last executing test programs: 14m19.662638529s ago: executing program 4 (id=2411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8feffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 14m19.483780869s ago: executing program 4 (id=2413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48c, 0x0, 0x4}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x7623415862a2987c, 0x9, 0x1, r5}, &(0x7f0000000040)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="8a12ae642c", 0x5}, {&(0x7f00000005c0)='c', 0x1}], 0x2}], 0x1, 0x4001) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x40, r10, 0x1, 0x70bd2f, 0x4, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r11, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r12, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x9d83, 0x0, r12}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) ioctl$IOMMU_VFIO_SET_IOMMU(r12, 0x3b66, 0x1) 14m15.768754301s ago: executing program 4 (id=2430): creat(0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x4000, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 14m15.642274177s ago: executing program 4 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x0, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe29, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r7, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x4040, 0x80) truncate(&(0x7f00000006c0)='./file1\x00', 0x2000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f00000000c0)=""/23, 0x17, 0x1) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m14.593175531s ago: executing program 4 (id=2435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffe, @empty}, 0x1c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff05) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) close_range(0xffffffffffffffff, r0, 0x2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a40), 0x301000, 0x0) recvmmsg(r3, 0x0, 0x0, 0x4000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x7}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) socket$kcm(0x29, 0x5, 0x0) r5 = socket(0x10, 0xe2a37d9338e9a64a, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d2700120001fff60006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xfffffffffffffe47) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000240)=@llc={0x1a, 0x320, 0x86, 0x6, 0x7f, 0x89, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="7fa1a4e84f9a798e98ad4e3c2296c88f002daf564b1b2d5353c2be631f8890f7172bbf8906c13095abeffb9e40eb808c5ad188ac5443c1c21df0e7558e8d70f7bbfe2bb89b22b55985895e0797a86c3ac90ce07d5f51dd0bc20a876d7abce157549f193505bebfbe0e9b78e82ba750ca817b06b85d9ca4dc83da07a6639e8417f649adca3e80bec65a728957bab728ece24fe327ded4f6ac884b40a8eb7b2cf1", 0xa0}, {&(0x7f00000003c0)="4617ef2b68ec27996f95da2b589029590626ab91a38b18d6731aaefdff8010", 0x1f}], 0x2, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1398}, 0x4004001) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000004c0)={r3, &(0x7f0000000080)='&\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x10000, 0x7]}, {0x1, 0xd569, 0x89, 0x3}}, 0x130e, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000480)=0x9}) r6 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) read(r8, &(0x7f0000000580)=""/216, 0xd8) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) 14m14.400393864s ago: executing program 4 (id=2436): socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) syz_open_dev$sg(0x0, 0x0, 0xc8640) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0xc44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc14, 0x2, [@TCA_BASIC_POLICE={0xc10, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x8, 0x5, 0x0, 0x2, 0x3, 0xe12, 0x7, 0x8001, 0xfffffff1, 0x5, 0x9, 0x6, 0x6, 0x6, 0xffff0001, 0x4, 0x2, 0x9, 0x7, 0x5, 0xb8, 0xc65b, 0x3, 0x8c, 0x0, 0xe494, 0x7, 0x1000, 0x2, 0x3, 0x1e, 0x5, 0x2, 0x0, 0x1, 0x1, 0x2, 0x401, 0x0, 0x80000000, 0x9, 0xffff, 0x4, 0x1, 0x1, 0x6, 0xffff, 0x3f07, 0x9, 0x3, 0x0, 0x39, 0x3, 0xfffffffd, 0x903, 0xfffffffa, 0x8, 0x1, 0x0, 0xfffffff9, 0x10000, 0x1000, 0x47, 0x1, 0x7, 0x4, 0x3, 0x8000, 0x2, 0xfad8, 0x6, 0x0, 0x81, 0x7fffffff, 0xdbda, 0x9c0, 0xb, 0xe6, 0x8, 0x5, 0x1bc, 0x6, 0x2, 0x800, 0x1, 0x10, 0xfffffffc, 0xfffffffc, 0x9, 0x10000, 0x2, 0x101, 0xdc, 0xa, 0x9, 0x4, 0x0, 0x100, 0xd, 0x1ff, 0xd7, 0x95e5, 0x6, 0xe1e2, 0x9, 0x6, 0x4b3, 0x7, 0x2, 0x6, 0xfffffff9, 0x225, 0x3ff, 0x5, 0x3, 0x6446, 0x5, 0x8, 0x1, 0x480000, 0x8, 0x7f, 0x3, 0x100, 0x52, 0xf83, 0x7, 0x112, 0x4, 0x9, 0xfffffbff, 0x400, 0x3, 0x1ff, 0x7f, 0xffffffff, 0x78, 0xab2, 0x6, 0xff, 0x9, 0x1, 0x40, 0x8, 0x5, 0x2, 0x7, 0x7fff, 0x3, 0x5488, 0x6, 0x7, 0x10, 0xfffff433, 0x8, 0xf62, 0x1, 0x1, 0x4, 0x1, 0x286, 0x4, 0x3, 0x3, 0x3, 0x5, 0x1, 0x3, 0x2, 0x1, 0xb, 0x5, 0xfffffff6, 0x9, 0x4, 0x200, 0x6, 0x4, 0x6, 0x4000, 0x401, 0xa9b, 0x4, 0x8, 0x7, 0x1, 0x93fe, 0x7, 0x68d5, 0xfffffff8, 0x78c, 0x3bcb, 0x100, 0x4, 0x5, 0xffff, 0xfffffffa, 0x7, 0x4, 0xfff, 0x8, 0x9, 0x5, 0x74, 0x78b, 0x1, 0x6, 0x4, 0x0, 0x7, 0x101, 0x4, 0x5, 0x2, 0xbb4e, 0x8, 0xfff, 0x9, 0x4, 0x7, 0x7, 0xbc0, 0x0, 0x1, 0x2, 0x5, 0xffffffff, 0xfffffffa, 0x5, 0xff, 0xd, 0x9, 0x3, 0x5, 0x7, 0x0, 0x4, 0x9, 0x0, 0x5, 0xb15c, 0x3, 0x7ff, 0x6, 0x0, 0x3, 0x1ff, 0x8, 0x0, 0x4, 0x4, 0x7fffffff, 0x8000, 0xe71]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x3, 0x2, 0x1, 0xcf5d, 0x9, 0x62e8, 0x3ff, 0x1ff, 0x2, 0xb01d, 0x2, 0xe99e, 0x2, 0x5, 0x9, 0x6, 0x815, 0x6d9, 0xffffffff, 0xac05, 0x3695df7f, 0x6, 0x13, 0x1000, 0x2, 0x4, 0x3ffd, 0x3, 0x80, 0xb, 0x20efc98a, 0x8, 0x5, 0x8001, 0x1, 0x3, 0x1000, 0x6, 0x5, 0x3, 0xfffffffb, 0xd53, 0x2, 0x8, 0x3ff, 0x942, 0xb, 0xfffffff7, 0xfffff801, 0x80000000, 0x5, 0xfffffff8, 0x275, 0x3, 0x9, 0x4, 0x6, 0x1, 0x428e, 0x1, 0xff, 0x8, 0x6a75ad03, 0x9, 0x9, 0x2, 0x8, 0x6, 0xff, 0x4, 0x0, 0x4, 0x3280000, 0xe, 0x1, 0xff, 0x80000000, 0x8, 0xe339, 0x5, 0x53, 0xffff, 0x5, 0x6, 0x400, 0x9, 0x3, 0x9, 0x4, 0x4, 0x200, 0x1, 0x5, 0x5, 0x5, 0xffff, 0x2, 0x9, 0x8, 0x2, 0x5, 0x6, 0x8, 0x9b, 0x2145, 0x5, 0x3, 0x1, 0x2000008, 0xb949, 0x9, 0xfffffeff, 0x7, 0x7, 0x8000, 0x100, 0x0, 0x7, 0x8000000, 0x7, 0x3, 0x2, 0x2, 0xffffffff, 0x7d, 0xcea, 0x4, 0x8, 0x2, 0x8001, 0x8, 0x81, 0xe6ed, 0x7, 0x6, 0x2, 0x8, 0x9, 0x5, 0x20bf2a19, 0xb084, 0x401, 0x2, 0x0, 0xffffffff, 0x9, 0x9, 0x5, 0x10000, 0x82, 0xffff, 0xff, 0x5, 0x7, 0x7fff, 0x4, 0x6, 0x3, 0x2, 0x9, 0x8, 0xffff54d7, 0xffff5a08, 0x10, 0xfffffff0, 0x1, 0x0, 0xdcc9, 0x30, 0x1, 0x0, 0xaa, 0x1, 0xc, 0x7e0d, 0xfffffff7, 0xd, 0x6, 0x3, 0xffffff01, 0x9, 0xf6b, 0x10, 0x2, 0x5, 0x8, 0x8, 0x6, 0x3, 0x3, 0x6, 0xfffffffc, 0x3, 0xffffffff, 0x6, 0x9, 0x8000, 0x8, 0x0, 0x1, 0x4, 0x578c, 0x9f, 0x6, 0x3, 0x1, 0x5, 0x5, 0x80000000, 0x4, 0xff, 0x4, 0x3d91, 0x48, 0xfb9f, 0x1, 0x0, 0x101, 0x5, 0x4, 0x4, 0x1, 0xf81, 0x0, 0x7, 0x81, 0x1, 0x7fff, 0x6, 0x6, 0x101, 0xe, 0x0, 0x7, 0xca25, 0x9, 0x0, 0x10002, 0x1, 0x5, 0x8, 0x8, 0x1, 0x4cf81bb0, 0xffffffff, 0x1, 0x4, 0x9f, 0x5, 0x3, 0xd0, 0x1ff, 0x1000, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x6, 0x9, 0x4, 0x2689, 0xfff, 0x400, 0x6, 0x400, 0x3, 0x100, 0x200, 0x10000, 0x2, 0x7fff, 0x80, 0x6, 0x548, 0x1, 0x6, 0x9, 0xfffffffc, 0x4000, 0xffffff37, 0xbb, 0xfffffff1, 0x0, 0x0, 0x7, 0x1, 0x3, 0x4ff, 0xcc49, 0x0, 0x9, 0x3, 0x6, 0x80, 0x7fffffff, 0x38, 0x7, 0x2, 0x8, 0x9, 0x1, 0x1, 0x3, 0x2, 0xa50, 0x8907, 0x3, 0x100, 0x7, 0x0, 0x2, 0x7, 0x6, 0x0, 0x2, 0x9, 0x0, 0x5, 0x9, 0x8, 0x6, 0x9, 0x80000000, 0xfffffffc, 0x5, 0x3, 0x5, 0x3, 0x9, 0x4, 0x7, 0x14c, 0x3, 0x9, 0x1, 0x7f, 0xfffffffb, 0x8, 0x4, 0x40, 0x6, 0x9, 0x9, 0x7, 0x1ff, 0x3, 0x9d, 0x7fffffff, 0x0, 0x7, 0x3, 0x2, 0x98, 0x0, 0x7, 0x3, 0x1, 0x9, 0x1, 0xfffff801, 0x1eaa, 0x9, 0xfffffff9, 0x8895, 0x4, 0x9e, 0x2, 0x5, 0x2, 0x7fff, 0x9, 0x2, 0x6, 0x78, 0xb, 0x5, 0x1, 0x5, 0x7, 0x1, 0xfffff2f8, 0x80, 0x5623, 0xcc04, 0x1ff, 0x3, 0x2, 0x40000, 0x18000, 0xa3e2, 0x3, 0xa, 0x4, 0xffffffff, 0xccf5, 0xfffffffe, 0x8, 0x5, 0x98, 0x8, 0xb, 0x5, 0x1, 0x2, 0x9, 0x1, 0x4, 0x60000, 0x100, 0x100000, 0x9, 0x0, 0x601d, 0x0, 0x5, 0x6, 0x1, 0xfff, 0xffffffff, 0x6, 0x1, 0x86, 0xfffffff9, 0x9, 0xc58, 0x4, 0x2, 0x1, 0x10000, 0x1, 0x9, 0x80000000, 0x1, 0xd6, 0x9, 0x40, 0x2, 0x80000000, 0x6, 0xf27, 0x4d96e9fc, 0x400, 0x3, 0x0, 0x2, 0x1ff, 0x3, 0x20fc0f93, 0x0, 0x10, 0x5, 0x10, 0x10001, 0x0, 0x4, 0x6, 0x80000000, 0x3, 0x6, 0x4, 0x0, 0xb, 0x6, 0x4, 0x2, 0x5, 0x2, 0x4, 0x4, 0x2, 0xc5, 0xb, 0x2, 0x4, 0x6, 0x5ca77605, 0x3, 0x9, 0x2, 0x101, 0x5, 0x7, 0x9, 0x5d9e, 0x8, 0x8, 0x360, 0x3, 0x5fc, 0x1612193b, 0x7, 0x9f, 0x9, 0x8, 0x6f9, 0x5, 0x7, 0x8, 0x9, 0x8, 0xfffffffc, 0xc, 0xcc, 0x8, 0x2e, 0x0, 0xbce, 0x10001, 0x3, 0x7, 0x8000, 0x40]}]}]}}]}, 0xc44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 13m58.707391533s ago: executing program 32 (id=2436): socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) syz_open_dev$sg(0x0, 0x0, 0xc8640) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0xc44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc14, 0x2, [@TCA_BASIC_POLICE={0xc10, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x8, 0x5, 0x0, 0x2, 0x3, 0xe12, 0x7, 0x8001, 0xfffffff1, 0x5, 0x9, 0x6, 0x6, 0x6, 0xffff0001, 0x4, 0x2, 0x9, 0x7, 0x5, 0xb8, 0xc65b, 0x3, 0x8c, 0x0, 0xe494, 0x7, 0x1000, 0x2, 0x3, 0x1e, 0x5, 0x2, 0x0, 0x1, 0x1, 0x2, 0x401, 0x0, 0x80000000, 0x9, 0xffff, 0x4, 0x1, 0x1, 0x6, 0xffff, 0x3f07, 0x9, 0x3, 0x0, 0x39, 0x3, 0xfffffffd, 0x903, 0xfffffffa, 0x8, 0x1, 0x0, 0xfffffff9, 0x10000, 0x1000, 0x47, 0x1, 0x7, 0x4, 0x3, 0x8000, 0x2, 0xfad8, 0x6, 0x0, 0x81, 0x7fffffff, 0xdbda, 0x9c0, 0xb, 0xe6, 0x8, 0x5, 0x1bc, 0x6, 0x2, 0x800, 0x1, 0x10, 0xfffffffc, 0xfffffffc, 0x9, 0x10000, 0x2, 0x101, 0xdc, 0xa, 0x9, 0x4, 0x0, 0x100, 0xd, 0x1ff, 0xd7, 0x95e5, 0x6, 0xe1e2, 0x9, 0x6, 0x4b3, 0x7, 0x2, 0x6, 0xfffffff9, 0x225, 0x3ff, 0x5, 0x3, 0x6446, 0x5, 0x8, 0x1, 0x480000, 0x8, 0x7f, 0x3, 0x100, 0x52, 0xf83, 0x7, 0x112, 0x4, 0x9, 0xfffffbff, 0x400, 0x3, 0x1ff, 0x7f, 0xffffffff, 0x78, 0xab2, 0x6, 0xff, 0x9, 0x1, 0x40, 0x8, 0x5, 0x2, 0x7, 0x7fff, 0x3, 0x5488, 0x6, 0x7, 0x10, 0xfffff433, 0x8, 0xf62, 0x1, 0x1, 0x4, 0x1, 0x286, 0x4, 0x3, 0x3, 0x3, 0x5, 0x1, 0x3, 0x2, 0x1, 0xb, 0x5, 0xfffffff6, 0x9, 0x4, 0x200, 0x6, 0x4, 0x6, 0x4000, 0x401, 0xa9b, 0x4, 0x8, 0x7, 0x1, 0x93fe, 0x7, 0x68d5, 0xfffffff8, 0x78c, 0x3bcb, 0x100, 0x4, 0x5, 0xffff, 0xfffffffa, 0x7, 0x4, 0xfff, 0x8, 0x9, 0x5, 0x74, 0x78b, 0x1, 0x6, 0x4, 0x0, 0x7, 0x101, 0x4, 0x5, 0x2, 0xbb4e, 0x8, 0xfff, 0x9, 0x4, 0x7, 0x7, 0xbc0, 0x0, 0x1, 0x2, 0x5, 0xffffffff, 0xfffffffa, 0x5, 0xff, 0xd, 0x9, 0x3, 0x5, 0x7, 0x0, 0x4, 0x9, 0x0, 0x5, 0xb15c, 0x3, 0x7ff, 0x6, 0x0, 0x3, 0x1ff, 0x8, 0x0, 0x4, 0x4, 0x7fffffff, 0x8000, 0xe71]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x3, 0x2, 0x1, 0xcf5d, 0x9, 0x62e8, 0x3ff, 0x1ff, 0x2, 0xb01d, 0x2, 0xe99e, 0x2, 0x5, 0x9, 0x6, 0x815, 0x6d9, 0xffffffff, 0xac05, 0x3695df7f, 0x6, 0x13, 0x1000, 0x2, 0x4, 0x3ffd, 0x3, 0x80, 0xb, 0x20efc98a, 0x8, 0x5, 0x8001, 0x1, 0x3, 0x1000, 0x6, 0x5, 0x3, 0xfffffffb, 0xd53, 0x2, 0x8, 0x3ff, 0x942, 0xb, 0xfffffff7, 0xfffff801, 0x80000000, 0x5, 0xfffffff8, 0x275, 0x3, 0x9, 0x4, 0x6, 0x1, 0x428e, 0x1, 0xff, 0x8, 0x6a75ad03, 0x9, 0x9, 0x2, 0x8, 0x6, 0xff, 0x4, 0x0, 0x4, 0x3280000, 0xe, 0x1, 0xff, 0x80000000, 0x8, 0xe339, 0x5, 0x53, 0xffff, 0x5, 0x6, 0x400, 0x9, 0x3, 0x9, 0x4, 0x4, 0x200, 0x1, 0x5, 0x5, 0x5, 0xffff, 0x2, 0x9, 0x8, 0x2, 0x5, 0x6, 0x8, 0x9b, 0x2145, 0x5, 0x3, 0x1, 0x2000008, 0xb949, 0x9, 0xfffffeff, 0x7, 0x7, 0x8000, 0x100, 0x0, 0x7, 0x8000000, 0x7, 0x3, 0x2, 0x2, 0xffffffff, 0x7d, 0xcea, 0x4, 0x8, 0x2, 0x8001, 0x8, 0x81, 0xe6ed, 0x7, 0x6, 0x2, 0x8, 0x9, 0x5, 0x20bf2a19, 0xb084, 0x401, 0x2, 0x0, 0xffffffff, 0x9, 0x9, 0x5, 0x10000, 0x82, 0xffff, 0xff, 0x5, 0x7, 0x7fff, 0x4, 0x6, 0x3, 0x2, 0x9, 0x8, 0xffff54d7, 0xffff5a08, 0x10, 0xfffffff0, 0x1, 0x0, 0xdcc9, 0x30, 0x1, 0x0, 0xaa, 0x1, 0xc, 0x7e0d, 0xfffffff7, 0xd, 0x6, 0x3, 0xffffff01, 0x9, 0xf6b, 0x10, 0x2, 0x5, 0x8, 0x8, 0x6, 0x3, 0x3, 0x6, 0xfffffffc, 0x3, 0xffffffff, 0x6, 0x9, 0x8000, 0x8, 0x0, 0x1, 0x4, 0x578c, 0x9f, 0x6, 0x3, 0x1, 0x5, 0x5, 0x80000000, 0x4, 0xff, 0x4, 0x3d91, 0x48, 0xfb9f, 0x1, 0x0, 0x101, 0x5, 0x4, 0x4, 0x1, 0xf81, 0x0, 0x7, 0x81, 0x1, 0x7fff, 0x6, 0x6, 0x101, 0xe, 0x0, 0x7, 0xca25, 0x9, 0x0, 0x10002, 0x1, 0x5, 0x8, 0x8, 0x1, 0x4cf81bb0, 0xffffffff, 0x1, 0x4, 0x9f, 0x5, 0x3, 0xd0, 0x1ff, 0x1000, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x6, 0x9, 0x4, 0x2689, 0xfff, 0x400, 0x6, 0x400, 0x3, 0x100, 0x200, 0x10000, 0x2, 0x7fff, 0x80, 0x6, 0x548, 0x1, 0x6, 0x9, 0xfffffffc, 0x4000, 0xffffff37, 0xbb, 0xfffffff1, 0x0, 0x0, 0x7, 0x1, 0x3, 0x4ff, 0xcc49, 0x0, 0x9, 0x3, 0x6, 0x80, 0x7fffffff, 0x38, 0x7, 0x2, 0x8, 0x9, 0x1, 0x1, 0x3, 0x2, 0xa50, 0x8907, 0x3, 0x100, 0x7, 0x0, 0x2, 0x7, 0x6, 0x0, 0x2, 0x9, 0x0, 0x5, 0x9, 0x8, 0x6, 0x9, 0x80000000, 0xfffffffc, 0x5, 0x3, 0x5, 0x3, 0x9, 0x4, 0x7, 0x14c, 0x3, 0x9, 0x1, 0x7f, 0xfffffffb, 0x8, 0x4, 0x40, 0x6, 0x9, 0x9, 0x7, 0x1ff, 0x3, 0x9d, 0x7fffffff, 0x0, 0x7, 0x3, 0x2, 0x98, 0x0, 0x7, 0x3, 0x1, 0x9, 0x1, 0xfffff801, 0x1eaa, 0x9, 0xfffffff9, 0x8895, 0x4, 0x9e, 0x2, 0x5, 0x2, 0x7fff, 0x9, 0x2, 0x6, 0x78, 0xb, 0x5, 0x1, 0x5, 0x7, 0x1, 0xfffff2f8, 0x80, 0x5623, 0xcc04, 0x1ff, 0x3, 0x2, 0x40000, 0x18000, 0xa3e2, 0x3, 0xa, 0x4, 0xffffffff, 0xccf5, 0xfffffffe, 0x8, 0x5, 0x98, 0x8, 0xb, 0x5, 0x1, 0x2, 0x9, 0x1, 0x4, 0x60000, 0x100, 0x100000, 0x9, 0x0, 0x601d, 0x0, 0x5, 0x6, 0x1, 0xfff, 0xffffffff, 0x6, 0x1, 0x86, 0xfffffff9, 0x9, 0xc58, 0x4, 0x2, 0x1, 0x10000, 0x1, 0x9, 0x80000000, 0x1, 0xd6, 0x9, 0x40, 0x2, 0x80000000, 0x6, 0xf27, 0x4d96e9fc, 0x400, 0x3, 0x0, 0x2, 0x1ff, 0x3, 0x20fc0f93, 0x0, 0x10, 0x5, 0x10, 0x10001, 0x0, 0x4, 0x6, 0x80000000, 0x3, 0x6, 0x4, 0x0, 0xb, 0x6, 0x4, 0x2, 0x5, 0x2, 0x4, 0x4, 0x2, 0xc5, 0xb, 0x2, 0x4, 0x6, 0x5ca77605, 0x3, 0x9, 0x2, 0x101, 0x5, 0x7, 0x9, 0x5d9e, 0x8, 0x8, 0x360, 0x3, 0x5fc, 0x1612193b, 0x7, 0x9f, 0x9, 0x8, 0x6f9, 0x5, 0x7, 0x8, 0x9, 0x8, 0xfffffffc, 0xc, 0xcc, 0x8, 0x2e, 0x0, 0xbce, 0x10001, 0x3, 0x7, 0x8000, 0x40]}]}]}}]}, 0xc44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 9m53.053359625s ago: executing program 2 (id=3424): move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) write$sndseq(r0, &(0x7f0000000140)=[{0x5, 0xff, 0xf8, 0x0, @time, {0x0, 0x3}, {0x8, 0x1}, @result}], 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x2, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x720, 0x1, 0x2}}) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x161, 0x40000867, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) read$FUSE(r3, &(0x7f0000001880)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xaa8, '\x00', r1, r3, 0x1, 0x5, 0x4}, 0x50) 9m42.808143358s ago: executing program 2 (id=3452): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x250, 0x40, 0x100, 0x70bd27, 0x25dfdbfe, {0x1a}, [@typed={0xf, 0xd8, 0x0, 0x0, @str='/dev/vcsu#\x00'}, @generic="fd97e29c520383e09d1cf1909e85bc72603bc476fa98fa5e4acc7117a9d0a2de5089faaa1ce0cc1124ad354ba6ba333652d49221a5026f2a806a2827b037bed7d5126ed4ee2c0474ca2435efcc3b0890fceda877cad1d05b5a05940de8c1d771f53b1a32226c53b56a876e1b2bae30e76cd0c8de2618f458b12f4754743e4b85cd8d69e39a1ff5f58c11d8cb28ce29ea7894d31d314e4ea7c3f0ef49e6dbda11afdcede99601958906c89f6c520fd11707de6adce8ae2b902a08c54a6d717f8cf548fdac1d3fb3a0ccd9ce6beb98c8dc0502b80ed0ba736866ce81ac761459c8e4e5542cafeb3eb51f235a74f623eff6eb74a89da14a8173", @nested={0xcc, 0x66, 0x0, 0x1, [@typed={0xbf, 0x3d, 0x0, 0x0, @binary="b1757d04b6c3b8141f208dce7e948b11b5406f5b71372c30500d15d178c0f0cff821fe4e86c9034d8e7db59e1e21a1f41e78fb836f7169aec7684dfb9191de2dc178651b082c4059c0e36a076a3c11c6ebf5413cd115f3ee6825f6ba697c1c70fa2972b483257599f4b2e479dba02b8b313c63b27402b268faa54d50d1d3521f12a9b78e84548b184f1fd144c009152f0ff647cbebdeb9a5d841a27311e9bff5a390e029328060d5d43029f0efa2aac525ae15d1a3f61b30714491"}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, @nested={0x4d, 0xf7, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0xf6}, @nested={0x4, 0x39}, @typed={0x8, 0xb9, 0x0, 0x0, @uid}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @nested={0x4, 0xca}, @generic="3f79447a11e7ea205f145a4a77e13bc58cd50a137d3d7a8039a96244b2", @typed={0x4, 0xc6}, @typed={0x8, 0x105, 0x0, 0x0, @uid}]}, @typed={0x8, 0xa0, 0x0, 0x0, @uid}, @typed={0x8, 0x6a, 0x0, 0x0, @uid}, @typed={0x8, 0x68, 0x0, 0x0, @u32=0xfd}]}, 0x250}, 0x1, 0x0, 0x0, 0x48000}, 0x80000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1402, 0x8, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x4044) close(0xffffffffffffffff) 9m41.39792497s ago: executing program 2 (id=3454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000004) (async) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="d737c97debaebb91438a0e7a1507931487e7ccad1e6fd7eb2feb7e3d0fec84b403d4434abd5a003c3a2e4df0e8b756db4d61009e0f8250d2b29388f30c01fbd807f4ffad87e72c4fb02a0b04930a932ba5a0e71018ea9567ca85c45fe8e2191ab464fa40e2c3761dcfb972a37f84e3aa64aca8c3e8cb0a6b8db9c8cb", 0x7c}, {&(0x7f0000000100)="9dcb9178e56ae535c15dc6a90d8126599b7659774bb216f95e177e61960f9e74154325cccc28a7893f5fca8ff845e3bcec4019f5082c6042237281941061fa078d7bc221aee9281e62f0cf316c2c2c8daaa212f27e4b5bc56c4b10c65807096bc114d54e329767cf7914fddf2212c9c19bb355690f0b8ae42ee3e344a7af49561d83ef08140841e5247460cdfd1bb4c75c2184c1f078eedb7f45b38d9f15c873f860734fc57ff40ab47d", 0xaa}, {&(0x7f00000001c0)="c522e98b5b4335319c0d2761ae65dc605dcdc1de7a208372ccc459d83c2827fdfeeb7fa56a98ca5197463f9f952f349c", 0x30}, {&(0x7f0000000200)="c8", 0x1}, {&(0x7f0000000240)="b41c9fb4294a772248a9ac5c70dba527768810819256c0dda24375370cb0ab8aae3f28b392fc761b342514a260888381ca1254ca8e7507db534858d507b54f2191717c259989fbe323e044dda85c6e8e5a6397a175c1755cdc4c2177d9", 0x5d}, {&(0x7f00000002c0)="29741e3ae9415ffd3da2bc77830a1fd44a138a5e3590c413602cf388522b04c606710217e0b03c051ec53a4192df38dc346692fb7cfacd15138625e2c13cb828db7e8dde594a05be75d35567d4c84e701914df36ebf1151a15ca4554cc8ff03dd24e3fc4ac0288c577c98e2c6caa1938909451c56156cbd1f96fba5e020835a013ef56b48818de7f1793aaac36ed45e3ecf8eb9205465dcfd5b8db6856dc3416b60052d88329a3a94aa387c189afa03b7b23f48bc214c9b531352e6060451eefe4d1884dbbc0a4b1c6599a50846eb0499a31", 0xd2}], 0x6, &(0x7f00000006c0)=[@ip_retopts={{0x40, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}, @noop, @rr={0x7, 0x3, 0x94}, @generic={0x7, 0xd, "1dc0321f0cd8152c39e8c2"}, @rr={0x7, 0x17, 0xa0, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x25, 0x1, 0x2, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@broadcast, 0x5}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}, @lsrr={0x83, 0x17, 0x14, [@empty, @loopback, @broadcast, @empty, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x25}}}}], 0xf8}, 0x20010080) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0xd, 0x6, 0x0, 0x0, 0x7, 0x4, 0x9}, {0x7, 0x7, 0x3, 0x7fff, 0x9, 0x1ff, 0x2}]}) 9m37.67588161s ago: executing program 2 (id=3462): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f00000002c0)='./file0\x00') rmdir(&(0x7f0000000100)='./file0/file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb27", 0x8a}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3", 0x5f}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000004dc0)={&(0x7f0000000340)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x264f8a07, 0x0, 0xffff, 0x0, 0xf84, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m34.168397449s ago: executing program 2 (id=3474): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75706461746529bb2a08bb036f28206563727970746673"], 0x17, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 9m33.399656279s ago: executing program 2 (id=3478): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) socket$pppl2tp(0x18, 0x1, 0x1) r5 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000087b000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000010c0)="430fc73f0f2390b9800000c00f32350000000f300f20d8250804f5000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66baf80cb844f85385ef66bafc0c66ed66b88e008ec02d1aa80000460f1c460041ae", 0x55}], 0x1, 0x32, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r6, 0xae80, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(0x0, &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*']}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}}) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x46, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x408800, 0x0) 9m18.135419861s ago: executing program 33 (id=3478): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) socket$pppl2tp(0x18, 0x1, 0x1) r5 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000087b000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000010c0)="430fc73f0f2390b9800000c00f32350000000f300f20d8250804f5000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66baf80cb844f85385ef66bafc0c66ed66b88e008ec02d1aa80000460f1c460041ae", 0x55}], 0x1, 0x32, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r6, 0xae80, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(0x0, &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*']}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha512\x00'}}) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x46, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x408800, 0x0) 7m23.959703246s ago: executing program 3 (id=4040): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xf, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8000, 0x5, 0x1, {0x22, 0x33a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x53, 0x8, 0x8, 0x8, 0x3}, 0x1c5, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x100, &(0x7f0000000380)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x438}}, {0xe, &(0x7f0000000500)=@string={0xe, 0x3, "ebd3db690c80148177283764"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}, {0xaa, &(0x7f0000000940)=@string={0xaa, 0x3, "6b358ad7eebbd27bc77ed375d90a692f4d233c75abcd4bf40d38b257889d30c60f8611b322aa441f0dcc20b7a2a46e0296d60824c749ee47ec65f6e0b2a6e5eceed97e970e2268272457e1d2063db08a2ecbbd4897e6d99fe45d717b81fbb8450a572248b860e7d39eb20835199b778dae3d6777ab911c32340f1eb3a8f6e72aa58c27a9d77ed21aeb662d201b559389e9a5b95285ba2a0c9da3eb67875ff241b2b92fe800000000"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_connect$uac3(0x2, 0xdd, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x7c, 0x90, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0x25, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3c, 0x2}, [@cluster_info_segment={0x6, 0x20, 0x2, 0x82, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x40, 0x1c0, 0x465, 0x4, 0x823}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x305, 0x6, 0x1, 0x5, 0x9, 0xf, 0xafe2, 0x40}, @cluster_info_segment={0x6, 0x20, 0x3, 0x22, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xff, 0x0, 0x7, {0xa, 0x25, 0x25, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0x8c, 0x1, 0x64}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x9, 0x3, 0x64}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x30, 0x7b, 0xfc, 0x7, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0xf8, 0x5, "db"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf7, 0x4, 0x5, {0xa, 0x25, 0x25, 0x4, 0x1, 0x9}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x7, 0x1, 0x9, 0x20, 0xa7}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a4fe7c23177cef5d9492d4df132fd424"}]}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x20, 0x1, 0x6, "f66ba5fe8423"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x6c, &(0x7f00000008c0)={[{0x66, 0x4e00, "6c53434838ea43dd467db7101d8416808acb45e22ffb6c43868a13b22a32fcdf499e65b8e29066b63e7a5ebdb134b680de024b60f42f5af66f72c3fed5a016dd3df6ab2bd94b974e318705e35f035a6ec3eb0db9a10f74aad80d018e856eae948e100248c71a"}]}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x0, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002840)={0x1c, &(0x7f0000002300)={0x40, 0x13, 0x1, "90"}, 0x0, 0x0}) 7m21.450737579s ago: executing program 3 (id=4049): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="00060008ff526834aefa000000743f623703afeae766fe59a15f69f6a8468a405f865aaadf58593e83bb6224a626e2cf9f02d9bde38eeb67eb4ff957209350db55d06ac891586b4b57ecd65462786d78d6480bb09b94ef5952b83a351e04e0", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES32=r1], 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1595, &(0x7f0000000040)={0x0, 0x214d, 0x400, 0x2, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='.\x00', 0x0, 0x80) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x0, 0x6, 0xc5, {0xc5, 0x7, "9b6845484cbf2eeaa88f2b8b843e7f0cd526506b5d6163e5bed619adba5039c2468472099abe2aa0484b003b5712c611037df3ef4e9a5e0e9cf103c9fde0b2a13679643f5cb1877f7cc55002b25ca3771b3dad7f26d22f84d6d0145ab6783a79d0368ec00f5345accd0e0c0229b9004bad2f6b28bb2fa45504750aa3c50dcf050ef0abab6d0e47ede77e775a701ec515a361bb28b3a2c8177d2032fd063b5f140638f1aec89b09ce9086b9d453a7536294a4601f35ae3b0cfa8ab9c5c00e59c8d2f108"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0xfffffffffffffffd) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x20, 0x18, 0x9f, "764f985e1644b52fb62bcb92ae55fdd48701c4c0fa02d4d1a7e4e66c36fd6e157ae85ea99f4535f11c0316515d4f8d454ae20fe2a79de1e821fa8457203cdde48d7975999519cdd4087669c0800c194f86a10d60ce4285f7011eb3386025a206393b8ce3e82f0debf9bf28893d00be011f7ef801dcfde188ffdb56fcac08cba5295284315147591d115c31e576ec485f653074d8375affad6def31f7f2baa0"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a40)=ANY=[@ANYBLOB="c00505000000ed1993ac25d3870f2e06b952e2c9d4341535857844adbc91bf47c6412a37367c684dabf80a6806c8028aa07c7ce88a4618c2abb400b141a823ed9c3fc944eb5bc432c37aa74e5e391241dd43f387b6dc558cf8f0600f3b68e7db882e3902be7b57924ecae999085a6e3d9c8b78e9aad939a28ef54d4df4feb641070324948d44ce871785b06b44b22b5d727d72e827d369a8b5b6c819daf14ee7582e4f572f2d92697eaf3f88acd3c83c0ee18d32"], &(0x7f00000009c0)=ANY=[@ANYBLOB="050000007140ac39ae"]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x800100, @mcast1, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x420002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x31, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) 7m18.382141781s ago: executing program 3 (id=4066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6fa0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) close(r4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000300)={0x4dd8117738f61046, 0x15, 0x12, "8f4b0eb544769a01885d7f21c4267671ea30"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000008002500000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029a00030100007f0904000000010100000a24010000000201020c24020000000000000000000c24020400000000001000000d2407000000004336d88b1a56090401000001020000090401010101020000090501094000000000072501800000020904020000010200000904020101010200000f2402028000000002000000000000072401fe80000009058209200000000007"], 0x0) 7m17.025803004s ago: executing program 3 (id=4069): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$TCXONC(r0, 0x540a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) 7m16.848650031s ago: executing program 3 (id=4070): r0 = inotify_init() (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x3ff, 0x40) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) (async) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x48014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) (async) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0xd8eb, 0x2}}, &(0x7f0000000300), 0x400) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) (async) close_range(r0, 0xffffffffffffffff, 0x0) 7m16.207966571s ago: executing program 3 (id=4074): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7m15.314482193s ago: executing program 34 (id=4074): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5m47.001970588s ago: executing program 5 (id=4385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100001000000000000000000fc00000000000000000000080000ff03000000000000000000000000ffb2f6e8ffecdf000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000400000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000000000000000000000000800000000000000000000000000000000000000000ffffffff2dbd700000000000020004004c00000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400686d61632873686132353629"], 0x184}}, 0x0) 5m46.749871781s ago: executing program 5 (id=4387): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="14890ec0aee05eec3407b57d3430aee7656c7fa3c521f62be5684bc5f166e6559ea9848a9a0768a6b326ac504fd00ab3d0b20c51", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=0x0, @ANYRES64=r0], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r1, &(0x7f0000000180)={0xd2, 0x20, 0x0, 0x20, 0x6}, 0x1c) 5m46.715608354s ago: executing program 5 (id=4388): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, 0x0, 0xff) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x7, "d3fa5a20f82a2097a90000fc000800", 0x4745504d}) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x88, 0xf9, 0xc8, 0x40, 0x3f0, 0xf7f, 0x2dac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x16, 0x10, 0x6, "", [{{0x9, 0x4, 0x14, 0xe8, 0x2, 0x44, 0xf5, 0x1b, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x82}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 5m44.992135426s ago: executing program 5 (id=4393): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x1, 0x100, @val=0x80}}}}}}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) getsockopt(0xffffffffffffffff, 0x7, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) setpriority(0x2, 0x0, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x5, 0xba34}}}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x3, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x1, 0x4, 0x2b72, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 5m43.443722955s ago: executing program 5 (id=4400): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x961c, 0x0, 0x8, 0xfb2}, 0x53, [0x1, 0x4, 0x8, 0x9, 0x800, 0x1000, 0x5, 0x2, 0x3, 0x8, 0xfff, 0x5, 0x3, 0x1, 0x1, 0x1, 0x49, 0x3b0, 0x2, 0xa4, 0x8, 0x0, 0x80000001, 0x7f, 0x5, 0xfffffffd, 0xfb4b, 0x401, 0x100, 0xff, 0x9, 0xff, 0x1, 0x3, 0x4, 0x4, 0xe77d, 0x9, 0x2, 0x6, 0x9, 0xd, 0xc57, 0x2000000d, 0x3, 0x3, 0xa, 0x4, 0x3, 0x7, 0x7ff, 0x8, 0x5, 0x4, 0x6, 0x80000000, 0x8001, 0x3, 0x6, 0x1ff, 0x1000, 0x2, 0x1ff, 0x2], [0xf65, 0xc, 0x5, 0x9, 0x4, 0x7, 0x804, 0x7, 0x10, 0x3, 0xbc4, 0x9, 0x40, 0xfffffffa, 0x2, 0x7, 0x8, 0x7, 0x810000, 0x9, 0xeb, 0x100, 0xfffffffc, 0xfffff801, 0x6, 0x3ff, 0x6, 0x6, 0x4, 0x8, 0x7, 0x5, 0x4, 0x6738, 0x531, 0x5, 0x8001, 0x1, 0x7ff, 0x8, 0x2, 0x5, 0x1, 0x0, 0x7f, 0x4000000e, 0xb, 0x8f5, 0x1f4b, 0x0, 0x7, 0x2, 0x10001, 0x200, 0x3, 0x8, 0x4, 0xb, 0x2, 0x0, 0x5, 0x5, 0x9, 0xe], [0x4a80, 0x9, 0x1, 0x80000001, 0x1, 0x8, 0x6, 0x4, 0x3, 0xba52, 0xf655, 0x8001, 0xc67, 0xfffffe00, 0x2, 0x5, 0x2b, 0x8, 0x3ff, 0xd, 0x4, 0x2, 0x5, 0x8, 0x204, 0x10001, 0x2, 0x6, 0xfffffffe, 0x1, 0x2, 0x7, 0x1000, 0x8, 0x7, 0x80000000, 0xffffffff, 0x6, 0x7, 0xa, 0x101, 0xffffffff, 0x4, 0x2, 0x4, 0x9, 0x8, 0x50, 0x6, 0x0, 0x1, 0xff, 0x400, 0xffffffe0, 0x15, 0x3, 0x1ff, 0x5, 0x6, 0x3, 0x80000000, 0x2, 0x3, 0xf], [0x6, 0x1, 0x9, 0x9, 0x2, 0x10001, 0x6, 0xfff, 0x10000, 0x4, 0x100, 0x7, 0x8, 0x4, 0x800, 0x80000000, 0x81, 0xc, 0x0, 0x2, 0x2, 0x7, 0xe1c, 0x7f, 0xa625, 0xf, 0x6, 0x0, 0xffffffff, 0xf099, 0x5, 0x4, 0xff, 0x8, 0x0, 0xffffffff, 0x80000000, 0xfe, 0xfffffc00, 0xa, 0x8, 0xe6, 0x7, 0x1, 0x7fff, 0x8, 0x9, 0x6, 0xfffffffe, 0x7, 0x9, 0x3, 0x0, 0x4, 0x4, 0x5, 0x1, 0x30, 0x5, 0x6, 0x5c3, 0x4, 0x9e, 0x9]}, 0x45c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000c80)={0x194, 0x16, &(0x7f0000000880)="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"}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="00072800000024c7"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB='@\r]'], 0x0, 0x0}) 5m41.240623519s ago: executing program 5 (id=4406): unshare(0x6a040000) mmap(&(0x7f000063c000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000380)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, @in={0x2, 0x0, @empty}}}, 0x118) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r0, 0x0, 0x8000002) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 5m26.23652776s ago: executing program 35 (id=4406): unshare(0x6a040000) mmap(&(0x7f000063c000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000380)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, @in={0x2, 0x0, @empty}}}, 0x118) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r0, 0x0, 0x8000002) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 9.808320916s ago: executing program 6 (id=5607): syz_usb_connect(0x5, 0x17e, &(0x7f0000000000)=ANY=[], 0x0) 8.871024367s ago: executing program 1 (id=5611): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) shmdt(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) mmap(&(0x7f00001f3000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0xdf66e000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0xff07}, 0x2000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x804, @local, 0x5}, @in={0x2, 0x4e21, @remote}], 0x2c) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x84, 0x2, 0x5, 0xe, 0xf6, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x7, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x18}, 0x6}], 0x400000000000084, 0x40000100, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000180), 0x6, 0x111002) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.771785554s ago: executing program 1 (id=5613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_clone3(&(0x7f0000000300)={0x2f2007480, 0x0, 0x0, 0x0, {0x201e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000019140)='./file0\x00', &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) chown(&(0x7f0000000540)='./file0\x00', 0x0, r5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00d1000a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socket$alg(0x26, 0x5, 0x0) 7.288607213s ago: executing program 7 (id=5615): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0xed) fcntl$setlease(r4, 0x400, 0x1) timer_getoverrun(r2) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6.1720719s ago: executing program 7 (id=5618): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x200}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x200}) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x3b) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvmsg$can_bcm(r5, &(0x7f0000000600)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000000540)=""/104, 0x68}], 0x2}, 0x10042) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0xffffffffffffffc2, 0x10, 0x437, 0x800000, 0xfffffffe, {0x0, 0x0, 0x0, r6, 0x704c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x10000000) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0xffffffffffffffc2, 0x10, 0x437, 0x800000, 0xfffffffe, {0x0, 0x0, 0x0, r6, 0x704c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x10000000) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @broadcast}}}], 0x20}, 0x200000e0) r7 = epoll_create1(0x80000) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local}) epoll_create1(0x0) (async) r9 = epoll_create1(0x0) dup2(r8, r7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600040000010000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000100feff0200070003000000970f00000800000000000000007139000000000000e50000000000000006"], 0xf1) (async) write$binfmt_elf64(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600040000010000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000100feff0200070003000000970f00000800000000000000007139000000000000e50000000000000006"], 0xf1) close(r10) (async) close(r10) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x2}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0x30000009}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0x30000009}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000b15000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.155905456s ago: executing program 1 (id=5619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x3, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xde0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0xffa1) 5.244332427s ago: executing program 1 (id=5621): mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) semctl$GETPID(0x0, 0x4, 0xb, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) (rerun: 32) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x259) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) syz_open_procfs(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x18}}, 0x0) (async, rerun: 64) getsockopt(r4, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) (rerun: 64) 5.077387568s ago: executing program 7 (id=5623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000700000000040014001a80100004800c0005"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000002500)) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f00000003c0)) close(0x3) 4.928568053s ago: executing program 1 (id=5624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000440)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000b00)=""/148, &(0x7f0000695ffc)=0x94) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0x5c, {0x5c, 0xa, "48c8bdbdf9b8cb4123e13d7f677fbb02a7bf94fc03a0a26da83db2ba512559377169b40f0a8046df30b56ec4702761f7d5e635012c3b5cb97d0c3fb40d132f463b1fbd32b1949eec9c6eee72142ef3bc7929828a163a2bb1ae76"}}, &(0x7f0000000280)=ANY=[@ANYBLOB="0ece00040000000000000000"], &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0xd5, 0xf8, "9bfbff60", "16a4c9ff"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x63, 0x8, 0xd8, 0xb6, 0x0, 0x2c5, 0x2}}}, &(0x7f0000000840)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfa}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1c0, 0x10, [0xf0f]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5fc0"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "fc23"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xb}}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x13, 0x7, "067b0fb541d422"}, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x82, 0x1, "f7"}, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x1000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x800}}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7fffffff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x3502}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x5}]}]}, 0x17c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.327073551s ago: executing program 6 (id=5626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="74725ca85c232c255d5d2900000000000000000000347cc08d90f64c71995a02000000d0bb0d24c92b"]) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d33f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d1a, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f00000001c0)={0x9, 0x80000, r4}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = eventfd2(0xe5c, 0x80000) r8 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r8, 0x7, 0x2, r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r7}) socket$nl_route(0x10, 0x3, 0x0) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5602, 0xffffffffffffffff, 0x0, 0x20, 0x100000000, 0x0, 0x2}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) 3.796809866s ago: executing program 6 (id=5629): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000500000000000000aea1883db9508849e1f1d600ce89e4b835150e4a667b88a543e7c47314d803565d543f1f61e3ca38ef074992b5087857cc0f261d3ed03d6092291999ef9777f77407d373a359446115d1fe008d47d8bedf44354636a1d980c7760c883b679a83d7d2dfa77a55549f4d585b6b06a2310dc69bd55be8789b5d53b9078e14909564de9c735b1ba1fe9b676fb3a3f340d594dab203077a869dc64abbbaba8ded4a94a4f2c7c51fd6162efca43feb132aa455"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = syz_open_pts(r2, 0xa0200) r4 = dup3(r3, r2, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x8, 0x2, 0x0, 0x3ff, 0x14, "d382f1a316b3ccae"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r10, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x1f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "963636f7b3e748f9396e7a6eab4a32b1"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03000008009f000c"], 0x40}}, 0x48000) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000100)={0x2020008, r7, 0x2}) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) 3.462065015s ago: executing program 7 (id=5630): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40020020) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x10001, 0x4) getsockname$l2tp6(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000140)={0x0, 0x1800, [0x100000000, 0x5, 0xd, 0x4, 0x1, 0xffff], [0x2, 0xc27b, 0x7, 0x39b, 0x7fffffff, 0x1a1], [0x8, 0x3a4, 0xe, 0x2, 0x8, 0x3], '\x00', {0x5, 0x0, [{0x6, 0x1, 0x7, 0xdc2, 0x7, 0x0, 0x5}, {0x15, 0x180000, 0x0, 0x5, 0x9, 0x6, 0x7ad2}, {0x40000001, 0x9, 0x1, 0x5, 0x5, 0x7, 0x4}, {0xc0000000, 0x1, 0x2, 0x2, 0x5, 0xe, 0x1ff}, {0xb, 0x5, 0x2, 0x5, 0x4, 0x100, 0x8b}]}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001400)={0x3ff, 0xae0, &(0x7f0000000000)="5f6000ae1febfde67141e100407919230a7d8a924543a81a2970e13877d06f8e2d9af2c8", &(0x7f0000000400)="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", 0x24, 0x1000}) 3.300238675s ago: executing program 7 (id=5631): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0xa, 0x7, 0x0, 0x0, 0x2, 0x4, 0x7, 0xd, 0xa0, 0x3, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x40000800, 0x2, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x4, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) r6 = syz_usb_connect$cdc_ncm(0x5, 0x95, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0xc, 0x0, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "586142bf2c33"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0xd2cc, 0xff}, {0x6, 0x24, 0x1a, 0x4, 0x1d}, [@mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x51, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xaf, 0x3, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x9, 0xbd}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0x8, 0x6}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x4, 0x2, 0x2, 0x40, 0x32}, 0x24, &(0x7f0000000400)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x2, 0xf0f, 0x3, [0x0, 0x7fbf00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x7, 0x67, 0x4, 0x7}]}, 0x4, [{0x66, &(0x7f0000000440)=@string={0x66, 0x3, "c05f3c19c6a1f4186a48f508730c89ef866043f9654b72b91006fa8a42f6af4b662642af494f525d7c2d8a80eff7df9497f7aa6318500486b25766180f44148e0491f6b5fc9b4f417c603d4d2d6948d31cd50a3bacc8b238c02764fbdb8847f85b85ae25"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x409}}, {0x49, &(0x7f0000000500)=@string={0x49, 0x3, "fb57d9879ecb743a8d91731511200a66bae1bd9c47a2e2627dad27c92b079e6867e5640895e42cd8b62d6b9e844b7b4c99faa5b45b81a3d11238eb5799935d8e824ee1fe89ce21"}}, {0x75, &(0x7f0000000600)=@string={0x75, 0x3, "147653db1621546b1d4a80776f09d2d1340f1e9ead10d3c4b0d17b5f13d038aa0715d725efb28a9bec40b045045e768a003f6bcbb98c87525173caaeb8204a9f8f0c02975ae104feba47d44765269fc67594ff94747d84a5f2faebaf129e382912eecef7782516b7fe2cdab1766a48582254c4"}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000780)={0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="400214000000142233b7f44c4950f8c2879c129cbf8530fb000000000000"], &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f00000007c0)={0x40, 0x15, 0xfa, "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"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x8, 0xfff8, 0xea, 0x6, 0x9, 0x4, 0x800, 0xa9, 0x7, 0x7, 0xc, 0x8}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000a40)={0x20, 0x89, 0x2, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x44) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3ec, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c0, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, {0x360, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "860a7b66b067cdaed778869030903dbce21741e3b678c320bc3b0d91ca13a87794af7ce6f3e2"}, @NFTA_DATA_VALUE={0xbc, 0x1, "d666fc1e0834ae099cddbcb9d86514102159ab9c230a0983703ce37eea4117e03e5fd726c3304153566c665b1d501a565b74233acff5ce12960ea87c55646d6d404d1a72cd93d6df3de6cb25ec85d6cec446b898fe39ce7d9e874c7499fa13242f09ad9c0caf3dbe75c8cf01a6ddae2e129a0eeb12bb04694aa7ff44a1ed66d088cea0ce158ae41017771c8e3495c2e3cf262a85041f353540194c60492bdb9c3b792b2603fa2582c8afb616114dbe29ea37e92cfe92c7a0"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x678}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "18c619fb87a7935f819477b0b30d691ba6b07b2d17d7cb06d712901dbb26bb16c2ae53a756224625b949539e9cdc75d39f050b5a4160f51ee9002859d8f4f7081d3f4453798293afb8ec6e4a490d7f3db3f256cc391d00eac115deec6248217217fc40a27298b2705ef35f85753199de14127abc5c1a3ae5477f6736d51cfe4bd0c5b55c430e024005b5e86994c8bcc46e6c62829a031bcdc2fb50fb68cd95899a8254bfa517c4f16b90523e1760b6b84d7b120dc0c0038063de375375d631a0877b2ec4f3e1e59d2c9c9239e775d0ed0e68ddf42ccd0fb7851455cd338a9fdf0350"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x450}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r7) 2.675594792s ago: executing program 6 (id=5632): r0 = socket$kcm(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.452596763s ago: executing program 6 (id=5633): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x2, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0xe31, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0x5, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.442157131s ago: executing program 7 (id=5634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x6f, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x0, 0x3, 0x6, 0x100, @void}, "dc20064ba042962817311273d97ad03f5d648cf14b077db8bb18143b4c2abab725d164ae3e206e4d040b37246d0f048ecbc5b6020c65e5b8b3da4e89c6da8ce690"}}}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0x1, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "173763", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0xdd86, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x1, {0xf95}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x9, 0x1, 0x1, 0x0, 0x7, 0x3}, 0x2, {0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="cc549d27"], 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.283267973s ago: executing program 0 (id=5636): mprotect(&(0x7f00000a7000/0x2000)=nil, 0x2000, 0x1000008) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.233730081s ago: executing program 8 (id=5637): r0 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000480)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/3, 0x3) r1 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) syz_io_uring_setup(0x1812, &(0x7f0000000380)={0x0, 0x2c6b, 0x800, 0x2, 0x33e, 0x0, r7}, &(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000500)) ioctl$KVM_RUN(r8, 0xae80, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x23, &(0x7f0000000000), 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x4004, 0x2, {0x1, @win={{0x800000, 0x8, 0x278e, 0x8}, 0x2, 0x9, 0x0, 0xfffffffc, 0x0}}}) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000e4000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006980009800800014000000004540002802400018008000140000000060800014000000000080001400000000008000140000000092c000180080001400000000308000140000000000800014000000000080001400000021e080001400000000108000140000002eb280002"], 0x174}}, 0x4000000) 1.863979819s ago: executing program 0 (id=5638): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) (rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) io_setup(0x2, &(0x7f0000000000)) eventfd(0x78) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) close_range(r4, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.643524216s ago: executing program 0 (id=5639): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') setns(r1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2b3, 0x1, 0x4, 0x70000, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) 1.49335597s ago: executing program 0 (id=5640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4000009b, 0x0, 0xc}]}) r3 = socket(0x8000000010, 0x2, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003c00010325bd7000fcffffff0600000008000300", @ANYRESHEX=r5], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24040000) 1.260321878s ago: executing program 0 (id=5641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="380100001a000100feffffff00010000fe8000000000000000000000000000aafc0100000000000000000000000000014e20071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d46c0000002001000000000000000000000000000100030000000000009201000000000010a39b000000000000ffff0000000000001c25080000000000050000000000000000000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001092000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005640f0265da258365119942f64ff6d30eae8988c432d909e3bcf218fcbc99ef9b75f9909d1975da8d0dba7c0edda3db566116254c7fb0750bf41282dcba4d5253a926655362a71a9912a8c8eff9c24f6dbac7ae77298cb063faaec02529ca88938e7b0f82aa9edb94248325ef0c8439cd6a50f220782a502f08dbcd11cab379221e17f7087a32b9938dc6ddc367b01bfa1ef2cf5d55d3eaad3118952eaaa03475c2788dbebf194aa6345c86868a29565ed1508f4e0d67ce01041bf8e0044d04a9e014019b2b8d5565a16cc40ec7f14cad491e79b84c36b41730b262b17c2"], 0x138}}, 0x844) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r7, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x3}, 0x50) (async) syz_open_dev$radio(0x0, 0x3, 0x2) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r9], 0x20}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) fchmod(r1, 0x21) 1.151205619s ago: executing program 0 (id=5642): r0 = socket(0x8, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$uac3(0x0, 0xa7, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x3) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r3 = syz_open_dev$video(0x0, 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xd06, 0x32315659, 0x4, 0x4, 0x3, 0x3, 0xfeedcafe, 0x2, 0x2, 0x2}}) tee(r1, 0xffffffffffffffff, 0xffff, 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) 1.142840968s ago: executing program 8 (id=5643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 828.127819ms ago: executing program 8 (id=5644): r0 = socket$kcm(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 597.106396ms ago: executing program 8 (id=5645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x4, 0xe57f}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r4], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="040000000000000002004e24e00000010000000000000000000000000000000000000000000000000000000000000000000000000000005a2ac04ad8a9185b69580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/144], 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="8031050000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000ffff7f000001040012000500160001"], 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 261.621874ms ago: executing program 1 (id=5646): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffbf, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20008000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000040ff6943b80000000800000028f2000000008607000000ebb0", 0x20, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000000)={0x0, 0x0}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="4000000004000000000000000000000100000000000000000000000048508fdcef19e1bb58b6adea1d2dbf446869a5e9b8e74bfff6de68836ae5bcde0672f2cd0986e610eb06ee8c3d461ebe6e5f9018f12c6b520edde58ca39a463dbe416c163866060e4d97230026290332f47d8df230cb51143f1fca4e93ff2098be2edb259741f70bc56210841565282472400037cea8"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000000000005e000028c631295cb6dd00009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r3, &(0x7f0000000180)=""/133, 0x85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000e8b000/0x2000)=nil, &(0x7f0000765000/0x4000)=nil, 0x2000, 0x2}) 142.235368ms ago: executing program 8 (id=5647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0xf2313f70e79c1a04, 0x9, 0xd, 0xfffffc01, 0x0, @mcast2, @private1, 0x8, 0x20, 0xd, 0x8}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x7}, 0x6a, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000ce0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59", 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 0s ago: executing program 8 (id=5648): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x3}, 0x18, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000002c40)={0x42f739d2, 0x2c3, &(0x7f00000003c0)="8c8db7d80d99718b8311e7bce8a472a20a0f620c20728b0f412aee292d330b3124b4790ba431b19ae218c3a0bac014f573e66a7c0e8b8febed2cea9c5b7e593b91e7c295afb2bd062f0976b9682114125b418078f75291f4adb3c3d1249942bd8241648c1094", &(0x7f0000001c40)="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", 0x66, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001940)=ANY=[@ANYBLOB="3800000025bf86031d027f856d15883fb570c73b322e2e8c94c6be8ff365bf07b3054ad59fbab3f9de15543bec5cd988190edbe21ec6309b9c8433c1a8b3a169a489cb7dc6495b42248f140055a110b68b7bb4297594162bb8d7761afd4c5c4f7c9782d18a8fb7164493f77a0e18c056d0ce", @ANYRES16=r11, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r10, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r8, {0x6, 0xd}, {0x3}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) recvmmsg(r12, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000800)=""/164, 0xa4}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/68, 0x83}, {&(0x7f0000000480)=""/161, 0x99}, {&(0x7f0000001a00)=""/220, 0xdc}], 0x8}, 0x5}], 0x1, 0x40002000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0xd) r13 = getpgrp(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x106, 0x8}}, 0x20) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r13}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) socket(0x3, 0x6, 0xa849) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64=r14, @ANYRES8=r15], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 6262][T20593] bond17: (slave bond0): Releasing backup interface [ 1358.909662][T20593] bridge_slave_0: left allmulticast mode [ 1358.916388][T20593] bridge_slave_0: left promiscuous mode [ 1358.922264][T20593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.940542][T20593] bridge_slave_1: left allmulticast mode [ 1358.947226][T20593] bridge_slave_1: left promiscuous mode [ 1358.953139][T20593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.969589][T20593] bond0: (slave bond_slave_0): Releasing backup interface [ 1358.991910][T20593] bond0: (slave bond_slave_1): Releasing backup interface [ 1359.030331][T20593] team0: Port device team_slave_0 removed [ 1359.066547][T20593] team0: Port device team_slave_1 removed [ 1359.085204][T20593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.097198][T20593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.111446][T20593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.119922][T20593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.136437][T20593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1359.493748][T29116] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1359.633730][T29116] usb 9-1: device descriptor read/64, error -71 [ 1359.874741][T29116] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1360.004140][T29116] usb 9-1: device descriptor read/64, error -71 [ 1360.015373][T20627] batman_adv: batadv0: Adding interface: dummy0 [ 1360.015389][T20627] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.023135][T20627] batman_adv: batadv0: Interface activated: dummy0 [ 1360.113998][T29116] usb usb9-port1: attempt power cycle [ 1360.463971][T29116] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1360.489661][T29116] usb 9-1: device descriptor read/8, error -71 [ 1360.535011][T29130] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1360.594223][T20640] netlink: 'syz.0.5181': attribute type 1 has an invalid length. [ 1360.628693][T20640] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1360.647426][T20640] bond16: (slave bond0): Removing an active aggregator [ 1360.648177][T20640] bond16: (slave bond0): Releasing backup interface [ 1360.654078][T20640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.656960][T20640] bond18: (slave bond0): Enslaving as a backup interface with an up link [ 1360.668604][ T2008] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1360.684004][T29130] usb 2-1: Using ep0 maxpacket: 16 [ 1360.685905][T29130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.685941][T29130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.685967][T29130] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1360.686012][T29130] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1360.686038][T29130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.690652][T29130] usb 2-1: config 0 descriptor?? [ 1360.725980][T29116] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1360.748698][T29116] usb 9-1: device descriptor read/8, error -71 [ 1360.866522][T29116] usb usb9-port1: unable to enumerate USB device [ 1360.942754][ T2015] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1360.945296][T20635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.952004][T20635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.677456][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.677512][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.754872][T29130] usbhid 2-1:0.0: can't add hid device: -71 [ 1361.754996][T29130] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1361.777704][T29130] usb 2-1: USB disconnect, device number 113 [ 1362.717680][T20728] blktrace: Concurrent blktraces are not allowed on sg0 [ 1364.649776][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.664006][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.908042][T20830] binder: transaction release 140 bad handle 1, ret = -22 [ 1365.511072][T20839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.518854][T20839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.717645][T20839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.741675][T20839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.939294][T16997] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.980469][T16997] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1366.010186][T16997] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.042580][T16997] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1366.071471][T16997] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.106284][T16997] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1366.136705][T16997] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.185264][T16997] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1366.307132][T20852] netlink: 'syz.7.5209': attribute type 8 has an invalid length. [ 1366.307150][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5209'. [ 1366.863816][T29115] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1367.035572][T29115] usb 2-1: Using ep0 maxpacket: 16 [ 1367.075317][T29115] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1367.139911][T29115] usb 2-1: config 8 has an invalid interface number: 254 but max is 0 [ 1367.181357][T29115] usb 2-1: config 8 has no interface number 0 [ 1367.212959][T29115] usb 2-1: config 8 interface 254 has no altsetting 0 [ 1367.245081][T29115] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 1367.285925][T29115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.328890][T29115] usb 2-1: Product: syz [ 1367.354364][T29115] usb 2-1: Manufacturer: syz [ 1367.378675][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5215'. [ 1367.390277][T29115] usb 2-1: SerialNumber: syz [ 1367.713026][T29115] usb 2-1: USB disconnect, device number 114 [ 1368.494607][T29134] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1368.669895][T29134] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1368.704459][T29134] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.740586][T29134] usb 9-1: Product: syz [ 1368.756728][T29134] usb 9-1: Manufacturer: syz [ 1368.773214][T29134] usb 9-1: SerialNumber: syz [ 1368.801127][T29134] usb 9-1: config 0 descriptor?? [ 1369.031815][T29134] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1369.243841][T29134] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1369.328431][T29134] usb 9-1: USB disconnect, device number 28 [ 1370.453870][T29115] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1370.662501][T20970] cgroup: fork rejected by pids controller in /syz1 [ 1372.698076][T17084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1372.711794][T17084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1372.727481][T17084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1372.746346][T17084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1372.757341][T17084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1373.075666][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5231'. [ 1373.151180][T21017] team0: Failed to send options change via netlink (err -105) [ 1373.172306][T21017] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1373.199327][T21017] team0: Port device team_slave_0 removed [ 1373.404159][T21056] tipc: Enabled bearer , priority 0 [ 1373.428382][T21056] pimreg: entered allmulticast mode [ 1373.448009][T21056] pimreg: left allmulticast mode [ 1373.816288][T29130] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1373.961946][T21002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.972945][T21002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.981941][T29130] usb 9-1: Using ep0 maxpacket: 8 [ 1373.988674][T21002] bridge_slave_0: entered allmulticast mode [ 1374.001208][T29130] usb 9-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1374.012575][T21002] bridge_slave_0: entered promiscuous mode [ 1374.019175][T29130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1374.031451][T29130] usb 9-1: Product: syz [ 1374.036431][T29130] usb 9-1: Manufacturer: syz [ 1374.041280][T29130] usb 9-1: SerialNumber: syz [ 1374.065768][T29130] usb 9-1: config 0 descriptor?? [ 1374.087696][T29130] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1374.107117][T21002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.116733][T21002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.126805][T21002] bridge_slave_1: entered allmulticast mode [ 1374.137110][T21002] bridge_slave_1: entered promiscuous mode [ 1374.219645][T21002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.239628][T21002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.278243][T29130] gspca_sn9c2028: read1 error -32 [ 1374.367543][T21002] team0: Port device team_slave_0 added [ 1374.382157][T21002] team0: Port device team_slave_1 added [ 1374.413176][ T5722] tipc: Node number set to 3134806163 [ 1374.481951][T21002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.489427][T21002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.516979][T21002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.521341][T21083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.541480][T21002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.549223][T21083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.561457][T21002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.594121][T29130] gspca_sn9c2028: read1 error -71 [ 1374.600529][T29130] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1374.609730][T21002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.624474][T29130] usb 9-1: USB disconnect, device number 29 [ 1374.765957][T21002] hsr_slave_0: entered promiscuous mode [ 1374.774806][T21002] hsr_slave_1: entered promiscuous mode [ 1374.782500][T21002] debugfs: 'hsr0' already exists in 'hsr' [ 1374.790184][T21002] Cannot create hsr debugfs directory [ 1374.874029][T17084] Bluetooth: hci3: command tx timeout [ 1375.129861][T21002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.142782][T21002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1375.395291][T21002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.407623][T21002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1375.543965][T29130] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1375.572865][T21002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.583604][T21002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1375.721971][T29130] usb 9-1: Using ep0 maxpacket: 16 [ 1375.735548][T29130] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1375.745094][T29130] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1375.758723][T21002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.769504][T29130] usb 9-1: Product: syz [ 1375.774471][T29130] usb 9-1: Manufacturer: syz [ 1375.779357][T29130] usb 9-1: SerialNumber: syz [ 1375.787518][T21002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1375.801818][T29130] usb 9-1: config 0 descriptor?? [ 1376.037690][ T5722] usb 9-1: USB disconnect, device number 30 [ 1376.227684][T21002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1376.239963][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1376.248837][T21002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1376.274082][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1376.284779][T21002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1376.298955][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1376.307463][T21002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1376.318518][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1376.412970][T21002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.436581][T21002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.450677][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.458042][T17004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.481657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.489106][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.629584][T21002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.862475][T21002] veth0_vlan: entered promiscuous mode [ 1376.877380][T21002] veth1_vlan: entered promiscuous mode [ 1376.947617][T21002] veth0_macvtap: entered promiscuous mode [ 1376.954574][T17084] Bluetooth: hci3: command tx timeout [ 1376.995703][T21002] veth1_macvtap: entered promiscuous mode [ 1377.074225][ T7800] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1377.106324][T21002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.142159][T21002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.175990][T17004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.195513][T17004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.218093][T17004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.247930][T17004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.270880][ T7800] usb 9-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1377.325207][ T7800] usb 9-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1377.384785][ T7800] usb 9-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 1377.452041][ T7800] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.522241][ T7800] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1377.583761][ T7800] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.647313][ T7800] usb 9-1: Product: syz [ 1377.672719][ T7800] usb 9-1: Manufacturer: syz [ 1377.683357][ T7800] usb 9-1: SerialNumber: syz [ 1377.725402][ T7800] usb 9-1: config 0 descriptor?? [ 1377.748289][T21409] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1377.776873][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.800821][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.829607][T21480] xt_hashlimit: size too large, truncated to 1048576 [ 1377.909214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.920349][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.977897][T21493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.009411][T21493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.807626][T21518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5247'. [ 1379.033965][T17084] Bluetooth: hci3: command tx timeout [ 1379.776790][T29134] usb 9-1: USB disconnect, device number 31 [ 1379.815616][ T5698] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1379.884655][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5253'. [ 1379.906265][T21547] ip6tnl1: entered allmulticast mode [ 1379.975728][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1379.985292][ T5698] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 1380.004535][ T5698] usb 2-1: config 114 has no interface number 0 [ 1380.010968][ T5698] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1380.022066][ T5698] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1380.035031][ T5698] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1380.046385][ T5698] usb 2-1: config 114 interface 240 has no altsetting 0 [ 1380.057651][ T5698] usb 2-1: string descriptor 0 read error: -22 [ 1380.064772][ T5698] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1380.074002][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.086940][T21531] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1380.094847][T21531] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1380.105221][ T5698] ir_usb 2-1:114.240: IR Dongle converter detected [ 1380.309800][ T5698] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 1380.516242][ T5698] usb 2-1: USB disconnect, device number 116 [ 1380.541422][ T5698] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1380.553471][ T5698] ir_usb 2-1:114.240: device disconnected [ 1380.937152][T21583] netlink: 'syz.6.5256': attribute type 13 has an invalid length. [ 1381.113843][T17084] Bluetooth: hci3: command tx timeout [ 1381.181067][T21590] netlink: 'syz.1.5257': attribute type 1 has an invalid length. [ 1381.206007][T21591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5257'. [ 1381.648534][T21607] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5259'. [ 1382.005925][T21614] syzkaller0: entered promiscuous mode [ 1382.027414][T21614] syzkaller0: entered allmulticast mode [ 1382.417230][T21633] netlink: 'syz.7.5263': attribute type 8 has an invalid length. [ 1382.443189][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5263'. [ 1382.773626][ T5698] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1382.816869][T21644] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5266'. [ 1382.938030][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.976352][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.996670][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1383.013173][ T5698] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1383.023711][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.049181][ T5698] usb 2-1: config 0 descriptor?? [ 1383.423740][T21662] netlink: 'syz.0.5270': attribute type 3 has an invalid length. [ 1383.441511][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1383.454214][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.476229][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.505371][ T5698] plantronics 0003:047F:FFFF.0061: reserved main item tag 0xd [ 1383.526928][ T5698] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1383.544019][ T5698] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1383.551799][ T5698] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1383.560459][ T5698] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1383.568548][ T5698] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1383.615581][ T5698] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1384.105403][T21687] tipc: Started in network mode [ 1384.111079][T21686] netlink: 'syz.7.5272': attribute type 13 has an invalid length. [ 1384.126998][T21687] tipc: Node identity e65bfe40d471, cluster identity 4711 [ 1384.150588][T21687] tipc: Enabled bearer , priority 0 [ 1384.168559][T21692] syzkaller0: entered promiscuous mode [ 1384.183638][T21692] syzkaller0: entered allmulticast mode [ 1384.443097][T21729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.470829][T21729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.783627][T29116] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1384.946534][T29116] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 1384.970978][T29116] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1384.987313][T29116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1384.994181][T29116] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1385.024274][T29116] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.067730][T29116] usb 9-1: config 0 descriptor?? [ 1385.143806][ T5698] tipc: Node number set to 841678400 [ 1385.179060][T21743] netlink: 'syz.7.5275': attribute type 8 has an invalid length. [ 1385.187065][T21743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5275'. [ 1385.642511][T21682] tipc: Resetting bearer [ 1385.795922][T21682] tipc: Disabling bearer [ 1385.911778][T29129] usb 2-1: USB disconnect, device number 117 [ 1385.951327][T21774] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1386.030587][T21774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1386.666827][T21807] netlink: 'syz.0.5285': attribute type 13 has an invalid length. [ 1386.714590][T29129] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1386.875016][T29129] usb 2-1: Using ep0 maxpacket: 32 [ 1386.911462][T29129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1386.952121][T29129] usb 2-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 1386.989267][T29129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.027850][T29129] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1387.035050][T29116] usbhid 9-1:0.0: can't add hid device: -71 [ 1387.067059][T29129] usb 2-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 1387.096855][T29129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.113773][T29116] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1387.138859][T29129] usb 2-1: Product: syz [ 1387.156866][T29129] usb 2-1: Manufacturer: syz [ 1387.176671][T29129] usb 2-1: SerialNumber: syz [ 1387.198519][T29116] usb 9-1: USB disconnect, device number 32 [ 1387.443951][T29129] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1387.769809][T29129] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1387.785986][T29129] usb 2-1: USB disconnect, device number 118 [ 1387.821810][T21838] netlink: 'syz.0.5288': attribute type 8 has an invalid length. [ 1387.859855][T16795] udevd[16795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1387.894975][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'. [ 1388.054237][T29134] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1388.233435][T29134] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1388.290105][T29134] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1388.350169][T29134] usb 9-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 1388.405634][T29134] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.440917][T29134] usb 9-1: Product: syz [ 1388.463652][T29134] usb 9-1: Manufacturer: syz [ 1388.484443][T29134] usb 9-1: SerialNumber: syz [ 1388.644130][T29116] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1388.823661][T29116] usb 2-1: Using ep0 maxpacket: 16 [ 1388.842524][T29116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.869041][T29116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.901062][T29116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1388.948152][T29116] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1388.980197][T29116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.023037][T29116] usb 2-1: config 0 descriptor?? [ 1389.299401][T21868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.325485][T21868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.472277][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.497697][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.513285][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.532252][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.558712][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.577337][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.602516][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.628812][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.655022][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.693347][T29116] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1389.869343][T29116] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0062/input/input95 [ 1389.938807][T29116] microsoft 0003:045E:07DA.0062: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1390.012641][T29116] usb 2-1: USB disconnect, device number 119 [ 1390.252757][T21886] fido_id[21886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1390.718581][T21918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.730640][T21919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.747170][T21918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.757411][T21919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.956782][T29134] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1391.002497][T21918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.023121][T29134] usb 9-1: USB disconnect, device number 33 [ 1391.040130][T21918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.120539][T16795] udevd[16795]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1391.249513][T21952] netlink: 'syz.1.5299': attribute type 8 has an invalid length. [ 1391.266744][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1391.443964][T29134] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1391.472346][T21954] xt_hashlimit: size too large, truncated to 1048576 [ 1391.605011][T29134] usb 9-1: Using ep0 maxpacket: 16 [ 1391.624282][T29134] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 1391.643234][T29134] usb 9-1: config 252 has no interface number 0 [ 1391.657672][T29134] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 63, changing to 7 [ 1391.687625][T29134] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 9497, setting to 1024 [ 1391.717913][T29134] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1391.744018][T29134] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.775693][T29134] usb 9-1: Product: syz [ 1391.789447][T29134] usb 9-1: Manufacturer: syz [ 1391.794846][T29134] usb 9-1: SerialNumber: syz [ 1391.805936][ T5698] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1391.845973][T29134] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1391.988918][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1392.010541][ T5698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.036935][ T5698] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1392.049678][ T152] usb 9-1: Failed to submit usb control message: -71 [ 1392.049678][T29134] usb 9-1: USB disconnect, device number 34 [ 1392.078606][ T5698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1392.101084][ T152] usb 9-1: unable to send the bmi data to the device: -71 [ 1392.119287][ T5698] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1392.129418][ T152] usb 9-1: unable to get target info from device [ 1392.149152][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.157904][ T152] usb 9-1: could not get target info (-71) [ 1392.175974][ T5698] usb 2-1: Product: syz [ 1392.181790][ T152] usb 9-1: could not probe fw (-71) [ 1392.192150][ T5698] usb 2-1: Manufacturer: syz [ 1392.221509][ T5698] usb 2-1: SerialNumber: syz [ 1392.361328][T21977] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.5301'. [ 1392.501782][ T5698] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 1392.512456][ T5698] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 1392.534243][ T5698] usb 2-1: 1:1 : unsupported format bits 0x33820006 [ 1392.541369][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5302'. [ 1392.557878][ T5698] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1392.589945][ T5698] usb 2-1: unit 2 not found! [ 1392.603785][ T5698] usb 2-1: unit 0 not found! [ 1392.960623][ T5698] usb 2-1: USB disconnect, device number 120 [ 1393.200763][T14768] udevd[14768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.451526][T22055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5311'. [ 1393.644440][T22145] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1393.696081][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5312'. [ 1393.806693][T22145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 1393.830544][T22145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.841698][T22145] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1393.851469][T22145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.870743][T22145] usb 2-1: config 0 descriptor?? [ 1394.303775][T22145] hkems 0003:2006:0118.0063: item fetching failed at offset 5/7 [ 1394.340350][T22145] hkems 0003:2006:0118.0063: parse failed [ 1394.348971][T22145] hkems 0003:2006:0118.0063: probe with driver hkems failed with error -22 [ 1394.463436][T22078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.501309][T22078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.575189][T22145] usb 2-1: USB disconnect, device number 121 [ 1394.612939][T22078] tipc: Enabled bearer , priority 0 [ 1394.662453][T22078] syzkaller0: entered promiscuous mode [ 1394.687145][T22078] syzkaller0: entered allmulticast mode [ 1394.794592][T22078] tipc: Resetting bearer [ 1394.812892][T22078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.828508][T22078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.918430][T22106] netlink: 'syz.8.5318': attribute type 30 has an invalid length. [ 1394.954378][T17084] Bluetooth: hci1: command 0x0406 tx timeout [ 1394.967352][T22106] bond4: option arp_missed_max: invalid value (0) [ 1394.975094][T22106] bond4: option arp_missed_max: allowed values 1 - 255 [ 1394.986944][T22106] bond4 (unregistering): Released all slaves [ 1395.042579][T22078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5315'. [ 1395.079270][T22077] tipc: Resetting bearer [ 1395.211970][T22077] tipc: Disabling bearer [ 1395.415054][T22179] kvm: user requested TSC rate below hardware speed [ 1395.424722][T22183] xt_hashlimit: size too large, truncated to 1048576 [ 1395.719642][T22183] xt_hashlimit: size too large, truncated to 1048576 [ 1395.849453][T22183] xt_hashlimit: size too large, truncated to 1048576 [ 1395.893565][T22197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.907808][T22197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.002572][T22183] xt_hashlimit: size too large, truncated to 1048576 [ 1396.116585][T22183] xt_hashlimit: size too large, truncated to 1048576 [ 1396.123926][T22145] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1396.299507][T22145] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1396.309148][T22145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.317802][T22145] usb 2-1: Product: syz [ 1396.322049][T22145] usb 2-1: Manufacturer: syz [ 1396.328188][T22145] usb 2-1: SerialNumber: syz [ 1396.555919][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5327'. [ 1396.565158][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5327'. [ 1398.509528][T22257] tipc: Enabling of bearer rejected, already enabled [ 1398.542395][T22256] tipc: Enabling of bearer rejected, already enabled [ 1398.767096][T22145] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1398.841149][T22145] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1398.938486][T22145] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1399.037017][T22145] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1399.137358][T22145] usb 2-1: USB disconnect, device number 122 [ 1400.951485][T22360] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 1401.292258][T22360] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1401.356733][T22366] bond18: (slave bond0): Removing an active aggregator [ 1401.407076][T22366] bond18: (slave bond0): Releasing backup interface [ 1401.441279][T22366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.521088][T22366] bond20: (slave bond0): Enslaving as a backup interface with an up link [ 1401.544203][T31211] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1401.574717][T22369] syzkaller0: entered promiscuous mode [ 1401.586910][T22369] syzkaller0: entered allmulticast mode [ 1401.650027][T22363] tipc: Enabled bearer , priority 0 [ 1401.744319][T16997] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1401.860178][T22417] input: syz0 as /devices/virtual/input/input96 [ 1402.051730][T22429] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1402.644225][T29116] tipc: Node number set to 1419245427 [ 1403.316515][T22145] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1403.331477][ T4858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1403.354955][ T4858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1403.368692][ T4858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1403.387398][ T4858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1403.396590][ T4858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1403.524320][T22145] usb 2-1: Using ep0 maxpacket: 8 [ 1403.548462][T22145] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1403.590644][T22145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.628827][T22145] usb 2-1: Product: syz [ 1403.649231][T22145] usb 2-1: Manufacturer: syz [ 1403.669162][T22145] usb 2-1: SerialNumber: syz [ 1403.703364][T22145] usb 2-1: config 0 descriptor?? [ 1403.910047][T13933] raw-gadget.1 gadget.0: failed to queue disconnect event [ 1403.959564][T22145] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1404.108510][T22363] tipc: Resetting bearer [ 1404.232422][T22363] tipc: Disabling bearer [ 1404.422329][T22145] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1404.444971][T22145] usb 2-1: USB disconnect, device number 123 [ 1405.107323][T22562] netlink: 'syz.1.5353': attribute type 1 has an invalid length. [ 1405.228474][T22563] batman_adv: batadv1: Adding interface: bond0 [ 1405.241428][T22563] batman_adv: batadv1: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.270346][T22563] batman_adv: batadv1: Not using interface bond0 (retrying later): interface not active [ 1405.482373][T22589] netlink: 'syz.1.5354': attribute type 13 has an invalid length. [ 1405.516745][ T4858] Bluetooth: hci5: command tx timeout [ 1405.584982][T22466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.592353][T22583] FAULT_INJECTION: forcing a failure. [ 1405.592353][T22583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1405.609983][T22466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.639196][T22583] CPU: 1 UID: 0 PID: 22583 Comm: syz.1.5354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.639223][T22583] Tainted: [L]=SOFTLOCKUP [ 1405.639230][T22583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1405.639240][T22583] Call Trace: [ 1405.639246][T22583] [ 1405.639255][T22583] dump_stack_lvl+0xe8/0x150 [ 1405.639280][T22583] should_fail_ex+0x40c/0x560 [ 1405.639303][T22583] copy_fpstate_to_sigframe+0xa83/0xd20 [ 1405.639368][T22583] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 1405.639396][T22583] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1405.639424][T22583] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1405.639452][T22583] ? ktime_get+0x1f5/0x220 [ 1405.639475][T22583] ? lapic_next_event+0x11/0x20 [ 1405.639492][T22583] ? clockevents_program_event+0x491/0x630 [ 1405.639513][T22583] ? __pfx_clockevents_program_event+0x10/0x10 [ 1405.639534][T22583] ? fpu__alloc_mathframe+0xac/0x130 [ 1405.639560][T22583] get_sigframe+0x603/0x830 [ 1405.639619][T22583] ? __pfx_get_sigframe+0x10/0x10 [ 1405.639656][T22583] ? posixtimer_deliver_signal+0x2eb/0x3e0 [ 1405.639687][T22583] x64_setup_rt_frame+0x163/0xc50 [ 1405.639727][T22583] ? lockdep_hardirqs_on+0x7a/0x110 [ 1405.639769][T22583] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1405.639791][T22583] ? get_signal+0x10dd/0x12c0 [ 1405.639844][T22583] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1405.639886][T22583] arch_do_signal_or_restart+0x456/0x860 [ 1405.639923][T22583] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1405.639982][T22583] exit_to_user_mode_loop+0xa9/0x6b0 [ 1405.639997][T22583] ? rcu_is_watching+0x15/0xb0 [ 1405.640017][T22583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.640035][T22583] do_syscall_64+0x353/0x580 [ 1405.640051][T22583] ? clear_bhb_loop+0x40/0x90 [ 1405.640070][T22583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.640085][T22583] RIP: 0033:0x7f803f79ce57 [ 1405.640100][T22583] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1405.640114][T22583] RSP: 002b:00007f8040688028 EFLAGS: 00000246 [ 1405.640128][T22583] RAX: 0000000000000127 RBX: 00007f803fa15fa0 RCX: 00007f803f79ce59 [ 1405.640140][T22583] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1405.640150][T22583] RBP: 00007f8040688090 R08: 0000000000000001 R09: 0000000000000000 [ 1405.640160][T22583] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1405.640169][T22583] R13: 00007f803fa16038 R14: 00007f803fa15fa0 R15: 00007f803fb3fa48 [ 1405.640193][T22583] [ 1405.640638][T22466] bridge_slave_0: entered allmulticast mode [ 1406.123342][T22466] bridge_slave_0: entered promiscuous mode [ 1406.162152][T22466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.176446][T22466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.186356][T22466] bridge_slave_1: entered allmulticast mode [ 1406.197157][T22466] bridge_slave_1: entered promiscuous mode [ 1406.457936][T22466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.590285][T22466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.699814][T22466] team0: Port device team_slave_0 added [ 1406.710331][T22466] team0: Port device team_slave_1 added [ 1406.801960][T22466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.810961][T22466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.841123][T22466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.846055][T29129] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1406.859693][T22466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.867219][T22466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.894901][T22466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.909954][T17004] bridge_slave_1: left allmulticast mode [ 1406.916346][T17004] bridge_slave_1: left promiscuous mode [ 1406.924192][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.936190][T17004] bridge_slave_0: left allmulticast mode [ 1406.941928][T17004] bridge_slave_0: left promiscuous mode [ 1406.950295][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.994351][T17004] dvmrp8: left allmulticast mode [ 1407.016713][T29129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1407.026464][T29129] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 1407.038259][T29129] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.060315][T29129] usb 2-1: config 3 has no interface number 0 [ 1407.128465][T29129] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1407.138512][T29129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.147110][T29129] usb 2-1: Product: syz [ 1407.151440][T29129] usb 2-1: Manufacturer: syz [ 1407.163106][T29129] usb 2-1: SerialNumber: syz [ 1407.408649][T29129] usb 2-1: probing VID:PID(0424:012C) [ 1407.419980][T17004] batman_adv: batadv0: Removing interface: gretap1 [ 1407.458623][T29129] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1407.516463][T29129] vub300 2-1:3.92: probe with driver vub300 failed with error -22 [ 1407.557941][T29129] usb 2-1: USB disconnect, device number 124 [ 1407.588780][T17004] bond17 (unregistering): (slave geneve4): Releasing active interface [ 1407.598371][ T4858] Bluetooth: hci5: command tx timeout [ 1407.634161][T17004] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1407.727674][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5362'. [ 1407.737126][T22720] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5362'. [ 1407.963162][T17004] bond20 (unregistering): (slave bond0): Removing an active aggregator [ 1408.003355][T17004] bond20 (unregistering): (slave bond0): Releasing backup interface [ 1408.045805][T17004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.060505][T22723] netlink: 'syz.1.5363': attribute type 1 has an invalid length. [ 1408.070808][T17004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.091435][T17004] bond0 (unregistering): Released all slaves [ 1408.111794][T17004] bond1 (unregistering): Released all slaves [ 1408.133106][T17004] bond2 (unregistering): Released all slaves [ 1408.154694][T17004] bond3 (unregistering): Released all slaves [ 1408.192346][T17004] bond4 (unregistering): Released all slaves [ 1408.218133][T17004] bond5 (unregistering): Released all slaves [ 1408.250576][T17004] bond6 (unregistering): Released all slaves [ 1408.289978][T17004] bond7 (unregistering): Released all slaves [ 1408.312257][T17004] bond8 (unregistering): Released all slaves [ 1408.349410][T17004] bond9 (unregistering): Released all slaves [ 1408.386597][T17004] bond10 (unregistering): Released all slaves [ 1408.415373][T17004] bond11 (unregistering): Released all slaves [ 1408.443192][T17004] bond12 (unregistering): Released all slaves [ 1408.482939][T17004] bond13 (unregistering): Released all slaves [ 1408.530796][T17004] bond14 (unregistering): Released all slaves [ 1408.560145][T17004] bond15 (unregistering): Released all slaves [ 1408.591761][T17004] bond16 (unregistering): Released all slaves [ 1408.626076][T17004] bond17 (unregistering): Released all slaves [ 1408.649479][T17004] bond18 (unregistering): Released all slaves [ 1408.676198][T17004] bond19 (unregistering): Released all slaves [ 1408.700748][T17004] bond20 (unregistering): Released all slaves [ 1408.755310][T22719] syz_tun: entered allmulticast mode [ 1408.761090][T22719] syz_tun: left allmulticast mode [ 1408.887349][T22723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.926717][T22724] batman_adv: batadv1: Removing interface: bond0 [ 1408.972747][T22724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.017636][T22724] bond1: (slave bond0): Enslaving as a backup interface with an up link [ 1409.361524][T17004] tipc: Left network mode [ 1409.393107][T22466] hsr_slave_0: entered promiscuous mode [ 1409.416111][T22466] hsr_slave_1: entered promiscuous mode [ 1409.452663][T22466] debugfs: 'hsr0' already exists in 'hsr' [ 1409.467882][T22466] Cannot create hsr debugfs directory [ 1409.705641][ T4858] Bluetooth: hci5: command tx timeout [ 1409.814702][T22145] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1409.938400][T22832] netlink: 'syz.6.5368': attribute type 13 has an invalid length. [ 1410.036140][T22145] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.101736][T22843] FAULT_INJECTION: forcing a failure. [ 1410.101736][T22843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.209783][T22145] usb 9-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1410.219272][T22843] CPU: 1 UID: 0 PID: 22843 Comm: syz.6.5368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.219308][T22843] Tainted: [L]=SOFTLOCKUP [ 1410.219317][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1410.219331][T22843] Call Trace: [ 1410.219341][T22843] [ 1410.219351][T22843] dump_stack_lvl+0xe8/0x150 [ 1410.219384][T22843] should_fail_ex+0x40c/0x560 [ 1410.219415][T22843] _copy_to_user+0x31/0xb0 [ 1410.219446][T22843] copy_siginfo_to_user+0x22/0xc0 [ 1410.219473][T22843] x64_setup_rt_frame+0x764/0xc50 [ 1410.219533][T22843] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1410.219578][T22843] arch_do_signal_or_restart+0x456/0x860 [ 1410.219618][T22843] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1410.219674][T22843] exit_to_user_mode_loop+0xa9/0x6b0 [ 1410.219696][T22843] ? rcu_is_watching+0x15/0xb0 [ 1410.219725][T22843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.219751][T22843] do_syscall_64+0x353/0x580 [ 1410.219773][T22843] ? trace_irq_disable+0x3b/0x140 [ 1410.219808][T22843] ? clear_bhb_loop+0x40/0x90 [ 1410.219837][T22843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.219860][T22843] RIP: 0033:0x7fb41639ce57 [ 1410.219880][T22843] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1410.219901][T22843] RSP: 002b:00007fb41723c028 EFLAGS: 00000246 [ 1410.219922][T22843] RAX: 0000000000000127 RBX: 00007fb416616090 RCX: 00007fb41639ce59 [ 1410.219938][T22843] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1410.219956][T22843] RBP: 00007fb41723c090 R08: 0000000000000001 R09: 0000000000000000 [ 1410.219971][T22843] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1410.219985][T22843] R13: 00007fb416616128 R14: 00007fb416616090 R15: 00007fb41673fa48 [ 1410.220018][T22843] [ 1410.407470][T22145] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.418205][T22145] usb 9-1: Product: syz [ 1410.422813][T22145] usb 9-1: Manufacturer: syz [ 1410.427768][T22145] usb 9-1: SerialNumber: syz [ 1410.657587][T22145] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1410.689340][T22145] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1410.734674][T22145] usb 9-1: USB disconnect, device number 35 [ 1411.758498][ T4858] Bluetooth: hci5: command tx timeout [ 1412.053599][ T5722] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1412.267189][ T5722] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1412.325588][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.374700][ T5722] usb 2-1: config 0 descriptor?? [ 1412.419362][ T5722] cp210x 2-1:0.0: cp210x converter detected [ 1412.630673][T22958] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5377'. [ 1412.830913][ T5722] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1412.887598][ T5722] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1413.040654][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1413.420366][T17004] hsr_slave_0: left promiscuous mode [ 1413.444187][T17004] hsr_slave_1: left promiscuous mode [ 1413.459583][T17004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.478651][T22940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.506017][T17004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.519922][T22940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.757904][T22998] netlink: 'syz.8.5380': attribute type 13 has an invalid length. [ 1414.654703][T17004] team_slave_1 (unregistering): left allmulticast mode [ 1414.667602][T17004] team0 (unregistering): Port device team_slave_1 removed [ 1414.767354][T17004] team_slave_0 (unregistering): left allmulticast mode [ 1414.781326][T29125] usb 2-1: USB disconnect, device number 125 [ 1414.818598][T17004] team0 (unregistering): Port device team_slave_0 removed [ 1414.832329][T29125] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1414.873381][T29125] cp210x 2-1:0.0: device disconnected [ 1415.374164][ T5722] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1415.594108][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 1415.611607][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1415.636995][ T5722] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1415.650079][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.680235][ T5722] usb 2-1: Product: syz [ 1415.687452][T23041] netlink: 'syz.8.5384': attribute type 1 has an invalid length. [ 1415.688793][ T5722] usb 2-1: Manufacturer: syz [ 1415.720696][ T5722] usb 2-1: SerialNumber: syz [ 1415.803606][T23041] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1415.923740][T29125] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1416.517048][T22466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1416.529931][T22466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1416.547070][T22466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1416.562414][T22466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1416.571263][T22466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1416.584694][T22466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1416.596080][T22466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1416.608890][T22466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1416.763928][T29125] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1416.878063][ T5722] usb 2-1: USB disconnect, device number 126 [ 1416.922303][T22466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.936329][T29125] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1416.971154][T29125] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1416.996911][T29125] usb 9-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1417.027975][T29125] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.043277][T14793] udevd[14793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1417.085987][T22466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.135189][T29125] usb 9-1: config 0 descriptor?? [ 1417.164269][T23068] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1417.177428][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.184726][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.248607][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.255926][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.462010][T22466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.566741][T22466] veth0_vlan: entered promiscuous mode [ 1417.620119][T22466] veth1_vlan: entered promiscuous mode [ 1417.715377][T22466] veth0_macvtap: entered promiscuous mode [ 1417.772830][T22466] veth1_macvtap: entered promiscuous mode [ 1417.868484][T22466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.879321][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5388'. [ 1417.900329][T22466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.993024][ T2015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.026415][ T2015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.058413][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.091594][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.542932][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.587710][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.644450][T29125] usbhid 9-1:0.0: can't add hid device: -71 [ 1418.685531][T29125] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1418.716550][T29125] usb 9-1: USB disconnect, device number 37 [ 1418.825109][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.835680][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.149768][T23217] CUSE: unknown device info "" [ 1419.156633][T23217] CUSE: unknown device info "" [ 1419.161570][T23217] CUSE: unknown device info "" [ 1419.166943][T23217] CUSE: unknown device info "" [ 1419.171874][T23217] CUSE: unknown device info "" [ 1419.178473][T23217] CUSE: unknown device info "" [ 1419.183406][T23217] CUSE: unknown device info "" [ 1419.189055][T23217] CUSE: unknown device info "" [ 1419.208995][T23217] CUSE: DEVNAME unspecified [ 1419.213813][T21420] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1419.361704][T23226] netlink: 'syz.7.5394': attribute type 1 has an invalid length. [ 1419.399729][T21420] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1419.427316][T21420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.533282][T21420] usb 2-1: config 0 descriptor?? [ 1419.589290][T21420] pwc: Samsung MPC-C10 USB webcam detected. [ 1419.884245][T23226] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1419.940143][T23227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.954863][T23179] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1419.988766][T23227] bond4: (slave bond0): Enslaving as a backup interface with an up link [ 1420.008976][ T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1420.129935][T23286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.164672][T23179] usb 1-1: Using ep0 maxpacket: 8 [ 1420.177902][T22145] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1420.188071][T23179] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1420.221527][T23286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.260982][T23179] usb 1-1: config 0 has no interface number 0 [ 1420.282322][T23211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.301477][ T2008] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1420.319040][T23179] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1420.346706][T23211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.389762][T23179] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1420.392875][T22145] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1420.429059][T23179] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1420.464226][T23179] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1420.485833][T23179] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1420.490932][T22145] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.498697][T23179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.540711][T23179] usb 1-1: config 0 descriptor?? [ 1420.560367][T22145] usb 9-1: Product: syz [ 1420.577788][T22145] usb 9-1: Manufacturer: syz [ 1420.588782][T22145] usb 9-1: SerialNumber: syz [ 1420.599365][T23179] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1421.063187][T22145] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1421.093711][T22145] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1421.561507][T23280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.583430][T23280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.071577][T22145] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1422.103651][T22145] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1422.135197][T22145] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1422.176379][T22145] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1422.493963][T21420] pwc: send_video_command error -71 [ 1422.527886][T21420] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1422.570709][T21420] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1422.618218][T21420] usb 2-1: USB disconnect, device number 127 [ 1422.833261][ T5698] usb 1-1: USB disconnect, device number 16 [ 1422.879011][ T5698] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1423.117574][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.124462][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.275974][ T5698] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1423.333634][T22145] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1423.460035][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.505208][T22145] usb 2-1: too many configurations: 168, using maximum allowed: 8 [ 1423.524945][T22145] usb 2-1: config index 0 descriptor too short (expected 65016, got 133) [ 1423.527519][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.548395][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.570258][ T5698] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1423.580593][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.587316][T22145] usb 2-1: config index 1 descriptor too short (expected 65016, got 133) [ 1423.608129][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.619944][ T5698] usb 1-1: config 0 descriptor?? [ 1423.636372][T22145] usb 2-1: config index 2 descriptor too short (expected 65016, got 133) [ 1423.648320][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.681703][T22145] usb 2-1: config index 3 descriptor too short (expected 65016, got 133) [ 1423.723147][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.744706][T22145] usb 2-1: config index 4 descriptor too short (expected 65016, got 133) [ 1423.765559][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.785912][T22145] usb 2-1: config index 5 descriptor too short (expected 65016, got 133) [ 1423.814709][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.831552][T22145] usb 2-1: config index 6 descriptor too short (expected 65016, got 133) [ 1423.841453][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.855308][T22145] usb 2-1: config index 7 descriptor too short (expected 65016, got 133) [ 1423.865054][T22145] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.881220][T22145] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1423.900976][T22145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.920482][T22145] usb 2-1: Product: syz [ 1423.930564][T22145] usb 2-1: Manufacturer: syz [ 1423.941585][T22145] usb 2-1: SerialNumber: syz [ 1423.979606][T22145] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1424.023042][T29130] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1424.196056][T21420] usb 9-1: USB disconnect, device number 38 [ 1424.578567][T23432] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5410'. [ 1425.353757][T29130] usb 2-1: Service connection timeout for: 256 [ 1425.415802][T29130] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1425.523765][T29130] ath9k_htc: Failed to initialize the device [ 1425.592594][ T5698] usbhid 1-1:0.0: can't add hid device: -71 [ 1425.646436][ T5698] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1425.791929][ T5698] usb 1-1: USB disconnect, device number 17 [ 1425.932110][T29130] usb 2-1: ath9k_htc: USB layer deinitialized [ 1426.219527][T23463] loop5: detected capacity change from 0 to 7 [ 1426.248754][T23463] loop5: [ 1426.266208][T23463] loop5: partition table partially beyond EOD, truncated [ 1426.754683][ T7800] usb 2-1: USB disconnect, device number 2 [ 1427.595075][T29130] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1427.665614][ T7800] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1427.786736][T29130] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 1427.798402][T29130] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.808852][T29130] usb 9-1: config 0 has no interface number 0 [ 1427.815824][T29130] usb 9-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1427.832820][T29130] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1427.844531][ T7800] usb 2-1: Using ep0 maxpacket: 16 [ 1427.858684][ T7800] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1427.869849][ T7800] usb 2-1: can't read configurations, error -61 [ 1427.870733][T29130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.885570][T29130] usb 9-1: Product: syz [ 1427.889826][T29130] usb 9-1: Manufacturer: syz [ 1427.895530][T29130] usb 9-1: SerialNumber: syz [ 1427.908688][T29130] usb 9-1: config 0 descriptor?? [ 1427.927973][T29130] cyberjack 9-1:0.69: required endpoints missing [ 1428.004993][ T7800] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1428.113439][T23523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.121352][T23523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.173953][ T7800] usb 2-1: Using ep0 maxpacket: 16 [ 1428.182671][ T7800] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1428.190900][ T7800] usb 2-1: can't read configurations, error -61 [ 1428.197771][ T7800] usb usb2-port1: attempt power cycle [ 1428.239650][T23523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.255535][T23523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.381549][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.391989][T21420] usb 9-1: USB disconnect, device number 39 [ 1428.392500][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.430745][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.453805][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.544231][ T7800] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1428.565828][ T7800] usb 2-1: Using ep0 maxpacket: 16 [ 1428.575136][ T7800] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1428.582982][ T7800] usb 2-1: can't read configurations, error -61 [ 1428.708121][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5425'. [ 1428.719038][T23547] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1428.726985][ T7800] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1428.774826][ T7800] usb 2-1: Using ep0 maxpacket: 16 [ 1428.782917][ T7800] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1428.790940][ T7800] usb 2-1: can't read configurations, error -61 [ 1428.801682][ T7800] usb usb2-port1: unable to enumerate USB device [ 1429.801671][T23580] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1430.062438][T23584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1430.783614][ T7800] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1430.970929][ T7800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1430.991411][ T7800] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1431.006435][ T7800] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1431.017795][ T7800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.042254][ T7800] usb 2-1: config 0 descriptor?? [ 1431.277623][ T7800] hid_parser_main: 5 callbacks suppressed [ 1431.277641][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.308505][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.326082][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.347778][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.366246][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.383573][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.400481][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.421591][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.438561][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.463933][ T7800] kovaplus 0003:1E7D:2D50.0064: unknown main item tag 0x0 [ 1431.484761][ T7800] kovaplus 0003:1E7D:2D50.0064: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1431.906137][ T7800] kovaplus 0003:1E7D:2D50.0064: couldn't init struct kovaplus_device [ 1431.920926][ T7800] kovaplus 0003:1E7D:2D50.0064: couldn't install mouse [ 1431.931583][ T7800] kovaplus 0003:1E7D:2D50.0064: probe with driver kovaplus failed with error -71 [ 1431.946041][ T7800] usb 2-1: USB disconnect, device number 7 [ 1432.586362][T23660] sctp: [Deprecated]: syz.1.5440 (pid 23660) Use of int in maxseg socket option. [ 1432.586362][T23660] Use struct sctp_assoc_value instead [ 1432.647478][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 1432.751389][T23664] loop5: detected capacity change from 0 to 7 [ 1432.778947][T23664] loop5: [ 1432.786897][T23664] loop5: partition table partially beyond EOD, truncated [ 1433.702438][T23697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.710060][T23697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.037329][T23697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.061261][T23697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.474389][T21420] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1434.502586][T16997] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.512089][T16997] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.521134][T16997] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.531763][T16997] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.670802][T21420] usb 1-1: Using ep0 maxpacket: 8 [ 1434.678045][T21420] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1434.687983][T21420] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.700423][T21420] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1434.715427][T21420] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1434.725114][T21420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.742768][T21420] usbtmc 1-1:16.0: bulk endpoints not found [ 1435.004937][T23741] netlink: 'syz.7.5451': attribute type 11 has an invalid length. [ 1435.136270][T23749] loop5: detected capacity change from 0 to 7 [ 1435.145028][T23749] loop5: [ 1435.148973][T23749] loop5: partition table partially beyond EOD, truncated [ 1437.053883][T21420] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1437.183670][T23177] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1437.204117][T21420] usb 2-1: Using ep0 maxpacket: 16 [ 1437.214998][T21420] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.228199][T21420] usb 2-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice= f.ab [ 1437.237689][T21420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.246282][T21420] usb 2-1: Product: syz [ 1437.246533][T22145] usb 1-1: USB disconnect, device number 18 [ 1437.250482][T21420] usb 2-1: Manufacturer: syz [ 1437.250501][T21420] usb 2-1: SerialNumber: syz [ 1437.323795][T23177] usb 9-1: device descriptor read/64, error -71 [ 1437.342133][T23816] loop5: detected capacity change from 0 to 7 [ 1437.351818][T23816] loop5: [ 1437.359812][T23816] loop5: partition table partially beyond EOD, truncated [ 1437.489290][T23786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.502501][T23786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.524635][T21420] usb 2-1: Could not find all expected endpoints [ 1437.541822][T21420] usb 2-1: USB disconnect, device number 8 [ 1437.574538][T23177] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1437.703638][T23177] usb 9-1: device descriptor read/64, error -71 [ 1437.744148][ T5698] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1437.814748][T23177] usb usb9-port1: attempt power cycle [ 1437.894588][ T5698] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 1437.928080][ T5698] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1437.937622][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.947837][ T5698] usb 1-1: Product: syz [ 1437.964084][ T5698] usb 1-1: Manufacturer: syz [ 1437.969781][ T5698] usb 1-1: SerialNumber: syz [ 1438.154218][T23177] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1438.195849][T23177] usb 9-1: device descriptor read/8, error -71 [ 1438.200999][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1438.229162][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1438.246737][ T5698] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1438.268435][ T5698] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1438.300511][ T5698] usb 1-1: USB disconnect, device number 19 [ 1438.443788][T23177] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1438.480314][T23177] usb 9-1: device descriptor read/8, error -71 [ 1438.596048][T23177] usb usb9-port1: unable to enumerate USB device [ 1439.220708][T23871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1439.473587][T29125] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1439.625920][T29125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.637038][T29125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1439.648319][T29125] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1439.657649][T29125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.669362][T29125] usb 2-1: config 0 descriptor?? [ 1439.677111][T23873] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1440.148624][T23898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.190554][T23898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.234458][T29125] hid_parser_main: 222 callbacks suppressed [ 1440.234487][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.279326][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.303837][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.332504][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.354348][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.361996][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.371825][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.381325][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.389243][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.425305][T29125] sigmamicro 0003:1C4F:0059.0065: unknown main item tag 0x0 [ 1440.472842][T29125] sigmamicro 0003:1C4F:0059.0065: hidraw0: USB HID v7f.fd Device [HID 1c4f:0059] on usb-dummy_hcd.1-1/input0 [ 1440.700344][T22145] usb 2-1: USB disconnect, device number 9 [ 1440.734836][T23177] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1440.903771][T23177] usb 9-1: Using ep0 maxpacket: 8 [ 1440.918126][T23177] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1440.936446][T23177] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.963832][T23177] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1440.991759][T23177] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1441.007031][T23177] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.043198][T23177] usbtmc 9-1:16.0: bulk endpoints not found [ 1441.155840][T23946] loop5: detected capacity change from 0 to 7 [ 1441.172891][T23946] loop5: [ 1441.180216][T23946] loop5: partition table partially beyond EOD, truncated [ 1441.399059][T23958] netlink: 'syz.1.5477': attribute type 1 has an invalid length. [ 1441.451703][T23958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1441.490512][T23958] bond1: (slave bond0): Removing an active aggregator [ 1441.511621][T23958] bond1: (slave bond0): Releasing backup interface [ 1441.539715][T23958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.550813][T23958] bond2: (slave bond0): Enslaving as a backup interface with an up link [ 1441.650933][T16997] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1441.930978][T24006] hub 8-0:1.0: USB hub found [ 1441.936847][T24006] hub 8-0:1.0: 1 port detected [ 1441.988210][ T1153] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1443.304524][T23177] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1443.473104][ T5698] usb 9-1: USB disconnect, device number 44 [ 1443.488414][T23177] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1443.529772][T23177] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1443.555438][T23177] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1443.580118][T23177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.650296][T24025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1443.720622][T23177] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1443.949484][T23177] usb 2-1: USB disconnect, device number 10 [ 1444.171847][T24025] netlink: 'syz.1.5483': attribute type 13 has an invalid length. [ 1444.210900][T24025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1444.539355][T24043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1444.573902][ T7800] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1444.639083][T24088] syzkaller0: entered promiscuous mode [ 1444.651487][T24088] syzkaller0: entered allmulticast mode [ 1444.746653][ T7800] usb 8-1: config 0 has an invalid interface number: 81 but max is 0 [ 1444.755553][ T7800] usb 8-1: config 0 has no interface number 0 [ 1444.761767][ T7800] usb 8-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30 [ 1444.773319][ T7800] usb 8-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 1444.787754][ T7800] usb 8-1: config 0 interface 81 has no altsetting 0 [ 1444.808541][ T7800] usb 8-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1444.822797][ T7800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.836278][T24098] netlink: 'syz.6.5489': attribute type 1 has an invalid length. [ 1444.845707][ T7800] usb 8-1: Product: syz [ 1444.893898][ T7800] usb 8-1: Manufacturer: syz [ 1444.902127][ T7800] usb 8-1: SerialNumber: syz [ 1444.916280][ T7800] usb 8-1: config 0 descriptor?? [ 1444.998442][T24098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1445.030998][T24099] bond4: (slave bond0): Removing an active aggregator [ 1445.076256][T24099] bond4: (slave bond0): Releasing backup interface [ 1445.130423][T24099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.138893][ T7800] peak_usb 8-1:0.81: probe with driver peak_usb failed with error 81 [ 1445.178537][ T7800] usb 8-1: USB disconnect, device number 2 [ 1445.191539][T24099] bond5: (slave bond0): Enslaving as a backup interface with an up link [ 1445.233645][ T1153] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1445.414459][ T1153] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1446.584487][T23177] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1446.773563][T23177] usb 2-1: Using ep0 maxpacket: 8 [ 1446.799403][T23177] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.832483][T23177] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.861488][T23177] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.901024][T23177] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1446.928898][T23177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.980018][T23177] usbtmc 2-1:16.0: bulk endpoints not found [ 1447.272850][T24182] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5497'. [ 1447.309952][T24182] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5497'. [ 1447.424066][T24182] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5497'. [ 1447.516369][T24198] binder: 24197:24198 ioctl c0306201 200000000600 returned -14 [ 1447.588621][T24201] netlink: 'syz.0.5501': attribute type 1 has an invalid length. [ 1447.636314][T24201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1447.671411][T24201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.694094][T24201] bond1: (slave bond0): Enslaving as a backup interface with an up link [ 1447.773641][ T2015] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1447.869584][T24244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1447.887434][T24244] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1447.904527][ T1153] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1447.973608][T23177] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1448.016789][T24257] vivid-002: ================= START STATUS ================= [ 1448.017122][T24255] netlink: 'syz.0.5506': attribute type 13 has an invalid length. [ 1448.025582][T24257] vivid-002: Radio HW Seek Mode: Bounded [ 1448.040006][T24257] vivid-002: Radio Programmable HW Seek: false [ 1448.047466][T24257] vivid-002: RDS Rx I/O Mode: Block I/O [ 1448.053177][T24257] vivid-002: Generate RBDS Instead of RDS: false [ 1448.060384][T24257] vivid-002: RDS Reception: true [ 1448.065763][T24257] vivid-002: RDS Program Type: 0 inactive [ 1448.071611][T24257] vivid-002: RDS PS Name: inactive [ 1448.083947][T24257] vivid-002: RDS Radio Text: inactive [ 1448.089613][T24257] vivid-002: RDS Traffic Announcement: false inactive [ 1448.098777][T24257] vivid-002: RDS Traffic Program: false inactive [ 1448.113517][T24257] vivid-002: RDS Music: false inactive [ 1448.137794][T24257] vivid-002: ================== END STATUS ================== [ 1448.152324][T23177] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1448.180835][T23177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.193236][T23177] usb 8-1: Product: syz [ 1448.198805][T23177] usb 8-1: Manufacturer: syz [ 1448.206852][T23177] usb 8-1: SerialNumber: syz [ 1448.243008][T24265] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5507'. [ 1448.252453][T23177] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1448.301647][T22145] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1448.988732][T24237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.009966][T24237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.020442][T24237] sg_write: data in/out 694624/136 bytes for SCSI command 0x0-- guessing data in; [ 1449.020442][T24237] program syz.7.5502 not setting count and/or reply_len properly [ 1449.134697][T23177] usb 8-1: USB disconnect, device number 3 [ 1449.323815][T29130] usb 2-1: USB disconnect, device number 11 [ 1449.356321][T22145] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1449.399838][T22145] ath9k_htc: Failed to initialize the device [ 1449.438033][T23177] usb 8-1: ath9k_htc: USB layer deinitialized [ 1451.304539][ T7800] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 1451.476238][ T7800] usb 8-1: No LPM exit latency info found, disabling LPM. [ 1451.508129][ T7800] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1451.543171][ T7800] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 1451.579938][ T7800] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 1451.615491][ T7800] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1451.654415][ T7800] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1451.682257][ T7800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.719934][ T7800] usb 8-1: Manufacturer: ࠠ [ 1451.742836][ T7800] usb 8-1: SerialNumber: ﾃ䳯ᢽ㫂쓨㷃緾罰෿屮ᵮ冒穐⦊叓떍洘좲䕰調ﺧ䎪姯첗蓲怏켦缭ᦋᑦ陑䏄侅폏炢䃁掞芭ꭺ㴽붴誃鹭鳓몆貔䅷♵챩큣ퟲс⬒풣툹ၱ葝詺갗ⶉᮘଭ䬯2ἓ蒖ণ푗熗懞ѕ [ 1451.954749][T24357] netlink: 'syz.6.5520': attribute type 13 has an invalid length. [ 1451.991434][T24343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1452.074867][T24343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1452.182164][T24343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1452.811627][ T7800] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1452.904231][ T7800] usb 8-1: USB disconnect, device number 4 [ 1453.765179][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1453.904165][T22145] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1454.112060][T22145] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.159651][T22145] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1454.177044][T22145] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1454.197998][T22145] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1454.249895][T22145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.308090][T22145] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1454.345172][T22145] usb 8-1: invalid MIDI out EP 0 [ 1454.955731][T22145] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1455.105411][ T30] audit: type=1326 audit(1781505710.114:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1455.239858][ T30] audit: type=1326 audit(1781505710.114:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1455.355356][T21420] usb 8-1: USB disconnect, device number 5 [ 1455.422821][ T30] audit: type=1326 audit(1781505710.114:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1455.545622][ T30] audit: type=1326 audit(1781505710.144:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1455.674114][ T30] audit: type=1326 audit(1781505710.144:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1455.843388][ T30] audit: type=1326 audit(1781505710.144:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1455.874140][T24498] syzkaller0: entered promiscuous mode [ 1455.881572][T24498] syzkaller0: entered allmulticast mode [ 1455.901275][T24498] tipc: Enabled bearer , priority 0 [ 1455.925812][T24496] tipc: Resetting bearer [ 1455.986867][ T30] audit: type=1326 audit(1781505710.144:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1456.128784][ T30] audit: type=1326 audit(1781505710.144:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1456.215642][ T30] audit: type=1326 audit(1781505710.144:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1456.256205][T24496] tipc: Disabling bearer [ 1456.303925][ T30] audit: type=1326 audit(1781505710.144:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.8.5531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff994b9ce59 code=0x7ffc0000 [ 1456.587840][T24527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.763698][ T7800] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1456.945135][ T7800] usb 1-1: Using ep0 maxpacket: 16 [ 1456.973159][ T7800] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1457.003053][ T7800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.031834][ T7800] usb 1-1: config 0 has no interface number 0 [ 1457.051219][ T7800] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1457.069486][ T7800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.097593][ T7800] usb 1-1: Product: syz [ 1457.111709][ T7800] usb 1-1: Manufacturer: syz [ 1457.131283][ T7800] usb 1-1: SerialNumber: syz [ 1457.161500][ T7800] usb 1-1: config 0 descriptor?? [ 1457.180386][ T7800] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1457.190220][ T7800] uvcvideo 1-1:0.105: No valid video chain found. [ 1457.493953][ T7800] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1457.666282][T24544] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 1457.675935][ T7800] usb 2-1: Using ep0 maxpacket: 8 [ 1457.687591][T24544] program syz.8.5540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1457.697571][ T7800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.721499][ T7800] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1457.754601][ T7800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.778180][ T7800] usb 2-1: config 0 descriptor?? [ 1457.806351][ T7800] rndis_host 2-1:0.0: missing cdc header descriptor [ 1457.827927][ T7800] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 1457.838593][ T7800] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 1457.850273][ T7800] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1458.043648][T29130] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1458.208395][T29130] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1458.217770][T29130] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1458.228476][T29130] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1458.240926][T29130] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1458.250516][T29130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.258703][T29130] usb 9-1: Product: syz [ 1458.263181][T29130] usb 9-1: Manufacturer: syz [ 1458.267990][T29130] usb 9-1: SerialNumber: syz [ 1458.284100][T29130] usb 9-1: selecting invalid altsetting 1 [ 1458.290504][T29130] usb 9-1: unit 6 not found! [ 1459.182598][ T7800] usb 1-1: USB disconnect, device number 20 [ 1459.770049][T29130] usb 9-1: 2:0: failed to get current value for ch 0 (-71) [ 1459.823715][ T7800] usb 2-1: USB disconnect, device number 12 [ 1460.079603][T24602] netlink: 'syz.7.5544': attribute type 12 has an invalid length. [ 1460.127785][T24602] netlink: 'syz.7.5544': attribute type 29 has an invalid length. [ 1460.142718][T29130] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1460.166471][T24595] cgroup: fork rejected by pids controller in /syz7 [ 1460.200578][T24602] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5544'. [ 1460.213442][T29130] usb 9-1: USB disconnect, device number 45 [ 1460.333619][T23177] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1460.495882][T23177] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1460.508538][T23177] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1460.519696][T23177] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1460.525862][T16795] udevd[16795]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.593663][T23177] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1460.637914][T23177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.704726][T23177] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.998807][T23177] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1461.043833][T23177] usb 2-1: USB disconnect, device number 13 [ 1462.235339][T24762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1462.692683][T17084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1462.704175][T17084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1462.729252][T17084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1462.738788][T17084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1462.746989][T17084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1463.061924][T24813] netlink: 'syz.0.5553': attribute type 1 has an invalid length. [ 1463.182793][T24813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1463.330863][T24855] bond2: (slave geneve2): making interface the new active one [ 1463.391231][T24855] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1463.573693][ T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.610610][ T152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.704749][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5556'. [ 1463.739336][ T152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.750254][ T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.852963][T24873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1463.896736][T24877] vlan2: entered allmulticast mode [ 1463.917257][T24877] bond4: entered allmulticast mode [ 1464.028329][T24893] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1464.321102][T24952] program syz.0.5560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.544292][ T7800] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1464.879817][ T4858] Bluetooth: hci0: command tx timeout [ 1464.927236][ T2008] bridge_slave_1: left allmulticast mode [ 1464.933131][ T2008] bridge_slave_1: left promiscuous mode [ 1464.941786][ T2008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.956768][ T2008] bridge_slave_0: left allmulticast mode [ 1464.970331][ T2008] bridge_slave_0: left promiscuous mode [ 1464.978691][ T2008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.993944][T21420] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1465.125026][T25029] netlink: 'syz.6.5563': attribute type 1 has an invalid length. [ 1465.179517][T21420] usb 1-1: device descriptor read/64, error -71 [ 1465.380278][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1465.396528][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1465.396548][ T30] audit: type=1800 audit(1781505720.404:9663): pid=25039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5565" name="file1" dev="tmpfs" ino=399 res=0 errno=0 [ 1465.427575][ T2008] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1465.439064][T21420] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1465.531296][ T2008] bond4 (unregistering): (slave bond0): Removing an active aggregator [ 1465.544536][ T2008] bond4 (unregistering): (slave bond0): Releasing backup interface [ 1465.557425][ T2008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.571846][ T2008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.583644][T21420] usb 1-1: device descriptor read/64, error -71 [ 1465.592172][ T2008] bond0 (unregistering): Released all slaves [ 1465.609417][ T2008] bond1 (unregistering): Released all slaves [ 1465.631761][ T2008] bond2 (unregistering): Released all slaves [ 1465.695427][T21420] usb usb1-port1: attempt power cycle [ 1465.727014][ T2008] bond3 (unregistering): Released all slaves [ 1465.767065][ T2008] bond4 (unregistering): Released all slaves [ 1465.951089][T25029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1466.074256][T21420] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1466.100330][T25031] bond5: (slave bond0): Removing an active aggregator [ 1466.107181][T21420] usb 1-1: device descriptor read/8, error -71 [ 1466.129454][T25031] bond5: (slave bond0): Releasing backup interface [ 1466.167987][T25031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.232886][T25031] bond6: (slave bond0): Enslaving as a backup interface with an up link [ 1466.281918][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1466.301655][ T2008] tipc: Left network mode [ 1466.317076][T17004] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1466.365301][T21420] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1466.437510][T21420] usb 1-1: device descriptor read/8, error -71 [ 1466.536061][T31211] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1466.554220][T21420] usb usb1-port1: unable to enumerate USB device [ 1466.615131][T24802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.639628][T24802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.664621][T24802] bridge_slave_0: entered allmulticast mode [ 1466.685716][T24802] bridge_slave_0: entered promiscuous mode [ 1466.705961][T24802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.729880][T24802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.758047][T25145] loop4: detected capacity change from 0 to 7 [ 1466.765119][T24802] bridge_slave_1: entered allmulticast mode [ 1466.794663][T24802] bridge_slave_1: entered promiscuous mode [ 1466.921879][T25145] Dev loop4: unable to read RDB block 7 [ 1466.954195][ T4858] Bluetooth: hci0: command tx timeout [ 1466.957026][T25145] loop4: unable to read partition table [ 1467.000471][T25145] loop4: partition table beyond EOD, truncated [ 1467.045000][T25145] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1467.067094][T25156] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5573'. [ 1467.093773][T22145] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1467.219009][T24802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.253853][T22145] usb 9-1: Using ep0 maxpacket: 8 [ 1467.296687][T24802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.327933][T22145] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.363246][T22145] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.403659][T22145] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1467.431649][T22145] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1467.450024][T22145] usb 9-1: New USB device found, idVendor=152f, idProduct=0034, bcdDevice= 0.00 [ 1467.482727][T22145] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.529063][T22145] usb 9-1: config 0 descriptor?? [ 1467.557387][T24802] team0: Port device team_slave_0 added [ 1467.677232][ T2008] hsr_slave_0: left promiscuous mode [ 1467.714275][ T2008] hsr_slave_1: left promiscuous mode [ 1467.733003][ T2008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.816607][ T2008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.006683][T25225] loop5: detected capacity change from 0 to 7 [ 1468.021069][T22145] hid_parser_main: 218 callbacks suppressed [ 1468.021095][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.064266][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.079330][T25225] loop5: [ 1468.101406][T25225] loop5: partition table partially beyond EOD, truncated [ 1468.139613][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.183089][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.202779][T25145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.239282][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.277484][T25145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.294720][T25143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.329066][T25143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.403752][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.441112][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.471264][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.496929][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.537120][T22145] hid-generic 0003:152F:0034.0066: unknown main item tag 0x0 [ 1468.613901][T22145] hid-generic 0003:152F:0034.0066: hidraw0: USB HID v0.00 Device [HID 152f:0034] on usb-dummy_hcd.8-1/input0 [ 1468.684951][T22145] usb 9-1: USB disconnect, device number 46 [ 1468.955749][T25267] netlink: 'syz.0.5580': attribute type 1 has an invalid length. [ 1469.002767][T25258] fido_id[25258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1469.035905][ T4858] Bluetooth: hci0: command tx timeout [ 1469.048712][T25269] netlink: 'syz.0.5580': attribute type 10 has an invalid length. [ 1469.270442][ T2008] team0 (unregistering): Port device team_slave_1 removed [ 1469.305039][ T2008] team0 (unregistering): Port device team_slave_0 removed [ 1469.353769][T21420] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1469.465480][T24802] team0: Port device team_slave_1 added [ 1469.513693][T21420] usb 9-1: Using ep0 maxpacket: 16 [ 1469.546522][T21420] usb 9-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 1469.604559][T21420] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1469.696286][T25267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1469.716555][T21420] usb 9-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1469.738026][ T5293] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1469.745970][T21420] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.803410][T21420] usb 9-1: config 0 descriptor?? [ 1469.851987][T21420] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1469.913367][T24802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.921334][T24802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.949709][T24802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.964926][T24802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.972162][T24802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.001941][T24802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.188809][T24802] hsr_slave_0: entered promiscuous mode [ 1470.202766][T24802] hsr_slave_1: entered promiscuous mode [ 1470.209928][T24802] debugfs: 'hsr0' already exists in 'hsr' [ 1470.217263][T24802] Cannot create hsr debugfs directory [ 1470.281273][ T2008] IPVS: stop unused estimator thread 0... [ 1470.324210][T23177] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1470.495866][T23177] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1470.524700][T23177] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.588036][T23177] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1470.613452][T23177] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1470.656283][T23177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.722631][T23177] usb 1-1: config 0 descriptor?? [ 1470.750712][T25337] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1471.113972][ T4858] Bluetooth: hci0: command tx timeout [ 1471.264807][T25462] syzkaller0: entered promiscuous mode [ 1471.283686][T25462] syzkaller0: entered allmulticast mode [ 1471.360073][T23177] a4tech 0003:09DA:022B.0067: unbalanced collection at end of report description [ 1471.407002][T23177] a4tech 0003:09DA:022B.0067: parse failed [ 1471.427621][T23177] a4tech 0003:09DA:022B.0067: probe with driver a4tech failed with error -22 [ 1471.519718][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1471.668988][T23177] usb 1-1: USB disconnect, device number 25 [ 1471.990110][T24802] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1472.002984][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1472.022357][T24802] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1472.034742][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1472.043322][T24802] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1472.056901][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1472.066573][T24802] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1472.094152][T24802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1472.124146][ T5698] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1472.144750][T29125] usb 9-1: USB disconnect, device number 47 [ 1472.275972][ T5698] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1472.294410][ T5698] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1472.318294][ T5698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1472.344536][ T5698] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.371698][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1472.388346][T25541] loop5: detected capacity change from 0 to 7 [ 1472.400106][T25541] loop5: [ 1472.403304][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1472.416163][T25541] loop5: partition table partially beyond EOD, truncated [ 1472.437818][T24802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.448303][ T5698] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1472.483089][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1472.517336][ T5698] usb 2-1: Product: syz [ 1472.527991][ T5698] usb 2-1: Manufacturer: syz [ 1472.539716][T24802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.566376][T25508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1472.591504][ T5698] cdc_wdm 2-1:1.0: skipping garbage [ 1472.598220][ T5698] cdc_wdm 2-1:1.0: skipping garbage [ 1472.610583][ T5698] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1472.623113][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.630406][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.642312][ T5698] cdc_wdm 2-1:1.0: Unknown control protocol [ 1472.722871][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.730157][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.809839][T23179] usb 2-1: USB disconnect, device number 16 [ 1472.844367][T25556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1473.095466][T24802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.169605][T24802] veth0_vlan: entered promiscuous mode [ 1473.205615][T24802] veth1_vlan: entered promiscuous mode [ 1473.299928][T24802] veth0_macvtap: entered promiscuous mode [ 1473.329047][T24802] veth1_macvtap: entered promiscuous mode [ 1473.366285][T24802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.400958][T24802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.440568][ T1153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.458147][ T1153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.478797][ T1153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.499848][ T1153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.873977][ T4858] Bluetooth: hci1: command 0x0406 tx timeout [ 1474.954218][ T4858] Bluetooth: hci4: command 0x0c1a tx timeout [ 1474.982430][T25556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1474.989903][T25556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1474.996344][T25556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1475.009189][T25556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1475.025940][T25556] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1475.032104][T25556] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1475.045693][T25556] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1475.059296][T25556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1475.065674][T25556] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1475.073635][T25556] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1475.100288][T25556] ip6tnl1: left allmulticast mode [ 1475.123330][T25556] vlan2: left allmulticast mode [ 1475.134359][T25556] bond4: left allmulticast mode [ 1475.187758][T31211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.229512][T31211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.334945][T31211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.343056][T31211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.465422][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5547'. [ 1475.533614][T23177] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1475.541616][T29130] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1475.703755][T23177] usb 1-1: Using ep0 maxpacket: 16 [ 1475.709046][T29130] usb 2-1: Using ep0 maxpacket: 8 [ 1475.717038][T29130] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1475.725899][T23177] usb 1-1: too many configurations: 163, using maximum allowed: 8 [ 1475.734340][T29130] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1475.743381][T29130] usb 2-1: config 0 has no interface number 0 [ 1475.744657][T29115] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1475.770341][T29130] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1475.782834][T23177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1475.791914][T23177] usb 1-1: can't read configurations, error -61 [ 1475.799055][T29130] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1475.812381][T29130] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1475.833338][T29130] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1475.843531][T29130] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1475.853174][T29130] usb 2-1: Product: syz [ 1475.857867][T29130] usb 2-1: Manufacturer: syz [ 1475.911018][T29130] usb 2-1: config 0 descriptor?? [ 1475.933619][T23177] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1475.945730][T29115] usb 8-1: config 3 has an invalid interface number: 3 but max is 1 [ 1475.956659][T29115] usb 8-1: config 3 has an invalid interface number: 50 but max is 1 [ 1475.967246][T29115] usb 8-1: config 3 has no interface number 0 [ 1475.974328][T29115] usb 8-1: config 3 has no interface number 1 [ 1475.981961][T29115] usb 8-1: config 3 interface 3 has no altsetting 0 [ 1475.997590][T29115] usb 8-1: config 3 interface 50 has no altsetting 0 [ 1476.010147][T29115] usb 8-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1476.021145][T29115] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.029841][T29115] usb 8-1: Product: syz [ 1476.035086][T29115] usb 8-1: Manufacturer: syz [ 1476.040588][T29115] usb 8-1: SerialNumber: syz [ 1476.106796][T23177] usb 1-1: Using ep0 maxpacket: 16 [ 1476.117302][T23177] usb 1-1: too many configurations: 163, using maximum allowed: 8 [ 1476.141455][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.161178][T23177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1476.173932][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.188382][T23177] usb 1-1: can't read configurations, error -61 [ 1476.219299][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.229596][T23177] usb usb1-port1: attempt power cycle [ 1476.254459][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.289756][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.339006][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.350893][T25680] netlink: 8260 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1476.366545][T29115] usb 8-1: unknown number of interfaces: 2 [ 1476.423631][T29115] usb 8-1: USB disconnect, device number 6 [ 1476.591303][T29130] usb 2-1: USB disconnect, device number 17 [ 1476.597512][T23177] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1476.654374][T23177] usb 1-1: Using ep0 maxpacket: 16 [ 1476.673252][T23177] usb 1-1: too many configurations: 163, using maximum allowed: 8 [ 1476.700317][T23177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1476.730736][T23177] usb 1-1: can't read configurations, error -61 [ 1476.893823][T23177] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1476.945328][T23177] usb 1-1: Using ep0 maxpacket: 16 [ 1476.993425][T23177] usb 1-1: too many configurations: 163, using maximum allowed: 8 [ 1477.034498][ T4858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1477.040648][T17083] Bluetooth: hci4: command 0x0c1a tx timeout [ 1477.047013][T17084] Bluetooth: hci5: command 0x0c1a tx timeout [ 1477.077859][T23177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1477.116002][T17084] Bluetooth: hci0: command 0x0c1a tx timeout [ 1477.138261][T23177] usb 1-1: can't read configurations, error -61 [ 1477.196541][T23177] usb usb1-port1: unable to enumerate USB device [ 1477.242828][T29130] hid_parser_main: 33 callbacks suppressed [ 1477.242847][T29130] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1477.281116][T25768] [U]  [ 1477.295848][T25776] loop5: detected capacity change from 0 to 7 [ 1477.309585][T25776] loop5: [ 1477.318987][T25776] loop5: partition table partially beyond EOD, truncated [ 1477.352725][T29130] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1477.637477][T25781] fido_id[25781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1477.923646][T21420] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1478.032240][T25811] syzkaller0: entered promiscuous mode [ 1478.039191][T25811] syzkaller0: entered allmulticast mode [ 1478.137667][T21420] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1478.148317][T21420] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1478.179592][T21420] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.211467][T21420] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1478.243842][T21420] usb 9-1: config 1 has no interface number 0 [ 1478.261084][T21420] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1478.279228][T21420] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.331158][T21420] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1478.525114][T21420] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 1478.538241][T21420] snd_usb_pod 9-1:1.1: invalid control EP [ 1478.554087][T21420] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 1478.572113][T21420] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1478.580538][T21420] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1478.617741][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5608'. [ 1478.753597][T23177] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1478.800838][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5604'. [ 1478.937463][T23177] usb 1-1: config 0 has no interfaces? [ 1478.949275][T23177] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1478.973064][T23177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.035076][T23177] usb 1-1: config 0 descriptor?? [ 1479.114025][T17084] Bluetooth: hci5: command 0x0c1a tx timeout [ 1479.120199][ T4858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1479.195240][ T4858] Bluetooth: hci0: command 0x0c1a tx timeout [ 1479.497937][T21420] usb 1-1: USB disconnect, device number 31 [ 1480.385738][T23177] usb 9-1: USB disconnect, device number 48 [ 1480.494558][T25898] netlink: 'syz.0.5612': attribute type 2 has an invalid length. [ 1480.518369][T25898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5612'. [ 1480.618752][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5614'. [ 1480.630872][T25958] netlink: 'syz.7.5614': attribute type 1 has an invalid length. [ 1480.813624][T29130] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1480.980517][T29130] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1481.007496][T29130] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1481.042376][T29130] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.062550][T29130] usb 1-1: config 220 has no interface number 2 [ 1481.079845][T29130] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1481.109914][T29130] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1481.126957][T29130] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1481.142030][T29130] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1481.178674][T29130] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1481.194064][T17084] Bluetooth: hci5: command 0x0c1a tx timeout [ 1481.198381][T29130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.201078][ T4858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1481.241129][T29130] usb 1-1: Product: syz [ 1481.262724][T29130] usb 1-1: Manufacturer: syz [ 1481.276864][ T4858] Bluetooth: hci0: command 0x0c1a tx timeout [ 1481.286417][T29130] usb 1-1: SerialNumber: syz [ 1481.586959][T31211] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.621598][T31211] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.661101][T29130] usb 1-1: selecting invalid altsetting 0 [ 1481.668792][T31211] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.708319][T31211] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.780065][T29130] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1481.804250][T29130] uvcvideo 1-1:220.0: No valid video chain found. [ 1481.846004][T29130] usb 1-1: selecting invalid altsetting 0 [ 1481.852242][T29130] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1481.887222][T29130] usb 1-1: USB disconnect, device number 32 [ 1482.261612][T26002] syzkaller0: entered promiscuous mode [ 1482.270827][T26002] syzkaller0: entered allmulticast mode [ 1483.384053][T29130] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1483.563743][T29130] usb 2-1: Using ep0 maxpacket: 8 [ 1483.585165][T29130] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1483.659958][T29130] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1483.702229][T29130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.725441][T29130] usb 2-1: Product: syz [ 1483.759268][T29130] usb 2-1: Manufacturer: syz [ 1483.769576][T29130] usb 2-1: SerialNumber: syz [ 1483.821793][T29130] usb 2-1: config 0 descriptor?? [ 1483.836160][T29130] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1484.555113][ T5698] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1484.564625][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.571077][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.750674][ T5698] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1484.765433][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.773633][ T5698] usb 9-1: Product: syz [ 1484.777968][ T5698] usb 9-1: Manufacturer: syz [ 1484.782890][ T5698] usb 9-1: SerialNumber: syz [ 1484.800135][ T5698] usb 9-1: config 0 descriptor?? [ 1485.224420][ T5698] usb 9-1: Firmware version (0.0) predates our first public release. [ 1485.242995][ T5698] usb 9-1: Please update to version 0.2 or newer [ 1485.310438][ T5698] usb 9-1: USB disconnect, device number 49 [ 1485.383121][T26187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5632'. [ 1486.004128][T22145] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1486.021915][T26224] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5637'. [ 1486.043535][T26224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5637'. [ 1486.163652][T22145] usb 8-1: Using ep0 maxpacket: 32 [ 1486.179275][T22145] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.191310][T22145] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.204891][T22145] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1486.214746][T22145] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1486.223266][T22145] usb 8-1: Product: syz [ 1486.229132][T22145] usb 8-1: Manufacturer: syz [ 1486.260942][T22145] hub 8-1:4.0: USB hub found [ 1486.461593][T22145] hub 8-1:4.0: 2 ports detected [ 1486.962072][T26254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 1487.176773][T29130] gspca_zc3xx: reg_w_i err -71 [ 1487.217534][T26269] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5644'. [ 1487.227625][T29130] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1487.249450][T29130] usb 2-1: USB disconnect, device number 18 [ 1487.492466][T26280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5645'. [ 1487.516792][T22145] hub 8-1:4.0: hub_hub_status failed (err = -32) [ 1487.551656][T22145] hub 8-1:4.0: config failed, can't get hub status (err -32) [ 1487.644808][T26280] netlink: 'syz.8.5645': attribute type 5 has an invalid length. [ 1487.662018][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5645'. [ 1487.862612][T26286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5646'. [ 1488.051810][T26291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5646'. [ 1488.262572][T26294] [ 1488.264962][T26294] ===================================================== [ 1488.271896][T26294] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1488.279482][T26294] syzkaller #0 Tainted: G L [ 1488.285462][T26294] ----------------------------------------------------- [ 1488.292456][T26294] syz.8.5648/26294 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1488.300220][T26294] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1488.309005][T26294] [ 1488.309005][T26294] and this task is already holding: [ 1488.316375][T26294] ffff888056bd1520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1488.325096][T26294] which would create a new lock dependency: [ 1488.330993][T26294] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1488.338644][T26294] [ 1488.338644][T26294] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1488.348108][T26294] (&client->buffer_lock){..-.}-{3:3} [ 1488.348134][T26294] [ 1488.348134][T26294] ... which became SOFTIRQ-irq-safe at: [ 1488.361217][T26294] lock_acquire+0x106/0x350 [ 1488.365816][T26294] _raw_spin_lock+0x2e/0x40 [ 1488.370427][T26294] evdev_pass_values+0xcb/0xc00 [ 1488.375476][T26294] evdev_events+0x1e6/0x340 [ 1488.380076][T26294] input_pass_values+0x288/0x890 [ 1488.385164][T26294] input_event_dispose+0x3e5/0x6b0 [ 1488.390391][T26294] input_inject_event+0x1dd/0x330 [ 1488.395524][T26294] led_trigger_event+0x138/0x210 [ 1488.400715][T26294] kbd_bh+0x1c6/0x2e0 [ 1488.404871][T26294] tasklet_action_common+0x2da/0x4a0 [ 1488.410281][T26294] handle_softirqs+0x225/0x840 [ 1488.415134][T26294] __irq_exit_rcu+0xca/0x220 [ 1488.419815][T26294] irq_exit_rcu+0x9/0x30 [ 1488.424146][T26294] common_interrupt+0xbb/0xe0 [ 1488.428948][T26294] asm_common_interrupt+0x26/0x40 [ 1488.434072][T26294] finish_task_switch+0x41a/0xbc0 [ 1488.439245][T26294] __schedule+0x1848/0x57a0 [ 1488.443854][T26294] schedule+0x164/0x360 [ 1488.448111][T26294] smpboot_thread_fn+0x5f9/0xa80 [ 1488.453143][T26294] kthread+0x389/0x470 [ 1488.457316][T26294] ret_from_fork+0x514/0xb70 [ 1488.462000][T26294] ret_from_fork_asm+0x1a/0x30 [ 1488.466859][T26294] [ 1488.466859][T26294] to a SOFTIRQ-irq-unsafe lock: [ 1488.473968][T26294] (tasklist_lock){.+.+}-{3:3} [ 1488.473995][T26294] [ 1488.473995][T26294] ... which became SOFTIRQ-irq-unsafe at: [ 1488.486629][T26294] ... [ 1488.486639][T26294] lock_acquire+0x106/0x350 [ 1488.493815][T26294] _raw_read_lock+0x36/0x50 [ 1488.498412][T26294] __do_wait+0xd9/0x720 [ 1488.502662][T26294] do_wait+0x1e7/0x510 [ 1488.506832][T26294] kernel_wait+0xd6/0x1c0 [ 1488.511258][T26294] call_usermodehelper_exec_work+0xbe/0x230 [ 1488.517253][T26294] process_scheduled_works+0xa8e/0x14e0 [ 1488.522890][T26294] worker_thread+0xa47/0xfb0 [ 1488.527574][T26294] kthread+0x389/0x470 [ 1488.531737][T26294] ret_from_fork+0x514/0xb70 [ 1488.536422][T26294] ret_from_fork_asm+0x1a/0x30 [ 1488.541282][T26294] [ 1488.541282][T26294] other info that might help us debug this: [ 1488.541282][T26294] [ 1488.551512][T26294] Chain exists of: [ 1488.551512][T26294] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1488.551512][T26294] [ 1488.564794][T26294] Possible interrupt unsafe locking scenario: [ 1488.564794][T26294] [ 1488.573169][T26294] CPU0 CPU1 [ 1488.578535][T26294] ---- ---- [ 1488.583959][T26294] lock(tasklist_lock); [ 1488.588232][T26294] local_irq_disable(); [ 1488.594994][T26294] lock(&client->buffer_lock); [ 1488.602430][T26294] lock(&f_owner->lock); [ 1488.609285][T26294] [ 1488.612799][T26294] lock(&client->buffer_lock); [ 1488.617872][T26294] [ 1488.617872][T26294] *** DEADLOCK *** [ 1488.617872][T26294] [ 1488.626020][T26294] 2 locks held by syz.8.5648/26294: [ 1488.631215][T26294] #0: ffff88803187d350 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1488.639861][T26294] #1: ffff888056bd1520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1488.649023][T26294] [ 1488.649023][T26294] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1488.659432][T26294] -> (&client->buffer_lock){..-.}-{3:3} { [ 1488.665347][T26294] IN-SOFTIRQ-W at: [ 1488.669594][T26294] lock_acquire+0x106/0x350 [ 1488.676104][T26294] _raw_spin_lock+0x2e/0x40 [ 1488.682625][T26294] evdev_pass_values+0xcb/0xc00 [ 1488.689484][T26294] evdev_events+0x1e6/0x340 [ 1488.695992][T26294] input_pass_values+0x288/0x890 [ 1488.702943][T26294] input_event_dispose+0x3e5/0x6b0 [ 1488.710067][T26294] input_inject_event+0x1dd/0x330 [ 1488.717124][T26294] led_trigger_event+0x138/0x210 [ 1488.724078][T26294] kbd_bh+0x1c6/0x2e0 [ 1488.730092][T26294] tasklet_action_common+0x2da/0x4a0 [ 1488.737392][T26294] handle_softirqs+0x225/0x840 [ 1488.744188][T26294] __irq_exit_rcu+0xca/0x220 [ 1488.750780][T26294] irq_exit_rcu+0x9/0x30 [ 1488.757021][T26294] common_interrupt+0xbb/0xe0 [ 1488.763710][T26294] asm_common_interrupt+0x26/0x40 [ 1488.770740][T26294] finish_task_switch+0x41a/0xbc0 [ 1488.777800][T26294] __schedule+0x1848/0x57a0 [ 1488.784340][T26294] schedule+0x164/0x360 [ 1488.790513][T26294] smpboot_thread_fn+0x5f9/0xa80 [ 1488.797454][T26294] kthread+0x389/0x470 [ 1488.803538][T26294] ret_from_fork+0x514/0xb70 [ 1488.810139][T26294] ret_from_fork_asm+0x1a/0x30 [ 1488.816911][T26294] INITIAL USE at: [ 1488.820980][T26294] lock_acquire+0x106/0x350 [ 1488.827395][T26294] _raw_spin_lock+0x2e/0x40 [ 1488.833826][T26294] evdev_pass_values+0xcb/0xc00 [ 1488.840654][T26294] evdev_events+0x1e6/0x340 [ 1488.847076][T26294] input_pass_values+0x288/0x890 [ 1488.853937][T26294] input_event_dispose+0x330/0x6b0 [ 1488.860967][T26294] input_inject_event+0x1dd/0x330 [ 1488.867932][T26294] evdev_write+0x325/0x4c0 [ 1488.874263][T26294] vfs_write+0x296/0xba0 [ 1488.880427][T26294] ksys_write+0x150/0x270 [ 1488.886711][T26294] do_syscall_64+0x174/0x580 [ 1488.893225][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.901061][T26294] } [ 1488.903736][T26294] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1488.912164][T26294] -> (&new->fa_lock){....}-{3:3} { [ 1488.917384][T26294] INITIAL USE at: [ 1488.921365][T26294] lock_acquire+0x106/0x350 [ 1488.927625][T26294] _raw_write_lock_irq+0x3d/0x50 [ 1488.934314][T26294] fasync_remove_entry+0xf1/0x1c0 [ 1488.941091][T26294] lease_modify+0x4f7/0x6c0 [ 1488.947398][T26294] locks_remove_file+0x5ed/0xf40 [ 1488.954104][T26294] __fput+0x378/0xa50 [ 1488.959859][T26294] task_work_run+0x1d9/0x270 [ 1488.966201][T26294] exit_to_user_mode_loop+0x193/0x6b0 [ 1488.973316][T26294] do_syscall_64+0x353/0x580 [ 1488.979657][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.987310][T26294] INITIAL READ USE at: [ 1488.991808][T26294] lock_acquire+0x106/0x350 [ 1488.998494][T26294] _raw_read_lock_irqsave+0x48/0x60 [ 1489.005881][T26294] kill_fasync+0x199/0x4d0 [ 1489.012490][T26294] evdev_pass_values+0x552/0xc00 [ 1489.019607][T26294] evdev_events+0x1e6/0x340 [ 1489.026310][T26294] input_pass_values+0x288/0x890 [ 1489.033434][T26294] input_event_dispose+0x330/0x6b0 [ 1489.040770][T26294] input_inject_event+0x1dd/0x330 [ 1489.047984][T26294] evdev_write+0x325/0x4c0 [ 1489.054576][T26294] vfs_write+0x296/0xba0 [ 1489.060999][T26294] ksys_write+0x150/0x270 [ 1489.067510][T26294] do_syscall_64+0x174/0x580 [ 1489.074277][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.082355][T26294] } [ 1489.084986][T26294] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1489.093846][T26294] ... acquired at: [ 1489.097742][T26294] _raw_read_lock_irqsave+0x48/0x60 [ 1489.103132][T26294] kill_fasync+0x199/0x4d0 [ 1489.107737][T26294] evdev_pass_values+0x552/0xc00 [ 1489.112857][T26294] evdev_events+0x1e6/0x340 [ 1489.117539][T26294] input_pass_values+0x288/0x890 [ 1489.122662][T26294] input_event_dispose+0x330/0x6b0 [ 1489.127955][T26294] input_inject_event+0x1dd/0x330 [ 1489.133161][T26294] evdev_write+0x325/0x4c0 [ 1489.137757][T26294] vfs_write+0x296/0xba0 [ 1489.142223][T26294] ksys_write+0x150/0x270 [ 1489.146740][T26294] do_syscall_64+0x174/0x580 [ 1489.151506][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.157581][T26294] [ 1489.159904][T26294] -> (&f_owner->lock){....}-{3:3} { [ 1489.165153][T26294] INITIAL USE at: [ 1489.169050][T26294] lock_acquire+0x106/0x350 [ 1489.175125][T26294] _raw_write_lock_irq+0x3d/0x50 [ 1489.181639][T26294] __f_setown+0x5f/0x380 [ 1489.187460][T26294] fcntl_dirnotify+0x3fd/0x6a0 [ 1489.193797][T26294] do_fcntl+0x77e/0x1a30 [ 1489.199618][T26294] __se_sys_fcntl+0xc8/0x150 [ 1489.205787][T26294] do_syscall_64+0x174/0x580 [ 1489.211957][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.219421][T26294] INITIAL READ USE at: [ 1489.223755][T26294] lock_acquire+0x106/0x350 [ 1489.230300][T26294] _raw_read_lock_irqsave+0x48/0x60 [ 1489.237510][T26294] send_sigio+0x38/0x370 [ 1489.243770][T26294] dnotify_handle_event+0x169/0x440 [ 1489.250977][T26294] fsnotify+0x18a5/0x1b60 [ 1489.257320][T26294] fsnotify_move+0x126/0x5b0 [ 1489.263936][T26294] vfs_rename+0xccc/0xea0 [ 1489.270268][T26294] filename_renameat2+0x533/0x9a0 [ 1489.277320][T26294] __se_sys_renameat2+0x5a/0x2c0 [ 1489.284269][T26294] do_syscall_64+0x174/0x580 [ 1489.290888][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.298790][T26294] } [ 1489.301298][T26294] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1489.310154][T26294] ... acquired at: [ 1489.313962][T26294] _raw_read_lock_irqsave+0x48/0x60 [ 1489.319349][T26294] send_sigio+0x38/0x370 [ 1489.323774][T26294] kill_fasync+0x24d/0x4d0 [ 1489.328377][T26294] lease_break_callback+0x26/0x30 [ 1489.333598][T26294] __break_lease+0x80d/0x1e70 [ 1489.338477][T26294] try_break_deleg+0xfc/0x180 [ 1489.343335][T26294] notify_change+0xafa/0xea0 [ 1489.348105][T26294] chmod_common+0x262/0x470 [ 1489.352786][T26294] do_fchmodat+0x12d/0x230 [ 1489.357413][T26294] __x64_sys_fchmodat+0x7d/0x90 [ 1489.362478][T26294] do_syscall_64+0x174/0x580 [ 1489.367245][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.373368][T26294] [ 1489.375696][T26294] [ 1489.375696][T26294] the dependencies between the lock to be acquired [ 1489.375707][T26294] and SOFTIRQ-irq-unsafe lock: [ 1489.389232][T26294] -> (tasklist_lock){.+.+}-{3:3} { [ 1489.394374][T26294] HARDIRQ-ON-R at: [ 1489.398407][T26294] lock_acquire+0x106/0x350 [ 1489.404570][T26294] _raw_read_lock+0x36/0x50 [ 1489.410735][T26294] __do_wait+0xd9/0x720 [ 1489.416557][T26294] do_wait+0x1e7/0x510 [ 1489.422293][T26294] kernel_wait+0xd6/0x1c0 [ 1489.428284][T26294] call_usermodehelper_exec_work+0xbe/0x230 [ 1489.435841][T26294] process_scheduled_works+0xa8e/0x14e0 [ 1489.443044][T26294] worker_thread+0xa47/0xfb0 [ 1489.449288][T26294] kthread+0x389/0x470 [ 1489.455024][T26294] ret_from_fork+0x514/0xb70 [ 1489.461275][T26294] ret_from_fork_asm+0x1a/0x30 [ 1489.467721][T26294] SOFTIRQ-ON-R at: [ 1489.471712][T26294] lock_acquire+0x106/0x350 [ 1489.477880][T26294] _raw_read_lock+0x36/0x50 [ 1489.484059][T26294] __do_wait+0xd9/0x720 [ 1489.489927][T26294] do_wait+0x1e7/0x510 [ 1489.495663][T26294] kernel_wait+0xd6/0x1c0 [ 1489.501675][T26294] call_usermodehelper_exec_work+0xbe/0x230 [ 1489.509231][T26294] process_scheduled_works+0xa8e/0x14e0 [ 1489.516430][T26294] worker_thread+0xa47/0xfb0 [ 1489.522677][T26294] kthread+0x389/0x470 [ 1489.528408][T26294] ret_from_fork+0x514/0xb70 [ 1489.534655][T26294] ret_from_fork_asm+0x1a/0x30 [ 1489.541093][T26294] INITIAL USE at: [ 1489.544997][T26294] lock_acquire+0x106/0x350 [ 1489.551072][T26294] _raw_write_lock_irq+0x3d/0x50 [ 1489.557591][T26294] copy_process+0x29eb/0x4380 [ 1489.563838][T26294] kernel_clone+0x2d7/0x940 [ 1489.569919][T26294] user_mode_thread+0x110/0x180 [ 1489.576340][T26294] rest_init+0x23/0x300 [ 1489.582066][T26294] start_kernel+0x38a/0x3e0 [ 1489.588333][T26294] x86_64_start_reservations+0x24/0x30 [ 1489.595438][T26294] x86_64_start_kernel+0x137/0x1b0 [ 1489.602137][T26294] common_startup_64+0x13e/0x147 [ 1489.608650][T26294] INITIAL READ USE at: [ 1489.612984][T26294] lock_acquire+0x106/0x350 [ 1489.619511][T26294] _raw_read_lock+0x36/0x50 [ 1489.626026][T26294] __do_wait+0xd9/0x720 [ 1489.632190][T26294] do_wait+0x1e7/0x510 [ 1489.638273][T26294] kernel_wait+0xd6/0x1c0 [ 1489.644615][T26294] call_usermodehelper_exec_work+0xbe/0x230 [ 1489.652521][T26294] process_scheduled_works+0xa8e/0x14e0 [ 1489.660074][T26294] worker_thread+0xa47/0xfb0 [ 1489.666668][T26294] kthread+0x389/0x470 [ 1489.672741][T26294] ret_from_fork+0x514/0xb70 [ 1489.679343][T26294] ret_from_fork_asm+0x1a/0x30 [ 1489.686116][T26294] } [ 1489.688616][T26294] ... key at: [] tasklist_lock+0x18/0x40 [ 1489.696442][T26294] ... acquired at: [ 1489.700246][T26294] _raw_read_lock+0x36/0x50 [ 1489.704938][T26294] send_sigurg+0x12b/0x420 [ 1489.709538][T26294] sk_send_sigurg+0x6c/0x2e0 [ 1489.714307][T26294] queue_oob+0x42c/0x4f0 [ 1489.718732][T26294] unix_stream_sendmsg+0xc30/0xde0 [ 1489.724030][T26294] ____sys_sendmsg+0x9b9/0xa20 [ 1489.728983][T26294] ___sys_sendmsg+0x2a5/0x360 [ 1489.733861][T26294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1489.739014][T26294] do_syscall_64+0x174/0x580 [ 1489.743787][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.749870][T26294] [ 1489.752202][T26294] [ 1489.752202][T26294] stack backtrace: [ 1489.758097][T26294] CPU: 0 UID: 0 PID: 26294 Comm: syz.8.5648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1489.758126][T26294] Tainted: [L]=SOFTLOCKUP [ 1489.758132][T26294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1489.758144][T26294] Call Trace: [ 1489.758153][T26294] [ 1489.758161][T26294] dump_stack_lvl+0xe8/0x150 [ 1489.758183][T26294] __lock_acquire+0x2a37/0x2cd0 [ 1489.758209][T26294] ? send_sigurg+0x12b/0x420 [ 1489.758231][T26294] lock_acquire+0x106/0x350 [ 1489.758246][T26294] ? send_sigurg+0x12b/0x420 [ 1489.758272][T26294] _raw_read_lock+0x36/0x50 [ 1489.758296][T26294] ? send_sigurg+0x12b/0x420 [ 1489.758317][T26294] send_sigurg+0x12b/0x420 [ 1489.758340][T26294] sk_send_sigurg+0x6c/0x2e0 [ 1489.758360][T26294] queue_oob+0x42c/0x4f0 [ 1489.758381][T26294] ? __pfx_queue_oob+0x10/0x10 [ 1489.758400][T26294] ? __schedule+0x1856/0x57a0 [ 1489.758423][T26294] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1489.758449][T26294] unix_stream_sendmsg+0xc30/0xde0 [ 1489.758469][T26294] ? futex_hash+0x40/0x2c0 [ 1489.758486][T26294] ? __lock_acquire+0x683/0x2cd0 [ 1489.758503][T26294] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1489.758522][T26294] ? futex_unqueue+0x22/0x240 [ 1489.758537][T26294] ? aa_sock_msg_perm+0xda/0x1b0 [ 1489.758564][T26294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.758583][T26294] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1489.758602][T26294] ____sys_sendmsg+0x9b9/0xa20 [ 1489.758628][T26294] ? __might_fault+0xaf/0x130 [ 1489.758651][T26294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.758678][T26294] ? import_iovec+0x73/0xa0 [ 1489.758699][T26294] ___sys_sendmsg+0x2a5/0x360 [ 1489.758722][T26294] ? __lock_acquire+0x683/0x2cd0 [ 1489.758739][T26294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.758765][T26294] ? futex_wait+0x2a2/0x390 [ 1489.758795][T26294] ? __fget_files+0x2a/0x420 [ 1489.758815][T26294] ? __fget_files+0x3a2/0x420 [ 1489.758837][T26294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1489.758862][T26294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.758894][T26294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.758910][T26294] do_syscall_64+0x174/0x580 [ 1489.758925][T26294] ? clear_bhb_loop+0x40/0x90 [ 1489.758942][T26294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.758958][T26294] RIP: 0033:0x7ff994b9ce59 [ 1489.758974][T26294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.758988][T26294] RSP: 002b:00007ff995a36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.759005][T26294] RAX: ffffffffffffffda RBX: 00007ff994e15fa0 RCX: 00007ff994b9ce59 [ 1489.759018][T26294] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000004 [ 1489.759029][T26294] RBP: 00007ff994c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1489.759039][T26294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.759048][T26294] R13: 00007ff994e16038 R14: 00007ff994e15fa0 R15: 00007ff994f3fa48 [ 1489.759066][T26294] [ 1490.223788][T21420] usb 8-1: USB disconnect, device number 7