last executing test programs: 2m2.656546749s ago: executing program 0 (id=2040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x17, 0x3, "91abc12404cf378042f26c43f91f68d8a90767"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x94}}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) 1m57.721530308s ago: executing program 0 (id=2049): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000000001e340165e000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40c0}}], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x985, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff7ffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x14000]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x100002, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x2) 1m55.829820783s ago: executing program 0 (id=2052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000080)={0x20, 0x8, 0xd0, {0xd0, 0xf, "168133f9b99327e2ce7b99bb6facbdcb3c2f290634c40a0cadd67afa1369904c715705b8b92f9a16b94108b07da7288f435125917029a0c471581793e750bd0be4c22a03d0a7b1712aa90483f6f3a7380ec48249a5f65e6401fcd8cfe49727b4c40cc82157145dfaaab8bdf1248630a672e32e28b266ae50758b1d72ea145dadbec1843f468f541812daff511748f918f460fe9d171d277532fa11a76b9ce4ae2fdf34f2b8e748d68f875a0d5bf06b8d641bf17f57db8042d3160d68f048706561743863ec4ee8e1aa6fd3fc56c2"}}, &(0x7f0000000300)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "f58024ae42524ad3e58211e59be0e27bc78b39b6cffe13686a76fe0d3891874a7fc6d4f62f0ba7e0c8ec2931ced7274d431a9932eb9f0d4e8462a60987d495683d157db9591c6f2ed4e40a64ac9c78d3ecd1e33c15eb407b6e6ad32abbcad6c1dd2764978516919f685511833cbc25b510c5ff556cdf9909e36abfbf77fa47c5dcfbaa706ae6f63caa179462a83c10a06f868e45746983b1f17f91074dc33d0b61014e1c46ec79f9815e87dd910624527e1c4b16a8d86ab7d7d46d15a53966d1e7"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0xd7, "d8f1404fc363e3661a5f530f43ae6a456fbed2c09aaf3759cce1ea203efccf82ce2bc500574b27799d8089637fa104e7750e139275fc410b9423df68055c45ee3e377b752ce611608629cb9fad6d7a319050c12bfb9f0d07a527b7c42d443aee6b1b8fa8079574a92f89ec4cea32bf515b436a582d3250aedf33537287ce8f980790eb30511f8969d5a866204a22de4c9817d4379c3477630e00cf3bc000da9e5abece0e3e52ef47759a664f31dcf9d00a9b5b5342b14dedb4048210f1d6d6f82d417f70228d3fe580b1ab57d5609fd76517d533909bf2"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0x0, 0xb, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x9, 0xd}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m53.151229436s ago: executing program 4 (id=2057): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) 1m52.259883605s ago: executing program 0 (id=2058): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x1, 0x55, &(0x7f0000001a40)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902430001010360050904000803020600450524060000052400ffff0d240f0109000000051e020010042413090424130409058202400006068e09050302000200080e"], &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) memfd_create(0x0, 0x4) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000780090001006c617374000000001800028008000140"], 0xe8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x3c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x0) 1m52.046402138s ago: executing program 4 (id=2059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x17, 0x3, "91abc12404cf378042f26c43f91f68d8a90767"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x94}}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) 1m48.993309543s ago: executing program 0 (id=2064): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_clone3(&(0x7f0000000300)={0x800000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3e}, &(0x7f0000000100)=""/123, 0x7b, &(0x7f0000000200)=""/142, 0x0}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0x20}], 0x1, 0x64, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1m48.943736462s ago: executing program 4 (id=2065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) 1m47.232577647s ago: executing program 0 (id=2068): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000080)={0x20, 0x8, 0xd0, {0xd0, 0xf, "168133f9b99327e2ce7b99bb6facbdcb3c2f290634c40a0cadd67afa1369904c715705b8b92f9a16b94108b07da7288f435125917029a0c471581793e750bd0be4c22a03d0a7b1712aa90483f6f3a7380ec48249a5f65e6401fcd8cfe49727b4c40cc82157145dfaaab8bdf1248630a672e32e28b266ae50758b1d72ea145dadbec1843f468f541812daff511748f918f460fe9d171d277532fa11a76b9ce4ae2fdf34f2b8e748d68f875a0d5bf06b8d641bf17f57db8042d3160d68f048706561743863ec4ee8e1aa6fd3fc56c2"}}, &(0x7f0000000300)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "f58024ae42524ad3e58211e59be0e27bc78b39b6cffe13686a76fe0d3891874a7fc6d4f62f0ba7e0c8ec2931ced7274d431a9932eb9f0d4e8462a60987d495683d157db9591c6f2ed4e40a64ac9c78d3ecd1e33c15eb407b6e6ad32abbcad6c1dd2764978516919f685511833cbc25b510c5ff556cdf9909e36abfbf77fa47c5dcfbaa706ae6f63caa179462a83c10a06f868e45746983b1f17f91074dc33d0b61014e1c46ec79f9815e87dd910624527e1c4b16a8d86ab7d7d46d15a53966d1e7"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0xd7, "d8f1404fc363e3661a5f530f43ae6a456fbed2c09aaf3759cce1ea203efccf82ce2bc500574b27799d8089637fa104e7750e139275fc410b9423df68055c45ee3e377b752ce611608629cb9fad6d7a319050c12bfb9f0d07a527b7c42d443aee6b1b8fa8079574a92f89ec4cea32bf515b436a582d3250aedf33537287ce8f980790eb30511f8969d5a866204a22de4c9817d4379c3477630e00cf3bc000da9e5abece0e3e52ef47759a664f31dcf9d00a9b5b5342b14dedb4048210f1d6d6f82d417f70228d3fe580b1ab57d5609fd76517d533909bf2"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0x0, 0xb, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x9, 0xd}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m45.005276396s ago: executing program 4 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x16202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x88000000000003c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x101, 0xfffffe0000000001, 0xfa11, 0x800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) select(0x40, &(0x7f00000000c0)={0xc, 0x40, 0x800000000010001, 0x100000000, 0x0, 0x80000d, 0x6, 0x6a}, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1, 0x8}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000040000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1m41.385243507s ago: executing program 4 (id=2078): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_clone3(&(0x7f0000000300)={0x800000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3e}, &(0x7f0000000100)=""/123, 0x7b, &(0x7f0000000200)=""/142, 0x0}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0x20}], 0x1, 0x64, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1m40.638033057s ago: executing program 4 (id=2079): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x10, 0x4, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @nested={0x4, 0xd}, @nested={0xc, 0x61, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x7b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x28}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, 0x0, 0x0) semop(r2, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1m40.107512708s ago: executing program 3 (id=2081): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000000001e340165e000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40c0}}], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x2) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000003c0)={@local}, 0x14) 1m37.991830807s ago: executing program 3 (id=2084): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x259, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff4, 0x1000, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050001000000000000000b0000000800", @ANYRES32=r11, @ANYBLOB="34005080140001000102030405060708090a0b0c0d0e0f1005000200060000000800030006ac0f000a0004000000000000000000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050002000000000000000a00000008000300", @ANYRES32=r11, @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x6c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x101, 0x2}) add_key(&(0x7f0000000400)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x6ef22633ba162636, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0xb, '\x00', 0x0, r8, 0x0, 0x4}, 0x50) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) 1m36.622056417s ago: executing program 3 (id=2085): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x10, 0x4, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @nested={0x4, 0xd}, @nested={0xc, 0x61, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x7b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x28}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, 0x0, 0x0) semop(r3, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x8, 0x20, 0x0, 0x80000000, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_prespec={0x44, 0x4, 0xe0, 0x3, 0xc}]}}}}}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1m36.036242715s ago: executing program 3 (id=2086): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) stat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000002a80)={0x50, 0x0, 0xfffffffffffffca6, {0x7, 0x2d, 0x2, 0x4500b820, 0x3, 0x1462, 0x0, 0x9, 0x0, 0x0, 0x56, 0x2}}, &(0x7f0000002b00)={0x18, 0x0, 0x0, {0x80000001}}, &(0x7f0000002b40)={0x18, 0x0, 0x7fff, {0x9}}, &(0x7f0000002b80)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000002bc0)={0x18, 0xfffffffffffffffe, 0x6, {0x9}}, &(0x7f0000002c00)={0x28, 0x0, 0x3, {{0x5, 0x1000, 0x2}}}, &(0x7f0000002c40)={0x60, 0xfffffffffffffffe, 0x800, {{0x383, 0x4, 0x7ff, 0xc6, 0x7fff, 0x5, 0x1, 0x6}}}, &(0x7f0000002cc0)={0x18, 0xfffffffffffffffe, 0x5, {0x7f}}, &(0x7f0000002d00)={0x11, 0x0, 0x0, {'.'}}, &(0x7f0000002d40)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x2}}, &(0x7f0000002d80)={0x78, 0x0, 0x8, {0x3ff, 0x35d3, 0x0, {0x2, 0x5, 0x6, 0x4, 0x8, 0x7f, 0x66, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x2, 0x400}}}, &(0x7f0000002e00)={0x90, 0xfffffffffffffffe, 0x800, {0x5, 0x0, 0xfffffffffffffff8, 0x401, 0x7f, 0x7, {0x2, 0x0, 0x7, 0x8, 0xf2, 0x7, 0x1d1, 0xfffffff8, 0x7, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9c}}}, &(0x7f0000002ec0)={0x140, 0xfffffffffffffff5, 0x8, [{0x5, 0x3, 0x0, 0x6ba1}, {0x0, 0xe, 0xb, 0x0, '+$+-{@]{))!'}, {0x5, 0x3bd5, 0xe, 0x80000000, '/dev/swradio#\x00'}, {0x6, 0xffffffffffff7fff, 0x7, 0x7, 'target '}, {0x6, 0x100, 0x7, 0x26bd, 'target '}, {0x0, 0x7, 0x9, 0x9, '/dev/kvm\x00'}, {0x0, 0x1, 0x1, 0x5, '\x00'}, {0x3, 0x1, 0x0, 0x200}, {0x5, 0x10000, 0x9, 0x0, '/dev/kvm\x00'}]}, &(0x7f0000003480)={0x660, 0x0, 0x200, [{{0x6, 0x1, 0x200, 0x7fff, 0xfffffff6, 0x5, {0x1, 0x7f, 0xc00000, 0x2, 0x2000, 0x0, 0x2, 0x40, 0xea, 0x6000, 0x1000, 0x0, 0x0, 0x6, 0x8000}}, {0x4, 0x6, 0x2, 0xa0aa, '#/'}}, {{0x6, 0x3, 0x4, 0x6, 0xffffffff, 0x2, {0x5, 0x4, 0xfffffffffffff801, 0x15d68043, 0x4, 0x8, 0x101, 0x8, 0x10001, 0x1000, 0x7fff, 0x0, 0x0, 0xfffffeff, 0x7}}, {0x5, 0x3, 0x2, 0x81, '@&'}}, {{0x1, 0x3, 0x8, 0x0, 0x2, 0x8, {0x3, 0x4af, 0x1000, 0x100000002, 0xfffffffffffffffc, 0x1d4, 0xfffffffb, 0x1, 0xa, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4}}, {0x1, 0xb6, 0x1, 0x7, ':'}}, {{0x4, 0x1, 0x400, 0x6, 0x1, 0xd, {0x6, 0x8d4, 0x7, 0x0, 0x6, 0x8000000000000001, 0x5f0, 0x400, 0xfffffffe, 0x498fccd9e446907e, 0x5, 0x0, 0x0, 0x8, 0x7}}, {0x6, 0xd04, 0x11, 0x7ff, '/dev/vga_arbiter\x00'}}, {{0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x81, 0x0, {0x1, 0x7, 0x5, 0x0, 0x2, 0xc, 0x3, 0x2, 0xffffff07, 0xb000, 0x5, 0x0, 0x0, 0x6, 0x401}}, {0x5, 0x5, 0x7, 0x0, 'target '}}, {{0x5, 0x2, 0x6, 0x5, 0xc, 0x5, {0x0, 0x1000000, 0x5, 0x4, 0x36, 0x3, 0x400, 0x8b7e, 0x2, 0xc000, 0x4, 0x0, 0x0, 0x8, 0xc}}, {0x5, 0x7, 0x1, 0x37, '.'}}, {{0x0, 0x1, 0x3, 0x2, 0x7, 0x0, {0x4, 0xffff, 0x80000000, 0x1, 0x8, 0x5, 0xc1, 0x8000, 0x9, 0x0, 0x2, 0x0, 0xee00, 0x8, 0x8}}, {0x5, 0x9, 0x3, 0xf, '{+/'}}, {{0x6, 0x3, 0xfffffffffffffff8, 0x5, 0x0, 0x101, {0x1, 0x1, 0x4, 0x9, 0x8, 0x1ff, 0x7, 0x4, 0xf64f, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x51fd, 0x800}}, {0x1, 0xffffffffffff65e1, 0xd, 0x671, '}/[+\xf1[-.%:!-.'}}, {{0x6, 0x1, 0x2, 0x1, 0x317, 0xe, {0x2, 0x0, 0xcb, 0xf246, 0xf, 0x1, 0x6, 0xffff0000, 0x4, 0x1000, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}}, {0x6, 0x8, 0x7, 0xfffffffe, '$,${y^!'}}, {{0x0, 0x0, 0xbb, 0xca53, 0x1, 0x9, {0x0, 0x9, 0x1ff, 0x1, 0x10, 0x9, 0x7f, 0x1, 0x1, 0x4000, 0x80000000, 0x0, 0x0, 0x9, 0x5}}, {0x0, 0x5, 0x0, 0x5}}]}, &(0x7f0000003b00)={0xa0, 0x0, 0x7, {{0x0, 0x1, 0x100000000, 0x3, 0x9, 0x1000, {0x0, 0x1, 0x3, 0x1, 0x4, 0x0, 0x2, 0x1, 0x9, 0x8000, 0x1, 0xee01, 0x0, 0x4, 0xc}}}}, &(0x7f0000003bc0)={0x20, 0xffffffffffffffda, 0x6, {0x3, 0x0, 0x4, 0x4}}, &(0x7f0000003cc0)={0x130, 0x0, 0x3, {0x9, 0x8, 0x0, '\x00', {0x7ff, 0x6, 0x6, 0x5, 0xffffffffffffffff, r3, 0x2000, '\x00', 0xd5dc, 0x4f, 0x1, 0xfffffffffffffffb, {0x1, 0x1000}, {0xa, 0x80}, {0x1000, 0x9}, {0x7fffffffffffffff, 0x1}, 0x1, 0xe, 0x100, 0x1}}}}) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x4, 0x10, 0x2}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(0x0, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffc, 0xffffffffffffffff, 0x8000000000000000, 0xd0b, 0x40, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r9, &(0x7f0000000000)=@target={'target ', {'PCI:', '1e', ':', 'c', ':', '7', '.', 'a'}}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000340)=@assoc_value, &(0x7f00000002c0)=0x8) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f0000000000)={0x16, 0xa5, 0x167cfe07, 0x0, 0x80000001}) 1m34.661673664s ago: executing program 3 (id=2089): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_clone3(&(0x7f0000000300)={0x800000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3e}, &(0x7f0000000100)=""/123, 0x7b, &(0x7f0000000200)=""/142, 0x0}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0x20}], 0x1, 0x64, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1m33.880449204s ago: executing program 3 (id=2091): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r4) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, 0x0, 0x0) unshare(0x2030b00) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) 1m31.71621349s ago: executing program 32 (id=2068): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000080)={0x20, 0x8, 0xd0, {0xd0, 0xf, "168133f9b99327e2ce7b99bb6facbdcb3c2f290634c40a0cadd67afa1369904c715705b8b92f9a16b94108b07da7288f435125917029a0c471581793e750bd0be4c22a03d0a7b1712aa90483f6f3a7380ec48249a5f65e6401fcd8cfe49727b4c40cc82157145dfaaab8bdf1248630a672e32e28b266ae50758b1d72ea145dadbec1843f468f541812daff511748f918f460fe9d171d277532fa11a76b9ce4ae2fdf34f2b8e748d68f875a0d5bf06b8d641bf17f57db8042d3160d68f048706561743863ec4ee8e1aa6fd3fc56c2"}}, &(0x7f0000000300)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "f58024ae42524ad3e58211e59be0e27bc78b39b6cffe13686a76fe0d3891874a7fc6d4f62f0ba7e0c8ec2931ced7274d431a9932eb9f0d4e8462a60987d495683d157db9591c6f2ed4e40a64ac9c78d3ecd1e33c15eb407b6e6ad32abbcad6c1dd2764978516919f685511833cbc25b510c5ff556cdf9909e36abfbf77fa47c5dcfbaa706ae6f63caa179462a83c10a06f868e45746983b1f17f91074dc33d0b61014e1c46ec79f9815e87dd910624527e1c4b16a8d86ab7d7d46d15a53966d1e7"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0xd7, "d8f1404fc363e3661a5f530f43ae6a456fbed2c09aaf3759cce1ea203efccf82ce2bc500574b27799d8089637fa104e7750e139275fc410b9423df68055c45ee3e377b752ce611608629cb9fad6d7a319050c12bfb9f0d07a527b7c42d443aee6b1b8fa8079574a92f89ec4cea32bf515b436a582d3250aedf33537287ce8f980790eb30511f8969d5a866204a22de4c9817d4379c3477630e00cf3bc000da9e5abece0e3e52ef47759a664f31dcf9d00a9b5b5342b14dedb4048210f1d6d6f82d417f70228d3fe580b1ab57d5609fd76517d533909bf2"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0x0, 0xb, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x9, 0xd}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m25.166541011s ago: executing program 33 (id=2079): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x10, 0x4, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @nested={0x4, 0xd}, @nested={0xc, 0x61, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x7b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x28}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, 0x0, 0x0) semop(r2, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1m18.553272397s ago: executing program 34 (id=2091): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r4) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, 0x0, 0x0) unshare(0x2030b00) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) 16.306816671s ago: executing program 6 (id=2210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000a00fffe0900020073797a31000000000900a30073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x8000000, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 15.666305025s ago: executing program 1 (id=2211): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x4, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x100b, 0x4, 0x0, 0x0, 0x5, 0x4}}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714"], 0xdc}}, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES64=r2], 0x3a) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1/../file0', [{0x20, 'F\xb0\x8a\xd8h;4*Y\xfd8Bi\xc5m\t\xbb\x1c^\xd3'}, {0x20, '\xe1\xed\xb67\xa9\x9b\x9c\x97\x95I\x03\xff\xf91\x8b\xb8\xf9-v\\\xe1\xe9\"3Aap\r\xb3\xa3\xdb\xd9\xf4H@u<#B[\xd1x\xf2MP2\xcd\x93\xb2\x8f\x95W\x7f\xd4\xa8JU}\xbaK\x1fY\xc6\xf9z\x1biU\x8b\x1cv\xd68\xc2\r\x06\x8f\xba\x12\xfc'}, {0x20, '\'Y\ae\x17\x00'/21}, {0x20, '/de\x00\x00\x00\x00\"\x15;?\xdb\x96f\x89\x872=\xfd\xd6\x7fj9z'}, {}], 0xa, "a93f46aef367038d0a0000000000009894a49dc42fcc5b0442d0f4abcf7a68e39b44bd1cd6a5f0d0d3028e13f527c8799782903f02f2a2205b61acb6b5424641ef224de2c3b4d38bb95878652c9e580e0861bc56cd3900000000"}, 0x104) write$UHID_INPUT(r9, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 14.767066909s ago: executing program 7 (id=2213): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000282b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000240)={'wlan1\x00', @random="cbcdcb8d00"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100b5000000fbdbdf250a800005001b"], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002ac0)={0x18, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x167}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x4890) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 12.450230175s ago: executing program 6 (id=2214): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x2000001, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x40, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10, 0x200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x23, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) 11.99310956s ago: executing program 1 (id=2215): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0}) r1 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x40) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r7, 0x7}}, 0x48) close(r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004880}, 0x4004000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x13, 0x15e, 0x0, 0x0, @binary="8c0b0de16f7c430f3700000245cd69"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) dup3(r9, r2, 0x80000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f0000000440)={{r10, r11/1000+10000}, 0x12, 0x6, 0x8001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500129650f3530dfccfe843f601c5c9000000000071102000000000000400e4158a2bda83"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 11.8734105s ago: executing program 5 (id=2216): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000a00fffe0900020073797a31000000000900a30073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x8000000, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 11.622909597s ago: executing program 1 (id=2217): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_clone3(&(0x7f0000000300)={0x800000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3e}, &(0x7f0000000100)=""/123, 0x7b, &(0x7f0000000200)=""/142, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0x20}], 0x1, 0x64, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 11.35378718s ago: executing program 2 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$uac3(0x2, 0x12e, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x249c, 0x9008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x3, 0x1, 0x7, 0x40, 0x6, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x58, 0xb}, [@power_domain={0xa, 0x24, 0x10, 0x9, 0x8, 0xce9, 0xbe, 'M'}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x306, 0x1, 0x1, 0x4, 0xff, 0x5, 0xd28d, 0x200}, @mixer_unit={0x6, 0x24, 0x5, 0x4, 0x4, "c7"}, @feature_unit={0x9, 0x24, 0x7, 0x3, 0x3, [0xe]}, @feature_unit={0x11, 0x24, 0x7, 0x6, 0x2, [0xe, 0x4, 0xa]}, @processing_unit={0x11, 0x24, 0x9, 0x5, 0x3, [0x3, 0x1, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xffff, 0x9, 0x8, "2f103c"}, @as_header={0x17, 0x24, 0x1, 0x2, 0x1, 0xf53b, 0x1002, 0x10, 0x4, 0x61c, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8000, 0x5, 0xfe, "b518d09528ef21"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0x3e, "d389", 'c'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x8, 0xa, 0x2, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0x0, 0xb, "3589a5f2b96035ba"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd6, 0x8, 0x8, {0xa, 0x25, 0x25, 0x6, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x67, 0x7, 0x7, 0x8, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7a, 0x7, 0x58, {0xa, 0x25, 0x25, 0x2, 0x93, 0x8}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x5, 0xe, 0x36, 0x10, 0x3}, 0x25, &(0x7f0000000440)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x5, 0xf00f, 0x6, [0x0, 0xffff30, 0xff0030, 0xc000, 0xff00f0]}]}, 0x5, [{0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1603b7616ee23146f67be3d063215d855b062293ef65"]}, {0xb2, &(0x7f0000000580)=@string={0xb2, 0x3, "0b7336e072bc8ede27407d1d6fab13b1d169e7f97e8709a8932a924aa3bb5eeb7851d14b77d25f6f50824e750f15818488f556c60db34fc3e34bdc47476b9662280596eacf80984d48fbd358bbbed95ccdbddee807277ef3e1eec1720da0ee64150473f9ea029d8ff32e6f9a20d7c2f7e12dc00da288fe758d7a88e470123e9c774afa5e4e83520f3a52972ad96ee209e6dd3ce6bbf05733aa930c033aba539cdc6c4dc0021ccb8be6966e52d1f698c0"}}, {0xe5, &(0x7f0000000640)=@string={0xe5, 0x3, "78619ebc43206a410fb381904d2e3c30e98465aa0963019e775ac46d3c30ce935cd7f8a113e4bc8bdff220458a9dda9a772f9666aef1805972b5be589fcdfb68c81d896a5f04c4b9a47284ba4037589a3466c91345473ef0db45ffccbaf1d602d4d9f2cb5aa7e8fc0d71dc81a3d12bf25c4fc86e9886d12ed0e149db47900ab6812532683fb8a2478ef173603b0e6e13f6b5d657f96cf1ce00a8a05054615c48fd27a7385de3650a0bb6169de7a19c1c2534306b9479427b3981646893a1e3ac512cf5a5c895c3276e16f8c9f0e0bbab8792d3b0154cc002dba3ffa59d09d06a70ddb0"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40a}}, {0x60, &(0x7f0000000880)=ANY=[@ANYBLOB="6003824a822258e7c2c921d1445bd6421c7f52d2f538947356c5f8af9b05f6bb2510d86401e25e9d547266d28936d5ada01a7006857143cab112800000bd33018fc684312269e6f9858815211e1440fc0d38ceed61b24a878f8c59eb7cf8a509a3fa9b"]}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) socket(0x1e, 0x3, 0x20000000) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) syz_usb_connect$uac2(0x5, 0xae, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x43, &(0x7f0000000900)=ANY=[@ANYBLOB="43032a991298fbfb823432acfd99ea03e200780218f77945af2de8cc87c76c3a2cdbf19f10c60000000000000003f2aa1940cd84ddf0194f5d8deec86e3a6f6accb25afe49cdfcf7fc1654"]}]}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r5 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x8000) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0xf65, 0x8, 0x3, {0x9, @pix_mp={0x3ff800, 0x100, 0x3436324d, 0x5, 0x6, [{0x3619317c, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x10001, 0x3}, {0x2, 0x1000}, {0x8, 0x9}, {0x1d06, 0x9}, {0x0, 0x1}], 0x4, 0x8, 0xa, 0x2, 0x1}}, 0x1}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200"}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'dummy0\x00'}) 10.909429565s ago: executing program 6 (id=2219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20) capset(&(0x7f0000000180)={0x19980330, r1}, &(0x7f00000001c0)={0x814, 0xa, 0x5, 0x8, 0x9, 0x3}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000040c50f80b0000000000001090224000400fe01030001000921c100fe0122280009058103"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000240)=0x8, 0x4) fcntl$setpipe(r2, 0x407, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r5, 0x5) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000096324e6800000106000000000000000000001000000000"], 0x28}, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) 10.45050073s ago: executing program 7 (id=2220): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) symlink(&(0x7f00000033c0)='./file0/file0\x00', &(0x7f0000003400)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000400)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199961d9e7, 0xdcf, 0x4005, 0x5, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000003c0)=[{0xd, 0x3, 0x81, 0x10}, {0x8, 0x1, 0x8, 0x5}]}, 0x10) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000480)="480000001400190d7ebdeb75fd0d8c162c84e48068d8c033ed7a80ffe0090f000060000000a2bc566109c87a0f7f8900fcff20000001002471083e0d5fcce62483c3f596a722191ed010a9557e7ff45938", 0x51}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) 8.167109491s ago: executing program 2 (id=2221): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) fchdir(0xffffffffffffffff) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x688140) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b4, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x9) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0) 7.886526696s ago: executing program 5 (id=2222): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000000001e340165e000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40c0}}], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x985, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff7ffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x14000]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x100002, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@local}, 0x14) 6.913405147s ago: executing program 2 (id=2223): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x800, 0x6, 0xfffffffe, 0x9}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, 0xf26}}, 0x1ff, 0xbb}, &(0x7f0000000240)=0x90) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) semop(r2, &(0x7f0000000280)=[{0x2, 0x11, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x9) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) 6.885161275s ago: executing program 6 (id=2224): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x8d25b44dcc0592a6, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) listen(r8, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000540)={{r0}, "17825cac818dda8232e374006e174d86058bdc01f68d6adf4cf44f4c6bade0c3a05065a425a1aaab99824c9a980a37ebb42c53050000c70303c7ac78d8bcdf2d37bee8930795fa9137a717a8eb1161e24e95a1f26b7ec915ab600dd8a5295112b6d0a6d42f92190e29f9e39f6e8bba07087b87a46f689b62b4f969710c2b2c118d9137b586e1c1cdd4b8f5d45de0b443389c967b0dca72fda7d9c39851af896e2c117ffc390436cf6e3afb49255c3c688ce2eea2f1a2fe090694d0ee8c4a467e6e34a7516178cd3b11a0d84978ca683ee21b17db86ec826dbd9949c81b00e2dce9eb8bfcbd04fccb9e971d7f4913b84fc9961230cd25b4a0103516664e7c3f21b332ee187d1e84f0ad42797bafc2a8097ab757e4f2493f64f52431a3e02347157d2fd5bb048f83998e8e00fd8e0b3b0d1c04edff2bffeeea583c44cee67a6a9f8ff23061691141ec85d7b76cc5f2261bca0a5c2041a290b415fd656e6c689056af8ba1812dc50a75e3df8ef6b7ad1c9fb829169e3fd4d4aec3b8b3077535c019347c7bfcfa7f10cd7b5c387731fa56d66be09cf030e83c837962c9c148a210c9db248dd1393c29c506e3acabaaade6bbdcdf39dd4d0a97c0b604b62cf131c3742b3de5e58648bae82d19f1cbadbaf3c6fa9b9deb343f93bcaab386336dd945c514a00ab24dd071cd0c799863db54a4a86176d6d996e9fe744bc08d3bb8974f72840eecb7351fff9ac56b9ff3c2a9b5359c4bb93a9d34aae7b3f0e7b6bb633e85c924dbb71931d68482386b64c5be64f451beeb976693fe4066d2175bf34c4aab97dd5a68dbb74c26da5c537d377cc6be28d7abdcb58b5bfaaa42fc494b78583e9d27b7ddae1b25c39889fdd485b9ef96e28b8c980e97a4566a322bfaa39771bcef1dce3c3fea806d3110534c12ac20744587827cfdc182139528d5113411278d955473a3852b79732a900ab4d2aa855e5f7c17f8500252d52513bc51d4fcbf9c8b83b3696f6618c0b999a424b7ab38ccefb2e2554d21ab6fe2968bfef7d9cc8157325024ccf60c6775a087e313221c7d61aa1c187cc0ce18a6cf12e91264c3d0bae0720fddcdb86caf460ab298f400db5572b1dd5a3328062e955a2c3e0928236a449d1bb26a6fbc878b39608124a221a1e1ff61a49b9f941ecc008664a89b4de0dcbaa89c635e9dd78451606fac9b1341aa0e278e8f585d5cf0c2a2f9779e79f016f029fb397c083c23beac0bf382d3f6f40ca927ed801ae7ca2cdef8cccf6dc5b7479028923133e46a30ba06dea58dc1dd1df93b2ed4d8aa76df39c77c4caf6775e8eb8e3fae08ea4c959b045a2cf298f175b54616e08e7090ff761d630134e901fe45bd5a7735b4b40973fff19b78c6a221f33d4315dc796da0195978c46c496bafdcd45def26cb1b0ebcf84eb03861f422810c097a85c93e61d08523ecf8a2ee7c5555a685d4fc527abd96f81f9faff4bdbf1a758d6e706573fce35b692b193a573826141c5620206107e631cf22be072fd15a45271a700dbfa639c6e9b6c2ac934d321569ab0eb62fdbdb0951fcc4b6b550929ad8a95d65bf0af8be1f1f222d6243468d2a1dc8fce4854cafac3ac5a9518d5da6202ff824da79104a794cf7d1ac25dbfe720253522ef19d5dc1202bb14eae2326d29806fcc6240651893d6b1b46f8b18855af35fef317b68d3a758712529d77e939584ae796e0135c99c91a50cf24d06bda79186e65842f0df9e3c076990ddc62b0e268e0afad0b70ad8b9595de61ddbeb147ecccb9b3c67aed0af4cbe7ad9e5771844ea02c42cd20dc458dd597a8ac867ca516d3f3347a0a824b75bae6cc57a77baae7b8a34fb95695ab22635d2d263235460814892ba71c2859ddfb8fa55ad184feecab1e59e1b3b227550e2cfbc867ad9cbbf7f1d2c956444a61dec5100d002d0f7b20a041409ed90bdd36c5931e4a0687ef681757fff89a7492d40bbd776f9458b32328228e74d3167e62c403f8cd63a8bb32845b9eb26b1a2df73350c17a9390cf54d9939a38aaa1fce659ea1182c3aa1c585d36d1a164cbe77943d4880ae5b19ff7a0ed8e54072b8b773c4ed7f4f2767c0893a1d395308fbe26faf6125186c243444c5d51ff7abf9a0707c2a00e95954c989ab58cb0fd6f69b38e1a8fb1965cbdcc06802f13295480ddb775ec4c5f5cd1e43b309dfa137436038addbf8d15ed35154a11977c3f6c4c73ffa426cfdd305ff12ca34055ce5c4e44579b713c0fafb4a92ee3a36c8971c48dd8640349f84f19fb6816a791eb141b778f380442ed76db1dc877f6b54ee738de331ab692d52a61f5dd373a603e89ff9bf6e008abb977ed6264fbb36824b4afea0c31d293c5b479152a0f545d97921ead341f4920e7d3b67ad9bd2187692ec6c04566652a26a147fe30b49ceb356e57b137ec84ea2b210fdc6255f5f0c187f94abc8a62b327aeae837cec9c3b8fccd4dd0499f4f824eb9a5682a3eb4de127606a4cd5f58454d9157236eaba121fa670e8b52ae873a69b9112bca10615ee688ab0ac40a3e460cc5ab1e3bd0e6a88b167d27a2f5f26a5a94368c44f8d36c42dc406275b4899062d5b9a9a7a1e915fffe2e681dc06d7b145100e9e3813eee164f12ca534592383fb7b6e5cf55e90767d3dac3a76bb75ce47f0463d363783d679e9b2203cbe81e7034ace5143827900c4a11faa8bc2313dbce20545978dd00c61ed5dc81d123ef2c18c778e0c17dcc102b03f9066035692b260976f0bc20784eca04aa9fc86f6bca3cba74da21465d1ca0d8bd052669339a1c2e740715376f612a51d4555378b721b8a2734614e8f65545b040733f9f70bdbd1d6a60a6070520e2e99e0fd6657a0df1d1eb2205657670f1f94ba0d508815232eee06d02365b41b8ccad3c7adac1ec2f3ee498e426be1d6e2cd84354a889600c3fa9e711115951428a3215223529d21b2d70998e5bdc58254bffc39acce5c4a71a8f8eb799850f906e9a821ea9b6cfeddabc42ae9115d4b17804735e6f07f41c882ee8c0888e4f65af42227c31ad1a02b2c76da304af80d7c7390dfcad46f1d1994e0e9bfc1e54d37a1c3d15ba0619cae0fa885ed5c2c5aa544f93a5922eda66aba5b3178a04d868f88a393b0fba5abadc9ae169cae1b9f633083ae3f736d98c0931e4357634c0aa940a686e53bbd9b979f1e7bd191fff6ae9bfd4d00f0025f7eef22e8c97244143e6736d9c7beac84f1fce5fa68f80270bc63b82a1d4e2b575af6dcd3a8bf862ecf64fa203777295c225ea3a3bb58d40ccdc4b657b1d8ce2d9f55443e7e04f2da209f58e7e87237448440e73baca1e26af12d3c164a483e3778357bf5e5c7e526eca094f1be01a871bca793b2fe983ec0e2bb1491959036fe119a4ccb40d779e7fbc4c0ea1a47bcdaf2ab3ffcf691394cc9d523824d68c41508f07c0310f578bd13a3cfd879d001cab8b40efe7a1ec0c734b97dc9a80ce572ab4d47bc74cfc11e864b78535ddd1e6914c6b0b9c2ef1e8a33caff5e087e4396f1ea00e59a73270452846d422f2776b76711d7a0bc5827ee2953cc69b822f8a0a1dc37ac4bddf2ec5477b9108cf3b28ed60cfb39c48b74f453cece392f59700d1c6007a801ece4a3bb655f3e21daf2f6fea799f039798a93baa0b761b37118ec4462d0f719b26b79291219ede323f35854d3b693cde3584edf28d351def44d091a2a4b48abffaf1104d22aa36eeb275c562a56d14d4cd604bba7aee57ad324d760c378b617b2b4cb8bb582c13eb35329ed5a288f3722ad5cb580f90a73b04780d5901c51128ca561efea2747d5ea8a76ec128861c1d677cd7c10dd7ca7d51a7273b09f8897ca18c6b0dddb6865140ac31e6f7731cdd11ad99ece805e43dd1ee6eb0353b941a6e5797f56f1c278da1f6ec368c531309281a478e26337169e44904c47fb9661a2a65f90ed2427091abfa7af4a622509783798314db11232799a1d49313d73da1212047df7627e35d5051dd6ca76a3561c8b48d43f139fb18e72b28a1debf054868433d461279c9d700cb08c63dea18919a8191527601adee583724777bb800512f897b615019a108b793e050024b340ad706b74bcfc47f29942815332fefe91d37ba669b5c7e55ca43047360466330eebbe818f410d34990ce1f27f3198a7942afdcefb0e68e27daaf5cbc1bcccc9f2f4f7968e2c01728f132202ac68076d28a6fd636e11029c7d5047d71a07629d20d68bfa82c56e70f99b131b5e6b3bb80847b9159d5eb99aa500b710912a00494a7af2af4fa3d83e2b3cef275f3f6cd626a850954847bbdc081769fc445b4675b52269da180eb7cc34ef8d6af4f706d7f4ca96bee3a9a00ff050e2afe3f9eaff62f99c45ce7c556bfd796cf708d7b011177e21ddcc418143c62845d9c461bea8497b75ad86a0cae0be9611ae8dc30f297f7c05fd90ce38ec0e90745a7e43b0800c7a064c66844f31f48198959e0ca8269f25512bd1d4fb1d22e4904129ec2337781b66354620177a57759074a906fb80e57a65e894a92ff0588d6536c535c4668bed78dcf6ce5f47d6cab410f50c0578c8a205fb69b8d06f5db76f782c033a54bafeaab80b1cf67c6fa227a89b93bd7a50d5a116af0486ad234cc5007687fa72dab5a36f9697692c4bec818ca1ae7b12d6efdbe29a77eaad29b5b3db39e7a02dad9d75cca525c362b2238addade4e3dd40cde91ab8f4761ce13eb2abda6c28d4a80ea3348d6408e4ed0e36cdb236b22ca648721c9cbf3fce451ce72f60ce08e0a4982299c0307998e20ab99221bff8204aefdb059babc8d4fa7e3dc1f8efe919a2b614374b42e16b66a8adbe8bbcb78b921e7e8443c8038507f99f6f6015b0ff432b6d256be573adab94971a5e14dd78befc4f3a966ebdb5eb64251cd788a785998e947a10f5c40dd6dbffacad81b6ca7884842ef2f86870d24f09b9101ac04625380e7ab86500c2089f39c2ab2a01cb2735a4146ed2025321a0e95dac01c6cc650e563158bc3920b9053e44310e2e8f9cd7839e7dfe79e6d741b842496e776e07cd86690e9be97ac04cb760444155c9d4aa01e3dea8c241b3f9fba5e4108204b3ccc76bdf27646fb8f55a10171524311b6224409346ffade5a51fc8f8b280fda699f7c1bf74fe6a0b3544466fcca42e89f42e6ae17b0c81af4b07feed6735ad42b3caf4135278fcc388e931b8fec7dde33975f8e0eb52d1bc485791b776bc1a842f644c01993400fe73f1a7461126c87d64093a66ec2839d5f16e5b7c1cbc26f434aad6db604e7c4bfc12b2e0e7b127019f8c254948e2d29e4a357eef5d02c2447fd0eab3422a5df16ae4a8c6b9415f6b7664df4eb38322a799e062afcf627ae78e6aeb34854d59c8b1149364a881ac46cbf7ebdb87ad91ae1e3b047af674ba7c14b47a6ddd454fb18b51ae4f4fe640100dc9ef22de0a463130c4e3637e9610c77e630c00d52532e3daa19638a18ad2d955e3767066d488bb7df5d0971288ffe7bfd1bad7fd724b9a6731c17674c557ec817c9238a922281fbf117e2e0ffa52ccffc1d390a4ddbea43a29b5e2d044757a2bce83e88a6e5a3a7634c39de1d26fec866d025ce8d03fe0f31609c86aa26262f74b000c40687a1de6a351764ef1cb60a0fec96ae0850a448f838f1a753c0616cf394581a33549fa88bd0aa2c90054dd15d6d7672ab4487a4c08c13aa7e994e1c20314b3b7c7315690d945be76b8848bd99ccfc4c2602fb73fb33f778c47217636c80159f13a39bdedcdec1b0c2d1b3bda4507e09f95836cadcbe8"}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x3b90, &(0x7f0000000500)="2800000000000000efbeadde0300000005") close_range(r0, 0xffffffffffffffff, 0x0) 6.625908198s ago: executing program 1 (id=2225): madvise(&(0x7f00003c7000/0x1000)=nil, 0x1000, 0x17) creat(&(0x7f0000000080)='./file0\x00', 0x5d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x8001, 0xc8, 0xb, 0x7ffc0101}]}) mincore(&(0x7f0000223000/0x2000)=nil, 0x2000, &(0x7f0000000000)) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r4, 0xda8d) accept$inet(r4, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) shmget(0x3, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r2, 0x400, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5a000e008090030008021100000008021100000108021100000005000c00c6c105000000000000006400d04c010004060606080000002d1a02001802000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) 6.23025582s ago: executing program 7 (id=2226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r5, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4080805) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x24044010) r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_STD(r9, 0x80085617, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc0105b08, &(0x7f0000000040)) 6.204135465s ago: executing program 5 (id=2227): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0}) r1 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x40) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r7, 0x7}}, 0x48) close(r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004880}, 0x4004000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x13, 0x15e, 0x0, 0x0, @binary="8c0b0de16f7c430f3700000245cd69"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) dup3(r9, r2, 0x80000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f0000000440)={{r10, r11/1000+10000}, 0x12, 0x6, 0x8001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500129650f3530dfccfe843f601c5c9000000000071102000000000000400e4158a2bda83"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.987303156s ago: executing program 6 (id=2228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000a00fffe0900020073797a31000000000900a30073797a310000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x8000000, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 5.623889842s ago: executing program 5 (id=2229): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x2000001, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x40, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10, 0x200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x23, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) 5.55163513s ago: executing program 2 (id=2230): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x10, 0x4, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @nested={0x4, 0xd}, @nested={0xc, 0x61, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x7b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x28}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x8, 0x20, 0x0, 0x80000000, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_prespec={0x44, 0x4, 0xe0, 0x3, 0xc}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 5.010470899s ago: executing program 2 (id=2231): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket(0x400000000010, 0x3, 0x2) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, 0x8) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x11, 0xf1, {0xd, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) close(0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4.29521682s ago: executing program 5 (id=2232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000a00fffe0900020073797a31000000000900a30073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x8000000, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 3.218405221s ago: executing program 1 (id=2233): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) creat(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x10, 0x4, 0x70bd2c, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x92, 0x0, 0x0, @fd}, @nested={0x4, 0xd}, @nested={0xc, 0x61, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x7b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x28}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, 0x0, 0x0) semop(r3, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x8, 0x20, 0x0, 0x80000000, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_prespec={0x44, 0x4, 0xe0, 0x3, 0xc}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 2.825371151s ago: executing program 7 (id=2234): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) fchdir(0xffffffffffffffff) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x688140) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b4, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x9) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0) 2.467398429s ago: executing program 1 (id=2235): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_clone3(&(0x7f0000000300)={0x800000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3e}, &(0x7f0000000100)=""/123, 0x7b, &(0x7f0000000200)=""/142, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0x20}], 0x1, 0x64, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1.707682129s ago: executing program 6 (id=2236): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0x8040480) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) ptrace(0x10, 0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {0x0, 0x1, r8, 0x30, 0x1, @ib={0x1b, 0x6385, 0x1ff, {"ff47df09000000008000000000005681"}, 0x6, 0x9, 0xc00002}}}, 0xa0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) 1.499626958s ago: executing program 7 (id=2237): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000000001e340165e000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40c0}}], 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x985, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff7ffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x14000]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x100002, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@local}, 0x14) 786.050948ms ago: executing program 5 (id=2238): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000023a000/0x1000)=nil, 0x1000}, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet6(0xa, 0x80001, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00000ef000/0x3000)=nil, &(0x7f00004b3000/0x4000)=nil, 0x3000, 0x2}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x6ed2, @mcast1, 0x5}}, {{0xa, 0x0, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x108) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0x8001, 0x5, 0x4d, 0x8001}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 471.691123ms ago: executing program 2 (id=2239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r4, @ANYBLOB="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"], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000200), &(0x7f0000000300)='./file0/file0\x00', 0xe, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000340), 0x3, &(0x7f0000000380)={0x0, 0x989680}) munmap(&(0x7f0000348000/0x3000)=nil, 0x3000) socket(0x10, 0x803, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) 0s ago: executing program 7 (id=2240): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x800, 0x6, 0xfffffffe, 0x9}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, 0xf26}}, 0x1ff, 0xbb}, &(0x7f0000000240)=0x90) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) semop(r2, &(0x7f0000000280)=[{0x2, 0x11, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x9) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) kernel console output (not intermixed with test programs): 7ffc0000 [ 683.417638][ T31] audit: type=1326 audit(1789975776.949:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.3.1651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79d8b9ddeb code=0x7ffc0000 [ 683.706029][ T5706] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 683.860238][T12715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.874884][ T5706] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 683.889657][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 683.889710][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.892664][ T5706] usb 4-1: config 0 descriptor?? [ 684.111377][T12719] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 684.320606][T12722] input: syz0 as /devices/virtual/input/input162 [ 684.366977][T12722] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1654'. [ 684.416663][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1651'. [ 684.474667][ T5706] hid_parser_main: 26 callbacks suppressed [ 684.474686][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.474708][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.474727][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.474745][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.474764][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.474783][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.474830][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.534812][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.534858][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.534888][ T5706] uclogic 0003:5543:0003.000E: unknown main item tag 0x0 [ 684.566109][ T5706] uclogic 0003:5543:0003.000E: hidraw0: USB HID v0.02 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0 [ 684.627486][T12719] nvme_fabrics: missing parameter 'nqn=%s' [ 685.083857][ T5706] usb 4-1: USB disconnect, device number 70 [ 685.460819][T12734] vivid-000: disconnect [ 685.465617][T12731] vivid-000: reconnect [ 685.594249][T12739] input: syz0 as /devices/virtual/input/input163 [ 685.660952][T12739] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1657'. [ 685.661115][T12739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1657'. [ 685.817770][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.817817][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.030438][T12742] input: syz0 as /devices/virtual/input/input164 [ 686.056747][T12742] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1658'. [ 686.530816][T12751] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 687.413313][T12759] fuse: Bad value for 'fd' [ 687.550121][T12751] nvme nvme0: failed to connect socket: -512 [ 689.238907][T12780] input: syz0 as /devices/virtual/input/input165 [ 689.262916][T12780] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1665'. [ 689.391400][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.233108][T12788] input: syz0 as /devices/virtual/input/input166 [ 690.253748][T12789] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 690.261160][T12788] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1668'. [ 690.376316][T12789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.439054][T12791] bridge1: entered promiscuous mode [ 690.477185][T12791] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 690.625049][T12795] input: syz0 as /devices/virtual/input/input167 [ 690.673507][T12795] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1670'. [ 690.821472][T12789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.969248][T12800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.396169][ T987] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 691.546070][ T987] usb 4-1: Using ep0 maxpacket: 8 [ 691.547199][ T987] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 691.551453][ T987] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 691.551472][ T987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.551493][ T987] usb 4-1: config 0 has no interface number 0 [ 691.551521][ T987] usb 4-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 691.561333][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.561352][ T987] usb 4-1: Product: syz [ 691.561363][ T987] usb 4-1: Manufacturer: syz [ 691.561374][ T987] usb 4-1: SerialNumber: syz [ 691.636645][ T987] usb 4-1: config 0 descriptor?? [ 692.380462][T12822] input: syz0 as /devices/virtual/input/input168 [ 692.413241][T12822] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1677'. [ 692.496088][ T5673] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 692.646389][ T5673] usb 5-1: Using ep0 maxpacket: 16 [ 692.647469][ T5673] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 692.649332][ T5673] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 692.649362][ T5673] usb 5-1: config 4 has no interface number 0 [ 692.649409][ T5673] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 692.649469][ T5673] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 692.649499][ T5673] usb 5-1: config 4 interface 9 has no altsetting 0 [ 692.675396][T12816] binder: BINDER_SET_CONTEXT_MGR already set [ 692.675492][T12816] binder: 12815:12816 ioctl 4018620d 200000000040 returned -16 [ 692.712698][ T5673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.712720][ T5673] usb 5-1: Product: syz [ 692.712751][ T5673] usb 5-1: Manufacturer: syz [ 692.712763][ T5673] usb 5-1: SerialNumber: syz [ 692.781614][T12819] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 692.781738][T12819] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 692.881043][ T5673] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 693.040880][T12819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1676'. [ 693.976540][ T38] usb 5-1: Failed to submit usb control message: -110 [ 693.976585][ T38] usb 5-1: unable to send the bmi data to the device: -110 [ 693.976606][ T38] usb 5-1: unable to get target info from device [ 693.976623][ T38] usb 5-1: could not get target info (-110) [ 693.976656][ T38] usb 5-1: could not probe fw (-110) [ 694.397896][T12839] input: syz0 as /devices/virtual/input/input169 [ 694.439246][T12839] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1680'. [ 694.495116][ T987] usb 4-1: NFC: intf ffff888076924000 id ffffffff8f85bc60 [ 694.554512][ T987] usb 4-1: USB disconnect, device number 71 [ 695.855696][ T8745] hid_parser_main: 28 callbacks suppressed [ 695.855714][ T8745] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 695.919207][ T8745] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 696.067305][ T7981] usb 5-1: USB disconnect, device number 68 [ 696.872391][T12873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 696.872422][T12873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 696.872870][T12873] vhci_hcd vhci_hcd.0: Device attached [ 697.166228][ T5687] usb 40-1: SetAddress Request (2) to port 0 [ 697.166300][ T5687] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 697.566495][T12874] vhci_hcd: connection reset by peer [ 697.568049][ T38] vhci_hcd vhci_hcd.3: stop threads [ 697.568074][ T38] vhci_hcd vhci_hcd.3: release socket [ 697.568130][ T38] vhci_hcd vhci_hcd.3: disconnect device [ 697.919729][T12881] input: syz0 as /devices/virtual/input/input170 [ 697.955344][T12881] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1688'. [ 697.955455][T12881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1688'. [ 698.663688][T12891] vivid-000: disconnect [ 698.671935][T12888] vivid-000: reconnect [ 699.411159][T12898] input: syz0 as /devices/virtual/input/input171 [ 699.438088][T12898] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1692'. [ 699.438203][T12898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1692'. [ 702.216223][ T5687] usb 40-1: device descriptor read/8, error -110 [ 702.516858][ T5686] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 702.607580][ T5687] usb usb40-port1: attempt power cycle [ 702.666218][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 702.666926][ T5686] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.668176][ T5686] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 702.668207][ T5686] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 702.668233][ T5686] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.668257][ T5686] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.668309][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.962474][ T5686] usb 4-1: GET_CAPABILITIES returned 0 [ 702.962536][ T5686] usbtmc 4-1:16.0: can't read capabilities [ 703.060371][T12942] input: syz0 as /devices/virtual/input/input172 [ 703.097128][T12942] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1703'. [ 703.097178][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1703'. [ 703.187584][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 703.187656][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 703.187706][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 703.187755][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 703.201765][ T5687] usb usb40-port1: unable to enumerate USB device [ 703.299217][ T5687] usb 4-1: USB disconnect, device number 72 [ 703.490759][T12927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.646599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 705.515780][T12977] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 705.626603][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 705.670719][T12977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.707485][T12977] bond4: (slave gretap1): making interface the new active one [ 705.712027][T12977] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 705.746234][ T8745] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 705.897141][ T8745] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.898381][ T8745] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 705.898405][ T8745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 705.898424][ T8745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 705.898441][ T8745] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.898471][ T8745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.901132][ T8745] usb 2-1: config 0 descriptor?? [ 706.354392][ T8745] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 707.259301][ T7981] usb 2-1: USB disconnect, device number 68 [ 708.161888][T13017] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 708.777603][T13030] kAFS: unable to lookup cell '(,c' [ 709.444334][T13017] nvme nvme0: failed to connect socket: -512 [ 712.196004][ T5673] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 712.218165][T13062] input: syz0 as /devices/virtual/input/input175 [ 712.266623][T13062] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1727'. [ 712.266779][T13062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1727'. [ 712.407682][ T5673] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 712.407729][ T5673] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 712.444407][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.444466][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.444496][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.455980][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.456032][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.456060][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.508068][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.508109][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.508129][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.546437][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.546491][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.546511][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.553285][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.553340][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.553369][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.599959][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.600023][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.600044][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.648578][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.648634][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.648664][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.686329][ T5673] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.686384][ T5673] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.686413][ T5673] usb 3-1: config 0 interface 0 has no altsetting 0 [ 712.745358][ T5673] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 712.745381][ T5673] usb 3-1: Product: syz [ 712.745399][ T5673] usb 3-1: Manufacturer: syz [ 712.745410][ T5673] usb 3-1: SerialNumber: syz [ 712.799681][ T5673] usb 3-1: config 0 descriptor?? [ 712.881520][ T5673] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 713.256093][ T5686] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 713.298672][T13060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.325192][T13060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.407301][ T5686] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.413174][ T5686] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.413210][ T5686] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 713.413249][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.473552][T13066] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 713.507928][ T5686] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 713.790433][T13073] input: syz0 as /devices/virtual/input/input176 [ 713.826969][T13073] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1730'. [ 714.357819][ T5686] usb 4-1: USB disconnect, device number 73 [ 716.111992][ T8745] usb 3-1: USB disconnect, device number 63 [ 716.123198][ T8745] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 717.071354][T13116] input: syz0 as /devices/virtual/input/input177 [ 717.124930][T13116] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1739'. [ 717.748075][T13127] input: syz0 as /devices/virtual/input/input178 [ 717.794245][T13127] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1742'. [ 717.794389][T13127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1742'. [ 718.653975][T13133] batadv0: left allmulticast mode [ 718.911680][T13133] socket: no more sockets [ 718.981627][T13133] socket: no more sockets [ 719.069695][T13141] binder_alloc: 13140: binder_alloc_buf, no vma [ 719.329236][T13152] input: syz0 as /devices/virtual/input/input179 [ 719.350637][T13152] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1750'. [ 719.676099][ T5686] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 719.828273][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 719.831541][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 719.831591][ T5686] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 719.861563][ T5686] usb 2-1: language id specifier not provided by device, defaulting to English [ 719.863226][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.863244][ T5686] usb 2-1: Product: syz [ 719.863255][ T5686] usb 2-1: Manufacturer: syz [ 719.863285][ T5686] usb 2-1: SerialNumber: syz [ 720.339723][ T5686] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 720.521156][ T5686] usb 2-1: USB disconnect, device number 69 [ 720.634252][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.355733][T13133] syz.0.1744 (13133) used greatest stack depth: 18016 bytes left [ 722.394317][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1761'. [ 722.433075][T13201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.692380][T13204] input: syz0 as /devices/virtual/input/input180 [ 722.720672][T13204] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1762'. [ 722.720741][T13204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1762'. [ 723.716105][ T5686] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 723.866123][ T5686] usb 5-1: Using ep0 maxpacket: 8 [ 723.868404][ T5686] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 723.901913][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.901973][ T5686] usb 5-1: Product: syz [ 723.901990][ T5686] usb 5-1: Manufacturer: syz [ 723.902006][ T5686] usb 5-1: SerialNumber: syz [ 723.958014][ T5686] usb 5-1: config 0 descriptor?? [ 723.990619][ T5686] gspca_main: se401-2.14.0 probing 047d:5003 [ 725.321640][ T5686] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 725.510617][ T5686] usb 5-1: device descriptor read/64, error -32 [ 725.555128][T13236] netlink: 'syz.0.1770': attribute type 2 has an invalid length. [ 725.757380][ T5686] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 725.851251][T13243] input: syz0 as /devices/virtual/input/input181 [ 725.878670][T13243] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1773'. [ 725.879604][T13243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 725.896164][ T5686] usb 5-1: device descriptor read/64, error -32 [ 726.136618][ T5686] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 726.159244][ T5686] usb 5-1: device descriptor read/8, error -32 [ 726.404162][ T5686] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 726.429466][ T7984] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 726.430046][ T5686] usb 5-1: device descriptor read/8, error -32 [ 726.536964][ T5686] raw-gadget.0 gadget.4: failed to queue suspend event [ 726.568645][ T5686] gspca_se401: read req failed req 0x06 error -19 [ 726.578830][ T7984] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 726.595129][ T7984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.595156][ T7984] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 726.595464][ T5686] usb 5-1: USB disconnect, device number 69 [ 726.626966][ T7984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 726.626995][ T7984] usb 2-1: SerialNumber: syz [ 726.651187][ T7984] usb 2-1: config 0 descriptor?? [ 726.668590][ T5686] raw-gadget.0 gadget.4: failed to queue reset event [ 726.675710][ T31] kauditd_printk_skb: 281 callbacks suppressed [ 726.675724][ T31] audit: type=1326 audit(1789975820.209:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d8b9e159 code=0x0 [ 726.729483][ T7984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 726.729793][ T7984] dvb-usb: bulk message failed: -22 (3/0) [ 726.733106][T13215] raw-gadget.0 gadget.4: failed to queue disconnect event [ 726.828645][ T7984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 726.833526][ T7984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 726.833591][ T7984] usb 2-1: media controller created [ 726.933694][T13249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.934003][T13249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.965223][ T7984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.036348][ T5687] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 727.055298][T13251] xt_CT: No such helper "netbios-ns" [ 727.137225][ T7984] dvb-usb: bulk message failed: -22 (6/0) [ 727.166906][ T7984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 727.186754][ T5687] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 727.192933][ T7984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input182 [ 727.212611][ T5687] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.239917][T13259] input: syz0 as /devices/virtual/input/input183 [ 727.260780][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 727.260801][ T5687] usb 4-1: Product: syz [ 727.260811][ T5687] usb 4-1: Manufacturer: syz [ 727.260822][ T5687] usb 4-1: SerialNumber: syz [ 727.264576][ T7984] dvb-usb: schedule remote query interval to 150 msecs. [ 727.264593][ T7984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 727.324214][T13259] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1777'. [ 727.422783][ T7984] dvb-usb: bulk message failed: -22 (1/0) [ 727.422822][ T7984] dvb-usb: error while querying for an remote control event. [ 727.576395][ T7984] dvb-usb: bulk message failed: -22 (1/0) [ 727.576420][ T7984] dvb-usb: error while querying for an remote control event. [ 727.741718][ T7984] usb 2-1: USB disconnect, device number 70 [ 727.892208][ T5687] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 727.956410][ T5687] usb 4-1: USB disconnect, device number 74 [ 728.206564][ T5687] usblp0: removed [ 728.291942][ T7984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 729.756130][ T5686] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 729.907946][ T5686] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 729.909425][ T5686] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 729.909451][ T5686] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 729.909478][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.980499][T13289] input: syz0 as /devices/virtual/input/input184 [ 730.009436][T13289] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1785'. [ 730.014148][T13280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 730.050434][ T5686] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.969938][ T5687] usb 3-1: USB disconnect, device number 64 [ 731.185628][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 732.017059][T13312] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1789'. [ 733.661564][T13337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1794'. [ 735.387936][T13362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.547839][T13367] input: syz0 as /devices/virtual/input/input185 [ 735.594655][T13367] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1802'. [ 735.594769][T13367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1802'. [ 735.726310][ T987] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 735.885981][ T987] usb 3-1: Using ep0 maxpacket: 8 [ 735.888614][ T987] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 735.892293][ T987] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 735.892328][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.892342][ T987] usb 3-1: config 0 has no interface number 0 [ 735.892371][ T987] usb 3-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 735.960856][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.960877][ T987] usb 3-1: Product: syz [ 735.960887][ T987] usb 3-1: Manufacturer: syz [ 735.960899][ T987] usb 3-1: SerialNumber: syz [ 736.001548][ T987] usb 3-1: config 0 descriptor?? [ 736.873531][T13373] input: syz0 as /devices/virtual/input/input186 [ 736.902156][T13373] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1804'. [ 737.121985][T13378] qrtr: Invalid version 0 [ 737.257436][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 737.261912][T13381] syzkaller1: entered promiscuous mode [ 737.261928][T13381] syzkaller1: entered allmulticast mode [ 738.205298][T13397] input: syz0 as /devices/virtual/input/input187 [ 738.236883][T13397] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1811'. [ 738.237008][T13397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1811'. [ 738.410557][ T987] usb 3-1: NFC: intf ffff888033e4d000 id ffffffff8f85bc60 [ 738.468940][ T987] usb 3-1: USB disconnect, device number 65 [ 738.746634][T13407] input: syz0 as /devices/virtual/input/input188 [ 738.769678][T13407] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1814'. [ 738.769844][T13407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1814'. [ 739.140961][T13416] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 739.318429][T13412] bond5: entered promiscuous mode [ 739.318453][T13412] bond5: entered allmulticast mode [ 739.318788][T13412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 739.327489][ T7984] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 739.506719][ T7984] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 739.509341][ T7984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.509393][ T7984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 739.509430][ T7984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.509469][ T7984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.514600][ T7984] usb 2-1: config 0 descriptor?? [ 739.606175][ T5687] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 739.717550][T13425] binder: BINDER_SET_CONTEXT_MGR already set [ 739.717566][T13425] binder: 13424:13425 ioctl 4018620d 200000000040 returned -16 [ 739.759424][ T5687] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 739.775581][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.775612][ T5687] usb 3-1: Product: syz [ 739.775628][ T5687] usb 3-1: Manufacturer: syz [ 739.775643][ T5687] usb 3-1: SerialNumber: syz [ 739.817951][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 739.841520][T13415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1817'. [ 739.864391][ T5687] usb 3-1: config 0 descriptor?? [ 740.196739][ T7984] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf3 found [ 740.196768][ T7984] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf4 found [ 740.338844][T13412] bridge2: entered promiscuous mode [ 740.339537][T13412] bridge2: entered allmulticast mode [ 740.341930][T13412] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 740.382465][ T5687] usb 3-1: Firmware version (0.0) predates our first public release. [ 740.382493][ T5687] usb 3-1: Please update to version 0.2 or newer [ 740.432077][T11162] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 740.572885][T11162] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 740.607759][ T5673] usb 2-1: USB disconnect, device number 71 [ 740.650414][ T5687] usb 3-1: USB disconnect, device number 66 [ 740.948488][ T5616] udevd[5616]: setting mode of /dev/bus/usb/003/066 to 020664 failed: No such file or directory [ 740.948622][ T5616] udevd[5616]: setting owner of /dev/bus/usb/003/066 to uid=0, gid=0 failed: No such file or directory [ 741.396051][ T5687] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 741.497828][T13448] input: syz0 as /devices/virtual/input/input189 [ 741.527889][T13448] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1826'. [ 741.528005][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1826'. [ 741.554672][ T5687] usb 3-1: Using ep0 maxpacket: 16 [ 741.555535][ T5687] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 741.572743][ T5687] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 741.572771][ T5687] usb 3-1: config 4 has no interface number 0 [ 741.572820][ T5687] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 741.572847][ T5687] usb 3-1: config 4 interface 9 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 741.572867][ T5687] usb 3-1: config 4 interface 9 has no altsetting 0 [ 741.620560][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.620590][ T5687] usb 3-1: Product: syz [ 741.620605][ T5687] usb 3-1: Manufacturer: syz [ 741.620620][ T5687] usb 3-1: SerialNumber: syz [ 741.658838][T13442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.688778][ T5687] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 742.306825][ T31] audit: type=1326 audit(1789975835.849:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.307334][ T31] audit: type=1326 audit(1789975835.849:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.348464][ T31] audit: type=1326 audit(1789975835.889:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.348625][ T31] audit: type=1326 audit(1789975835.889:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.348872][ T31] audit: type=1326 audit(1789975835.889:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.349461][ T31] audit: type=1326 audit(1789975835.889:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.349786][ T31] audit: type=1326 audit(1789975835.889:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.350006][ T31] audit: type=1326 audit(1789975835.889:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.354423][ T31] audit: type=1326 audit(1789975835.889:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.355028][ T31] audit: type=1326 audit(1789975835.889:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.4.1830" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0f9e159 code=0x7ffc0000 [ 742.684115][T13470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.788042][ T38] usb 3-1: Failed to submit usb control message: -110 [ 742.788085][ T38] usb 3-1: unable to send the bmi data to the device: -110 [ 742.788105][ T38] usb 3-1: unable to get target info from device [ 742.788121][ T38] usb 3-1: could not get target info (-110) [ 742.788154][ T38] usb 3-1: could not probe fw (-110) [ 742.887970][ T5687] usb 3-1: USB disconnect, device number 67 [ 743.266666][T13479] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1833'. [ 744.186095][ T5673] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 744.346903][ T5673] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 744.392914][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.392946][ T5673] usb 4-1: Product: syz [ 744.392957][ T5673] usb 4-1: Manufacturer: syz [ 744.392968][ T5673] usb 4-1: SerialNumber: syz [ 746.102180][T13498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.310422][T13527] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1845'. [ 746.647467][ T5673] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 746.647530][ T5673] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 746.648289][ T5673] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 746.650451][ T5673] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 746.712653][ T5673] usb 4-1: USB disconnect, device number 75 [ 746.751769][T13537] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 746.757334][ T5686] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 746.907658][ T5686] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 746.927688][ T5686] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 746.927724][ T5686] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 746.927747][ T5686] usb 5-1: config 0 has no interface number 0 [ 746.928222][ T5686] usb 5-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 746.986761][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.986805][ T5686] usb 5-1: Product: syz [ 746.986817][ T5686] usb 5-1: Manufacturer: syz [ 746.986828][ T5686] usb 5-1: SerialNumber: syz [ 747.021706][ T5686] usb 5-1: config 0 descriptor?? [ 747.064024][ T5686] redrat3 5-1:0.83: Couldn't find all endpoints [ 747.202968][T13537] nvme_fabrics: missing parameter 'nqn=%s' [ 747.260330][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.260373][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.414698][T13546] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1849'. [ 747.415572][T13546] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1849'. [ 747.440534][T13546] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1849'. [ 747.790052][T13550] input: syz0 as /devices/virtual/input/input190 [ 747.814126][T13550] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1851'. [ 749.549316][T13574] input: syz0 as /devices/virtual/input/input191 [ 749.576144][T13574] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1857'. [ 749.905213][ T7984] usb 5-1: USB disconnect, device number 71 [ 750.270841][T13585] fuse: Bad value for 'group_id' [ 750.270863][T13585] fuse: Bad value for 'group_id' [ 750.401360][T13589] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 750.998464][ T5673] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 751.147270][ T5673] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 751.150052][ T5673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.150072][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 751.152654][ T5673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 751.152675][ T5673] usb 4-1: SerialNumber: syz [ 751.210500][ T5673] usb 4-1: config 0 descriptor?? [ 751.229856][ T5673] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 751.231655][ T5673] dvb-usb: bulk message failed: -22 (3/0) [ 751.254408][ T5673] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 751.255424][ T5673] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 751.255479][ T5673] usb 4-1: media controller created [ 751.296386][ T5673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.330318][ T5673] dvb-usb: bulk message failed: -22 (6/0) [ 751.331117][ T5673] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 751.352110][ T5673] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input192 [ 751.377588][ T5673] dvb-usb: schedule remote query interval to 150 msecs. [ 751.377617][ T5673] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 751.536048][ T5673] dvb-usb: bulk message failed: -22 (1/0) [ 751.536083][ T5673] dvb-usb: error while querying for an remote control event. [ 751.540680][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.541002][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.696529][ T5673] dvb-usb: bulk message failed: -22 (1/0) [ 751.696567][ T5673] dvb-usb: error while querying for an remote control event. [ 751.855998][ T5673] dvb-usb: bulk message failed: -22 (1/0) [ 751.856035][ T5673] dvb-usb: error while querying for an remote control event. [ 752.016045][ T5706] dvb-usb: bulk message failed: -22 (1/0) [ 752.016081][ T5706] dvb-usb: error while querying for an remote control event. [ 752.176013][ T5673] dvb-usb: bulk message failed: -22 (1/0) [ 752.176048][ T5673] dvb-usb: error while querying for an remote control event. [ 752.346049][ T5673] dvb-usb: bulk message failed: -22 (1/0) [ 752.346092][ T5673] dvb-usb: error while querying for an remote control event. [ 752.434187][ T5673] usb 4-1: USB disconnect, device number 76 [ 752.548447][ T5673] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 753.070592][T13619] input: syz0 as /devices/virtual/input/input193 [ 753.093121][T13619] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1869'. [ 753.093289][T13619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1869'. [ 754.121938][T13635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.242751][T13647] sock: sock_timestamping_bind_phc: sock not bind to device [ 756.103458][T13653] ip6tnl1: entered allmulticast mode [ 756.456190][ T1228] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 756.508315][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.508557][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.536166][ T7984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.607594][ T1228] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 756.609293][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.637612][ T1228] usb 3-1: config 0 descriptor?? [ 756.938352][ T7984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.001765][ T1228] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 757.036342][ T7984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.306138][ T1228] [drm:udl_init] *ERROR* Selecting channel failed [ 757.683718][ T1228] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 757.683748][ T1228] [drm] Initialized udl on minor 1 [ 757.996050][ T1228] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 758.110651][ T1228] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 758.361443][ T1228] usb 3-1: USB disconnect, device number 68 [ 758.891958][T13673] input: syz0 as /devices/virtual/input/input194 [ 758.941087][T13673] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1881'. [ 758.941235][T13673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1881'. [ 759.273770][ T31] kauditd_printk_skb: 147 callbacks suppressed [ 759.273790][ T31] audit: type=1326 audit(1789975852.809:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6699e159 code=0x7ffc0000 [ 759.273998][ T31] audit: type=1326 audit(1789975852.809:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6699e159 code=0x7ffc0000 [ 759.348665][ T31] audit: type=1326 audit(1789975852.889:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6695e98e code=0x7ffc0000 [ 759.349564][ T31] audit: type=1326 audit(1789975852.889:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.349947][ T31] audit: type=1326 audit(1789975852.889:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.434409][ T31] audit: type=1326 audit(1789975852.979:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.434759][ T31] audit: type=1326 audit(1789975852.979:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.467315][T13664] ALSA: mixer_oss: invalid OSS volume '' [ 759.494922][ T31] audit: type=1326 audit(1789975853.039:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.587568][ T31] audit: type=1326 audit(1789975853.129:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.686059][ T1228] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 759.691345][ T31] audit: type=1326 audit(1789975853.229:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.2.1882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f6699ddeb code=0x7ffc0000 [ 759.837631][ T1228] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 759.862685][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.862717][ T1228] usb 3-1: Product: syz [ 759.862735][ T1228] usb 3-1: Manufacturer: syz [ 759.862751][ T1228] usb 3-1: SerialNumber: syz [ 760.259798][T13688] kAFS: unable to lookup cell '(,c' [ 760.696375][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.894359][T13693] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 761.852823][T13705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.038749][ T1228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 762.038812][ T1228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 762.039524][ T1228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 762.099314][ T1228] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 762.167990][ T1228] usb 3-1: USB disconnect, device number 69 [ 763.170781][T13717] input: syz0 as /devices/virtual/input/input195 [ 763.260077][T13717] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1890'. [ 763.634803][T13723] input: syz0 as /devices/virtual/input/input196 [ 763.670227][T13723] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1892'. [ 764.046007][ T7984] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 764.198508][ T7984] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 764.242963][ T7984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.242986][ T7984] usb 4-1: Product: syz [ 764.242997][ T7984] usb 4-1: Manufacturer: syz [ 764.243008][ T7984] usb 4-1: SerialNumber: syz [ 765.468583][ T7984] rtl8150 4-1:1.0: couldn't reset the device [ 765.468830][ T7984] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 765.766724][ T7984] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 765.789826][ T8745] usb 4-1: USB disconnect, device number 77 [ 765.917406][ T7984] usb 2-1: Using ep0 maxpacket: 16 [ 765.918703][ T7984] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 765.919976][ T7984] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 765.919997][ T7984] usb 2-1: config 4 has no interface number 0 [ 765.920029][ T7984] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 765.920050][ T7984] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 765.920069][ T7984] usb 2-1: config 4 interface 9 has no altsetting 0 [ 765.983976][ T7984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.984099][ T7984] usb 2-1: Product: syz [ 765.984141][ T7984] usb 2-1: Manufacturer: syz [ 765.984183][ T7984] usb 2-1: SerialNumber: syz [ 766.043446][T13739] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 766.043600][T13739] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 766.088111][ T7984] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 767.042344][ T31] kauditd_printk_skb: 85 callbacks suppressed [ 767.042366][ T31] audit: type=1326 audit(1789975860.579:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 767.042480][ T31] audit: type=1326 audit(1789975860.579:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 767.125640][ T31] audit: type=1326 audit(1789975860.659:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcd875e98e code=0x7ffc0000 [ 767.125699][ T31] audit: type=1326 audit(1789975860.659:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 767.125769][ T31] audit: type=1326 audit(1789975860.659:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 767.203238][ T6352] usb 2-1: Failed to submit usb control message: -110 [ 767.203395][ T6352] usb 2-1: unable to send the bmi data to the device: -110 [ 767.203667][ T6352] usb 2-1: unable to get target info from device [ 767.203722][ T6352] usb 2-1: could not get target info (-110) [ 767.203852][ T6352] usb 2-1: could not probe fw (-110) [ 767.292112][ T31] audit: type=1326 audit(1789975860.829:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 767.292156][ T31] audit: type=1326 audit(1789975860.829:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13760 comm="syz.0.1900" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 767.538526][T13767] input: syz0 as /devices/virtual/input/input197 [ 767.569432][T13767] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1902'. [ 767.569596][T13767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1902'. [ 767.587436][T13768] input: syz0 as /devices/virtual/input/input198 [ 767.674962][T13768] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1903'. [ 767.675014][T13768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1903'. [ 767.713731][ T5616] udevd[5616]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 767.713823][ T5616] udevd[5616]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 768.238034][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 769.016313][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 769.110364][ T7984] usb 2-1: USB disconnect, device number 72 [ 771.220679][T13815] input: syz0 as /devices/virtual/input/input199 [ 771.288521][T13815] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1914'. [ 771.685246][T13823] kAFS: unable to lookup cell '(,c' [ 772.357167][T13829] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1917'. [ 772.357242][T13829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1917'. [ 772.845598][T13837] bridge0: port 5(veth0) entered disabled state [ 772.845961][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.846629][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.877109][T13837] bridge0: entered allmulticast mode [ 772.969114][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'. [ 774.393482][T13854] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 774.637073][T13857] input: syz0 as /devices/virtual/input/input201 [ 774.677923][T13857] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1925'. [ 775.039764][T13864] input: syz0 as /devices/virtual/input/input202 [ 775.075743][T13864] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1927'. [ 775.371184][T13868] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1929'. [ 775.764457][T13874] input: syz0 as /devices/virtual/input/input204 [ 775.791164][T13874] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1930'. [ 778.002906][T13899] input: syz0 as /devices/virtual/input/input205 [ 778.049010][T13899] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1937'. [ 778.352188][T13905] input: syz0 as /devices/virtual/input/input206 [ 778.399232][T13905] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1939'. [ 778.773827][T13914] input: syz0 as /devices/virtual/input/input207 [ 778.823509][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 778.851378][T13914] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1942'. [ 779.384574][T13922] input: syz0 as /devices/virtual/input/input208 [ 779.419229][T13922] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1944'. [ 779.853128][T13925] input: syz0 as /devices/virtual/input/input209 [ 779.884759][T13925] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1945'. [ 780.347642][T13933] input: syz0 as /devices/virtual/input/input210 [ 780.388068][T13933] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1949'. [ 780.602765][T13936] input: syz0 as /devices/virtual/input/input211 [ 780.623331][T13936] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1951'. [ 780.623487][T13936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1951'. [ 780.815077][T13943] input: syz0 as /devices/virtual/input/input212 [ 780.858867][T13943] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1953'. [ 780.928452][T13937] CUSE: unknown device info "n|zQC*" [ 780.928467][T13937] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 780.928478][T13937] CUSE: unknown device info "" [ 780.928485][T13937] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨gIPYV" [ 780.928494][T13937] CUSE: DEVNAME unspecified [ 782.806806][T13976] input: syz0 as /devices/virtual/input/input213 [ 784.641196][T13996] input: syz0 as /devices/virtual/input/input214 [ 784.675789][T13996] __nla_validate_parse: 4 callbacks suppressed [ 784.675815][T13996] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1964'. [ 784.740678][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 785.236074][ T1228] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 785.341121][T14010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.386105][ T1228] usb 5-1: Using ep0 maxpacket: 16 [ 785.386747][ T1228] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 785.386777][ T1228] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 785.387928][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.393202][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.394626][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.417302][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.433906][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.497082][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.502492][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.507869][ T1228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.547425][ T1228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 785.547449][ T1228] usb 5-1: SerialNumber: syz [ 785.555515][ T1228] usb 5-1: config 0 descriptor?? [ 785.608837][ T1228] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input215 [ 785.844831][T14007] fuse: Unknown parameter '@' [ 786.296163][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 786.735816][T14014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1968'. [ 786.760077][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1968'. [ 786.760648][T14016] input: syz0 as /devices/virtual/input/input217 [ 786.830232][T14017] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1969'. [ 786.830435][T14017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'. [ 787.193955][T14028] input: syz0 as /devices/virtual/input/input218 [ 787.267017][T14030] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1973'. [ 788.125691][ T4969] bcm5974 5-1:0.0: could not read from device [ 788.151998][ T4969] bcm5974 5-1:0.0: could not read from device [ 788.223052][ T1228] usb 5-1: USB disconnect, device number 72 [ 788.236314][ T4969] bcm5974 5-1:0.0: could not read from device [ 788.494408][T14047] input: syz0 as /devices/virtual/input/input219 [ 788.529464][T14047] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1977'. [ 789.259218][T14061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.479492][T14063] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1980'. [ 789.729873][T14065] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1981'. [ 790.143949][T14071] No buffer was provided with the request [ 790.531731][T14076] input: syz0 as /devices/virtual/input/input221 [ 790.562942][T14076] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1985'. [ 790.783076][T14079] input: syz0 as /devices/virtual/input/input222 [ 790.830121][T14079] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1986'. [ 790.973190][T14081] xt_policy: output policy not valid in PREROUTING and INPUT [ 791.279592][T14088] input: syz0 as /devices/virtual/input/input223 [ 791.309057][T14088] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1989'. [ 791.454147][T14086] IPv6: Can't replace route, no match found [ 791.655095][T14097] input: syz0 as /devices/virtual/input/input224 [ 791.692446][T14097] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1992'. [ 792.224199][T14109] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 792.224286][T14109] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 792.991988][T14118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.111962][T14122] input: syz0 as /devices/virtual/input/input225 [ 794.138030][T14122] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1997'. [ 794.138187][T14122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1997'. [ 794.344623][T14127] input: syz0 as /devices/virtual/input/input226 [ 794.388743][T14127] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1999'. [ 794.741924][T14139] input: syz0 as /devices/virtual/input/input227 [ 794.771092][T14140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.828811][T14139] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2002'. [ 794.884206][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'. [ 794.916935][T14137] hsr_slave_0: left promiscuous mode [ 794.960847][T14137] hsr_slave_1: left promiscuous mode [ 795.473463][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.696261][ T7984] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 795.846961][ T7984] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 795.848355][ T7984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.848391][ T7984] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 795.848426][ T7984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.856028][ T7984] usb 2-1: config 0 descriptor?? [ 796.226286][ T1228] usb 2-1: USB disconnect, device number 73 [ 796.636028][T14154] input: syz0 as /devices/virtual/input/input228 [ 796.674836][T14154] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2004'. [ 797.110117][ T8745] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 797.193535][T14162] usb usb7: usbfs: process 14162 (syz.0.2007) did not claim interface 0 before use [ 797.272875][ T8745] usb 4-1: Using ep0 maxpacket: 8 [ 797.275384][ T8745] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 797.310008][ T8745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.310029][ T8745] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 797.310079][ T8745] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.360770][ T8745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.360793][ T8745] usb 4-1: Product: syz [ 797.360804][ T8745] usb 4-1: Manufacturer: syz [ 797.360815][ T8745] usb 4-1: SerialNumber: syz [ 797.465795][T14167] C: renamed from veth1_to_team [ 797.545349][T14167] netlink: 'syz.1.2008': attribute type 3 has an invalid length. [ 797.545378][T14167] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2008'. [ 797.545392][T14167] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 799.096204][T14183] input: syz0 as /devices/virtual/input/input229 [ 799.137255][T14183] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2010'. [ 799.137396][T14183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2010'. [ 799.601104][T14191] input: syz0 as /devices/virtual/input/input230 [ 799.702081][T14191] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2012'. [ 802.334728][T14212] input: syz0 as /devices/virtual/input/input231 [ 802.417849][T14212] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2017'. [ 802.417964][T14212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2017'. [ 802.748876][ T8745] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 802.790952][ T8745] usb 4-1: USB disconnect, device number 78 [ 803.031782][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.128957][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 803.156768][ T5706] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 803.309399][ T5706] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 803.313441][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.313525][ T5706] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.313550][ T5706] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 803.378463][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.378495][ T5706] usb 2-1: Product: syz [ 803.378511][ T5706] usb 2-1: Manufacturer: syz [ 803.378527][ T5706] usb 2-1: SerialNumber: syz [ 803.689626][ T5706] snd-usb-caiaq 2-1:1.0: invalid EPs [ 803.689646][ T5706] usb 2-1: unable to init card! (ret=-22) [ 803.690142][ T5706] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 803.937459][T14215] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 803.937520][T14215] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 804.009627][ T5687] usb 2-1: USB disconnect, device number 74 [ 804.229740][T14234] input: syz0 as /devices/virtual/input/input232 [ 804.266264][T14234] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2023'. [ 804.832914][T11155] tipc: Subscription rejected, illegal request [ 805.846047][ T1228] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 806.006426][ T1228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 806.006483][ T1228] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 806.012304][ T1228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.012337][ T1228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.071793][ T1228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.071814][ T1228] usb 5-1: Product: syz [ 806.071825][ T1228] usb 5-1: Manufacturer: syz [ 806.071836][ T1228] usb 5-1: SerialNumber: syz [ 806.120565][ T1228] usb 5-1: selecting invalid altsetting 1 [ 806.121581][ T1228] usb 5-1: unit 6 not found! [ 806.335806][ T1228] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 806.720543][ T1228] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 806.963498][ T7984] usb 5-1: USB disconnect, device number 73 [ 807.048053][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.826871][T14272] input: syz0 as /devices/virtual/input/input233 [ 807.859310][T14272] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2029'. [ 807.859473][T14272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2029'. [ 808.705348][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.705416][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.727766][T14292] input: syz0 as /devices/virtual/input/input234 [ 810.820126][T14292] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2035'. [ 814.920248][T14327] input: syz0 as /devices/virtual/input/input235 [ 815.050025][T14327] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2043'. [ 815.703330][T14332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.936414][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 819.520252][ T31] audit: type=1326 audit(1789975913.059:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 819.520512][ T31] audit: type=1326 audit(1789975913.059:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 819.629573][ T31] audit: type=1326 audit(1789975913.169:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 819.629826][ T31] audit: type=1326 audit(1789975913.169:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 819.630188][ T31] audit: type=1326 audit(1789975913.169:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd879e159 code=0x7ffc0000 [ 819.720581][ T31] audit: type=1326 audit(1789975913.239:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcd875e98e code=0x7ffc0000 [ 819.720643][ T31] audit: type=1326 audit(1789975913.239:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 819.784547][ T31] audit: type=1326 audit(1789975913.239:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 819.815356][ T31] audit: type=1326 audit(1789975913.329:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 819.862866][ T31] audit: type=1326 audit(1789975913.399:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.2052" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcd879ddeb code=0x7ffc0000 [ 822.225162][T14387] kvm: emulating exchange as write [ 823.995448][T14401] netlink: 'syz.3.2060': attribute type 21 has an invalid length. [ 823.995773][T14401] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2060'. [ 824.483125][T14409] bond0: (slave bond_slave_1): Releasing backup interface [ 826.530859][T14427] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 826.530949][T14427] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 827.913111][T14443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2067'. [ 829.755063][T14450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.508511][T14458] input: syz1 as /devices/virtual/input/input236 [ 835.105110][T14490] overlay: Unknown parameter 'NR?˭S_%Nh٦p(`jrGp]M!*[6O86_;*\34u 7"1o"t' [ 836.425975][ T1228] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 836.577190][ T1228] usb 3-1: Using ep0 maxpacket: 16 [ 836.578028][ T1228] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 836.579159][ T1228] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 836.579183][ T1228] usb 3-1: config 4 has no interface number 0 [ 836.579227][ T1228] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 836.579254][ T1228] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 836.579280][ T1228] usb 3-1: config 4 interface 9 has no altsetting 0 [ 836.581275][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.581301][ T1228] usb 3-1: Product: syz [ 836.581317][ T1228] usb 3-1: Manufacturer: syz [ 836.581334][ T1228] usb 3-1: SerialNumber: syz [ 836.585506][T14496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 836.585654][T14496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 836.699527][ T1228] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 837.737311][T11155] usb 3-1: Failed to submit usb control message: -110 [ 837.737352][T11155] usb 3-1: unable to send the bmi data to the device: -110 [ 837.737372][T11155] usb 3-1: unable to get target info from device [ 837.737389][T11155] usb 3-1: could not get target info (-110) [ 837.737426][T11155] usb 3-1: could not probe fw (-110) [ 838.620815][ T5687] usb 3-1: USB disconnect, device number 70 [ 839.315108][T14518] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 839.475074][T14522] input: syz0 as /devices/virtual/input/input237 [ 839.531062][T14522] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2087'. [ 839.531156][T14522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2087'. [ 844.124925][ T4934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.134950][ T4934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.150807][ T4934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.180403][ T4934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.195169][ T4934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.404341][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 844.515657][T14557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.112564][ T6352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.112607][ T6352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.351270][ T6352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.351311][ T6352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.750302][ T6352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.750343][ T6352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.009228][ T6352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.009259][ T6352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.298084][ T5619] Bluetooth: hci5: command tx timeout [ 846.384336][T14556] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.384732][T14556] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.385443][T14556] bridge_slave_0: entered allmulticast mode [ 846.393769][T14556] bridge_slave_0: entered promiscuous mode [ 846.423332][T14556] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.423464][T14556] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.423681][T14556] bridge_slave_1: entered allmulticast mode [ 846.442513][T14556] bridge_slave_1: entered promiscuous mode [ 846.477685][ T7984] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 846.626258][ T7984] usb 2-1: Using ep0 maxpacket: 8 [ 846.648472][ T7984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.648529][ T7984] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 846.729369][ T7984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.729401][ T7984] usb 2-1: Product: syz [ 846.729418][ T7984] usb 2-1: Manufacturer: syz [ 846.729434][ T7984] usb 2-1: SerialNumber: syz [ 847.126124][T14556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.143553][T14556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.168536][ T7984] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 847.256380][ T5687] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 847.367877][ T7984] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 847.399349][ T7984] usb 2-1: USB disconnect, device number 75 [ 847.427574][ T5687] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 847.428682][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.428709][ T5687] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 847.435793][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.477579][ T5687] usb 3-1: Product: syz [ 847.477601][ T5687] usb 3-1: Manufacturer: syz [ 847.477617][ T5687] usb 3-1: SerialNumber: syz [ 847.543737][T14556] team0: Port device team_slave_0 added [ 847.585510][T14556] team0: Port device team_slave_1 added [ 847.598877][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.923400][ T6352] pimreg: left allmulticast mode [ 848.033730][ T5706] usb 3-1: USB disconnect, device number 71 [ 848.379816][ T5619] Bluetooth: hci5: command tx timeout [ 848.874780][T14600] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 848.874969][T14600] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 849.278757][ T6352] bond0 (unregistering): Released all slaves [ 849.302738][T14556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.302776][T14556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.302830][T14556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.357216][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 849.358436][T14556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.358453][T14556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.358482][T14556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.406681][ T5687] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 849.554535][ T6352] tipc: Disabling bearer [ 849.554977][ T6352] tipc: Left network mode [ 849.597291][ T5687] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 849.600789][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.600819][ T5687] usb 2-1: Product: syz [ 849.600916][ T5687] usb 2-1: Manufacturer: syz [ 849.600936][ T5687] usb 2-1: SerialNumber: syz [ 849.704462][T14556] hsr_slave_0: entered promiscuous mode [ 849.718776][T14556] hsr_slave_1: entered promiscuous mode [ 849.732807][T14556] debugfs: 'hsr0' already exists in 'hsr' [ 849.732871][T14556] Cannot create hsr debugfs directory [ 850.456127][ T5619] Bluetooth: hci5: command tx timeout [ 850.793936][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 850.828054][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 850.844190][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.860306][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.865164][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 850.914026][T14609] tipc: Started in network mode [ 850.914125][T14609] tipc: Node identity ac1414aa, cluster identity 4711 [ 850.979706][T14609] tipc: Enabling of bearer rejected, failed to enable media [ 851.540475][T14603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.729975][ T6352] veth1_macvtap: left promiscuous mode [ 851.730075][ T6352] veth0_macvtap: left promiscuous mode [ 851.730328][ T6352] veth1_vlan: left promiscuous mode [ 851.730442][ T6352] veth0_vlan: left promiscuous mode [ 852.028101][ T5687] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 852.028167][ T5687] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 852.029062][ T5687] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 852.078961][ T5687] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 852.102453][ T5687] usb 2-1: USB disconnect, device number 76 [ 852.536021][ T4934] Bluetooth: hci5: command tx timeout [ 852.950265][ T4934] Bluetooth: hci4: command tx timeout [ 853.772607][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 855.017093][ T4934] Bluetooth: hci4: command tx timeout [ 855.102026][T14659] sg_write: data in/out 548828/136 bytes for SCSI command 0x0-- guessing data in; [ 855.102026][T14659] program syz.1.2110 not setting count and/or reply_len properly [ 855.171221][T14659] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 855.171331][T14659] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 855.174857][ T6352] IPVS: stop unused estimator thread 0... [ 855.234229][T14659] tipc: Enabling of bearer rejected, already enabled [ 855.421005][T14556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 855.463499][T14556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 855.488926][T14556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 855.548973][T14556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 855.549965][T14556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 855.634655][T14556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 855.685492][T14556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 855.728876][T14556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 855.912694][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 855.992527][T14677] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 856.143296][T14681] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 856.143392][T14681] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 856.796936][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.797522][T14619] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.797711][T14619] bridge_slave_0: entered allmulticast mode [ 856.825687][T14619] bridge_slave_0: entered promiscuous mode [ 856.900389][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.900506][T14619] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.900705][T14619] bridge_slave_1: entered allmulticast mode [ 856.931100][T14619] bridge_slave_1: entered promiscuous mode [ 857.105991][ T4934] Bluetooth: hci4: command tx timeout [ 857.317567][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.364107][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.584366][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 857.595285][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 857.620021][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 857.621891][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 857.630452][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 857.899570][T14619] team0: Port device team_slave_0 added [ 858.405607][T14619] team0: Port device team_slave_1 added [ 858.699604][T14556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.701154][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.701171][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.701200][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.840496][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.840518][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.840552][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.187392][ T5619] Bluetooth: hci4: command tx timeout [ 859.481643][T14556] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.542843][T14619] hsr_slave_0: entered promiscuous mode [ 859.548272][T14619] hsr_slave_1: entered promiscuous mode [ 859.562762][T14619] debugfs: 'hsr0' already exists in 'hsr' [ 859.562788][T14619] Cannot create hsr debugfs directory [ 859.681681][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.681795][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.749787][ T5619] Bluetooth: hci3: command tx timeout [ 859.975912][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.976036][ T6352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.116766][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 860.386619][ T5706] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 860.549151][ T5706] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 860.577467][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.577536][ T5706] usb 3-1: Product: syz [ 860.577593][ T5706] usb 3-1: Manufacturer: syz [ 860.577630][ T5706] usb 3-1: SerialNumber: syz [ 861.354838][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.355021][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.355168][T14695] bridge_slave_0: entered allmulticast mode [ 861.364369][T14695] bridge_slave_0: entered promiscuous mode [ 861.409560][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.409682][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.410155][T14695] bridge_slave_1: entered allmulticast mode [ 861.412773][T14695] bridge_slave_1: entered promiscuous mode [ 861.500247][T14695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.538580][T14695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.577935][ T8745] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 861.634096][T14695] team0: Port device team_slave_0 added [ 861.651262][T14695] team0: Port device team_slave_1 added [ 861.669517][T14619] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 861.687381][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.689741][T14619] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 861.714551][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.733200][ T8745] usb 2-1: Using ep0 maxpacket: 16 [ 861.743188][ T8745] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 861.749250][ T8745] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 861.749316][ T8745] usb 2-1: config 4 has no interface number 0 [ 861.749424][ T8745] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 861.749520][ T8745] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 861.749579][ T8745] usb 2-1: config 4 interface 9 has no altsetting 0 [ 861.790613][T14556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.792396][T14619] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 861.819875][ T5619] Bluetooth: hci3: command tx timeout [ 861.829625][ T8745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.829663][ T8745] usb 2-1: Product: syz [ 861.829692][ T8745] usb 2-1: Manufacturer: syz [ 861.829704][ T8745] usb 2-1: SerialNumber: syz [ 861.872643][T14723] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.873061][T14723] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.896839][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.897917][T14619] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 861.963175][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.966550][T14695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.966570][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.966599][T14695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.969441][T14695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.969484][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.969557][T14695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.978308][ T8745] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 862.322660][T14695] hsr_slave_0: entered promiscuous mode [ 862.324338][T14695] hsr_slave_1: entered promiscuous mode [ 862.325599][T14695] debugfs: 'hsr0' already exists in 'hsr' [ 862.325622][T14695] Cannot create hsr debugfs directory [ 862.401550][T14710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.914425][T14556] veth0_vlan: entered promiscuous mode [ 862.924282][ T5706] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 862.924425][ T5706] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 862.964258][ T5706] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 862.987754][ T5706] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 863.066292][ T5706] usb 3-1: USB disconnect, device number 72 [ 863.117196][T14556] veth1_vlan: entered promiscuous mode [ 863.177814][T11162] usb 2-1: Failed to submit usb control message: -110 [ 863.177855][T11162] usb 2-1: unable to send the bmi data to the device: -110 [ 863.177875][T11162] usb 2-1: unable to get target info from device [ 863.177892][T11162] usb 2-1: could not get target info (-110) [ 863.177926][T11162] usb 2-1: could not probe fw (-110) [ 863.331302][T14695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.347619][T14695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.353652][T14695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.380597][T14695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.397987][T14619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.398292][T14695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.401243][T14695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.437365][T14695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 863.452000][T14695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.452927][T14556] veth0_macvtap: entered promiscuous mode [ 863.517889][T14556] veth1_macvtap: entered promiscuous mode [ 863.561129][T14619] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.659444][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.659630][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.723436][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.723551][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.752112][T14556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.791892][T14556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.855173][T14748] syz_tun: entered promiscuous mode [ 863.860757][T14748] syz_tun: left promiscuous mode [ 863.903318][ T5619] Bluetooth: hci3: command tx timeout [ 863.986674][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.026565][ T141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.027564][ T141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.027619][ T141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.209845][ T5706] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 864.345500][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.345542][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.397213][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 864.398596][ T5706] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 864.400991][ T5706] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 864.461739][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.461805][ T5706] usb 3-1: Product: syz [ 864.461842][ T5706] usb 3-1: Manufacturer: syz [ 864.461877][ T5706] usb 3-1: SerialNumber: syz [ 864.503854][T11162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.503912][T11162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.510923][ T5706] usb 3-1: config 0 descriptor?? [ 864.635736][T14695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.657930][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.754903][T14695] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.840576][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.840820][T11155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.948143][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.948219][T11155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.042544][ T5706] usb 3-1: USB disconnect, device number 73 [ 865.045456][ T5687] usb 2-1: USB disconnect, device number 77 [ 865.201270][T14619] veth0_vlan: entered promiscuous mode [ 865.261844][T14619] veth1_vlan: entered promiscuous mode [ 865.464986][ T7981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 865.599608][T14619] veth0_macvtap: entered promiscuous mode [ 865.628190][ T7981] usb 6-1: Using ep0 maxpacket: 16 [ 865.629072][ T7981] usb 6-1: New USB device found, idVendor=05ac, idProduct=0d69, bcdDevice= 0.00 [ 865.630595][ T7981] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.630630][ T7981] usb 6-1: config 0 interface 0 has no altsetting 0 [ 865.630667][ T7981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.634343][ T7981] usb 6-1: config 0 descriptor?? [ 865.682075][T14619] veth1_macvtap: entered promiscuous mode [ 865.858125][ T5687] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 865.878869][T14695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.914096][T14619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.955358][T14619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.977908][ T5619] Bluetooth: hci3: command tx timeout [ 866.006055][ T5687] usb 2-1: Using ep0 maxpacket: 32 [ 866.006877][ T5687] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 866.008344][ T5687] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 866.008372][ T5687] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 866.008395][ T5687] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 866.008419][ T5687] usb 2-1: config 1 has no interface number 0 [ 866.008490][ T5687] usb 2-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 866.008514][ T5687] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 866.008558][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.125184][ T5687] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 866.246186][ T141] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.246243][ T141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.246321][ T141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.246364][ T141] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.979434][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.979459][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.197875][T14695] veth0_vlan: entered promiscuous mode [ 867.300517][T11155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.300581][T11155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.389537][T14695] veth1_vlan: entered promiscuous mode [ 867.743205][T14695] veth0_macvtap: entered promiscuous mode [ 867.852459][T14695] veth1_macvtap: entered promiscuous mode [ 868.090223][T14695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.379744][T14695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.534616][ T5687] snd_usb_pod 2-1:1.1: set_interface failed [ 868.535011][ T5687] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 868.552544][ T5687] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 868.586186][ T5687] usb 2-1: USB disconnect, device number 78 [ 868.956551][ T141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.956667][ T141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.956713][ T141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.956787][ T141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.411906][T14784] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 869.442529][T14784] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 870.145107][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.145172][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.373687][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.373711][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.180629][ T7981] usbhid 6-1:0.0: can't add hid device: -32 [ 871.180745][ T7981] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 871.184658][T11155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.184718][T11155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.704928][ T5706] usb 6-1: USB disconnect, device number 2 [ 872.206375][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'. [ 872.509207][T14805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.777329][ T7981] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 872.950438][ T7981] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 872.965429][ T7981] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 872.965511][ T7981] usb 3-1: Product: syz [ 872.965552][ T7981] usb 3-1: SerialNumber: syz [ 872.993407][ T7981] usb 3-1: config 0 descriptor?? [ 873.132352][T14816] overlay: Unknown parameter 'NR?˭S_%Nh٦p(`jrGp]M!*[6O86_;*\34u 7"1o"t' [ 874.174272][T14824] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2129'. [ 874.174791][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2129'. [ 874.783832][ T7981] usb 3-1: USB disconnect, device number 74 [ 875.487430][ T8718] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 875.666142][ T8718] usb 6-1: Using ep0 maxpacket: 16 [ 875.686845][ T8718] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 875.691212][ T8718] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 875.691280][ T8718] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 875.691343][ T8718] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 875.691408][ T8718] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 875.691470][ T8718] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 875.691513][ T8718] usb 6-1: config 0 has no interface number 0 [ 875.691642][ T8718] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 875.691702][ T8718] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 875.691769][ T8718] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 875.691841][ T8718] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.691897][ T8718] usb 6-1: config 0 interface 125 has no altsetting 0 [ 875.691938][ T8718] usb 6-1: config 0 interface 125 has no altsetting 2 [ 875.738264][ T8718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.738300][ T8718] usb 6-1: Product: syz [ 875.738325][ T8718] usb 6-1: Manufacturer: syz [ 875.738336][ T8718] usb 6-1: SerialNumber: syz [ 875.866259][ T8718] usb 6-1: config 0 descriptor?? [ 875.891104][ T8718] usb 6-1: selecting invalid altsetting 2 [ 876.948068][ T8718] get_1284_register timeout [ 876.948243][ C0] usb 6-1: async_complete: urb error -104 [ 876.948346][ C0] usb 6-1: async_complete: urb error -104 [ 877.209043][ T8718] usb 6-1: USB disconnect, device number 3 [ 877.993377][T14864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.957801][T14875] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2138'. [ 878.996306][ T7981] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 879.148249][ T7981] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 879.188464][T14880] loop8: detected capacity change from 0 to 7 [ 879.190872][ T7981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.190902][ T7981] usb 2-1: Product: syz [ 879.190919][ T7981] usb 2-1: Manufacturer: syz [ 879.190935][ T7981] usb 2-1: SerialNumber: syz [ 879.241415][T14880] Dev loop8: unable to read RDB block 7 [ 879.241466][T14880] loop8: unable to read partition table [ 879.241708][T14880] loop8: partition table beyond EOD, truncated [ 879.257868][T14880] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 879.422260][T14875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.522964][T14886] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 879.523095][T14886] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 882.270738][ T7981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 882.270804][ T7981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 882.271540][ T7981] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 882.307780][ T7981] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 882.454630][ T7981] usb 2-1: USB disconnect, device number 79 [ 882.800035][T14902] input: syz0 as /devices/virtual/input/input238 [ 882.866379][T14902] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2143'. [ 882.866454][T14902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2143'. [ 885.396396][ T7981] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 885.496226][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 885.527866][ T7981] usb 6-1: device descriptor read/64, error -71 [ 885.767774][ T7981] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 885.936476][ T7981] usb 6-1: device descriptor read/64, error -71 [ 886.046691][ T7981] usb usb6-port1: attempt power cycle [ 886.393734][ T7981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 886.431332][ T7981] usb 6-1: device descriptor read/8, error -71 [ 886.666789][ T7981] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 886.688701][ T7981] usb 6-1: device descriptor read/8, error -71 [ 886.797959][ T7981] usb usb6-port1: unable to enumerate USB device [ 890.391492][T14954] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2152'. [ 890.448183][T14963] input: syz0 as /devices/virtual/input/input239 [ 890.550949][T14963] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2153'. [ 890.958987][T14968] input: syz0 as /devices/virtual/input/input240 [ 891.092539][T14968] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2154'. [ 891.092612][T14968] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2154'. [ 891.819834][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805846f400: rx timeout, send abort [ 894.251231][T15000] openvswitch: netlink: Actions may not be safe on all matching packets [ 894.876462][ T5708] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 895.028304][ T5708] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 895.054286][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.054318][ T5708] usb 2-1: Product: syz [ 895.054335][ T5708] usb 2-1: Manufacturer: syz [ 895.054352][ T5708] usb 2-1: SerialNumber: syz [ 895.596242][T15015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.984223][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 896.052938][T15014] hsr_slave_0: left promiscuous mode [ 896.094416][T15014] hsr_slave_1: left promiscuous mode [ 897.103356][T15021] netlink: 'syz.7.2165': attribute type 4 has an invalid length. [ 897.235699][T15023] input: syz0 as /devices/virtual/input/input241 [ 897.319885][T15023] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2166'. [ 897.322181][T15023] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2166'. [ 898.410133][ T5708] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 898.410197][ T5708] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 898.410937][ T5708] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 898.415752][ T5708] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 898.492522][ T5708] usb 2-1: USB disconnect, device number 80 [ 898.885924][ T7984] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 899.036060][ T7984] usb 6-1: Using ep0 maxpacket: 8 [ 899.036840][ T7984] usb 6-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 899.061279][ T7984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.061307][ T7984] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 899.092963][ T7984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.092986][ T7984] usb 6-1: Product: syz [ 899.092997][ T7984] usb 6-1: Manufacturer: syz [ 899.093009][ T7984] usb 6-1: SerialNumber: syz [ 900.431301][ T7984] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 900.498493][ T7984] usb 6-1: USB disconnect, device number 8 [ 901.050515][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.141104][T15064] input: syz0 as /devices/virtual/input/input242 [ 904.739740][T15072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.586254][ T5708] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 907.737900][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 907.738944][ T5708] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 907.741386][ T5708] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 907.741414][ T5708] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 907.741437][ T5708] usb 3-1: config 166 has no interface number 0 [ 907.741456][ T5708] usb 3-1: config 166 has no interface number 1 [ 907.741508][ T5708] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 907.741531][ T5708] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 907.741567][ T5708] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 907.741594][ T5708] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 907.741621][ T5708] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 907.741650][ T5708] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 907.741677][ T5708] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 907.741706][ T5708] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid maxpacket 1535, setting to 1024 [ 907.741735][ T5708] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 907.741764][ T5708] usb 3-1: config 166 interface 177 has no altsetting 0 [ 907.741784][ T5708] usb 3-1: config 166 interface 34 has no altsetting 0 [ 907.904796][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.904839][ T5708] usb 3-1: Product: syz [ 907.904857][ T5708] usb 3-1: Manufacturer: syz [ 907.904874][ T5708] usb 3-1: SerialNumber: syz [ 908.210023][ T5708] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 908.410961][ T5708] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 908.670881][ T5708] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 908.843209][T15097] Cannot find set identified by id 0 to match [ 909.718140][ T5708] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 909.718228][ T5708] uvcvideo 3-1:166.34: No valid video chain found. [ 909.770576][ T5708] usb 3-1: USB disconnect, device number 75 [ 910.189874][T15120] input: syz0 as /devices/virtual/input/input243 [ 912.439543][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2197'. [ 912.648592][T15152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.214318][T15178] input: syz0 as /devices/virtual/input/input244 [ 919.162814][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2210'. [ 919.521935][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2210'. [ 920.034976][T15208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.130651][T15208] loop8: detected capacity change from 0 to 7 [ 920.210241][T15208] Dev loop8: unable to read RDB block 7 [ 920.210289][T15208] loop8: unable to read partition table [ 920.231455][T15208] loop8: partition table beyond EOD, truncated [ 920.233891][T15208] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 923.294287][T15226] input: syz0 as /devices/virtual/input/input245 [ 923.718130][T15234] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 923.718217][T15234] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 924.179010][T15238] syz.2.2218: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 924.179328][T15238] CPU: 1 UID: 0 PID: 15238 Comm: syz.2.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.179365][T15238] Tainted: [L]=SOFTLOCKUP [ 924.179376][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.179404][T15238] Call Trace: [ 924.179507][T15238] [ 924.179564][T15238] dump_stack_lvl+0xe8/0x150 [ 924.179698][T15238] warn_alloc+0x24d/0x270 [ 924.179742][T15238] ? kasan_save_track+0x4f/0x80 [ 924.179803][T15238] ? kasan_save_track+0x3e/0x80 [ 924.179834][T15238] ? __pfx_warn_alloc+0x10/0x10 [ 924.179859][T15238] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 924.179944][T15238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.180020][T15238] __vmalloc_node_range_noprof+0x127/0x1540 [ 924.180091][T15238] ? rcu_is_watching+0x16/0xb0 [ 924.180150][T15238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 924.180193][T15238] ? __kmalloc_cache_noprof+0x321/0x600 [ 924.180221][T15238] ? __kmalloc_cache_noprof+0x14d/0x600 [ 924.180248][T15238] ? xskq_create+0x56/0x220 [ 924.180355][T15238] xskq_create+0x148/0x220 [ 924.180386][T15238] ? xsk_init_queue+0x8a/0xe0 [ 924.180420][T15238] xsk_init_queue+0x8a/0xe0 [ 924.180452][T15238] xsk_setsockopt+0x52a/0x960 [ 924.180485][T15238] ? __pfx_xsk_setsockopt+0x10/0x10 [ 924.180515][T15238] ? __pfx_aa_sk_perm+0x10/0x10 [ 924.180615][T15238] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 924.180652][T15238] ? __pfx_xsk_setsockopt+0x10/0x10 [ 924.180683][T15238] do_sock_setsockopt+0x17c/0x1b0 [ 924.180726][T15238] __x64_sys_setsockopt+0x13d/0x1b0 [ 924.180771][T15238] do_syscall_64+0x166/0x520 [ 924.180831][T15238] ? trace_irq_disable+0x3b/0x140 [ 924.180861][T15238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.180889][T15238] ? clear_bhb_loop+0x70/0xc0 [ 924.180924][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.180951][T15238] RIP: 0033:0x7f4f6699e159 [ 924.181011][T15238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.181065][T15238] RSP: 002b:00007f4f677bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 924.181125][T15238] RAX: ffffffffffffffda RBX: 00007f4f66c25fa0 RCX: 00007f4f6699e159 [ 924.181146][T15238] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 924.181163][T15238] RBP: 00007f4f66a3506b R08: 0000000000000029 R09: 0000000000000000 [ 924.181182][T15238] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.181200][T15238] R13: 00007f4f66c26038 R14: 00007f4f66c25fa0 R15: 00007f4f66d4fa48 [ 924.181243][T15238] [ 924.350420][T15238] Mem-Info: [ 924.350469][T15238] active_anon:7749 inactive_anon:0 isolated_anon:11 [ 924.350469][T15238] active_file:63 inactive_file:59970 isolated_file:0 [ 924.350469][T15238] unevictable:0 dirty:205 writeback:15 [ 924.350469][T15238] slab_reclaimable:6898 slab_unreclaimable:108511 [ 924.350469][T15238] mapped:32748 shmem:702 pagetables:1751 [ 924.350469][T15238] sec_pagetables:0 bounce:0 [ 924.350469][T15238] kernel_misc_reclaimable:0 [ 924.350469][T15238] free:1278542 free_pcp:11175 free_cma:0 [ 924.350621][T15238] Node 0 active_anon:30996kB inactive_anon:0kB active_file:252kB inactive_file:239604kB unevictable:0kB isolated(anon):44kB isolated(file):0kB mapped:130952kB dirty:816kB writeback:60kB shmem:2808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13496kB pagetables:6840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 924.350791][T15238] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 924.350953][T15238] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.351126][T15238] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 924.351238][T15238] Node 0 DMA32 free:1154088kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30996kB inactive_anon:0kB active_file:252kB inactive_file:239604kB unevictable:0kB writepending:776kB zspages:0kB present:3129332kB managed:2546952kB mlocked:0kB bounce:0kB free_pcp:44700kB local_pcp:21548kB free_cma:0kB [ 924.351432][T15238] lowmem_reserve[]: 0 0 0 0 0 [ 924.351542][T15238] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.351716][T15238] lowmem_reserve[]: 0 0 0 0 0 [ 924.351834][T15238] Node 1 Normal free:3944720kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:276kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.352000][T15238] lowmem_reserve[]: 0 0 0 0 0 [ 924.352111][T15238] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 924.352453][T15238] Node 0 DMA32: 1396*4kB (UME) 883*8kB (UME) 424*16kB (ME) 626*32kB (UME) 306*64kB (UME) 123*128kB (UME) 64*256kB (ME) 58*512kB (UME) 39*1024kB (UME) 5*2048kB (M) 240*4096kB (UM) = 1154088kB [ 924.352938][T15238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 924.353246][T15238] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 9*16kB (UM) 6*32kB (UM) 10*64kB (UM) 4*128kB (UM) 3*256kB (M) 4*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 960*4096kB (M) = 3944720kB [ 924.353694][T15238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.353712][T15238] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 924.353737][T15238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.353809][T15238] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 924.353868][T15238] 60729 total pagecache pages [ 924.353905][T15238] 0 pages in swap cache [ 924.353934][T15238] Free swap = 124996kB [ 924.353956][T15238] Total swap = 124996kB [ 924.353978][T15238] 2097051 pages RAM [ 924.354007][T15238] 0 pages HighMem/MovableOnly [ 924.354028][T15238] 428697 pages reserved [ 924.354051][T15238] 0 pages cma reserved [ 924.787461][ T987] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 924.809254][ T5706] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 924.969705][T15241] capability: warning: `syz.6.2219' uses 32-bit capabilities (legacy support in use) [ 924.999626][ T987] usb 3-1: not running at top speed; connect to a high speed hub [ 924.999727][ T987] usb 3-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 925.053783][ T987] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 4 [ 925.053930][ T987] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 4 [ 925.104718][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.104809][ T987] usb 3-1: Product: 慸벞⁃䅪댏邁⹍〼蓩ꩥ按鸁婷淄〼鏎흜ꇸ讼䔠鶊髚⽷暖妀땲墾춟棻᷈檉џ맄犤몄㝀驘昴Ꮙ䝅䗛쳿˖쯲Ꝛﳨ焍臜톣作滈蚘⻑遇똊▁栲렿䞢恳฻፮뗶埖泹컱ꠀ傠慔䡜⟽㢧੥똋鴖ꇧᲜ㐥欰禔筂脹桤ꆓ곣ⱑꗵ闈⟃᙮째ꮻ銇냓䰕ˀꏛꗿঝ櫐 [ 925.104872][ T987] usb 3-1: Manufacturer: 猋뱲䀧ᵽ꭯넓槑裏蝾ꠉ⪓䪒뮣典䯑퉷潟艐畎ᔏ蒁왖댍썏䯣䟜歇抖Ԩ胏䶘רּ壓뺻峙뷍✇狁ꀍ擮Е拾˪辝⻳驯휠ⷡව袢痾窍ተ鰾䩷建荎དྷ刺⪗滙ৢ㍗鎪̌먺鱓泜쁍ᰂ诋雦剮삘 [ 925.104968][ T987] usb 3-1: SerialNumber: Њ [ 925.217038][ T5706] usb 2-1: device descriptor read/all, error -71 [ 925.494863][T15238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.495515][T15238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.578127][ T31] audit: type=1326 audit(1789976019.119:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.584188][ T31] audit: type=1326 audit(1789976019.119:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.647809][ T31] audit: type=1326 audit(1789976019.189:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.648737][ T31] audit: type=1326 audit(1789976019.189:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.709174][ T31] audit: type=1326 audit(1789976019.189:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.709226][ T31] audit: type=1326 audit(1789976019.259:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.709260][ T31] audit: type=1326 audit(1789976019.259:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.793292][ T31] audit: type=1326 audit(1789976019.339:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.793356][ T31] audit: type=1326 audit(1789976019.339:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.793390][ T31] audit: type=1326 audit(1789976019.339:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a0d9e159 code=0x7ffc0000 [ 925.963688][ T987] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 926.228928][ T987] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 926.252251][ T987] usb 3-1: can't set first interface for hiFace device. [ 926.252320][ T987] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 926.317958][ T987] usb 3-1: can't set first interface for hiFace device. [ 926.318012][ T987] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 926.372090][ T987] usb 3-1: can't set first interface for hiFace device. [ 926.372145][ T987] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 926.426611][ T987] usb 3-1: USB disconnect, device number 76 [ 926.590386][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.015686][T15267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2226'. [ 929.054659][T15267] ip_tables: iptables: counters copy to user failed while replacing table [ 929.109872][T15268] input: syz0 as /devices/virtual/input/input246 [ 930.448002][T15289] netlink: 'syz.2.2231': attribute type 13 has an invalid length. [ 931.581975][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.582049][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.028467][T15305] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 933.028553][T15305] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 934.104353][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2236'. [ 934.213341][T15311] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14619] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[15311] [ 934.981458][T15321] usb usb7: usbfs: process 15321 (syz.2.2239) did not claim interface 0 before use [ 935.673787][T15323] veth1_macvtap: left promiscuous mode [ 935.673822][T15323] macsec0: entered allmulticast mode [ 936.046458][T15330] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 936.046490][T15330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 936.046777][T15330] vhci_hcd vhci_hcd.0: Device attached [ 936.215683][T15334] ------------[ cut here ]------------ [ 936.215703][T15334] origin->pipe && origin->pipe != pipe [ 936.215719][T15334] WARNING: drivers/media/mc/mc-entity.c:785 at __media_pipeline_start+0x1eac/0x2440, CPU#1: syz.5.2238/15334 [ 936.240713][T15334] Modules linked in: [ 936.247248][T15334] CPU: 1 UID: 0 PID: 15334 Comm: syz.5.2238 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.258474][T15334] Tainted: [L]=SOFTLOCKUP [ 936.265013][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.275450][T15334] RIP: 0010:__media_pipeline_start+0x1eac/0x2440 [ 936.282265][T15334] Code: e3 e9 90 e3 ff ff 0f 1f 44 00 00 e8 3e 8f b8 f9 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 28 e9 93 fd ff ff e8 25 8f b8 f9 90 <0f> 0b 90 b8 ea ff ff ff e9 72 f4 ff ff e8 12 8f b8 f9 90 0f 0b 90 [ 936.302989][T15334] RSP: 0018:ffffc90003e179c8 EFLAGS: 00010287 [ 936.309900][T15334] RAX: ffffffff880f4cdb RBX: ffff88802b250b00 RCX: 0000000000080000 [ 936.317980][T15334] RDX: ffffc90021003000 RSI: 00000000000003b3 RDI: 00000000000003b4 [ 936.326370][T15334] RBP: ffff88802b250000 R08: ffffffff907a507f R09: 1ffffffff20f4a0f [ 936.334397][T15334] R10: dffffc0000000000 R11: fffffbfff20f4a10 R12: ffff88802b250a10 [ 936.342493][T15334] R13: ffff88802b250ac8 R14: ffff88802c35c010 R15: dffffc0000000000 [ 936.350667][T15334] FS: 00007fcb205f46c0(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 936.360155][T15334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.366833][T15334] CR2: 000000110c378024 CR3: 000000005162a000 CR4: 00000000003526f0 [ 936.374994][T15334] DR0: 0000000000000001 DR1: 000000000000b2f0 DR2: 0000000000000005 [ 936.383227][T15334] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 936.391700][T15334] Call Trace: [ 936.395409][T15334] [ 936.398961][T15334] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 936.405455][T15334] media_pipeline_start+0x51/0x70 [ 936.410643][T15334] vimc_capture_start_streaming+0x7c/0x410 [ 936.416996][T15334] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 936.423487][T15334] vb2_start_streaming+0x11e/0x450 [ 936.428849][T15334] ? __bitmap_weight+0xac/0x100 [ 936.433991][T15334] vb2_core_streamon+0x2c0/0x4d0 [ 936.440084][T15334] __video_do_ioctl+0x8af/0xc70 [ 936.445055][T15334] ? __pfx___video_do_ioctl+0x10/0x10 [ 936.451564][T15334] video_usercopy+0x860/0x1430 [ 936.456946][T15334] ? __pfx___video_do_ioctl+0x10/0x10 [ 936.462400][T15334] ? __pfx_video_usercopy+0x10/0x10 [ 936.467766][T15334] ? __fget_files+0x2a/0x420 [ 936.472460][T15334] ? __fget_files+0x2a/0x420 [ 936.478219][T15334] ? __fget_files+0x3a2/0x420 [ 936.482971][T15334] v4l2_ioctl+0x18d/0x1e0 [ 936.488277][T15334] ? __pfx_v4l2_ioctl+0x10/0x10 [ 936.493188][T15334] __se_sys_ioctl+0xfc/0x170 [ 936.498181][T15334] do_syscall_64+0x166/0x520 [ 936.502920][T15334] ? trace_irq_disable+0x3b/0x140 [ 936.508726][T15334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.515387][T15334] ? clear_bhb_loop+0x70/0xc0 [ 936.520160][T15334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.526124][T15334] RIP: 0033:0x7fcb2279e159 [ 936.530585][T15334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.551192][T15334] RSP: 002b:00007fcb205f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.560509][T15334] RAX: ffffffffffffffda RBX: 00007fcb22a26270 RCX: 00007fcb2279e159 [ 936.568651][T15334] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 936.576954][T15334] RBP: 00007fcb2283506b R08: 0000000000000000 R09: 0000000000000000 [ 936.584957][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.592983][T15334] R13: 00007fcb22a26308 R14: 00007fcb22a26270 R15: 00007fcb22b4fa48 [ 936.601338][T15334] [ 936.604414][T15334] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 936.611711][T15334] CPU: 1 UID: 0 PID: 15334 Comm: syz.5.2238 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.622690][T15334] Tainted: [L]=SOFTLOCKUP [ 936.627035][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.637097][T15334] Call Trace: [ 936.640407][T15334] [ 936.643350][T15334] vpanic+0x56d/0xa60 [ 936.647486][T15334] ? __pfx__printk+0x10/0x10 [ 936.652093][T15334] ? __pfx_vpanic+0x10/0x10 [ 936.656629][T15334] ? is_bpf_text_address+0x292/0x2b0 [ 936.661931][T15334] ? is_bpf_text_address+0x26/0x2b0 [ 936.667258][T15334] panic+0xc5/0xd0 [ 936.670998][T15334] ? __pfx_panic+0x10/0x10 [ 936.675491][T15334] __warn+0x315/0x4c0 [ 936.679660][T15334] ? __media_pipeline_start+0x1eac/0x2440 [ 936.685395][T15334] ? __media_pipeline_start+0x1eac/0x2440 [ 936.691127][T15334] __report_bug+0x276/0x570 [ 936.695741][T15334] ? is_bpf_text_address+0x292/0x2b0 [ 936.701057][T15334] ? __media_pipeline_start+0x1eac/0x2440 [ 936.706815][T15334] ? __pfx___report_bug+0x10/0x10 [ 936.711875][T15334] ? unwind_get_return_address+0x4d/0x90 [ 936.717556][T15334] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 936.723749][T15334] ? __mutex_trylock_common+0x15f/0x270 [ 936.729349][T15334] ? __media_pipeline_start+0x1eac/0x2440 [ 936.735127][T15334] report_bug+0x16b/0x220 [ 936.739506][T15334] ? __media_pipeline_start+0x1eac/0x2440 [ 936.745247][T15334] ? __media_pipeline_start+0x1eae/0x2440 [ 936.751036][T15334] handle_bug+0x9c/0x200 [ 936.755421][T15334] exc_invalid_op+0x1a/0x50 [ 936.759968][T15334] asm_exc_invalid_op+0x1a/0x20 [ 936.764844][T15334] RIP: 0010:__media_pipeline_start+0x1eac/0x2440 [ 936.771195][T15334] Code: e3 e9 90 e3 ff ff 0f 1f 44 00 00 e8 3e 8f b8 f9 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 28 e9 93 fd ff ff e8 25 8f b8 f9 90 <0f> 0b 90 b8 ea ff ff ff e9 72 f4 ff ff e8 12 8f b8 f9 90 0f 0b 90 [ 936.790832][T15334] RSP: 0018:ffffc90003e179c8 EFLAGS: 00010287 [ 936.796919][T15334] RAX: ffffffff880f4cdb RBX: ffff88802b250b00 RCX: 0000000000080000 [ 936.804898][T15334] RDX: ffffc90021003000 RSI: 00000000000003b3 RDI: 00000000000003b4 [ 936.812971][T15334] RBP: ffff88802b250000 R08: ffffffff907a507f R09: 1ffffffff20f4a0f [ 936.821009][T15334] R10: dffffc0000000000 R11: fffffbfff20f4a10 R12: ffff88802b250a10 [ 936.829013][T15334] R13: ffff88802b250ac8 R14: ffff88802c35c010 R15: dffffc0000000000 [ 936.837003][T15334] ? __media_pipeline_start+0x1eab/0x2440 [ 936.842747][T15334] ? __media_pipeline_start+0x1eab/0x2440 [ 936.848492][T15334] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 936.854941][T15334] media_pipeline_start+0x51/0x70 [ 936.859980][T15334] vimc_capture_start_streaming+0x7c/0x410 [ 936.865902][T15334] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 936.872382][T15334] vb2_start_streaming+0x11e/0x450 [ 936.877557][T15334] ? __bitmap_weight+0xac/0x100 [ 936.882445][T15334] vb2_core_streamon+0x2c0/0x4d0 [ 936.887449][T15334] __video_do_ioctl+0x8af/0xc70 [ 936.892339][T15334] ? __pfx___video_do_ioctl+0x10/0x10 [ 936.897860][T15334] video_usercopy+0x860/0x1430 [ 936.902651][T15334] ? __pfx___video_do_ioctl+0x10/0x10 [ 936.908114][T15334] ? __pfx_video_usercopy+0x10/0x10 [ 936.913372][T15334] ? __fget_files+0x2a/0x420 [ 936.918005][T15334] ? __fget_files+0x2a/0x420 [ 936.922613][T15334] ? __fget_files+0x3a2/0x420 [ 936.927306][T15334] v4l2_ioctl+0x18d/0x1e0 [ 936.931658][T15334] ? __pfx_v4l2_ioctl+0x10/0x10 [ 936.936533][T15334] __se_sys_ioctl+0xfc/0x170 [ 936.941156][T15334] do_syscall_64+0x166/0x520 [ 936.945771][T15334] ? trace_irq_disable+0x3b/0x140 [ 936.950831][T15334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.956928][T15334] ? clear_bhb_loop+0x70/0xc0 [ 936.961644][T15334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.967556][T15334] RIP: 0033:0x7fcb2279e159 [ 936.972005][T15334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.991620][T15334] RSP: 002b:00007fcb205f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.000106][T15334] RAX: ffffffffffffffda RBX: 00007fcb22a26270 RCX: 00007fcb2279e159 [ 937.008103][T15334] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 937.016109][T15334] RBP: 00007fcb2283506b R08: 0000000000000000 R09: 0000000000000000 [ 937.024288][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.032278][T15334] R13: 00007fcb22a26308 R14: 00007fcb22a26270 R15: 00007fcb22b4fa48 [ 937.040291][T15334] [ 937.043957][T15334] Kernel Offset: disabled [ 937.048304][T15334] Rebooting in 86400 seconds..