0003:041E:2801.0082: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 1901.721951][T12257] hid_prodikeys: hid-prodikeys: failed to find output report [ 1901.721951][T12257] [ 1901.748016][T13053] ================================================================== [ 1901.756114][T13053] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 1901.764369][T13053] Read of size 7 at addr ffff8880344e9980 by task fido_id/13053 [ 1901.771999][T13053] [ 1901.774329][T13053] CPU: 0 UID: 0 PID: 13053 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.774357][T13053] Tainted: [L]=SOFTLOCKUP [ 1901.774364][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1901.774375][T13053] Call Trace: [ 1901.774383][T13053] [ 1901.774392][T13053] dump_stack_lvl+0xe8/0x150 [ 1901.774413][T13053] print_address_description+0x55/0x1e0 [ 1901.774425][T13053] ? report_descriptor_read+0xb5/0x100 [ 1901.774437][T13053] print_report+0x58/0x70 [ 1901.774446][T13053] kasan_report+0x117/0x150 [ 1901.774463][T13053] ? sysfs_file_kobj+0x1a/0x230 [ 1901.774487][T13053] ? report_descriptor_read+0xb5/0x100 [ 1901.774508][T13053] kasan_check_range+0x264/0x2c0 [ 1901.774527][T13053] ? report_descriptor_read+0xb5/0x100 [ 1901.774546][T13053] __asan_memcpy+0x29/0x70 [ 1901.774569][T13053] report_descriptor_read+0xb5/0x100 [ 1901.774585][T13053] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1901.774598][T13053] kernfs_fop_read_iter+0x434/0x6a0 [ 1901.774611][T13053] vfs_read+0x595/0xa80 [ 1901.774627][T13053] ? __pfx_vfs_read+0x10/0x10 [ 1901.774645][T13053] ? do_sys_openat2+0x14e/0x200 [ 1901.774668][T13053] ? kmem_cache_free+0x182/0x650 [ 1901.774692][T13053] ? fd_install+0x94/0x3d0 [ 1901.774721][T13053] ksys_read+0x150/0x270 [ 1901.774739][T13053] ? __pfx_ksys_read+0x10/0x10 [ 1901.774756][T13053] ? rcu_is_watching+0x15/0xb0 [ 1901.774768][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.774779][T13053] do_syscall_64+0x174/0x580 [ 1901.774788][T13053] ? trace_irq_disable+0x3b/0x140 [ 1901.774811][T13053] ? clear_bhb_loop+0x40/0x90 [ 1901.774831][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.774849][T13053] RIP: 0033:0x7fb2f2ca7407 [ 1901.774867][T13053] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1901.774882][T13053] RSP: 002b:00007ffe71711a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1901.774902][T13053] RAX: ffffffffffffffda RBX: 00007fb2f33e8880 RCX: 00007fb2f2ca7407 [ 1901.774916][T13053] RDX: 0000000000001000 RSI: 00007ffe71711ad0 RDI: 0000000000000004 [ 1901.774925][T13053] RBP: 0000555be77c8730 R08: 0000000000000000 R09: 0000000000000000 [ 1901.774931][T13053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555be77c7930 [ 1901.774938][T13053] R13: 00007ffe71711ad0 R14: 0000000000000004 R15: 0000555bbdd454d8 [ 1901.774948][T13053] [ 1901.774952][T13053] [ 1902.011428][T13053] Allocated by task 12257: [ 1902.015836][T13053] kasan_save_track+0x3e/0x80 [ 1902.020513][T13053] __kasan_kmalloc+0x93/0xb0 [ 1902.025087][T13053] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1902.031495][T13053] kmemdup_noprof+0x2b/0x70 [ 1902.035986][T13053] hid_open_report+0x1fa/0xf00 [ 1902.040748][T13053] pk_probe+0x1c6/0xf70 [ 1902.044900][T13053] hid_device_probe+0x42c/0x7c0 [ 1902.049741][T13053] really_probe+0x254/0xae0 [ 1902.054343][T13053] __driver_probe_device+0x1e8/0x360 [ 1902.059612][T13053] driver_probe_device+0x4f/0x240 [ 1902.064622][T13053] __device_attach_driver+0x270/0x410 [ 1902.069992][T13053] bus_for_each_drv+0x258/0x2f0 [ 1902.074837][T13053] __device_attach+0x2c4/0x450 [ 1902.079598][T13053] device_initial_probe+0xa1/0xd0 [ 1902.084616][T13053] bus_probe_device+0x12a/0x220 [ 1902.089456][T13053] device_add+0x7d7/0xb80 [ 1902.093774][T13053] hid_add_device+0x272/0x3e0 [ 1902.098441][T13053] usbhid_probe+0x9d4/0xde0 [ 1902.102937][T13053] usb_probe_interface+0x653/0xc60 [ 1902.108137][T13053] really_probe+0x254/0xae0 [ 1902.112630][T13053] __driver_probe_device+0x1e8/0x360 [ 1902.117898][T13053] driver_probe_device+0x4f/0x240 [ 1902.122914][T13053] __device_attach_driver+0x270/0x410 [ 1902.128270][T13053] bus_for_each_drv+0x258/0x2f0 [ 1902.133114][T13053] __device_attach+0x2c4/0x450 [ 1902.137859][T13053] device_initial_probe+0xa1/0xd0 [ 1902.142868][T13053] bus_probe_device+0x12a/0x220 [ 1902.147722][T13053] device_add+0x7d7/0xb80 [ 1902.152032][T13053] usb_set_configuration+0x1ad8/0x2180 [ 1902.157480][T13053] usb_generic_driver_probe+0x8d/0x150 [ 1902.163018][T13053] usb_probe_device+0x1c3/0x3b0 [ 1902.167865][T13053] really_probe+0x254/0xae0 [ 1902.172356][T13053] __driver_probe_device+0x1e8/0x360 [ 1902.177628][T13053] driver_probe_device+0x4f/0x240 [ 1902.182646][T13053] __device_attach_driver+0x270/0x410 [ 1902.188005][T13053] bus_for_each_drv+0x258/0x2f0 [ 1902.192846][T13053] __device_attach+0x2c4/0x450 [ 1902.197606][T13053] device_initial_probe+0xa1/0xd0 [ 1902.202621][T13053] bus_probe_device+0x12a/0x220 [ 1902.207458][T13053] device_add+0x7d7/0xb80 [ 1902.211791][T13053] usb_new_device+0x99d/0x1620 [ 1902.216590][T13053] hub_event+0x28e8/0x4d30 [ 1902.221019][T13053] process_scheduled_works+0xa8e/0x14e0 [ 1902.226572][T13053] worker_thread+0xa47/0xfb0 [ 1902.231161][T13053] kthread+0x388/0x470 [ 1902.235230][T13053] ret_from_fork+0x514/0xb70 [ 1902.239811][T13053] ret_from_fork_asm+0x1a/0x30 [ 1902.244569][T13053] [ 1902.246878][T13053] Freed by task 12257: [ 1902.250926][T13053] kasan_save_track+0x3e/0x80 [ 1902.255597][T13053] kasan_save_free_info+0x40/0x50 [ 1902.260630][T13053] __kasan_slab_free+0x5c/0x80 [ 1902.265382][T13053] kfree+0x1c5/0x640 [ 1902.269266][T13053] hid_close_report+0x632/0x720 [ 1902.274107][T13053] hid_device_probe+0x67b/0x7c0 [ 1902.278949][T13053] really_probe+0x254/0xae0 [ 1902.283434][T13053] __driver_probe_device+0x1e8/0x360 [ 1902.288703][T13053] driver_probe_device+0x4f/0x240 [ 1902.293713][T13053] __device_attach_driver+0x270/0x410 [ 1902.299075][T13053] bus_for_each_drv+0x258/0x2f0 [ 1902.303926][T13053] __device_attach+0x2c4/0x450 [ 1902.308685][T13053] device_initial_probe+0xa1/0xd0 [ 1902.313695][T13053] bus_probe_device+0x12a/0x220 [ 1902.318533][T13053] device_add+0x7d7/0xb80 [ 1902.322844][T13053] hid_add_device+0x272/0x3e0 [ 1902.327507][T13053] usbhid_probe+0x9d4/0xde0 [ 1902.332012][T13053] usb_probe_interface+0x653/0xc60 [ 1902.337120][T13053] really_probe+0x254/0xae0 [ 1902.341610][T13053] __driver_probe_device+0x1e8/0x360 [ 1902.346881][T13053] driver_probe_device+0x4f/0x240 [ 1902.351895][T13053] __device_attach_driver+0x270/0x410 [ 1902.357259][T13053] bus_for_each_drv+0x258/0x2f0 [ 1902.362110][T13053] __device_attach+0x2c4/0x450 [ 1902.366879][T13053] device_initial_probe+0xa1/0xd0 [ 1902.371902][T13053] bus_probe_device+0x12a/0x220 [ 1902.376747][T13053] device_add+0x7d7/0xb80 [ 1902.381062][T13053] usb_set_configuration+0x1ad8/0x2180 [ 1902.386510][T13053] usb_generic_driver_probe+0x8d/0x150 [ 1902.391966][T13053] usb_probe_device+0x1c3/0x3b0 [ 1902.396806][T13053] really_probe+0x254/0xae0 [ 1902.401298][T13053] __driver_probe_device+0x1e8/0x360 [ 1902.406568][T13053] driver_probe_device+0x4f/0x240 [ 1902.411581][T13053] __device_attach_driver+0x270/0x410 [ 1902.416939][T13053] bus_for_each_drv+0x258/0x2f0 [ 1902.421776][T13053] __device_attach+0x2c4/0x450 [ 1902.426527][T13053] device_initial_probe+0xa1/0xd0 [ 1902.431538][T13053] bus_probe_device+0x12a/0x220 [ 1902.436386][T13053] device_add+0x7d7/0xb80 [ 1902.440705][T13053] usb_new_device+0x99d/0x1620 [ 1902.445454][T13053] hub_event+0x28e8/0x4d30 [ 1902.449875][T13053] process_scheduled_works+0xa8e/0x14e0 [ 1902.455410][T13053] worker_thread+0xa47/0xfb0 [ 1902.459987][T13053] kthread+0x388/0x470 [ 1902.464059][T13053] ret_from_fork+0x514/0xb70 [ 1902.468634][T13053] ret_from_fork_asm+0x1a/0x30 [ 1902.473397][T13053] [ 1902.475707][T13053] The buggy address belongs to the object at ffff8880344e9980 [ 1902.475707][T13053] which belongs to the cache kmalloc-8 of size 8 [ 1902.489399][T13053] The buggy address is located 0 bytes inside of [ 1902.489399][T13053] freed 8-byte region [ffff8880344e9980, ffff8880344e9988) [ 1902.502837][T13053] [ 1902.505160][T13053] The buggy address belongs to the physical page: [ 1902.511560][T13053] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880344e9de0 pfn:0x344e9 [ 1902.521629][T13053] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1902.529680][T13053] page_type: f5(slab) [ 1902.533649][T13053] raw: 00fff00000000200 ffff88813fe24500 ffff88813fe1f348 ffffea00007ca210 [ 1902.542224][T13053] raw: ffff8880344e9de0 0000000800800068 00000000f5000000 0000000000000000 [ 1902.550796][T13053] page dumped because: kasan: bad access detected [ 1902.557207][T13053] page_owner tracks the page as allocated [ 1902.562907][T13053] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5908, tgid 5907 (syz.3.54), ts 64422320908, free_ts 64393074003 [ 1902.583297][T13053] post_alloc_hook+0x1f9/0x250 [ 1902.588062][T13053] get_page_from_freelist+0x21fa/0x2270 [ 1902.593605][T13053] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1902.599408][T13053] allocate_slab+0x74/0x5d0 [ 1902.603902][T13053] refill_objects+0x328/0x3c0 [ 1902.608566][T13053] __pcs_replace_empty_main+0x2e0/0x6b0 [ 1902.614112][T13053] __kmalloc_node_track_caller_noprof+0x565/0x7b0 [ 1902.620528][T13053] kstrdup+0x42/0x100 [ 1902.624496][T13053] __kernfs_new_node+0xa9/0x980 [ 1902.629344][T13053] kernfs_create_dir_ns+0xfe/0x230 [ 1902.634437][T13053] sysfs_create_dir_ns+0x12f/0x2a0 [ 1902.639537][T13053] kobject_add_internal+0x622/0xcd0 [ 1902.644723][T13053] kobject_init_and_add+0x12b/0x1a0 [ 1902.649907][T13053] net_rx_queue_update_kobjects+0x247/0x780 [ 1902.655790][T13053] netdev_register_kobject+0x21f/0x310 [ 1902.661243][T13053] register_netdevice+0x1433/0x1eb0 [ 1902.666436][T13053] page last free pid 23 tgid 23 stack trace: [ 1902.672393][T13053] __free_frozen_pages+0xc1f/0xd10 [ 1902.677511][T13053] tlb_remove_table_rcu+0x85/0x100 [ 1902.682617][T13053] rcu_core+0x78b/0x10a0 [ 1902.686845][T13053] handle_softirqs+0x225/0x840 [ 1902.691597][T13053] run_ksoftirqd+0x36/0x60 [ 1902.696005][T13053] smpboot_thread_fn+0x57c/0xa80 [ 1902.700944][T13053] kthread+0x388/0x470 [ 1902.704993][T13053] ret_from_fork+0x514/0xb70 [ 1902.709571][T13053] ret_from_fork_asm+0x1a/0x30 [ 1902.714330][T13053] [ 1902.716636][T13053] Memory state around the buggy address: [ 1902.722254][T13053] ffff8880344e9880: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc [ 1902.730302][T13053] ffff8880344e9900: 00 fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 1902.738347][T13053] >ffff8880344e9980: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 1902.746390][T13053] ^ [ 1902.750440][T13053] ffff8880344e9a00: fa fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 1902.758515][T13053] ffff8880344e9a80: 05 fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 1902.766559][T13053] ================================================================== [ 1902.791466][T26581] usb 42-1: device descriptor read/8, error -110 [ 1902.810699][T13053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1902.817925][T13053] CPU: 1 UID: 0 PID: 13053 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1902.828613][T13053] Tainted: [L]=SOFTLOCKUP [ 1902.832925][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1902.842966][T13053] Call Trace: [ 1902.847013][T13053] [ 1902.849929][T13053] vpanic+0x56c/0xa60 [ 1902.853905][T13053] ? __pfx_vpanic+0x10/0x10 [ 1902.858392][T13053] ? __pfx___schedule+0x10/0x10 [ 1902.863239][T13053] panic+0xc5/0xd0 [ 1902.866946][T13053] ? __pfx_panic+0x10/0x10 [ 1902.871349][T13053] ? preempt_schedule_common+0x82/0xd0 [ 1902.876797][T13053] ? report_descriptor_read+0xb5/0x100 [ 1902.882241][T13053] check_panic_on_warn+0x89/0xb0 [ 1902.887165][T13053] ? report_descriptor_read+0xb5/0x100 [ 1902.892704][T13053] end_report+0x73/0x170 [ 1902.896941][T13053] ? report_descriptor_read+0xb5/0x100 [ 1902.902389][T13053] kasan_report+0x128/0x150 [ 1902.906901][T13053] ? sysfs_file_kobj+0x1a/0x230 [ 1902.911738][T13053] ? report_descriptor_read+0xb5/0x100 [ 1902.917181][T13053] kasan_check_range+0x264/0x2c0 [ 1902.922103][T13053] ? report_descriptor_read+0xb5/0x100 [ 1902.927544][T13053] __asan_memcpy+0x29/0x70 [ 1902.931947][T13053] report_descriptor_read+0xb5/0x100 [ 1902.937222][T13053] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1902.942673][T13053] kernfs_fop_read_iter+0x434/0x6a0 [ 1902.947868][T13053] vfs_read+0x595/0xa80 [ 1902.952013][T13053] ? __pfx_vfs_read+0x10/0x10 [ 1902.956674][T13053] ? do_sys_openat2+0x14e/0x200 [ 1902.961512][T13053] ? kmem_cache_free+0x182/0x650 [ 1902.966444][T13053] ? fd_install+0x94/0x3d0 [ 1902.970854][T13053] ksys_read+0x150/0x270 [ 1902.975171][T13053] ? __pfx_ksys_read+0x10/0x10 [ 1902.979920][T13053] ? rcu_is_watching+0x15/0xb0 [ 1902.984672][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.990727][T13053] do_syscall_64+0x174/0x580 [ 1902.995305][T13053] ? trace_irq_disable+0x3b/0x140 [ 1903.000318][T13053] ? clear_bhb_loop+0x40/0x90 [ 1903.004979][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.010892][T13053] RIP: 0033:0x7fb2f2ca7407 [ 1903.015295][T13053] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1903.034889][T13053] RSP: 002b:00007ffe71711a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1903.043290][T13053] RAX: ffffffffffffffda RBX: 00007fb2f33e8880 RCX: 00007fb2f2ca7407 [ 1903.051248][T13053] RDX: 0000000000001000 RSI: 00007ffe71711ad0 RDI: 0000000000000004 [ 1903.059201][T13053] RBP: 0000555be77c8730 R08: 0000000000000000 R09: 0000000000000000 [ 1903.067159][T13053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555be77c7930 [ 1903.075116][T13053] R13: 00007ffe71711ad0 R14: 0000000000000004 R15: 0000555bbdd454d8 [ 1903.083078][T13053] [ 1903.086343][T13053] Kernel Offset: disabled [ 1903.090683][T13053] Rebooting in 86400 seconds..