last executing test programs: 27m42.596728701s ago: executing program 32 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0e002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/9, 0x9}, {&(0x7f00000003c0)=""/72, 0x48}], 0x3, &(0x7f0000001fc0)=""/57, 0x39}, 0xb}, {{&(0x7f0000002000)=@ax25={{0x3, @default}, [@netrom, @rose, @null, @default, @default, @netrom, @bcast, @null]}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002080)=""/112, 0x70}, {&(0x7f0000002100)=""/127, 0x7f}, {&(0x7f0000002180)=""/98, 0x62}, {&(0x7f0000002200)=""/195, 0xc3}, {&(0x7f0000002300)=""/76, 0x4c}], 0x5, &(0x7f0000002400)=""/151, 0x97}, 0x8d5}, {{&(0x7f00000024c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002540)=""/201, 0xc9}], 0x1}}, {{&(0x7f0000002680)=@pppol2tp, 0x80, &(0x7f0000002840)=[{&(0x7f0000002700)=""/104, 0x68}, {&(0x7f0000002780)=""/138, 0x8a}], 0x2, &(0x7f0000002880)=""/165, 0xa5}, 0x8}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/236, 0xec}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002a80)=""/90, 0x5a}, {&(0x7f0000002b00)=""/23, 0x17}, {&(0x7f0000002b40)=""/176, 0xb0}, {&(0x7f0000002c00)=""/156, 0x9c}, {&(0x7f0000002cc0)=""/79, 0x4f}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)=""/211, 0xd3}], 0x1, &(0x7f0000002f00)=""/6, 0x6}, 0x6}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r4) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000e) socket$nl_generic(0x10, 0x3, 0x10) 22m13.901790332s ago: executing program 33 (id=2235): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x54}}, {}, [@jmp={0x5, 0x0, 0xe, 0x9, 0x0, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 21m24.878749251s ago: executing program 34 (id=2435): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x10000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xd9, 0x1b, 0x44, 0x40, 0x421, 0xdf51, 0xd7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0xc, 0x0, 0x1, "", [{{0x9, 0x4, 0x66, 0x0, 0x0, 0x2, 0xfe, 0x48, 0xa}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) unshare(0x22020600) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000440)={{@_ha_fsid={[0x8, 0x9]}, {0x400, 0x200, 0x9, 0x10000}}, {{[0x7, 0x4, 0x9, 0x2]}, 0x0, 0x3, 0x4, 0x0, &(0x7f00000003c0)=[{{@_ha_fsid={[0x0, 0x3ff]}, {0x2, 0x1ff, 0x2}}, 0x5, 0x0, '!,\x00'}, {{@align=0x3, {0xf, 0x800, 0xc, 0x8}}, 0x80000000, 0x0, 'bond\x00'}]}}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ptrace$setopts(0x4206, 0x0, 0x10001, 0x100022) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 18m11.238799187s ago: executing program 35 (id=3175): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5277c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000084) 14m10.350695365s ago: executing program 36 (id=3845): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xd8]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0xf, 0x800, 0x8000003) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x1}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x214000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000006b2e0507cd51b00d"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000078b000/0x2000)=nil, 0x2000}, 0xe732dede54c424ea}) socket$inet6_sctp(0xa, 0x5, 0x84) 12m36.196690007s ago: executing program 37 (id=4154): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x180, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio1\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '*(){,%&\'(&+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%{--\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x900}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!(*/}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}]}, 0x180}, 0x1, 0x0, 0x0, 0x85}, 0x4800) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) unshare(0x42060680) (async) unshare(0x42000000) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d1d, &(0x7f00000001c0)) 8m29.839352527s ago: executing program 3 (id=5049): clock_settime(0x0, &(0x7f0000000000)={0x77359400}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='\x00', 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0x1, &(0x7f00000004c0)={&(0x7f0000000140)=@newsa={0x344, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {{@in=@multicast1, @in6=@remote, 0x4e24, 0x0, 0x4e22, 0x9, 0xa, 0x20, 0x0, 0x3a, 0x0, 0xee00}, {@in=@local, 0x4d4, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x5, 0x1000, 0x1, 0xfffffffffffffffa, 0x2, 0x1, 0x0, 0xcf}, {0x40e, 0x0, 0x8001, 0x3}, {0x9, 0xe42, 0x5}, 0x70bd27, 0x3507, 0x2, 0x1, 0x7, 0x8}, [@sec_ctx={0xfb, 0x8, {0xf7, 0x8, 0x1, 0x7, 0xef, "927c5ca005d45a41c4a3b4202da340c9c2af7a6d90b4cae11b7dba2e78e1850630471b1c98439035b677501e825f164098bf138d34a28d519895e45258ed83cd40622caf4fdf001f5e6bdb80f58c4d9af2a122e7e226e43c1db106cf1fe5685d7d7c0a09512f206a9770f5df877c2b3b212663d117fdbf312eb4dce46479cb843d733ab96edd9b893c4a607a9f330706801724c1274efe0286541ff3a46cc6503a5e03562471c9a366923a29702db46b07e8476f3f8787a0e0a75b755a49b4efdea6a75802dcdf21cdcdf3c03ab19887c537d420f5790eacf9af560eb64dc0eada5be6ae145f4fc709c1a44d5df332"}}, @algo_auth={0x70, 0x1, {{'blake2s-224\x00'}, 0x140, "e88ebc05750659b30614f127739c474b0019e9e644fbd459305c2dc1662cb38c911af845ab21f0f9"}}, @tmpl={0x84, 0x5, [{{@in=@remote, 0x4d5, 0x2b}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x6, 0x30, 0x1000, 0xdf}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x20, 0xffffffff, 0xd6, 0x2}]}, @lifetime_val={0x24, 0x9, {0x3, 0x101, 0xffffffffe7b9dd4f, 0x7}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in6=@mcast1, 0x0, 0xa}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @policy_type={0xa, 0x10, {0x1}}]}, 0x344}, 0x1, 0x0, 0x0, 0x4084840}, 0x1) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r2, 0x0, 0x0, 0x400) epoll_wait(r2, 0x0, 0x0, 0x404) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="db09c0a1a1d2ad47c792c41acf201503000000ec6d7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000580)={0x14, &(0x7f00000000c0)={0x0, 0x22, 0x17, {0x17, 0x9, "aa0d9bf5984320e4b9297c82f7ee40f1667e6719f1"}}, &(0x7f0000000540)=ANY=[@ANYBLOB="00030403060c"]}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x40, 0x9, 0x86, "6c3a458a7f50b6f3038942d2617ed7348a9ef357fc11980f6b622fbd50e2c08a735b8becbc71c2ac3276511b462b44db8e5260a2b535a6acee9633a5b94f77bdd6162ebbb9f3ce46bb8db2006b9e9584d6a8a1c4adeb78d47cc16b6278bf5e6e3417e641daaf2e9ae1a53ba00dcf4d6c4266f23e3a638f0f48b6d1e9599638e283cd40c0fc33"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xb3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x81, 0x2, "a693"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "7962ae"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "d673"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "03"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "d45057"}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20010800000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m26.40387851s ago: executing program 3 (id=5057): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, &(0x7f00000001c0)=""/94, 0x5e}, 0x40000040) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x6, &(0x7f0000000d80)=0x0) r5 = eventfd2(0x83, 0x80001) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000200)={0x1f, 0x5, 0x2}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x293, 0x0, 0x8009}]}) io_submit(r4, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r5, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r5}]) 8m25.947756522s ago: executing program 3 (id=5060): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x403, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x40, 0xf, 0x2, '\x00\x00'}, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0xe) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x40, @loopback, 0xa7}]}, &(0x7f0000000500)=0x10) mbind(&(0x7f0000616000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x3, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f00000006c0)={&(0x7f0000000680)=[{&(0x7f00000002c0)="001865da4d7324359a69a243cf765e5d93496608d23cea4ce4d23be45e75627b6abc167660b4066373356457e8dba3300ce48861434bf186d3e49fb3a6957773d0e240c3837455058822539a8e360b73831e020c3a48b918c50b01cdff8dafb2d64d22e25c388f31f3c6790f4d5647a77eb56aa9fff45fd55da802bbb1d02af9dc8b9b19788c7eb6e95a479245ba6b2b1f8726f38ea4b44e40ccc45cc1f495cf9a89686e1e7b3579972d0f7f15f9ee0d60", 0xb1}, {&(0x7f0000000540)="61119802a9b25078c2d66e1c4128915bf2fd87d90f78d37d0e7f887c19f40b12bd0dfba7095a33162aa881b2e3da2bedbef6010ee12c561df60573f774b4be96e31d530a8faa4bcf918de7e9956d47027a0f1e6e6e470fc108fc8c5e7d29704544eaba66ff2a", 0x66}, {&(0x7f00000005c0)="90d0201d1512e06addd3a641a7009ced9bb073fb90f53cc60cc01938ad118fc09b4bef4e0873045f1341f58238b5ea2974dd5cd2da0c276e9600e5eab286e886d5bb899a5ba836d466f370097fc237514839f21a40b12049c98ee5eacd62eee612422d7d815ba149c6b33af70af59dbe4bc81e07f992d472f7bdf28308002983b4f5bc9574d9be9edb4258ca8f", 0x8d}], 0x3, 0x5, 0x0, 0x101, 0x401, 0x9, 0x4, 0xfffffffe}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8m22.455898366s ago: executing program 6 (id=5069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002a80)=ANY=[@ANYBLOB="380000005500010028bd7000fbdbdf2507000000", @ANYRES32, @ANYBLOB="090001008e3a"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r4, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001ac0)=0x802, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x992f6e1b97e2a4a}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffff80, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0xee6a0e938549ca45) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x222225, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000740)={0x48, 0x20}) 8m22.375178901s ago: executing program 3 (id=5070): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'nicvf0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240488a0}, 0x4810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r7, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000dc0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x2e, 0x24, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e00)=@any_dev={0x4, 0x833, 0x0, 0x0, 0x1000, 0x7, r8, 0x0, 0x4}}}, &(0x7f0000000ec0)) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, &(0x7f00000008c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x2, 0x1, 0x7, 0x60, 0x9}, 0x4f, &(0x7f0000000340)={0x5, 0xf, 0x4f, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x18, 0x7800, 0x7f, [0xc000, 0xc000, 0xff00c0, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "26a6f88f1dce113511a5d2699c3f8a09"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "d693a0799170f7167618bc3d75929fcc"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}, {0x8c, &(0x7f0000000540)=@string={0x8c, 0x3, "c3e624ccb05b59c2fe5c50c452b37ba50239cca85cd44f99b1eee7cbe492aeb23410b348a500198520149a6938522fe0d9c9976389428eb2692f807e3f0d773ef464aba99dc1bd11a982f0e0468fbc761c2f65aa463371cfc885d5353a82ad9c167afa8440b97da0d255c751dfd0ddd9905ea518585ccf7cb3f7f17bcde00e0864ad89ca0a0726560f61"}}, {0x9c, &(0x7f0000000600)=@string={0x9c, 0x3, "13c0488e9afcfd21bf11fab77734cf7d25c7505e685487553503f1df4bcf23e9d2218bdd7d9ade9b718fc1ee0d98a47a41710a63bd68847d1eee1ba9bc485e483102a1714cf11a0128446707b8c96efb2950e2a10785ceeecea0e4cb82c1faa3dcc13f6ee658ddc0aaa1744b0c713388e17c2b798fd93b633ec6f61330b2a82e58cc859a4c8237c115a803a4433a3cce833b0e77f0e61f931ffd"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x813}}, {0x70, &(0x7f0000000700)=@string={0x70, 0x3, "c96c616b1123ecbcb204168b53d0b3fe60ef9f003fe96063e62f4072109ba5e5e6222db3f4eda843a3202300d23535bdbd68b5fa1a024a4a70a2031c85b91d598808993c2e44152581900217c590ee09bacb3ec3ff575a21d7b2dda06e53332276963f87909e29887584106eaa76"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x445}}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x30, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x40) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x6, &(0x7f0000000d80)) 8m22.166696366s ago: executing program 6 (id=5071): socket(0xa, 0x3, 0x3a) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x800) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x8000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) io_submit(0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500019fdd0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xfffffffffffffec4, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 8m21.953751278s ago: executing program 6 (id=5072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x42810}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @queue={0x1, {0x7, 0x3}}}, {0x80, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control={0x1}}, {}], 0x70) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) 8m21.648936054s ago: executing program 6 (id=5073): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x4, 0x6}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x48dd, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e0dbe108b56424f1e68ba2fabf98debdb22d0000b420a1a93c9e01177d3d058d0b0028000000f8000000000000008000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0xffffffffffffffff]}}) 8m21.358168786s ago: executing program 6 (id=5075): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000011}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5d71c0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100017000fddbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="92100000100200001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000140)=0x8) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r8) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r12, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xbc4ef63ccd0546e0}, 0x40004) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000240)=0x8b) 8m18.471223688s ago: executing program 1 (id=5079): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x20a00) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000180)={0x80000001, 0x6}) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) 8m18.247446881s ago: executing program 5 (id=5080): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="f6d888a2d5ae6a4c0f3dbe1a6074f6ce9f008aa95764920e91be7da5b1fb63312e8e3812cc17d595a2833218ac5712b905d9877ac7d9c1be0ba8a6a5263d45b346215842d04727d4c36a3450144ba7281f1f1cb830cddf042f14c34ae5bd8f254dab97d05ab961159bd36ef136e88eef7c9c59edaf1b533656ac31c6053014645128245ffda22d06fb824d2ba9897865fc3aeb186ad586d662c9d1fce5047ca68024cd93d7971b58419e6d8a7f147c48b334c2be0b7e87f2414f7623c99041b5ba82cda890b5856e831bd7faab9dcaee6da6e82d15400cc949b5fd0c2ece92e413595c4785fa453ca7a43c53b3eae1993b8b2c0105bc3e2102413687c5a3a487b31296bde5d83d2d203adf83a65a1672d0c396322c6b091fa704f4b3753b53452a049cec208a495c60d8053a06daf2950a8608d3ed4c23626181744b6c86df04e04b23b61fcc2c51052b91d4046e58e242d5dfdc9d38f77b59370c0239b8be226382e926a26ac9ff700928efb55ede33ccfdb9444a6fc40c18dc98c09694a6161a549b5e7f79ec4960368865cccc775427c1f7089f59904d039c06e51104a937f2feec7125ed45bc82e49ebb8a4ec95992f79a9337db557702d0c103cf8d7098c2827895fa44501f541be6246276d00961c17377a22756f3d91159cfb7e2ab1d2b764e6a148a9f220d8f3f4d022b7b4e503b209eeca38098eaba14f86242442acc43902554311222744b4f2560f1cfde71356fcd8b17bcc95199296942b6eb332d4f976a30d819d003175afe52b84eb0182ff4d9366625056bd37f2c3291edc6d642c1102dbf3e29e6ca45b31fec61290330a4831edd03766f70334d54835e4fbaca77b48a088407b818516c772f875d23ee2b408b35795bbeedaed9ea19900dc2050f855b2004678f4bf54417a84dabf0a1ce62374037f8f207dbaea3117fbd767f03c74fc72d53b738ed1b31b82cc8560fb71c3f05f274d1462e84781a7317052ac7f54d98f1f04b71c2f7eb5d7dec341b6f28b14d7aa7cb86e1eb5577da22318621711acf2e5276263d03582f47a758178fb93f9a6102ecdf8c24517ed1fb721ecef83507fcc1365745930cde8bf75e8e019ca4db245372eb6e18b5a2a689613fddff83108540e42993d4070ca459da167cadab3da26386002389cce59c6109747779d37ba2cca9a7273316142a28510344c6cc6ce1416a1c510a57c373153b99ed895c5b0a23b04ef3d9a76af52e1350fca32094272b0baccbc7a7ca75b261bfdb4ccbd492da33c327b5b4ddae9a93cad8fdd27f8365e9049762cbf7ad2ef71357ed2f63923d2483dce01dfcf4c192555ca1ff4642868bc33b26d3efdb904a40355a860905627df935e3e2574e4014be6f126412a50acce432588c91749740d079efa19e97dbdd54ecaeb7cccb01e3288ec0caaa1d31ef7c0b4e0702673aa64488b5a78457e3e68a9a17721bd864f30db205d48a7eff92f75a14217d774d79d624fce0f4fa796f580fd18e86ab084bd4b77f27d9045f523ef84ab6b32acfd0298091384b5faff2c54d26b44733ed9c2a12631c53138c87bea089765a3ef66ce22998f8df8e568db942b2fb26a2e54aaa6779a018245cbdd9b8368f929e237dabbb2d7c3a642a4266ab1d7ff67b8de1559811b2f1dafdadb3ef5a46a1a485dc55db05bc10a86a302eb8b64e2d20b05e9b9676ca33d901ad57d130637b4cae8c090ae7aa834efb9edc30b2555b4cfe7e7681c08f0065c34f2cd220fc736410452444cb3369793455c1294a00da3d65390f33b030d99689e3b90290c036894281e7f0dd88f7fed569dc983d0734cabe495d61c8ba99f9282a150e1231e632dd8fbb02ff9ec57bca7054ef46729e69ab69e9ffd54a5b9bc6005143654868a9dc8e6d46d14f562c7a868f41517afe5b83e65fe2c02c994d4b8e7fe99fa48643a60b6b22486a19154ae4cd52ac6802529c856e7ecd731c320041fbd2f854a2b0032528aaea892659098550aec04234ec7939fa59676a1e9eeb2b66ef78031c58850159ce6b8d55be84a5d5e7066e71c9f589201ba8719e52138781390f7ac1425b4a4c25f3d1d5568a50a131799b59aa5fff88ad2b7bd1af59a86aa3d87dcb0dadbe59c24c9521da988777e286feab0df8db1e21164ab7ce6339ec23f541ae09347890fc6213c217ba0dbf991f8cb4f81c97de88ef24ca7e8999a5026c2ce3c415fe7eb8e8d1c0fb77225ff9f1697f27479cfece671143cf47aea3ac7cd7e736aa7be3d8a173e137791aecfffb31136a8c051c2e117c6d871bf792de4953e23801c86f148a44847d34d628965cba7cea37b3bd71f6d3e918a7423fe27329df50cc73aa6a5fc26e96a25951cc617effaafcd8dca8d2c38d86ab477e9b65736d03bca2ba8c91b2c9cd91b0788ca3bf3609f5b014bcebbfa1e24543455f5e61ad6836d8b2b9148700f4e0ccc93434351ca78d06b1c5c60cf632136309d7c00c3a7d280bbbb52965dffcf2bf538723cef858ef03566b743e701f884c77d12928a231ea4db724de27f221fe91f1a37122615e67d00f07c795edc4c511def0fd9bd8638426a2c5337372c51d65c95758c778e2438b7f3f47e836834ba4f480f664ce906c6ce1c902d08b782509d7edad57154c6fb9af94087a0a6a1a321d7cbf31ba55ec73f5fab6097a42f1f88fcfe67d1ea1815f2937cf233eaca749e53bc743ed5a79f3b5bd0fbc4eb489fc31865412938bb9b5727fb4ba5d3496f39cb615ca27dc38691eaef828f0080c3b89d01663cef0ea1b857ab92aff155c109a18302903dd1560d25d2704d4ebc61395f2c760b349eea4567f2d30ba0136db9ec188d7e51fccb6b19b4fed65ffb86412c91af5f8b3b7236422204804ca2758afcb8a3f267e5a48d2c2f8cafcf4c45e347d409bf198ba0b685f967c7a05a880cb001d3365bda8b3f502d89dec77156642578c574638620dd3cd400423cc6d8709a2d423d426a09d4eccd469c3cf0ac2867b7fa172c66c8b8ef713b99eeeb1122dcc2e5b6049c500b611a7cb92c477dacc3c09742ad6edcafce51e808703db96fafcfbca42339f00171108901fb5ce0742d7a5476a35f778c11dcf538b96622ca9ae5e3c483e079d8e13f395f1d64f82f397e72834b4e15598302a65b00cff9e1ad223f99cd0b859300fbe3da833eb84a6f6d3ad143a90d3d1c930111c7b2d06f5091ba7b07fbc980fb5419bc65d5a87a800408882e2f8a95e845fdc7311473600783d87f9b45571b0f5d4ea15957ba0e5538bc1491c2e6e05bd819aac423709bd92dfed0327706cc47ce797715ad272b4003639daf3c35979bc0fcfcf00db1e3e0363c6d46e431ec3fd331f01158cc10f2d70cd7cc429f709c20b44884b1b8194afa321d25c1423b06c1f06da9d80a3b59eef90bac71ad5077ea7958f57d655cbcad8e1d7affd908f2f589146a569a5ed53c374ac86be1f405ff93f136a59c388393b73d8d7a1d841c3ed5accb19f3a1956057389b8f8b631978efd000c096cffb3c9a27e2128d64f4e39a4a8a1048f6e0150419a1e30e1910033fce94f7dd1c06e3ac0088e2e4690e1857ec5a5785f8c491caf326a352f18c3709fd05d51f73ebdca6864bb4b175857ac4fe57f4dd10716db0c78e3d0dbeb6920d4ff72a515b9167d8e9e5e7c01cb2cc255857355cdfb84f39236f1ccc7ebf1ada298a73671333dd71c59a7a974f5c8a974cf8864eee859f85c7a8c92a741e34537ea296d3b8c9a6c974bd60cfcb9018c08394da950ffd44a95b98c677c8346e99a0c831e4ba3d2d2554d627b10d8e01b940da4bd18ad57211e193abdd05dd0347b5db42d7247c277989b4c230cec14c9bd0e1e2cdf3f07daae3a44622fd0557c8c497ec3cc0747b265bd4fb8aec7d86220c277e7d6a90827f4796cec25bc6ecfc1a78338ff8b69cb93753a1e48f39a9052b2b857c0a865b5a4f5ff06ef635f34111428d2210dea8665ee3907c3420b5962761fdf448f25e6ff1c4610e44782bc5d5be41e67a42a0f78dd313d00ebaaa6c807ebf74c0c8cc391c92f314ecafc3ddfd1b3794ad6172ba412f38adb7c2d8c74fff22fde7173c559fe525008f954a51d8616be646625e0f210d0fd429c15cd5bcd66ca528f175cb6b4794511b93a9c394a715666e3dec24ebd2af82cf96add5bf4dff5d24bd90cad4810bcf4cce7afeb94e8c2fc1c111ef68d5c5880cd91f03691ea753c9fb88ff45dc5432ccff85952082aa0c08fe328ad0a4e68139cef5c5729ca21786bf7d86c2cd724c02c6f6ef17798cdb3a082eaffa376fc7c5414ff1666102925524fde771a335a5ea8edd9a4bd0b7cdff9e3d88d7b97d748b350ba01c2b463eb77135e101de6ef385bd009596e808cdff859c86520441d6032802764ff5f748c68f56ca9960d12ce011ea7901884bcb7ba464dcc20f775c22f507a038549130694f3c75e0f4822a29eeccc5dd150ea6d9b3bdc2a144a69a85fa6a48a9dd3e7c67b423259d5e0abe9abbde9cdcd727b83680ca6fa14307b113e7c9021aca03f52ebd671f94089f1e41da70d76032a50281023f56654f185b1bc765c7e73f9d7ab55156d98831f04996413c9da60fe2602d70c50dacb69c1fd2e5c00939fb27a9f95da78e23a72cbeb59858968da4715c54b3d4c25cfa8e7fca048047b9535b17b0ac2a0043961475a4c89905dca948371e8cae879c43d40467371aae7c2e9ebbbe6d49113d2dec7a89e30dc048086806b332a781b5fd595b711bdf1cbd1565636e8204d41d10d69d9ce0241cfe8375f00f63488e1e4b5550668927159496f44641c70ea43cb26e7d92264618f2b576b20f11b58b697160c65aef84f437db1957993823bf871252eb12b1c03ff6fbb3b8bf08aba0f8a13e196935285f1b8c5bf88102c9e702a467e450d7b5b62d526eb166a177b84ecca646e12aa1c0d683208c29cd57cf3b9a4f97e066193e295325e3dd136077e688161a1af326e96412a51b51933c20454107b7a38ca954b04f5195d7e5729360d339fc45637e17e48d01a619e58ea94358b9cb4e44f3398645831ce8d29b92e6191e114ec3cc0214840d0232977be463e086a0f3ecdc3b21163aa7a9e0f819c613af16398fa8706cea1feeb620b96a5f38396c22780af68649e09f7b8d31ff1b8ce89beeece18a8e0125db250d5aca2153e14fdf341362e64c54e3d47f5fe66daa36e9a2add6524438e42e2344f2b759c864f6735b852bdc309918ed25be75c3d8e8560315380025fe348a4805d34511c9de2e2b53be39e76747c7acf5df8be679f08ae95887fe0ace82d800932758acc0f6d035bdf08ee5d53a0a4fe7900913d224d5924aaec30b67df8d97f038fdd5f146a0d5e99ff3c09bcaebac2bf2ed735cf22b9f6c8ec42eb43480434f05069bffe18bc6c63ade4a998f92a8494bf3e85bb3d582a40cea6923b0486e3fbc23c4d652b4627b51720206e42a8307a5189af0005996c3f6062658c023f5517f2bc0f2c254be92263624ee4664a29ae30664ddb80360a2bfb459e151a14ba58d75852ff28d6487f2ce33c6483457c394f70e05585886f9d29f9184f813512d908d144a14b0dcb07e1e5aac4fa760dac6b8b4b323e61242784231419407aae1f9db869a768546273236939bee43fd8093f180672a34b7426942c0dbad899eabaa0c3e44f792a12f718aa3717091e9b61e80da1d8741bfcaa22859ff3cc3327397171b76bd4797528aa5becf109e96439131af040abfe5fe48ab701c845bee66030581db4153035522bc168d759b31cb0753d33246d"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) 8m11.884937252s ago: executing program 1 (id=5081): r0 = fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002500010027bd7000bcffffff9c0000000800030047000000e8b200cbc983a4344a4111599d7b3b3d8083c93f422041741ed3c57a3e0adcde0db40aae363ad07733ab16347978df65452aa4e3af934d8f517776266e9936bf13a23831bd633d4869e6440f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x131, 0xffffffffffffffff, 0x1c5ed000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100010038d408f01002204ddc0102030109022d00f4da06800809045f40030a0000400905ff0f010202040c09050a0c400001c60d090582"], 0x0) 8m11.822225442s ago: executing program 3 (id=5082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) r3 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x9, 0x3, 0x0, 0xd2, 0xfffffffe, 0x9e}, 0x9c) bind$inet6(r9, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 8m11.683825563s ago: executing program 6 (id=5083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xffffffffffffff29, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newtfilter={0x160, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x12c, 0x2, [@TCA_MATCHALL_ACT={0x128, 0x2, [@m_connmark={0x124, 0x19, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x2, 0x3ff, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x4, 0x20000000, 0x8, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x800, 0x4, 0xf, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x6, 0xa}, 0xc3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x2, 0x0, 0x101}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd04c, 0x8, 0x0, 0x3, 0xb}, 0xb}}]}, {0x2d, 0x6, "4d74dd521c0840093b823a16a0c61dc85b33275918531767c50f1f7b4443a27d595973e3a024306f34"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20048091}, 0x4044091) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000300)}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 8m9.91222111s ago: executing program 1 (id=5084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x501800, 0x0) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x501800, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@target={'target ', {'PCI:', '1', ':', '11', ':', '0', '.', '1d'}}, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x1b4, 0x12, 0xa, 0x9, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0c7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa03b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59b3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4be}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7e1f}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x210}}, 0x0) 8m9.527081207s ago: executing program 38 (id=5063): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, 0x0, 0xc080) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x6, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0x40) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r9, 0x2007ffd) sendfile(r4, r6, 0x0, 0x1000a3) 8m9.523045469s ago: executing program 1 (id=5086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@private0, 0x20000, 0x0, 0x0, 0x0, 0x800, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4000000, 0x1, 0x0, 0xa, 0x3}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffeff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000540)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002740)=""/4111, 0x100f}], 0x1, &(0x7f00000020c0)=""/249, 0xf9}, 0x6}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/43, 0x2b}, {&(0x7f0000002200)=""/51, 0x33}, {&(0x7f0000002240)=""/98, 0x62}, {&(0x7f00000022c0)=""/25, 0x19}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x6, &(0x7f0000000280)=""/47, 0x2f}, 0x7}], 0x4000000000001ec, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000007c0)='\x00\x00\x00Yh\x01\x91_\x80S\x19\xe6I\x96\r\x85!\xfa31P9\xb9}>J\xa0a\xa4\xf23\v\xe4\xa4\xb3\x7f\x8cKi\xdbO\x16\x1et~!?\vn\xe6B\xc4\xefEn^\x98\xa3\xbb\x03LU\xcem\xe4y\xea;\x17M[\xfd\xc3%Z\xab~\xda&`\xab7\a\x14\xf7\xf8\x11\x1a0\xb2\xe6\x80\x02\x02\xe1c8\xe4\xda[\xe6\xb0D\xb4pt\xef\x18\x15\n\xe1{Q\x01\x00\xcc`#\x80.\xa8>S\xc8O') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000002680)={0x7, 0x3, &(0x7f0000002580)=[0x1, 0x4, 0x9], &(0x7f00000025c0), &(0x7f0000002600)=[0x1, 0x2, 0x1, 0x3], &(0x7f0000000780)=[0xfff7, 0x6, 0xff81, 0x7, 0x200, 0x41, 0x2, 0x3]}) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000880)={0xc, 0x8, 0x143, {0x0}}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x9, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xec}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) r7 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', r1, 0x7, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x11, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r8, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)="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", 0xfc}], 0x1}, 0x0) close(0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000059d000/0x2000)=nil, 0x400000, 0x1, 0x2}) 8m9.245885138s ago: executing program 3 (id=5087): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r4], 0xa) fchdir(r3) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) readv(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000000000000000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8m8.928259047s ago: executing program 1 (id=5088): r0 = socket(0x11, 0x3, 0x1) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x6}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000240)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d", 0x1c}, {&(0x7f0000000500)="55f0e46e7aeb504dca2fb5", 0x4b}, {&(0x7f00000002c0)="ba27dbcc9c7c396af4b4e76b61", 0xd}], 0x4}, 0x40011) 8m8.635691452s ago: executing program 1 (id=5089): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000005000300000000"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fc0000000000000000000000000000000000010714", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) msgctl$IPC_RMID(0x0, 0x13) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bd, 0x1, 0x1, 0x3, 0xffffffff}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0xe, 0x6, 0x5566bb86, 0x3, 0x9, 0x101}, {0x1, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}]}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0200"], 0x1c}}, 0x24024080) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x4, 0x0, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "ca182867"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x0, 0x1, 0x7f}, {0x6, 0x24, 0x1a, 0xd0b, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xe2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xfe, 0x45}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x1, 0xfa}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x80, 0x99, 0x1, 0xc7, 0x2}, 0x26, &(0x7f0000000300)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc60b}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xc, 0xf00, 0x1, [0x3f00, 0xffc0]}, @ptm_cap={0x3}]}, 0x4, [{0xbe, &(0x7f00000003c0)=@string={0xbe, 0x3, "acd3b0591ed7c735a007c931e399e1cfaef227d6c9ec0da86e2c98e9d03bfd6c7a0ff9b0f57fe102a6fce8d699de08365e7b2c0a8eb127cd0096cea44ab4c2b9ea3d397e1e3a38139fa5547737442ceddb70fb0dd99596f0c0c8c3deeaefe33472956db6ea2b703e0cdf7cafb11ba024e45c498b72d19a03e0cef253a84e9b5181c0f7d5b79f57ac49ad878b8bc8cb4483971c7d5adf6ab018eccfca4c874307fd3593b59ef352ed36893f14d4cb3e7b4aa5e48f537c5ede75f12a65"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x33, &(0x7f0000000680)=@string={0x33, 0x3, "54040125729d1dc73be96891798c8c73d0bea63dc11046c77283c199eb99bca0412ca9c99646d6da37dcfd08bfd5c08764"}}]}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = semget$private(0x0, 0x4000000009, 0x208) semop(r9, &(0x7f0000000000)=[{0x1, 0xfffb, 0x800}, {0x1, 0x7, 0x3800}], 0x2) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4b, 0x0, 0x0) 8m7.464426442s ago: executing program 5 (id=5090): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r2, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @loopback, 0x4}], 0x1c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a1", @ANYRES32], 0x0) sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x26c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x23c, 0x2, [@TCA_CHOKE_PARMS={0xfffffd32, 0x1, {0xde, 0x8, 0x401, 0x8, 0xd, 0x1e, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "e142c61a9a6edb3e4c4c7c8e6a6a6d41fa18ca52b7bd1c5a492079cfa14370b42e7535781605c3cee64f1742535d8b0f365e7e130f5da0100e8b47b76b3f90fe1db14735d8a52091166847bc313e07f91ed483fd56f84dea60a1bec6ac13f5133191a3bab77393bc6f77eddd114deea9e825bb4b77663a39b16507330dcfe2adbdfd06f8b3f92995734e3891c3c0f01dc500c47eefb9a2b9654ddfbcba00338fb44bad09a64f788332a96f3ced58d7bcc989b64023f308bdc8528b22aa1905d398f0dfbb135064e75014494b2a35d383349796ecff43d13ffadbd61606a074b40013b09a217f2fbeb89971cc8b5f76f4a5993748fe80fd9d7243d9ca9e797516"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffd, 0x2, 0xedb8, 0x6, 0xd, 0x1b}}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) 7m59.383066073s ago: executing program 5 (id=5091): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1c, 0x4) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="240000005e00010004000000000000000c001000010000000000008007000180"], 0x24}], 0x1}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1c, 0x4) (async) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f00000000c0)={0x0, 0x0}) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="240000005e00010004000000000000000c001000010000000000008007000180"], 0x24}], 0x1}, 0x8000) (async) 7m55.910431464s ago: executing program 39 (id=5083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xffffffffffffff29, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newtfilter={0x160, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x12c, 0x2, [@TCA_MATCHALL_ACT={0x128, 0x2, [@m_connmark={0x124, 0x19, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x2, 0x3ff, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x4, 0x20000000, 0x8, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x800, 0x4, 0xf, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x6, 0xa}, 0xc3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x2, 0x0, 0x101}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd04c, 0x8, 0x0, 0x3, 0xb}, 0xb}}]}, {0x2d, 0x6, "4d74dd521c0840093b823a16a0c61dc85b33275918531767c50f1f7b4443a27d595973e3a024306f34"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20048091}, 0x4044091) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000300)}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 7m53.649397483s ago: executing program 40 (id=5087): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r4], 0xa) fchdir(r3) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) readv(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000000000000000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7m53.366133753s ago: executing program 41 (id=5089): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000005000300000000"], 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fc0000000000000000000000000000000000010714", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) msgctl$IPC_RMID(0x0, 0x13) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bd, 0x1, 0x1, 0x3, 0xffffffff}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0xe, 0x6, 0x5566bb86, 0x3, 0x9, 0x101}, {0x1, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}]}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0200"], 0x1c}}, 0x24024080) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x4, 0x0, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "ca182867"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x0, 0x1, 0x7f}, {0x6, 0x24, 0x1a, 0xd0b, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xe2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xfe, 0x45}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x1, 0xfa}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x80, 0x99, 0x1, 0xc7, 0x2}, 0x26, &(0x7f0000000300)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x4, 0xc60b}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xc, 0xf00, 0x1, [0x3f00, 0xffc0]}, @ptm_cap={0x3}]}, 0x4, [{0xbe, &(0x7f00000003c0)=@string={0xbe, 0x3, "acd3b0591ed7c735a007c931e399e1cfaef227d6c9ec0da86e2c98e9d03bfd6c7a0ff9b0f57fe102a6fce8d699de08365e7b2c0a8eb127cd0096cea44ab4c2b9ea3d397e1e3a38139fa5547737442ceddb70fb0dd99596f0c0c8c3deeaefe33472956db6ea2b703e0cdf7cafb11ba024e45c498b72d19a03e0cef253a84e9b5181c0f7d5b79f57ac49ad878b8bc8cb4483971c7d5adf6ab018eccfca4c874307fd3593b59ef352ed36893f14d4cb3e7b4aa5e48f537c5ede75f12a65"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x33, &(0x7f0000000680)=@string={0x33, 0x3, "54040125729d1dc73be96891798c8c73d0bea63dc11046c77283c199eb99bca0412ca9c99646d6da37dcfd08bfd5c08764"}}]}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = semget$private(0x0, 0x4000000009, 0x208) semop(r9, &(0x7f0000000000)=[{0x1, 0xfffb, 0x800}, {0x1, 0x7, 0x3800}], 0x2) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4b, 0x0, 0x0) 7m52.055381129s ago: executing program 5 (id=5095): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x2c}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x228dd9}]) 7m49.155674317s ago: executing program 5 (id=5096): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x132, {0x2, 0x2, [@wr_crn={0x67, 0x20, {0x8, 0x6}}, @nested_load_code={0x12e, 0x62, {0x1, "0f5965334210f00fc7bb00780000c74424007c9e0000c744240279940000c7442406000000000f011424400fc7bd0600000066b843008ee8430f01c20f01cf450f233e66b827010f00d0"}}, @cpuid={0x64, 0x18, {0x7fffffff, 0x2}}, @wr_drn={0x68, 0x20, {0x3, 0x8}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xf7a9, 0x6}}]}}, @out_dx={0x6a, 0x28, {0xe961, 0x0, 0xaa}}, @code={0xa, 0x48, {"460f01c8b9a80900000f3266470f58063e440f01c4c4a169dd7c64960f20a5b9300a00000f3265660f38821166b84b008ed0c4e1d9fc11"}}, @wrmsr={0x65, 0x20, {0xaf3, 0xffffffffffffff01}}], 0x1ea}) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000240)=0x7) r1 = dup(r0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000880) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000380)={0x400000000000000, 0x1000, 0x5a, 0x2, 0xf}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000003c0)={0x9, 0x5, 0x5}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000400)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r2, 0x3, 0xa) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000480)) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000004c0)=0xfffffffe, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1d}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048060) process_vm_writev(r2, &(0x7f0000001a80)=[{&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000007c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/94, 0x5e}, {&(0x7f0000001940)=""/57, 0x39}, {&(0x7f0000001980)=""/215, 0xd7}], 0x7, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/121, 0x79}, {&(0x7f0000001b80)=""/103, 0x67}], 0x2, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000001c40)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6680, &(0x7f0000001c80)=""/218) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000001f40)={0xc, 0x8, 0xfa00, {&(0x7f0000001dc0)}}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg$unix(r1, &(0x7f0000003680)={&(0x7f0000001f80), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002000)=""/14, 0xe}, {&(0x7f0000002040)=""/221, 0xdd}, {&(0x7f0000002140)=""/90, 0x5a}, {&(0x7f00000021c0)=""/222, 0xde}, {&(0x7f00000022c0)=""/55, 0x37}, {&(0x7f0000002300)=""/11, 0xb}, {&(0x7f0000002340)=""/185, 0xb9}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/181, 0xb5}], 0x9, &(0x7f0000003580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x0) process_vm_writev(r8, &(0x7f0000003900)=[{&(0x7f00000036c0)=""/154, 0x9a}, {&(0x7f0000003780)=""/145, 0x91}, {&(0x7f0000003840)=""/187, 0xbb}], 0x3, &(0x7f0000003a80)=[{&(0x7f0000003940)=""/97, 0x61}, {&(0x7f00000039c0)=""/134, 0x86}], 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r9) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x2c, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000004100)={0x0, &(0x7f0000003c00)=[@code={0xa, 0x4e, {"f041831d004000000736656547d8ff66b8e0000f00d866b89d000f00d8410f01c80f0966baf80cb8b78a7989ef66bafc0cec729b430f2282c402a9baf3"}}, @wr_crn={0x67, 0x20, {0xc, 0x2ef2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @code={0xa, 0x69, {"c4c1677cb95a4400006464264483c500417fc6f36766dd7af48fe8689e6004be66ba4000b026ee3e430f79a6b3000000c7442400331f54c3c744240283000000c7442406000000000f01142464400f795030c483155c2009"}}, @rdmsr={0x66, 0x18, {0xa6f}}, @nested_load_code={0x12e, 0x53, {0x1, "66b80e000f00d8460f213c66baa000ecc4817a128300800000c4a1c65f84251bc28fced21e65440fa1c4425d926c1c000f005a00b9740800000f32"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xf8, 0x6, 0x6, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x24, 0x4c48, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5e3, 0x3, 0x2, 0x651}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2032, 0x6ee, 0x8, 0x9}}, @wrmsr={0x65, 0x20, {0x116, 0x7ff}}, @set_irq_handler={0xc8, 0x20, {0xc2}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x9, 0xb}}, @out_dx={0x6a, 0x28, {0xe2e5, 0x6, 0xb}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x48, {"66ba4200b004ee3e0f01cf6765421a58020f01df36470fae0767f040815ca702e90000004e0fc76c8b0a66b829008ee00f32c4c2d9ae3a"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xf4, 0x5, 0x101}}, @nested_load_code={0x12e, 0x72, {0x2, "0f01c2440f20c03506000000440f22c00f01b033e1000048b8aa000000000000000f23d80f21f835c00000100f23f8b9850a0000b80c000000ba000000000f3066ba2000ec47f4f3400f45518cc401611550c6b9030800000f32"}}, @wr_drn={0x68, 0x20, {0x3, 0x38dc}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2400, 0xffff, 0x7, 0xfffffffffffffff7}}, @out_dx={0x6a, 0x28, {0x5f57, 0x5, 0x1}}], 0x4ec}) ioctl$KVM_GET_XSAVE2(r11, 0x9000aecf, &(0x7f0000ffb000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000004140)={{0x1, 0x1, 0x18, r6, {0xdbc}}, './file0\x00'}) quotactl_fd$Q_SETQUOTA(r12, 0xffffffff80000802, r7, &(0x7f0000004180)={0x759, 0x4, 0x4, 0x34, 0x7, 0x100, 0xc2b, 0x5, 0x9}) r13 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000004200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0x68, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0xbc6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x8, 0x1}}]}}}]}}]}}, &(0x7f00000045c0)={0xa, &(0x7f0000004240)={0xa, 0x6, 0x201, 0x6, 0x8, 0x7, 0x18, 0x6}, 0x8, &(0x7f0000004280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000042c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000004300)=@lang_id={0x4, 0x3, 0x29}}, {0x30, &(0x7f0000004340)=@string={0x30, 0x3, "2db910fb1e6c90aa5efb780a35fde9b054adc86960afba1352cd093d69bea9ed12ae4a6deef3585713cb0504f140"}}, {0x12, &(0x7f0000004380)=@string={0x12, 0x3, "edea0fa5ecc22f15ffc902867d0e5e39"}}, {0x25, &(0x7f00000043c0)=@string={0x25, 0x3, "b8f55ed1e39bf13b8f0f3562e21d8c095773b6e45946be70b46f7444fd125e5774cfb2"}}, {0x4, &(0x7f0000004400)=@lang_id={0x4, 0x3, 0x843}}, {0x79, &(0x7f0000004440)=@string={0x79, 0x3, "da1dc4e805a9e100a55ecfc3549dd0eb0988d99242d15d7a5044a2c84e57f552c512e41534fcd385478b0c202c44762a3dbfa27a330cfa38de3774b0d4a6933b0c98abf0ace469597b6617cb5532e6da89ec926326c63ba1dce9b14ca7ddd302cf787813c3b3c2592748884327f228e3d0752004f86d79"}}, {0x4, &(0x7f00000044c0)=@lang_id={0x4, 0x3, 0x424}}, {0x8a, &(0x7f0000004500)=@string={0x8a, 0x3, "1b2eb8a9d4ab274ee6edeaab8cf3ef449f6ba10467c6ed7696635f49fdfdc101fc1fcfee4bd9125dc00eaf29d580bedd7f1ba940bde6f825db5c41475253fa5f26458ba71a6c436b0fc83b4be85632b617caa392b721ccd9c6cecfc26defe76735d78d7bf81a31f60366ca611ca3bd04852fe3324e97272ce511eea70583daf18bba3bb190948a05"}}]}) syz_usb_control_io$hid(r13, &(0x7f0000004840)={0x24, &(0x7f0000004680)={0x20, 0x10, 0x6c, {0x6c, 0xd, "6889d765392a2109cc4d0ceea325eb34df4c65d02149412464d4c5ddf2d3117159eabb04f1ba31eedd17f14d462dc99fa01586fc695fe633fbea23ee8c0bb78bc1af024d107f7aecb028cc84e8b9f405ab44d890ff7144761d32b38d0c2314c5059bc8a758c65167a6d4"}}, &(0x7f0000004700)={0x0, 0x3, 0x97, @string={0x97, 0x3, "a1b22c4eb6a72e283cbb4b992b4727cc20b490b43c3e2bb6d92d0934c3b59d758b1075a9677bb44a0a41ce4da679eb889018d3c6cf9c282237ee862f4b87805bbcade89581464041b8a09ceee662349b298664fa5cc04791ca2bbfd2f49866bd294af48c9aa9f86253441e265615aa003964b4117150866ee5df9d45a064316a4fcf98951832245f7aae9408a45f900917976c7b60"}}, &(0x7f00000047c0)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x7, "9885436a"}]}}, &(0x7f0000004800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xb24}}}}, &(0x7f0000004b00)={0x2c, &(0x7f0000004880)={0x40, 0x11, 0xa3, "4552e7a41a59e01dfeda560624447cab1c019304ee3269874f154cd3381908537ef3fa2aff39fd97cef99ccde2c484298c512f871354ae20e631df3fd19586f4e1d9e1ec16f33eaf5286d2e2f2b3c7d42c67300285c38de4eb0ac29a17c717493c53d06f64928727d7b7527d6a4a2dc31d058210ffa13310d43fc6eeb26c9e433ce7f3a825ed4e4db759f99a71616ef96174481634482286d51258e9a160b233ce9385"}, &(0x7f0000004940)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000004980)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000049c0)={0x20, 0x1, 0xd4, "8ff838b4d6b8b0633935d04ecfa117269d843ec6408dac9622ec8f78586aeb21c9004b0f6f5945627fc2ae17c203c671ee2f46feab0282cc79d57f9cd409473c919f7560c4ed8b3e8d121a9fb9334a007c5370a8a75d0877e8913421d5a90942d6e672a940b0a19636a1a23ef4d59d6311d0c8eef5b7d211267a86fe5923d4a18ae29e50ea6edde333c9bd1624e8e8fe522e215a24c6080ba136d0f90384630cd3272719df92dec5d8833c41d9e7c3bf5056bc0d3d4f4f93ee57d21991b3c87109d8b8285997326caf4752eeafc14af5d0938f33"}, &(0x7f0000004ac0)={0x20, 0x3, 0x1, 0x2}}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x7, 0x5001) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000004b40)={0x1000000000000000, 0x0, 0x3, 0x2, 0x1f}) 7m46.367822096s ago: executing program 5 (id=5097): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x5, 0x4, {0x1, @win={{}, 0x0, 0x9, 0x0, 0x2, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x6, 0x3a6c7877, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x400, 0x9, 0x3, 'syz1\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = semget$private(0x0, 0x4, 0x200) semctl$IPC_RMID(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000500"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 7m31.379835855s ago: executing program 42 (id=5097): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x5, 0x4, {0x1, @win={{}, 0x0, 0x9, 0x0, 0x2, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x6, 0x3a6c7877, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x400, 0x9, 0x3, 'syz1\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r3 = semget$private(0x0, 0x4, 0x200) semctl$IPC_RMID(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000500"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 3m46.798618129s ago: executing program 8 (id=5852): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x125000, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x40, 0x3, &(0x7f0000000140)={0x21, "0173c6d5e90beba3d9cedd41ac119526e800d1f92efe8aa7bdfae23c7b7e8b1bb9"}}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000001c0)={0x1164d9a300ff58b0, 0x0, {0x3, 0x2, 0x300d, 0x0, 0x2, 0x0, 0x0, 0x4}}) fstatfs(r0, &(0x7f0000000040)=""/177) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000001a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x4, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x10, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x9, 0x7e, 0x1, {0x4}}}]}}}}}]}}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) 3m39.908587839s ago: executing program 8 (id=5871): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/79, 0x4f}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) read$midi(r0, &(0x7f0000000180)=""/12, 0xc) 3m32.722205559s ago: executing program 8 (id=5891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') pread64(r4, &(0x7f0000000080)=""/220, 0xdc, 0x4007) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {0x0, 0x1, r6, 0x10, 0x1, @in={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0xa0) lseek(r4, 0x7ff, 0x1) openat$cgroup_ro(r4, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x3, 0x2}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'\x00', 0x10}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x4c}}, 0x24) 3m28.506020791s ago: executing program 8 (id=5908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x20044000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac0536024000010203010902240001017da00809040079010301014409210900770122ae0f090581030002030808"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmmsg$inet6(r4, &(0x7f000000d980)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x58}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1840000001000200290000003900009b7b093697969860c09409c2faa1da007300020f961432ca"], 0x18}}], 0x2, 0x4000000) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) fstat(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r5, r6) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04130100506c1073841b69d7159c4c2c240964302018631973dc69c67e7c297eece3cea166f4171b60d9adace36e0bd76e245499da0edb2ce562433b5efd4f6beafdaffa1cef4c0a46f40a3b38ef4329fab54b4bb70c051cc6f1257b99d5749e2995c3ca15554f03f8c088a21646ce605384c87d3eec0641249c9dda7d77ada27474a582e1e911c719c46556718f4a8a8bb533ced11bfd50b89dec96"], 0x4) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0xe, 0x81, {0x81, 0x22, "7ef92f4630ce17397f8a672c505a299f60695258da955f7900e910a9e575e943794fdb21445e10f436c87e82505528a568cb7f831be21bf4a73f994e4bc3868befa1b69f4f9cabd6b199825bfed3644746743a3978863a0b103dbc5b5116f3f9475cc1c44a5c2fcc2c957cd2d351209c93599d853c2942cb3373af70c50775"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = creat(0x0, 0x12e) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x7, 0x2000004, 0xbf22, 0x41672, r7, 0x0, '\x00', 0x0, r7}, 0x50) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) r9 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) wait4(r9, 0x0, 0x80000000, 0x0) ptrace$cont(0x1f, r9, 0xa, 0xf) move_pages(r9, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) socket(0x2b, 0x1, 0x1) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) 3m25.227817693s ago: executing program 8 (id=5921): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@loopback, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0xfffffffffffffffc, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x34ff, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x2000001d}) epoll_pwait(r4, &(0x7f0000001100)=[{}], 0x1, 0x1, 0x0, 0x63) 3m21.663851627s ago: executing program 8 (id=5933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7fffffff, 0x4, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r5, 0xf) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x267) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0xf8, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r10, 0x83, 0x0, 0x0) 3m6.428056407s ago: executing program 43 (id=5933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7fffffff, 0x4, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r5, 0xf) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x267) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0xf8, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r10, 0x83, 0x0, 0x0) 11.267381588s ago: executing program 0 (id=6628): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x2}) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @qam={0x2, 0x0, 0xc}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xe3, 0x5, 0x5, 0x5, 0x8}, 0x0, &(0x7f0000000180)={0xb9, 0x80, 0x800, 0xfffffffffffffff8, 0x1, 0xfffffffffffffff9, 0x0, 0x2}, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff000905"], 0x0) 11.104534937s ago: executing program 9 (id=6629): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r2, 0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '3&\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_usb_connect$uac1(0x6, 0x72, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 7.963399888s ago: executing program 0 (id=6636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8c0) 7.85011355s ago: executing program 9 (id=6638): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100039e462b21282b7696ae7334ff810", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290016150700080028"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sw_sync_info(0xffffff9c, &(0x7f0000000400), 0x200080, 0x0) socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x1000001000, 0x5}, 0x0, &(0x7f0000000000)={0xf0, 0x101, 0xff00, 0x9, 0xfffffffffffffffd, 0xf, 0x7ffffffe, 0xe}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "fe7f7f92688bf014", "98c0861090e7e41a72bea778870c20b42e80e14a2d621c565f691ec474618200", "bef600", "793c8b185eafbc22"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304, 0x34}, "d52cd5a18683c68e", "d0ceaa324ac64c1f586fa7dea6c74faf", "937884f8", "6fde0dab3035a5d1"}, 0x28) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) acct(0xfffffffffffffffe) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x40}}, 0x4c000) 7.783776111s ago: executing program 7 (id=6639): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20004040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d70", 0x8}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9", 0xa) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000001080)={@random="c92752ede134", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x0, 0x44}}, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x3, 0x29, 0x14, 0x68, 0x57, 0x7, 0x2f, 0x0, @empty, @broadcast}}}}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7.663503653s ago: executing program 0 (id=6640): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@host, 0x2}, @local, 0x1, 0xfffffffffffffffd, 0x40000000c4ee, 0x0, 0x1, 0x0, 0x387}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x0, 0x3, {0xa, 0x0, 0x7, @empty}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x41, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) close(0x3) 7.184088602s ago: executing program 0 (id=6642): ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_sqe_op={0x1, 0xbd32dcd6e16288f0}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0xc, 0x89, {0x89, 0x31, "8d6b6c06ec63dbce8add4b54b1917594517856482265d9b9e6b46591e6f52205e3aa5ddc9229fd617db7ba15e3fb8e0c0e1a547b854f0874c21ecc7d141b3205e0c53dfe6ab625162bd1df70deac557c475bbe9c1a921fb7da4980483f9e72c8db896dbe2fb7d97c1d9cfa11aceaabaa5dfdd655dc94de98322761eb27c90d2fc2caef4effbaa4"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="000b1500000051fbd27f2f527b0600000000000000bb2eac805dfa"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8c}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "58275af38f86fac6864c15fbed9f7f9282b2400c554b2bb9881bb1c5b780a4abef96c6847e6068b3d68653d30c5600"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4b0ac0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000340)=0x3) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002840)={0x1c, &(0x7f0000002300)={0x40, 0x13, 0x1, "90"}, 0x0, 0x0}) 4.961367431s ago: executing program 2 (id=6646): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x2, 0x8001, 0xb, 0x101, 0xd802, 0x5, 0xff, 0xfffffffffffffff8, 0xfffffdffd3d32f95, 0xd, 0x7fffffff, 0xffff, 0x5, 0x1, 0x7, 0x97], 0xc000, 0x82}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x39, 0x8e7, 0xfff, 0x0, 0xfffffffffffffffd, 0xfa0f, 0xc0e0}, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@deltaction={0xf8, 0x31, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x106, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20000002}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) (async, rerun: 32) connect$tipc(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000032) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0xeeee0000, 0xc, 0xe0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x84, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0xab, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x8, 0x0, 0x7, 0x9, 0x9, 0x5, 0x5, 0x47, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x3, 0x21}, {0x6000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xeeee0000, 0xc, 0x17, 0x3, 0x2, 0xfd, 0x4, 0x18, 0x6, 0x2, 0x7}, {0x80a0000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64=r4], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x4008094) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pipe2(0x0, 0x4080) 4.606114893s ago: executing program 7 (id=6647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x14, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0x1e, 0x1, 0x0, 0xc, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3106}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x7fffffff, 0x5d, &(0x7f0000000440)=""/93, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x7, 0x9, 0x6}, 0x10, 0x1821f, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x4, 0x4, 0x5}, {0x3, 0x3, 0x4, 0x9}], 0x10, 0x9}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x15, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbb}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xe, 0xfffffff9, 0x2}, 0x10, 0x282b5, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x2, 0x2, 0xd, 0xc}], 0x10, 0xfffffc00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x37, 0x0, 0x8001, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="48b78478e5acfa29", @ANYRES32=r6, @ANYBLOB="8c85bb0a3799fd6b24b02220290682e8bbe9a0e9757eb24e95cc7f3fc04dd5f6e0cd539844e94e75de6470f6e38a76a7af1fe051463ce365d312381f959a1138956226461a46286626e25038fad923407e8777659e93a924ff11b441a8d906a9307e0a1c7e41fee23dae7d783598989ae3353a880b4b468c6f2fcfaa542908a1e90aeaa971a65cc11e4b6e3f1d301b7c30fe947d9cd933c94302c39909903c0f3a86f5b8542c86d83d1e49ed263ff1a05b86192f699b0c932e9d9ca931ac4507186841d24d093330b592a33a93bf0041e759994d", @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x4, 0xc1b, {{0x15, 0x4, 0x0, 0x2, 0x54, 0x64, 0x0, 0xf, 0x29, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0x1b, 0xb7, [@remote, @private=0xa010102, @multicast1, @empty, @empty, @loopback]}, @rr={0x7, 0x23, 0xda, [@empty, @empty, @multicast1, @loopback, @multicast1, @local, @loopback, @empty]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@ifindex=r8, r4, 0x23, 0x22, r5, @void, @void, @void, @value=r9, r7}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r13, 0x0, 0xd4, &(0x7f0000000640)=0xf, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.876960123s ago: executing program 7 (id=6648): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x1000) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getflags(r2, 0x408) (async) syz_clone3(&(0x7f0000001200)={0x154000, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x58) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) (async) sync_file_range(r0, 0x30, 0x100000000, 0x7) 3.344221182s ago: executing program 7 (id=6651): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 00008'], 0x2a) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f0000000000)='./mnt\x00', r1, &(0x7f0000000100)='./mnt\x00', 0x205) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001040)='./mnt\x00', 0x400, 0x162) mount_setattr(r2, &(0x7f0000001080)='./mnt\x00', 0x8800, &(0x7f00000010c0)={0x82, 0x16, 0x0, {r1}}, 0x20) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffb, 0xe1, 0x9b, @buffer={0x0, 0xaa, &(0x7f0000000000)=""/170}, &(0x7f00000002c0)="6dff5ac061b049f8540638184d247f8689100e72b00eaab8b817c127d87bc577fabdef7c63e4da94a1feed1ce6b46a4afe938a9f70606270b1c01aa767d8ce75fc060abe3508426ef9d272f3c93c9f3a57e46272dfc97bb8d6919534a448db8876a8f8584dc67d16f8c850fb7408e17953372a4aa5e8cda36ff57a4cf27b433470ab9aa1ebc6aa49c263203aa45b5b69670e4d9d82df507a8b8efc64f0e8ace8e7c1ba2678e0d7eaabf326d4c25df6487af721815e6e6460e60efa3da92c006631ef39fd916f2a6a355fad678c1450ece22110c9afe1490e503b506019c68a9518", &(0x7f00000003c0)=""/247, 0x10001, 0x10021, 0x0, &(0x7f00000004c0)}) (async) close(r0) 3.258528567s ago: executing program 2 (id=6652): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2c250000000c0000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES64=r1], 0x48}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x4, 0x1, 0x200, "736344a4a737fe567bf10fdb7334e231f8de4eaf477c5ec843aae83828908a09", 0x32314247}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x7c, 0x453, 0x800, 0x70bd24, 0x25dfdbfe, "9f0a8673e7f04e8497f59a30a14a4a0300c04abfdac17f644bd4630d37dc19e7083785487651ecb659531d8ba25a3fe6f703fb8a029e85d92b09cdfcd8f7b520ac0681c9545162b7f6045123ed5e0221acb44301614aa22a749beb7ddf2922014003b7d1286513c0b5"}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x30000080) 3.184138069s ago: executing program 7 (id=6654): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xab1}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x1000001d}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) (async) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="030000002540060000201a80330061cc", 0x10) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa04, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x5, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0xe9c, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async, rerun: 32) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async, rerun: 32) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000b40)={0x0, 0x0, 0x10000100000008, 0xfffffffffffffffd}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) fcntl$lock(r9, 0x26, 0x0) fcntl$lock(r9, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 2.98066791s ago: executing program 7 (id=6655): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x419, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x419, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) (async) 2.787429713s ago: executing program 4 (id=6656): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x4000}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01}, 0x1) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x12, r4, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="6bf1d9f7", @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002000000000008000300000000000400"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x4000}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01}, 0x1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x12, r4, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="6bf1d9f7", @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002000000000008000300000000000400"], 0x7c}}, 0x0) (async) 2.781896135s ago: executing program 2 (id=6657): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb601020301090212"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) migrate_pages(0x0, 0x200, 0x0, &(0x7f00000000c0)=0x3) 2.637093593s ago: executing program 0 (id=6658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4040010) (async) r1 = syz_usbip_server_init(0x1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x3, 0x12) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/204, 0xcc}], 0x1) (async) write$P9_RREMOVE(r2, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) (async) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000200)={0x8, 0x1, 0x6, 0x3, 0x8, 0x2}) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r3, 0xffffffffffffffff, r3, r1, r2, r1, r1, r3], 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendto$unix(r2, &(0x7f0000000100)="8f02a9a26114be076f639ce645292da10264c8b5206ea288440b8bc9b98c2d169999172789e5c5267788c1bd1069225fabde81f417b9f3dd2a8a6eac49a4105cdc56dbf022b5f9909152643d595762e5c4404a35573efc6437a6031cd0", 0x5d, 0x40, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b700000000c300ffc3000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a740000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8}, 0x94) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x7) 2.56409661s ago: executing program 4 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$tun(r1, &(0x7f00000028c0)={@val={0x0, 0xf6}, @void, @llc={@llc={0xfc, 0xd4, "e4"}}}, 0x7) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x247, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x84, 0x0, 0x1, {0x22, 0xbe2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x81, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x9, 0x3}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x6, 0xf4, 0x8, 0x11}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x28, 0xc, 0x5, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0x0, 0x55, 0xc1, 0xf4, 0x800, 0x20}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6a, 0x80, 0x6a, 0x4, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b724fdcbd0f7c3e2dc222a49306bcd90"}, @ptm_cap={0x3}]}, 0x5, [{0x97, &(0x7f00000000c0)=@string={0x97, 0x3, "d630c0e007bab09ee64bb86cfb2cf54742483849ca17f4ef0f952eb0e3a3cc995036a16ca06eac13b233c1a2e8daa4e0c0cdfa5e00ef43fe39da4cce4c62b1cf759bcc7cf50b03a6a47fa4e669b0ec6d6dc43ac4a6df63b03c780de09e3f03a293d85374b6059f9c33898071a6cf934bd049cb664d65bf1c2c93b9375c12f92b023410489a193fed8b926d13f3338d021608ff1d56"}}, {0x1d, &(0x7f0000000200)=@string={0x1d, 0x3, "d51dd15a3875403bdadc9e2891b617681fa30bb834fb64a748283d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "e384d12c05c24402592b51a147b2f640e48d13d95d114bc6f3c999fdab18ec6eb65e60486f53db77fa8ced9971ce236ecc84e59a83d0514f04e50a3228276bc77760dd539e25f8d0c482876846712582d482cd86c6e3329cf8e2fcfad90ad1c19cde69e0ea6db593249d449c1e5223748102f066f85a168ddc2eb14bfc70875e394c874ba2a6026e4ee09ff0203ff5a7e41d358aaf76a9d13ddacaa9919d8576d5c9e4579b3f65e3"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44e}}]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x40, 0xa, 0x1c, {0x1c, 0x30, "0a13b3c030a8ddc8cc973a0c7c2cf7c5290ebe88907374b5b522"}}, &(0x7f0000000480)={0x0, 0x3, 0xca, @string={0xca, 0x3, "4378d4beabf06607ec1f3f4dfd2df9d25eee395ed4e70f477e3f3c3d9c11664da4c8702411a0193f5f0e6035e2bc7b77f9efa970c52ea4ef141e24db661bba1a7cde615bd91b31a675682f5a6065885d579fddb83ef132c311cd33ed3f7dd0abf58da71706d60638799bb5156f87cb44b488a1bc8240d89496a9a0db2cbfe45bdf5dfa4459707c5bb0969f39526c43a190f52c058277faee3bf302c29b1eda10df6091d99177b46b95d404223b99ceab042c76907f05a2fc18b3ba888facabd763f273b514f86c8c"}}, &(0x7f0000000580)={0x0, 0x22, 0x19, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x1, 0x1, 0x5, "bf"}, @main=@item_4={0x3, 0x0, 0xa, "d5171d7d"}, @main=@item_4={0x3, 0x0, 0xb, 'gIJi'}, @local=@item_012={0x1, 0x2, 0x1, "b3"}, @local=@item_4={0x3, 0x2, 0x3, "a7e1f499"}, @main=@item_4={0x3, 0x0, 0xa, "2a43f3a1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffd, 0x6, 0x1, {0x22, 0xad4}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x20, 0x6, 0x3a, "00d21645fbe99fbf3dbb96776f566284e4f792af7451d8f15b87dc5042ee10816f48ecf7f5704ad26aba55f931e067c0ed1c8a5724d0ac047837"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)={0x20, 0x1, 0x1c, "1c96efd5f17d7372da9bc4ea0d1db681c721a4603836fe8430104753"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0xd}}) 2.453768914s ago: executing program 9 (id=6660): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x4, 0x6}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x48dd, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e0dbe108b56424f1e68ba2fabf98debdb22d0000b420a1a93c9e01177d3d058d0b0028000000f8000000000000008000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x109000000, 0xffffffffffffffff]}}) 2.432557031s ago: executing program 0 (id=6661): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020dd25d2f337d2542d0001090224000100000000090400000103000000092100000001220800090581034bd5db"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000040)={0x1, 0x2, 0x7c60}) r7 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000100)={0x0, 0x0, 0x1f}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)) 2.23443663s ago: executing program 9 (id=6662): r0 = fsopen(&(0x7f0000000180)='hfsplus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0xecf86c37d53048c9) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f0000000380)="69672505bde5d1853a384e3deec6fcb4391f745de504000000feffffff7090ba2b6d59c8958d6f1500000000c4677b000900ffffffffffffff200000f8bf54da331979df33226e02beb8bfb7cdb52558975e1e63c58d102c0c44078fd75aec49abbfbd6321b8295ace420dedadc04517519701ffa77f075b414ab13859241289d3", 0x81) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffd000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$eventfd(r7, 0x0, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000ba4000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) tee(0xffffffffffffffff, r4, 0x8f5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fc01000000000000000000000000000100000000000000000000ffffe0000002000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffff0a00ffff0000000000000000060000000000000000000004000000001f00000000000000ff0100000000000002000000fcfffffffdffffff2abd7000043500000a0001fd2000000000000000480003006400000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 1.448334015s ago: executing program 4 (id=6663): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/130, 0x82}, {0xfffffffffffffffe, 0x100000}], 0x2}}], 0x48}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x4000004, 0xb5315241, 0x7, 0x6, 0x46, 0x2, 0x3, 0x0, 0x7, 0x0, 0x7}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.421475557s ago: executing program 9 (id=6664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x20, 0xa4, 0x3, 0x8, 0x1b80, 0xe309, 0x1f40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x6, "", [{{0x9, 0x4, 0xa7, 0xa7, 0x2, 0x5d, 0x81, 0xdf, 0x2, [], [{{0x9, 0x5, 0x8a, 0x4, 0x400, 0x1, 0x5, 0x8e}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x3, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 1.249598771s ago: executing program 2 (id=6665): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000c00)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="d5a9", 0x2}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0xc000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={r2, 0x7}, 0x8) 1.119803438s ago: executing program 2 (id=6666): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$fuse(&(0x7f0000001040), &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x28c000, &(0x7f0000004040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000008000/0x1000)=nil, 0x1000}) fsopen(&(0x7f0000000480)='selinuxfs\x00', 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 987.4884ms ago: executing program 2 (id=6667): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@my=0x1, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x5000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 784.910448ms ago: executing program 4 (id=6668): read$midi(0xffffffffffffffff, &(0x7f0000000000)=""/183, 0xb7) 631.546213ms ago: executing program 4 (id=6669): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 520.85484ms ago: executing program 4 (id=6670): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x2, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x90, 0xd, 0xf3, 0x8, 0x2040, 0x4901, 0xc5c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0x3a, 0xf, 0x3, 0x99, 0x93, 0xd2, 0x80, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r1) 0s ago: executing program 9 (id=6671): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xb}, &(0x7f0000000040)=0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@random="cf702e8cf675", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x4, 0x1, "703b744dc5c6"}, {0x4, 0x1, "5cadf7451800"}]}}}}}}, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0x20f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000005d80)={&(0x7f00000055c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000005c00)=[{&(0x7f0000005600)="18d6266a", 0x4}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x5, 0x9a, 0x1, 0x1000}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @init={0x18, 0x84, 0x0, {0x0, 0x6, 0x200, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x1, 0x1, 0x8, 0x3, 0x8, 0x5, 0x8, r1}}], 0x80, 0x20000000}, 0x20000000) kernel console output (not intermixed with test programs): upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1835.705921][T16411] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1835.716850][ T30] audit: type=1326 audit(1781129813.491:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.2.6227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1835.756098][T24520] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1835.772774][T16411] usb 1-1: device descriptor read/8, error -71 [ 1835.788404][ T30] audit: type=1326 audit(1781129813.521:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.2.6227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1835.886268][T16411] usb usb1-port1: unable to enumerate USB device [ 1835.925927][T24520] usb 10-1: Using ep0 maxpacket: 16 [ 1835.932763][T24520] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 1835.942577][T24520] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1835.961383][T24520] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1835.998994][T24520] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1836.034011][T24520] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1836.061610][T24520] usb 10-1: config 0 has no interface number 0 [ 1836.115618][T24520] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1836.173240][T24520] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1836.241422][T24520] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1836.284012][T24520] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1836.342368][T24520] usb 10-1: config 0 interface 125 has no altsetting 0 [ 1836.376024][T24520] usb 10-1: config 0 interface 125 has no altsetting 2 [ 1836.409298][T24520] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1836.442518][T24520] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.474187][T24520] usb 10-1: Product: syz [ 1836.491384][T24520] usb 10-1: Manufacturer: syz [ 1836.513730][T24520] usb 10-1: SerialNumber: syz [ 1836.542410][T24520] usb 10-1: config 0 descriptor?? [ 1836.571391][T24520] usb 10-1: selecting invalid altsetting 2 [ 1836.647389][T24550] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1836.830227][T24550] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.854984][T24550] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1836.879861][T24550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.901589][T24550] usb 3-1: Product: syz [ 1836.910050][T24550] usb 3-1: Manufacturer: syz [ 1836.914925][T24550] usb 3-1: SerialNumber: syz [ 1837.260234][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.309527][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.448060][T28580] fuse: Unknown parameter 'user_id00000000000000000000' [ 1837.673477][T24520] get_1284_register timeout [ 1837.693897][ C0] usb 10-1: async_complete: urb error -104 [ 1837.699903][ C0] usb 10-1: async_complete: urb error -104 [ 1837.992655][T28592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6234'. [ 1838.365863][T24520] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1838.537030][T24520] usb 1-1: Using ep0 maxpacket: 8 [ 1838.557178][T24520] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1838.596740][T24520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1838.652476][T24520] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1838.689273][T24520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.723016][T24520] usb 1-1: Product: syz [ 1838.759564][T24520] usb 1-1: Manufacturer: syz [ 1838.775195][T24520] usb 1-1: SerialNumber: syz [ 1838.798531][T16414] usb 10-1: USB disconnect, device number 89 [ 1838.820010][T24520] usb 1-1: config 0 descriptor?? [ 1838.863413][T24520] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1838.988251][T28598] x_tables: duplicate underflow at hook 2 [ 1839.088708][T28595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.123183][T28595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.345611][T24550] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1839.376185][T24550] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1839.404936][T28602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6237'. [ 1839.438473][T28602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6237'. [ 1839.441290][T24550] usb 3-1: USB disconnect, device number 125 [ 1839.455385][T28602] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6237'. [ 1839.523096][T28608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.574630][T28608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.875999][T24550] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1840.056117][T24550] usb 3-1: device descriptor read/64, error -71 [ 1840.326257][T24550] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1840.496306][T24550] usb 3-1: device descriptor read/64, error -71 [ 1840.630042][T24550] usb usb3-port1: attempt power cycle [ 1840.742086][T28612] syzkaller0: entered promiscuous mode [ 1840.756393][T28612] syzkaller0: entered allmulticast mode [ 1840.997831][T24550] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1841.036586][T24550] usb 3-1: device descriptor read/8, error -71 [ 1841.192892][T16411] usb 1-1: USB disconnect, device number 44 [ 1841.285880][T24550] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1841.357816][T24550] usb 3-1: device descriptor read/8, error -71 [ 1841.395525][T28622] fuse: Unknown parameter 'user_id00000000000000000000' [ 1841.479968][T28620] xt_TCPMSS: Only works on TCP SYN packets [ 1841.488844][T24550] usb usb3-port1: unable to enumerate USB device [ 1842.940746][T16411] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1843.241667][T28642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1843.291277][T16411] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1843.389222][T16411] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1843.476909][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1843.476925][ T30] audit: type=1326 audit(1781129821.791:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1843.520890][T16411] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1843.566743][T16411] usb 3-1: string descriptor 0 read error: -22 [ 1843.599513][T16411] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1843.634005][T16411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.761610][ T30] audit: type=1326 audit(1781129821.791:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1843.833706][T28654] xt_TCPMSS: Only works on TCP SYN packets [ 1843.843313][T28655] xt_TCPMSS: Only works on TCP SYN packets [ 1843.898160][ T30] audit: type=1326 audit(1781129821.861:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1843.968250][ T30] audit: type=1326 audit(1781129821.861:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.050454][ T30] audit: type=1326 audit(1781129821.861:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.112299][T16411] usbhid 3-1:1.0: can't add hid device: -32 [ 1844.123478][T16411] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 1844.140135][ T30] audit: type=1326 audit(1781129821.871:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.224018][ T30] audit: type=1326 audit(1781129821.871:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.313488][ T30] audit: type=1326 audit(1781129821.871:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.414480][ T30] audit: type=1326 audit(1781129821.901:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.418806][T28662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.531828][T16401] usb 3-1: USB disconnect, device number 4 [ 1844.559528][ T30] audit: type=1326 audit(1781129821.901:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.0.6250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1844.670827][T28662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.718826][T28662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.751676][T28662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.877037][T24550] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1845.076012][T24550] usb 1-1: Using ep0 maxpacket: 16 [ 1845.086170][T16401] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1845.259013][T16401] usb 3-1: Using ep0 maxpacket: 16 [ 1845.272439][T16401] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1845.296387][T16401] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.317373][T28664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.320580][T16401] usb 3-1: config 0 has no interface number 0 [ 1845.361690][T16401] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1845.373918][T28664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.382871][T16401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.391841][T16401] usb 3-1: Product: syz [ 1845.399300][T16401] usb 3-1: Manufacturer: syz [ 1845.404511][T16401] usb 3-1: SerialNumber: syz [ 1845.425968][ T5649] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1845.444610][T16401] usb 3-1: config 0 descriptor?? [ 1845.640619][T28684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1845.652593][T28684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1845.673439][T28684] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1845.773843][T24550] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1845.863780][T24550] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1845.901588][T24550] usb 1-1: can't read configurations, error -71 [ 1846.670991][T28700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1846.761310][T28705] netlink: 'syz.9.6262': attribute type 1 has an invalid length. [ 1846.809922][T28705] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1847.128942][T28715] xt_hashlimit: size too large, truncated to 1048576 [ 1847.336213][T16414] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1847.532547][T16414] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1847.602685][T16414] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1847.637540][T16414] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 1847.671953][T16414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.719539][T16414] usb 1-1: Product: syz [ 1847.739183][T16414] usb 1-1: Manufacturer: syz [ 1847.766905][T16414] usb 1-1: SerialNumber: syz [ 1847.832960][T16401] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1847.858250][T16401] uvcvideo 3-1:0.105: No valid video chain found. [ 1847.916889][T16401] usb 3-1: USB disconnect, device number 5 [ 1848.041545][T28714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.065359][T28714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.129741][T16414] usbhid 1-1:1.0: can't add hid device: -71 [ 1848.188451][T16414] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1848.237599][T16414] usb 1-1: USB disconnect, device number 47 [ 1848.405965][T16401] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1848.600991][T16401] usb 3-1: Using ep0 maxpacket: 16 [ 1848.644649][T16401] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1848.710398][T16401] usb 3-1: config 0 has no interface number 0 [ 1848.747034][T16401] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1848.806402][T16401] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1848.889113][T16401] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1848.930868][T16401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.991198][T16401] usb 3-1: Product: syz [ 1849.065399][T16401] usb 3-1: Manufacturer: syz [ 1849.100475][T16401] usb 3-1: SerialNumber: syz [ 1849.156836][T16401] usb 3-1: config 0 descriptor?? [ 1849.222613][T28720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1849.261926][T28720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1849.553219][T28720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1849.601299][T28720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1849.706449][T24550] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1849.906369][T24550] usb 10-1: Using ep0 maxpacket: 32 [ 1849.946198][T24550] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1850.002628][T24550] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.050123][T28740] netlink: 826 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1850.065593][T24550] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1850.275718][T16401] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1850.279467][T28736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.323443][T28736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.351585][T16401] asix 3-1:0.34: probe with driver asix failed with error -61 [ 1850.573143][T24550] gspca_nw80x: reg_r err -71 [ 1850.586584][T24550] nw80x 10-1:3.0: probe with driver nw80x failed with error -71 [ 1850.623038][T24550] usb 10-1: USB disconnect, device number 90 [ 1851.384575][T28754] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1851.406675][T28751] IPVS: stopping backup sync thread 28754 ... [ 1851.553393][T24550] usb 3-1: USB disconnect, device number 6 [ 1851.656005][T16411] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1851.697567][T16414] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1851.846238][T16411] usb 1-1: Using ep0 maxpacket: 16 [ 1851.861419][T16411] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1851.895640][T16411] usb 1-1: config 3 has an invalid interface number: 57 but max is 0 [ 1851.909182][T16414] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.928715][T16411] usb 1-1: config 3 has no interface number 0 [ 1851.948949][T16414] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1851.960744][T16411] usb 1-1: config 3 interface 57 has no altsetting 0 [ 1851.982443][T16411] usb 1-1: New USB device found, idVendor=1bbb, idProduct=0003, bcdDevice=77.23 [ 1851.993094][T16414] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1852.015909][T16411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.032303][T16414] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1852.044930][T16411] usb 1-1: Product: syz [ 1852.057873][T16411] usb 1-1: Manufacturer: syz [ 1852.064188][T16414] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.076407][T24550] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1852.085246][T16411] usb 1-1: SerialNumber: syz [ 1852.133238][T16414] usb 10-1: config 0 descriptor?? [ 1852.256634][T24550] usb 3-1: Using ep0 maxpacket: 16 [ 1852.271402][T24550] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 1852.293181][T24550] usb 3-1: config 3 has no interface number 0 [ 1852.301058][T24550] usb 3-1: config 3 interface 20 has no altsetting 0 [ 1852.316568][T24550] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1852.328001][T24550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.337692][T24550] usb 3-1: Product: syz [ 1852.341970][T24550] usb 3-1: Manufacturer: syz [ 1852.355004][T24550] usb 3-1: SerialNumber: syz [ 1852.444634][T16411] usb 1-1: USB disconnect, device number 48 [ 1852.547652][T28758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.562789][T28758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.586763][T16414] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1852.587915][T28756] loop5: detected capacity change from 0 to 7 [ 1852.612183][T28756] Dev loop5: unable to read RDB block 7 [ 1852.620506][T28756] loop5: unable to read partition table [ 1852.627786][T28756] loop5: partition table beyond EOD, truncated [ 1852.634560][T28756] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1852.673864][T24550] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.20/input/input175 [ 1852.688789][ T4986] bcm5974 3-1:3.20: could not read from device [ 1852.699695][ T4986] bcm5974 3-1:3.20: could not read from device [ 1852.702601][T24550] usb 3-1: USB disconnect, device number 7 [ 1852.713525][ T4986] bcm5974 3-1:3.20: could not read from device [ 1853.029584][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.042048][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.167200][T28765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.178169][T28765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.618916][T28775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1853.640625][T28775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1853.660258][T28775] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1853.946392][ C1] plantronics 0003:047F:FFFF.0068: usb_submit_urb(ctrl) failed: -1 [ 1853.994466][T11849] usb 10-1: USB disconnect, device number 91 [ 1854.502479][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.524524][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.761782][T28801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.785256][T28803] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6289'. [ 1854.798308][T28801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.227191][T11849] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1855.347633][T16411] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1855.430565][T11849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.461362][T11849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.477209][T11849] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1855.488866][T11849] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1855.498274][T11849] usb 10-1: Manufacturer: syz [ 1855.508266][T11849] usb 10-1: config 0 descriptor?? [ 1855.516140][T16411] usb 1-1: Using ep0 maxpacket: 16 [ 1855.531420][T16411] usb 1-1: config 3 has an invalid interface number: 20 but max is 0 [ 1855.559426][T16411] usb 1-1: config 3 has no interface number 0 [ 1855.581250][T16411] usb 1-1: config 3 interface 20 has no altsetting 0 [ 1855.633585][T16411] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1855.668021][T16411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.708739][T16411] usb 1-1: Product: syz [ 1855.729494][T16411] usb 1-1: Manufacturer: syz [ 1855.754467][T16411] usb 1-1: SerialNumber: syz [ 1855.794821][T28808] ip6gre1: entered promiscuous mode [ 1855.803100][T28808] ip6gre1: entered allmulticast mode [ 1856.013460][T28812] loop5: detected capacity change from 0 to 7 [ 1856.047216][T28812] Dev loop5: unable to read RDB block 7 [ 1856.063456][T28812] loop5: unable to read partition table [ 1856.091913][T28812] loop5: partition table beyond EOD, truncated [ 1856.109918][T28812] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1856.181257][T16411] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.20/input/input176 [ 1856.230048][ T4986] bcm5974 1-1:3.20: could not read from device [ 1856.258901][ T4986] bcm5974 1-1:3.20: could not read from device [ 1856.283516][T16411] usb 1-1: USB disconnect, device number 49 [ 1856.302290][ T4986] bcm5974 1-1:3.20: could not read from device [ 1856.811443][T11849] uclogic 0003:256C:006D.0069: failed retrieving string descriptor #100: -71 [ 1856.853636][T11849] uclogic 0003:256C:006D.0069: failed retrieving pen parameters: -71 [ 1856.887056][T11849] uclogic 0003:256C:006D.0069: failed probing pen v1 parameters: -71 [ 1856.909257][T11849] uclogic 0003:256C:006D.0069: failed probing parameters: -71 [ 1856.924693][T28825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1856.935442][T11849] uclogic 0003:256C:006D.0069: probe with driver uclogic failed with error -71 [ 1856.958645][T11849] usb 10-1: USB disconnect, device number 92 [ 1857.372362][T28840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1857.546089][T16411] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1857.590591][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.600809][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.736890][T16411] usb 3-1: Using ep0 maxpacket: 8 [ 1857.747966][T16411] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.768569][T16411] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1857.793030][T16411] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1857.831335][T16411] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1857.841688][T16411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.858969][T16411] usb 3-1: Product: syz [ 1857.868571][T16411] usb 3-1: Manufacturer: syz [ 1857.878968][T16411] usb 3-1: SerialNumber: syz [ 1858.151961][T28835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.223576][T28835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.660124][T16411] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1858.779493][T16411] usb 3-1: USB disconnect, device number 8 [ 1859.166389][T28867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.232757][T28867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.460257][T16411] usb 10-1: new full-speed USB device number 93 using dummy_hcd [ 1859.677715][T16411] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1859.707834][T16411] usb 10-1: can't read configurations, error -61 [ 1859.880961][T16411] usb 10-1: new full-speed USB device number 94 using dummy_hcd [ 1860.098972][T16411] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1860.145211][T16411] usb 10-1: can't read configurations, error -61 [ 1860.183707][T28875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1860.196026][T28875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1860.206571][T16411] usb usb10-port1: attempt power cycle [ 1860.223540][T28875] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1860.615886][T16411] usb 10-1: new full-speed USB device number 95 using dummy_hcd [ 1860.711902][T16411] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1860.768803][T16411] usb 10-1: can't read configurations, error -61 [ 1860.965987][T16411] usb 10-1: new full-speed USB device number 96 using dummy_hcd [ 1861.038251][T16411] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1861.089982][T16411] usb 10-1: can't read configurations, error -61 [ 1861.143016][T16411] usb usb10-port1: unable to enumerate USB device [ 1861.917281][T16414] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 1862.053437][T16414] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1862.818133][T28895] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1862.862069][T28895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1862.893645][T24550] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1863.056018][T24550] usb 3-1: device descriptor read/64, error -71 [ 1863.316282][T24550] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1863.368270][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1863.368290][ T30] audit: type=1326 audit(1781129841.691:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.424596][ T30] audit: type=1326 audit(1781129841.691:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.456790][ T30] audit: type=1326 audit(1781129841.691:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.485603][T24550] usb 3-1: device descriptor read/64, error -71 [ 1863.518820][ T30] audit: type=1326 audit(1781129841.691:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.556658][ T30] audit: type=1326 audit(1781129841.691:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.584662][ T30] audit: type=1326 audit(1781129841.691:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.612474][T24550] usb usb3-port1: attempt power cycle [ 1863.623262][ T30] audit: type=1326 audit(1781129841.691:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.649230][ T30] audit: type=1326 audit(1781129841.691:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.677509][ T30] audit: type=1326 audit(1781129841.691:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1863.686243][T16411] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 1863.721017][ T30] audit: type=1326 audit(1781129841.721:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28903 comm="syz.0.6316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f291d75d68e code=0x7ffc0000 [ 1863.925915][T16411] usb 1-1: device descriptor read/64, error -71 [ 1863.975224][T28909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1864.007016][T24550] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1864.032824][T24550] usb 3-1: device descriptor read/8, error -71 [ 1864.166510][T16411] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 1864.276158][T24550] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1864.296878][T24550] usb 3-1: device descriptor read/8, error -71 [ 1864.306073][T16411] usb 1-1: device descriptor read/64, error -71 [ 1864.367865][T16401] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1864.416453][T24550] usb usb3-port1: unable to enumerate USB device [ 1864.428861][T16411] usb usb1-port1: attempt power cycle [ 1864.535487][T28916] fuse: Unknown parameter '0x0000000000000004' [ 1864.542438][T16401] usb 10-1: device descriptor read/64, error -71 [ 1864.580005][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6320'. [ 1864.627913][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6320'. [ 1864.795892][T16411] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1864.796250][T16401] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1864.817073][T16411] usb 1-1: device descriptor read/8, error -71 [ 1864.840690][T28921] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6323'. [ 1864.936106][T16401] usb 10-1: device descriptor read/64, error -71 [ 1865.067631][T16411] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 1865.077032][T16401] usb usb10-port1: attempt power cycle [ 1865.098002][T16411] usb 1-1: device descriptor read/8, error -71 [ 1865.216304][T16411] usb usb1-port1: unable to enumerate USB device [ 1865.438912][T16401] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1865.477673][T16401] usb 10-1: device descriptor read/8, error -71 [ 1865.726051][T16401] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1865.778420][T16401] usb 10-1: device descriptor read/8, error -71 [ 1865.917009][T16401] usb usb10-port1: unable to enumerate USB device [ 1867.153438][T28946] fuse: Unknown parameter 'rnotmode' [ 1868.385987][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1869.821248][T28971] netlink: 'syz.2.6335': attribute type 7 has an invalid length. [ 1870.415970][T24520] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1870.487113][T28980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.518428][T28980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.565983][T24520] usb 3-1: device descriptor read/64, error -71 [ 1870.825823][T24520] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 1870.985875][T24520] usb 3-1: device descriptor read/64, error -71 [ 1871.106360][T24520] usb usb3-port1: attempt power cycle [ 1871.465794][T24520] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 1871.508031][T24520] usb 3-1: device descriptor read/8, error -71 [ 1871.567198][T29001] netlink: 'syz.4.6347': attribute type 1 has an invalid length. [ 1871.766096][T24520] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1871.817118][T24520] usb 3-1: device descriptor read/8, error -71 [ 1871.956404][T24520] usb usb3-port1: unable to enumerate USB device [ 1874.346889][T29021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.399903][T29021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.619502][T29025] fuse: Unknown parameter 'fd0x0000000000000004' [ 1875.463810][T29038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.505570][T29038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.764357][T29042] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1875.799045][T29042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1876.056056][T16414] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1876.226026][T16414] usb 10-1: Using ep0 maxpacket: 16 [ 1876.235360][T16414] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1876.249780][T16414] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1876.260383][T24520] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1876.271623][T16414] usb 10-1: config 0 has no interface number 0 [ 1876.280025][T16414] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1876.291624][T16414] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1876.306087][T16414] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1876.316733][T16414] usb 10-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1876.346426][T16414] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.359643][T16414] usb 10-1: Product: syz [ 1876.371262][T16414] usb 10-1: Manufacturer: syz [ 1876.380607][T16414] usb 10-1: SerialNumber: syz [ 1876.393293][T16414] usb 10-1: config 0 descriptor?? [ 1876.410660][T29064] sch_tbf: peakrate 1 is lower than or equals to rate 6 ! [ 1876.429879][T24520] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 32 [ 1876.450087][T24520] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1876.463749][T24520] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1876.485926][T24520] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1876.505274][T24520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.525544][T24520] usb 1-1: Product: syz [ 1876.530120][T24520] usb 1-1: Manufacturer: syz [ 1876.556519][T24520] usb 1-1: SerialNumber: syz [ 1876.573270][T29051] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1876.586063][T29051] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1876.620193][T16414] usb 10-1: USB disconnect, device number 101 [ 1876.807469][T29051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.817420][T29051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.830062][T29051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.839847][T29051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.858543][T24520] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 2 proto 3 vid 0x0525 pid 0xA4A8 [ 1876.876506][T24550] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1876.876917][T24520] usb 1-1: USB disconnect, device number 54 [ 1876.890112][T24520] usblp0: removed [ 1877.089616][T24550] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1877.099491][T24550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.108491][T24550] usb 3-1: Product: syz [ 1877.113020][T24550] usb 3-1: Manufacturer: syz [ 1877.133174][T24550] usb 3-1: SerialNumber: syz [ 1877.154764][T24550] usb 3-1: config 0 descriptor?? [ 1877.375498][T29066] Invalid argument reading file caps for ./file0 [ 1877.387239][T24550] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1877.394780][T24550] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1877.412450][T24550] usb 3-1: USB disconnect, device number 17 [ 1878.278905][T29080] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4032167445 (64514679120 ns) > initial count (63607699792 ns). Using initial count to start timer. [ 1878.553693][T29092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.603825][T29092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.635813][T16411] usb 10-1: new low-speed USB device number 102 using dummy_hcd [ 1878.674085][T29092] loop5: detected capacity change from 0 to 7 [ 1878.729794][T29092] Dev loop5: unable to read RDB block 7 [ 1878.749404][T29092] loop5: unable to read partition table [ 1878.773994][T29092] loop5: partition table beyond EOD, truncated [ 1878.798787][T29092] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1878.849145][T16411] usb 10-1: Invalid ep0 maxpacket: 64 [ 1878.926819][T24550] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1878.985986][T16411] usb 10-1: new low-speed USB device number 103 using dummy_hcd [ 1879.099086][T24550] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1879.127387][T24550] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1879.135869][T16411] usb 10-1: Invalid ep0 maxpacket: 64 [ 1879.158303][T16411] usb usb10-port1: attempt power cycle [ 1879.160999][T24550] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1879.194243][T24550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.215362][T24550] usb 3-1: Product: syz [ 1879.232106][T24550] usb 3-1: Manufacturer: syz [ 1879.245815][T24550] usb 3-1: SerialNumber: syz [ 1879.278837][T24550] usb 3-1: config 0 descriptor?? [ 1879.285429][T29094] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1879.297450][T29094] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1879.469635][T29100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1879.535860][T16411] usb 10-1: new low-speed USB device number 104 using dummy_hcd [ 1879.544613][T29094] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1879.578422][T29094] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1879.598451][T16411] usb 10-1: Invalid ep0 maxpacket: 64 [ 1879.746288][T16411] usb 10-1: new low-speed USB device number 105 using dummy_hcd [ 1879.790032][T16411] usb 10-1: Invalid ep0 maxpacket: 64 [ 1879.815962][T16411] usb usb10-port1: unable to enumerate USB device [ 1880.038013][T24550] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1880.179038][T29117] kAFS: unparsable volume name [ 1880.244704][T24550] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1880.330978][T24550] usb 3-1: USB disconnect, device number 18 [ 1881.161302][T29129] netlink: 'syz.2.6383': attribute type 1 has an invalid length. [ 1881.277180][T29134] binder: 29128:29134 ioctl c0189378 200000000240 returned -22 [ 1881.439073][T29129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1881.492367][T29132] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 1882.261196][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1882.312605][T29165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1882.376338][T29164] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1882.408889][T29170] netlink: 'syz.7.6395': attribute type 1 has an invalid length. [ 1882.425345][T29171] netlink: 'syz.7.6395': attribute type 1 has an invalid length. [ 1882.428961][T29170] netlink: 'syz.7.6395': attribute type 2 has an invalid length. [ 1882.482191][T29171] netlink: 'syz.7.6395': attribute type 2 has an invalid length. [ 1882.641433][T11849] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1882.717683][T24524] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1882.906470][T24524] usb 1-1: Using ep0 maxpacket: 32 [ 1882.921800][T11849] usb 3-1: not running at top speed; connect to a high speed hub [ 1882.940091][T24524] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.984779][T24524] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.039479][T24524] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1883.061826][T11849] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1883.093611][T24524] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1883.134692][T24524] usb 1-1: Product: syz [ 1883.150721][T24524] usb 1-1: Manufacturer: syz [ 1883.198535][T24524] hub 1-1:4.0: USB hub found [ 1883.248461][T11849] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 4 [ 1883.339662][T11849] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1883.374981][T11849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.394851][T24524] hub 1-1:4.0: 2 ports detected [ 1883.413182][T11849] usb 3-1: Product: syz [ 1883.434182][T11849] usb 3-1: Manufacturer: syz [ 1883.501880][T11849] usb 3-1: SerialNumber: syz [ 1883.784693][T29169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.827053][T29169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.890775][T11849] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1883.928843][T11849] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1884.076600][T11849] usb 3-1: USB disconnect, device number 19 [ 1884.602443][T29179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1884.628475][T24524] hub 1-1:4.0: activate --> -90 [ 1885.045756][T24520] usb 1-1: USB disconnect, device number 55 [ 1885.156032][T11849] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1885.341799][T11849] usb 10-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 1885.395574][T11849] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1885.463434][T11849] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1885.514073][T11849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.546496][T11849] usb 10-1: Product: syz [ 1885.552907][T11849] usb 10-1: Manufacturer: syz [ 1885.564589][T11849] usb 10-1: SerialNumber: syz [ 1885.607660][T29194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1885.632023][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6403'. [ 1885.808266][T11849] usb 10-1: 0:1 : does not exist [ 1885.830799][T11849] usb 10-1: unit 6 not found! [ 1885.854631][T11849] usb 10-1: unit 2 not found! [ 1886.044502][T11849] usb 10-1: USB disconnect, device number 106 [ 1886.215881][T24524] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1886.425583][T24524] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1886.464588][T24524] usb 3-1: config 0 has no interface number 0 [ 1886.494842][T24524] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 1886.533961][T24524] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x82 has invalid maxpacket 24019, setting to 64 [ 1886.549619][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6408'. [ 1886.559929][T29205] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6408'. [ 1886.569439][T24524] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1886.579708][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6408'. [ 1886.589708][T24524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.598294][T29205] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6408'. [ 1886.611513][T24524] usb 3-1: config 0 descriptor?? [ 1886.630625][T29201] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1886.677874][T24524] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input177 [ 1886.762122][T29208] xt_l2tp: invalid flags combination: 8 [ 1886.888751][T16414] usb 3-1: USB disconnect, device number 20 [ 1886.889209][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1887.308211][T16411] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1887.362790][T29221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.384588][T29221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.489458][T16411] usb 10-1: Using ep0 maxpacket: 16 [ 1887.513236][T16411] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1887.541296][T16411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.558598][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1887.558614][ T30] audit: type=1326 audit(1781129865.881:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.562623][T16411] usb 10-1: config 0 descriptor?? [ 1887.597358][ T30] audit: type=1326 audit(1781129865.881:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.625393][ T30] audit: type=1326 audit(1781129865.931:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.652306][ T30] audit: type=1326 audit(1781129865.931:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.713994][ T30] audit: type=1326 audit(1781129865.931:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.728349][T29231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6416'. [ 1887.752639][T16411] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1887.783603][ T30] audit: type=1326 audit(1781129865.931:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.861781][ T30] audit: type=1326 audit(1781129865.931:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.889173][ T30] audit: type=1326 audit(1781129865.931:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.918795][ T30] audit: type=1326 audit(1781129865.931:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1887.944041][ T30] audit: type=1326 audit(1781129865.931:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29224 comm="syz.2.6415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9630b9ce59 code=0x7ffc0000 [ 1888.013274][T29231] team0: Port device team_slave_0 removed [ 1888.081791][T24520] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1888.245840][T24520] usb 3-1: Using ep0 maxpacket: 32 [ 1888.291245][T24520] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1888.377568][T24520] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1888.405838][T24520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.428296][T24520] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1888.450629][T24520] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1888.472447][T24520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.501463][T24520] usb 3-1: config 0 descriptor?? [ 1889.047624][T16411] gspca_sonixj: reg_w1 err -110 [ 1889.076146][T16411] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1889.086465][T29249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.109868][T29249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.292475][T29251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.302338][T29251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.806101][T29252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.838687][T29252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.142472][T16411] usb 10-1: USB disconnect, device number 107 [ 1891.083650][T16411] usb 3-1: USB disconnect, device number 21 [ 1891.666457][T16411] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1891.786052][T11849] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1891.859364][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6435'. [ 1891.955946][T11849] usb 3-1: Using ep0 maxpacket: 32 [ 1891.970194][T11849] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1891.990405][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.017458][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.038237][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.066202][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.085067][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.106292][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.130461][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.160796][T11849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.177485][T29294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.191602][T11849] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1892.202373][T29294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.223570][T29294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.238567][T11849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.254266][T29294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.264969][T11849] usb 3-1: Product: syz [ 1892.279609][T11849] usb 3-1: Manufacturer: syz [ 1892.294683][T29296] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6438'. [ 1892.295958][T11849] usb 3-1: SerialNumber: syz [ 1892.318159][T29298] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 1892.318159][T29298] program syz.7.6439 not setting count and/or reply_len properly [ 1892.323143][T29296] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6438'. [ 1892.349276][T11849] usb 3-1: config 0 descriptor?? [ 1892.358629][T11849] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 1892.406703][T16411] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1892.568491][T16411] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.602583][T16411] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1892.641273][T16411] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1892.688727][T24520] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1892.700192][T16414] usb 3-1: USB disconnect, device number 22 [ 1892.710755][T16411] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1892.748029][T16411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.764959][T16411] usb 1-1: Product: syz [ 1892.789206][T16411] usb 1-1: Manufacturer: syz [ 1892.793934][T16411] usb 1-1: SerialNumber: syz [ 1892.845774][T24520] usb 10-1: device descriptor read/64, error -71 [ 1893.029452][T16411] usb 1-1: 0:2 : does not exist [ 1893.088162][T24520] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1893.247461][T24520] usb 10-1: device descriptor read/64, error -71 [ 1893.258049][T16411] usb 1-1: USB disconnect, device number 56 [ 1893.363553][T29315] netlink: 212344 bytes leftover after parsing attributes in process `syz.7.6440'. [ 1893.390107][T24520] usb usb10-port1: attempt power cycle [ 1893.767403][T24520] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1893.792160][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1893.842991][T24520] usb 10-1: device descriptor read/8, error -71 [ 1893.853011][T29323] --map-set only usable from mangle table [ 1894.096046][T24520] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1894.164665][T24520] usb 10-1: device descriptor read/8, error -71 [ 1894.298522][T24520] usb usb10-port1: unable to enumerate USB device [ 1895.809858][T29340] netlink: 'syz.9.6450': attribute type 21 has an invalid length. [ 1895.859843][T29340] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6450'. [ 1895.929236][T29340] netlink: 'syz.9.6450': attribute type 5 has an invalid length. [ 1895.979893][T29340] netlink: 'syz.9.6450': attribute type 6 has an invalid length. [ 1896.020904][T29340] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6450'. [ 1896.350406][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6454'. [ 1896.460824][T29360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1896.470971][T29360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1896.867220][T29372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.903500][T29372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.943487][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1896.943505][ T30] audit: type=1326 audit(1781129875.261:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.072964][ T30] audit: type=1326 audit(1781129875.261:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.193355][T29375] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[29379] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[29375] [ 1897.261831][ T30] audit: type=1326 audit(1781129875.261:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.292883][T29377] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6460'. [ 1897.392620][T29378] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^r$Gt:u^= [ 1897.411209][ T30] audit: type=1326 audit(1781129875.271:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.527009][ T30] audit: type=1326 audit(1781129875.271:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.671255][ T30] audit: type=1326 audit(1781129875.271:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.802667][ T30] audit: type=1326 audit(1781129875.271:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1897.970804][ T30] audit: type=1326 audit(1781129875.271:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1898.123203][ T30] audit: type=1326 audit(1781129875.271:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1898.210833][ T30] audit: type=1326 audit(1781129875.271:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29374 comm="syz.0.6461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291d79ce59 code=0x7ffc0000 [ 1898.731188][T29399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.798392][T29399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.044986][T29399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.070107][T29399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.223073][T29395] kvm: apic: phys broadcast and lowest prio [ 1899.286037][T24550] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1899.476087][T24550] usb 3-1: Using ep0 maxpacket: 8 [ 1899.514779][T24550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1899.549688][T24550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1899.586191][T24550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1899.609659][T24550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1899.641570][T24550] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1899.665166][T24550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1899.712962][T24550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1899.764638][T24550] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1899.819213][T24550] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1899.860565][T24550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.889665][T24550] usb 3-1: Product: syz [ 1899.910760][T24550] usb 3-1: Manufacturer: syz [ 1899.927049][T24550] usb 3-1: SerialNumber: syz [ 1899.964672][T24550] usb 3-1: config 0 descriptor?? [ 1899.998355][T29402] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1900.047162][T24550] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1900.455845][T16411] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1900.478689][T24550] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1900.549028][T24550] usb 3-1: USB disconnect, device number 23 [ 1900.655965][T16411] usb 10-1: Using ep0 maxpacket: 32 [ 1900.672540][T16411] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1900.708833][T16411] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1900.744207][T16411] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1900.781618][T16411] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1900.828990][T16411] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1900.883598][T16411] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1900.951629][T16411] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1900.992475][T16411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.044133][T16411] usb 10-1: config 0 descriptor?? [ 1901.282575][T16411] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1901.308286][T24520] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1901.490466][T24520] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1901.504813][T29421] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6474'. [ 1901.523548][T24520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.550972][T24520] usb 3-1: Product: syz [ 1901.563765][T24520] usb 3-1: Manufacturer: syz [ 1901.578004][T24520] usb 3-1: SerialNumber: syz [ 1901.600643][T29429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.629980][T29429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.710879][T16414] usb 10-1: USB disconnect, device number 112 [ 1901.730433][T16414] usblp0: removed [ 1901.870936][T29429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.904888][T29429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.236573][T29433] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in; [ 1902.236573][T29433] program syz.4.6476 not setting count and/or reply_len properly [ 1902.415104][T24520] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1902.457224][T24520] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1902.493299][T24520] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1902.523410][T24520] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1902.567893][T24520] usb 3-1: USB disconnect, device number 24 [ 1902.742456][T29437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1902.757490][T29437] sctp: [Deprecated]: syz.0.6478 (pid 29437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1902.757490][T29437] Use struct sctp_sack_info instead [ 1903.075888][T24520] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1903.247557][T24520] usb 10-1: Using ep0 maxpacket: 32 [ 1903.269511][T24520] usb 10-1: config 242 has an invalid interface number: 195 but max is 0 [ 1903.291767][T24520] usb 10-1: config 242 has no interface number 0 [ 1903.308802][T24520] usb 10-1: config 242 interface 195 has no altsetting 0 [ 1903.339880][T24520] usb 10-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1903.356664][T11849] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1903.367949][T24520] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.398552][T24520] usb 10-1: Product: syz [ 1903.415065][T24520] usb 10-1: Manufacturer: syz [ 1903.434952][T24520] usb 10-1: SerialNumber: syz [ 1903.535789][T11849] usb 3-1: Using ep0 maxpacket: 8 [ 1903.554419][T11849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1903.575007][T11849] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1903.597357][T11849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.623879][T11849] usb 3-1: config 0 descriptor?? [ 1903.781916][T24520] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1903.792061][T24520] usb 10-1: selecting invalid altsetting 0 [ 1903.800896][ T2367] pvrusb2: Invalid write control endpoint [ 1903.828994][T24520] usb 10-1: USB disconnect, device number 113 [ 1903.860352][T11849] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1903.914374][ T2367] pvrusb2: Invalid write control endpoint [ 1903.923248][ T2367] pvrusb2: Invalid write control endpoint [ 1903.931705][ T2367] pvrusb2: Invalid write control endpoint [ 1903.942052][ T2367] pvrusb2: Invalid write control endpoint [ 1903.948277][ T2367] pvrusb2: Invalid write control endpoint [ 1903.955166][ T2367] pvrusb2: Invalid write control endpoint [ 1903.956823][T16401] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1903.961618][ T2367] pvrusb2: Invalid write control endpoint [ 1903.974549][ T2367] pvrusb2: Invalid write control endpoint [ 1903.980653][ T2367] pvrusb2: Invalid write control endpoint [ 1903.990948][ T2367] pvrusb2: Invalid write control endpoint [ 1903.997341][ T2367] pvrusb2: Invalid write control endpoint [ 1904.003223][ T2367] pvrusb2: Invalid write control endpoint [ 1904.009369][ T2367] pvrusb2: Invalid write control endpoint [ 1904.015204][ T2367] pvrusb2: Invalid write control endpoint [ 1904.021217][ T2367] pvrusb2: Invalid write control endpoint [ 1904.027302][ T2367] pvrusb2: Invalid write control endpoint [ 1904.033149][ T2367] pvrusb2: Invalid write control endpoint [ 1904.039032][ T2367] pvrusb2: Invalid write control endpoint [ 1904.044856][ T2367] pvrusb2: Invalid write control endpoint [ 1904.051959][ T2367] pvrusb2: Invalid write control endpoint [ 1904.053525][T11849] usb 3-1: USB disconnect, device number 25 [ 1904.057875][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057896][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057912][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057927][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057943][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057958][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057974][ T2367] pvrusb2: Invalid write control endpoint [ 1904.057998][ T2367] pvrusb2: Invalid write control endpoint [ 1904.058014][ T2367] pvrusb2: Invalid write control endpoint [ 1904.058029][ T2367] pvrusb2: Invalid write control endpoint [ 1904.058066][ T2367] pvrusb2: Invalid write control endpoint [ 1904.058081][ T2367] pvrusb2: Invalid write control endpoint [ 1904.064445][ T2367] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1904.113171][ T2367] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 1904.165878][ T2367] pvrusb2: Invalid write control endpoint [ 1904.172002][ T2367] pvrusb2: Invalid write control endpoint [ 1904.184246][ T2367] pvrusb2: Invalid write control endpoint [ 1904.190388][ T2367] pvrusb2: Invalid write control endpoint [ 1904.196683][ T2367] pvrusb2: Invalid write control endpoint [ 1904.202464][ T2367] pvrusb2: Invalid write control endpoint [ 1904.212273][ T2367] pvrusb2: Invalid write control endpoint [ 1904.217562][T16401] usb 1-1: Using ep0 maxpacket: 16 [ 1904.219203][ T2367] pvrusb2: Invalid write control endpoint [ 1904.226019][T16401] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 1904.232310][ T2367] pvrusb2: Invalid write control endpoint [ 1904.240987][T16401] usb 1-1: config 0 has no interface number 0 [ 1904.244498][ T2367] pvrusb2: Invalid write control endpoint [ 1904.255454][ T2367] pvrusb2: Invalid write control endpoint [ 1904.261566][ T2367] pvrusb2: Invalid write control endpoint [ 1904.261965][T16401] usb 1-1: config 0 interface 209 has no altsetting 0 [ 1904.267990][ T2367] pvrusb2: Invalid write control endpoint [ 1904.281039][ T2367] pvrusb2: Invalid write control endpoint [ 1904.287146][ T2367] pvrusb2: Invalid write control endpoint [ 1904.293372][ T2367] pvrusb2: Invalid write control endpoint [ 1904.296051][T16401] usb 1-1: New USB device found, idVendor=6409, idProduct=1db3, bcdDevice=13.48 [ 1904.299436][ T2367] pvrusb2: Invalid write control endpoint [ 1904.309044][T16401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.326598][T16401] usb 1-1: Product: syz [ 1904.330961][T16401] usb 1-1: Manufacturer: syz [ 1904.336766][T16401] usb 1-1: SerialNumber: syz [ 1904.344425][ T2367] pvrusb2: Invalid write control endpoint [ 1904.354428][T16401] usb 1-1: config 0 descriptor?? [ 1904.363604][ T2367] pvrusb2: Invalid write control endpoint [ 1904.372444][ T2367] pvrusb2: Invalid write control endpoint [ 1904.380792][ T2367] pvrusb2: Invalid write control endpoint [ 1904.392394][ T2367] pvrusb2: Attached sub-driver cs53l32a [ 1904.522563][ T2367] pvrusb2: Invalid write control endpoint [ 1904.529076][ T2367] pvrusb2: Invalid write control endpoint [ 1904.541190][ T2367] pvrusb2: Invalid write control endpoint [ 1904.554657][ T2367] pvrusb2: Invalid write control endpoint [ 1904.602805][T29452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.612225][ T2367] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1904.638279][T29452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.658599][ T2367] pvrusb2: Device being rendered inoperable [ 1904.665033][ T2367] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1904.680793][T16401] rndis_host 1-1:0.209: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1904.724037][T16401] usb 1-1: USB disconnect, device number 57 [ 1904.734793][ T2367] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1904.885910][T16414] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1905.046396][T16414] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1905.071340][T16414] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1905.080600][T29481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.101819][T16414] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1905.105295][T29481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.123791][T16414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.153408][T29464] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1905.172923][T16414] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1905.325537][T29487] sctp: [Deprecated]: syz.0.6490 (pid 29487) Use of int in maxseg socket option. [ 1905.325537][T29487] Use struct sctp_assoc_value instead [ 1905.358498][T29481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.386783][T29481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.411041][T29481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1905.424830][T29490] netlink: 'syz.9.6491': attribute type 14 has an invalid length. [ 1905.470156][T11849] usb 3-1: USB disconnect, device number 26 [ 1906.230681][T29510] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 1906.408355][T11849] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1906.591680][T29507] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1906.630218][T11849] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.677590][T16414] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1906.688677][T29511] hub 9-0:1.0: USB hub found [ 1906.706209][T11849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.706349][T29511] hub 9-0:1.0: 1 port detected [ 1906.707159][T29507] team0: Port device batadv1 added [ 1906.760679][T11849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1906.823235][T11849] usb 10-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1906.848332][T11849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.947001][T16414] usb 3-1: Using ep0 maxpacket: 16 [ 1906.951236][T11849] usb 10-1: config 0 descriptor?? [ 1906.981155][T16414] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1907.053375][T16414] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 217, changing to 11 [ 1907.123812][T16414] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 17760, setting to 1024 [ 1907.179990][T16414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1907.226823][T16414] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1907.274645][T16414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.315496][T16414] usb 3-1: Product: syz [ 1907.340176][T16414] usb 3-1: Manufacturer: syz [ 1907.370892][T16414] usb 3-1: SerialNumber: syz [ 1907.418874][T16414] usb 3-1: config 0 descriptor?? [ 1907.449955][T29514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1907.462074][T11849] wacom 0003:056A:0010.006B: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1907.511587][T11849] wacom 0003:056A:0010.006B: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.9-1/input0 [ 1907.569285][T11849] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0010.006B/input/input181 [ 1907.678088][T11849] usb 10-1: USB disconnect, device number 114 [ 1907.752184][T29514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1907.801114][T16414] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input184 [ 1908.014345][T29514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.040740][T29514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.349379][T29514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.382130][T29514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.477904][T16414] usb 3-1: USB disconnect, device number 27 [ 1909.213413][T29526] netlink: 'syz.0.6501': attribute type 10 has an invalid length. [ 1909.235814][T29526] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1909.668508][T29533] netlink: 'syz.9.6503': attribute type 14 has an invalid length. [ 1910.777189][T16419] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1910.906741][T16414] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1911.039671][T16419] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1911.065888][T16414] usb 10-1: device descriptor read/64, error -71 [ 1911.072666][T16419] usb 1-1: not running at top speed; connect to a high speed hub [ 1911.090264][T16419] usb 1-1: config 6 has an invalid interface number: 244 but max is 0 [ 1911.115700][T16419] usb 1-1: config 6 has no interface number 0 [ 1911.122167][T16419] usb 1-1: config 6 interface 244 has no altsetting 0 [ 1911.140186][T16419] usb 1-1: New USB device found, idVendor=045e, idProduct=007a, bcdDevice=2b.c3 [ 1911.160557][T16419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.180949][T16419] usb 1-1: Product: syz [ 1911.194152][T16419] usb 1-1: Manufacturer: syz [ 1911.269362][T16419] usb 1-1: SerialNumber: syz [ 1911.326184][T11849] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1911.336513][T16414] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1911.486194][T11849] usb 3-1: Using ep0 maxpacket: 8 [ 1911.495778][T16414] usb 10-1: device descriptor read/64, error -71 [ 1911.499888][T11849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1911.534533][T29539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.538808][T11849] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1911.559214][T29539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.572335][T11849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.610050][T11849] usb 3-1: config 0 descriptor?? [ 1911.626347][T16414] usb usb10-port1: attempt power cycle [ 1911.755074][T16419] pegasus 1-1:6.244: Missing or invalid endpoints [ 1911.796773][T16419] usb 1-1: USB disconnect, device number 58 [ 1911.858790][T11849] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1911.985970][T16414] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1912.031536][T16414] usb 10-1: device descriptor read/8, error -71 [ 1912.034474][T29552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.067562][T29552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.155157][T16411] usb 3-1: USB disconnect, device number 28 [ 1912.261574][T29557] netlink: 'syz.2.6511': attribute type 10 has an invalid length. [ 1912.262452][T29556] netlink: 'syz.2.6511': attribute type 10 has an invalid length. [ 1912.286101][T16414] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1912.340314][T16414] usb 10-1: device descriptor read/8, error -71 [ 1912.472209][T16414] usb usb10-port1: unable to enumerate USB device [ 1912.626873][T29563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.653087][T29563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.423942][T29574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6515'. [ 1913.651577][T29574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1913.753757][T29576] macvlan3: entered promiscuous mode [ 1913.874356][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1913.874376][ T30] audit: type=1800 audit(1781129892.191:5424): pid=29585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6518" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1914.082660][T29589] fuse: Bad value for 'fd' [ 1914.223617][T29594] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1914.468431][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.478732][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.828965][T11849] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1915.046023][T11849] usb 10-1: Using ep0 maxpacket: 32 [ 1915.096703][T13180] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1915.107409][T11849] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1915.179385][T11849] usb 10-1: config 3 has an invalid interface number: 2 but max is 1 [ 1915.237588][T11849] usb 10-1: config 3 has an invalid interface number: 19 but max is 1 [ 1915.300366][T13180] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1915.362188][T13180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1915.413649][T11849] usb 10-1: config 3 has no interface number 0 [ 1915.427281][T13180] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1915.492596][T13180] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1915.536439][T11849] usb 10-1: config 3 has no interface number 1 [ 1915.553956][T13180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.593188][T11849] usb 10-1: config 3 interface 19 has no altsetting 0 [ 1915.613589][T13180] usb 1-1: config 0 descriptor?? [ 1915.644980][T29601] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1915.736355][T11849] usb 10-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=20.c1 [ 1915.799861][T11849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.860369][T11849] usb 10-1: Product: syz [ 1915.906966][T11849] usb 10-1: Manufacturer: syz [ 1915.965370][T11849] usb 10-1: SerialNumber: syz [ 1916.115218][T13180] dragonrise 0003:0079:0011.006C: ignoring exceeding usage max [ 1916.160906][T13180] dragonrise 0003:0079:0011.006C: unknown main item tag 0x4 [ 1916.224372][T13180] dragonrise 0003:0079:0011.006C: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 1916.450818][T16401] usb 1-1: USB disconnect, device number 59 [ 1916.502239][T29613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1916.802834][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1916.942697][T29620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.989455][T29620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.080828][T29620] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1917.216359][T13180] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1917.401280][T13180] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1917.447832][T13180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.519394][T13180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1917.572653][T13180] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1917.641054][T13180] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1917.674951][T13180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.704956][T13180] usb 1-1: Product: syz [ 1917.733226][T13180] usb 1-1: Manufacturer: syz [ 1917.752340][T13180] usb 1-1: SerialNumber: syz [ 1918.222417][T13180] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1918.244129][T13180] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1918.596782][T13180] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1918.639873][T13180] usb 1-1: USB disconnect, device number 60 [ 1918.992615][T29646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.083564][T29646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.104662][T11849] rtsx_usb 10-1:3.2: probe with driver rtsx_usb failed with error -22 [ 1919.197127][T11849] rtsx_usb 10-1:3.19: probe with driver rtsx_usb failed with error -22 [ 1919.224403][T11849] usb 10-1: USB disconnect, device number 119 [ 1919.315991][T13180] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1919.496523][T13180] usb 1-1: Using ep0 maxpacket: 32 [ 1919.519636][T13180] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1919.554637][T13180] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1919.599586][T13180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.617490][T13180] usb 1-1: Product: ӿ [ 1919.627568][T13180] usb 1-1: Manufacturer: ъ [ 1919.636251][T24550] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1919.647936][T13180] usb 1-1: SerialNumber: ࠚ [ 1919.667651][T29650] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1919.735788][T24520] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 1919.801041][T24550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1919.831262][T24550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.864158][T24550] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1919.879461][T24520] usb 10-1: device descriptor read/64, error -71 [ 1919.893560][T24550] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1919.920965][T24550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.955562][T24550] usb 3-1: Product: syz [ 1919.981157][T24550] usb 3-1: Manufacturer: syz [ 1920.009364][T24550] usb 3-1: SerialNumber: syz [ 1920.106087][T24550] usb 3-1: selecting invalid altsetting 1 [ 1920.126000][T24520] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 1920.142581][T13180] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1920.164935][T13180] usb 1-1: MIDIStreaming interface descriptor not found [ 1920.286480][T24520] usb 10-1: device descriptor read/64, error -71 [ 1920.343650][T24550] usb 3-1: unit 6 not found! [ 1920.361645][T13180] usb 1-1: USB disconnect, device number 61 [ 1920.416816][T24520] usb usb10-port1: attempt power cycle [ 1920.682686][T24550] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1920.754168][T24550] usb 3-1: USB disconnect, device number 29 [ 1920.777999][T24520] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 1920.837684][T24520] usb 10-1: device descriptor read/8, error -71 [ 1921.075802][T24520] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 1921.116822][T24520] usb 10-1: device descriptor read/8, error -71 [ 1921.250044][T24520] usb usb10-port1: unable to enumerate USB device [ 1921.367069][ T30] audit: type=1326 audit(1781129899.691:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29671 comm="syz.7.6545" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f160559ce59 code=0x0 [ 1921.445158][T24550] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1921.583624][T29673] cgroup: fork rejected by pids controller in /syz7 [ 1921.606008][T24550] usb 3-1: device descriptor read/64, error -71 [ 1921.856469][T24550] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1922.026396][T24550] usb 3-1: device descriptor read/64, error -71 [ 1922.164447][T24550] usb usb3-port1: attempt power cycle [ 1922.533399][T24550] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1922.606746][T24550] usb 3-1: device descriptor read/8, error -71 [ 1922.750536][T29683] binder: 29681:29683 ioctl 400c620e 200000000500 returned -22 [ 1922.751831][T29682] binder: 29681:29682 ioctl 400c620e 200000000500 returned -22 [ 1922.787353][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1922.907270][T24550] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1922.957166][T24550] usb 3-1: device descriptor read/8, error -71 [ 1923.086974][T24550] usb usb3-port1: unable to enumerate USB device [ 1923.170383][T29690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.199327][T29690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.254961][T29687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6549'. [ 1923.268474][T27791] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.383142][T29687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6549'. [ 1923.398996][T24550] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1923.411947][T16419] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 1923.596816][T16419] usb 10-1: Using ep0 maxpacket: 32 [ 1923.597857][T27791] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.605625][T24550] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1923.633852][T24550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1923.646593][T16419] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1923.659559][T16419] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1923.670250][T16419] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1923.680236][T24550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1923.690804][T16419] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1923.702841][T24550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1923.713228][T16419] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1923.727996][T16419] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1923.745382][T16419] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1923.756568][T24550] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1923.766969][T24550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.775569][T24550] usb 1-1: Product: syz [ 1923.780658][T24550] usb 1-1: Manufacturer: syz [ 1923.785474][T24550] usb 1-1: SerialNumber: syz [ 1923.790875][T16419] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.804441][T24550] usb 1-1: config 0 descriptor?? [ 1923.816262][T24550] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 1923.831220][T16419] usb 10-1: config 0 descriptor?? [ 1923.940745][T27791] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.016342][T16401] usb 1-1: USB disconnect, device number 62 [ 1924.062394][T16419] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1924.090550][T29701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.123319][T29701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.268063][T29694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.269123][T29694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.274677][T29704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6554'. [ 1924.275563][T29704] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6554'. [ 1924.276766][T29694] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6551'. [ 1924.303390][T27791] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1924.410277][T29703] netlink: 'syz.2.6554': attribute type 1 has an invalid length. [ 1924.668368][T24520] usb 10-1: USB disconnect, device number 124 [ 1924.684593][T24520] usblp0: removed [ 1924.921890][T29699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.172804][T27791] bridge_slave_1: left allmulticast mode [ 1925.181344][T27791] bridge_slave_1: left promiscuous mode [ 1925.204631][T27791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.241408][T27791] bridge_slave_0: left allmulticast mode [ 1925.260751][T27791] bridge_slave_0: left promiscuous mode [ 1925.281189][T27791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.372808][T29717] fuse: Bad value for 'rootmode' [ 1925.406188][T24520] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1925.444523][T24369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1925.468895][T24369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1925.478272][T24369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1925.492997][T24369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1925.502710][T24369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1925.685805][T24520] usb 3-1: device descriptor read/64, error -71 [ 1925.965761][T24520] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1926.094885][T29730] fuse: Bad value for 'fd' [ 1926.117312][T24520] usb 3-1: device descriptor read/64, error -71 [ 1926.257091][T24520] usb usb3-port1: attempt power cycle [ 1926.605838][T24520] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1926.634360][T27791] team0: Port device geneve0 removed [ 1926.649068][T24520] usb 3-1: device descriptor read/8, error -71 [ 1926.912675][T24520] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1926.922641][T27791] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1926.951409][T27791] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1926.965536][T24520] usb 3-1: device descriptor read/8, error -71 [ 1926.988580][T27791] .` (unregistering): Released all slaves [ 1927.086113][T24520] usb usb3-port1: unable to enumerate USB device [ 1927.352561][T27791] tipc: Left network mode [ 1927.585942][ T5649] Bluetooth: hci0: command tx timeout [ 1928.043754][T27791] hsr_slave_0: left promiscuous mode [ 1928.078174][T27791] hsr_slave_1: left promiscuous mode [ 1928.101372][T27791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1928.135376][T27791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.179475][T27791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1928.237538][T27791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.245780][T24520] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1928.378551][T27791] veth1_macvtap: left promiscuous mode [ 1928.404215][T27791] veth0_macvtap: left promiscuous mode [ 1928.426893][T24520] usb 1-1: Using ep0 maxpacket: 16 [ 1928.429868][T27791] veth1_vlan: left promiscuous mode [ 1928.439530][T24520] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1928.447016][T27791] veth0_vlan: left promiscuous mode [ 1928.460639][T24520] usb 1-1: config 0 has no interface number 0 [ 1928.477145][T24520] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1928.499115][T24520] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1928.540281][T24520] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1928.565798][T24520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.581873][T24520] usb 1-1: Product: syz [ 1928.598189][T24520] usb 1-1: Manufacturer: syz [ 1928.617973][T24520] usb 1-1: SerialNumber: syz [ 1928.641013][T29757] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 1928.655032][T24520] usb 1-1: config 0 descriptor?? [ 1928.679819][T29747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1928.710042][T29747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1928.758608][T29759] fuse: Unknown parameter 'group_iUd' [ 1928.916141][T16401] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 1928.992056][T29747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1929.040903][T29747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1929.131417][T16401] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.155443][T16401] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1929.177797][T16401] usb 10-1: config 1 has no interface number 0 [ 1929.204575][T16401] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1929.235994][T16401] usb 10-1: config 1 interface 1 has no altsetting 1 [ 1929.261331][T16401] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1929.269341][T24520] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1929.292269][T16401] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.354623][T16401] usb 10-1: Product: syz [ 1929.376597][T16401] usb 10-1: Manufacturer: syz [ 1929.400007][T16401] usb 10-1: SerialNumber: syz [ 1929.481161][T16401] cdc_ncm 10-1:1.1: NCM or ECM functional descriptors missing [ 1929.489586][T16401] cdc_ncm 10-1:1.1: bind() failure [ 1929.663569][T16401] usb 10-1: USB disconnect, device number 125 [ 1929.665852][ T5649] Bluetooth: hci0: command tx timeout [ 1929.746895][T24520] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1929.767562][T24520] asix 1-1:0.34: probe with driver asix failed with error -32 [ 1929.830404][T27791] team0 (unregistering): Port device team_slave_1 removed [ 1929.854494][T24520] usb 1-1: USB disconnect, device number 63 [ 1930.576369][T16401] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 1930.719822][T29769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1930.756048][T16401] usb 10-1: Using ep0 maxpacket: 32 [ 1930.763820][T16401] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1930.793213][T16401] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1930.822160][T16401] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1930.841997][T16401] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1930.876750][T16401] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1930.918961][T16401] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1930.969785][T16401] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1931.005190][T29777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.032737][T29777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.047377][T16401] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.083772][T16401] usb 10-1: config 0 descriptor?? [ 1931.376801][T16401] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1931.557692][T29728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.566650][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.580031][T29728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.580596][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.610451][T29728] bridge_slave_0: entered allmulticast mode [ 1931.621424][T29767] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6568'. [ 1931.660682][T29728] bridge_slave_0: entered promiscuous mode [ 1931.747899][ T5649] Bluetooth: hci0: command tx timeout [ 1931.820399][T16401] usb 10-1: USB disconnect, device number 126 [ 1931.848239][T16401] usblp0: removed [ 1931.881563][T29728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.892993][T29728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.905586][T29728] bridge_slave_1: entered allmulticast mode [ 1931.961009][T29728] bridge_slave_1: entered promiscuous mode [ 1931.994339][T29794] netlink: 'syz.0.6574': attribute type 14 has an invalid length. [ 1932.037027][T24550] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1932.201827][T29803] dvmrp8: entered allmulticast mode [ 1932.236171][T24550] usb 3-1: Using ep0 maxpacket: 8 [ 1932.257848][T24550] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1932.269413][T29728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.283746][T24550] usb 3-1: can't read configurations, error -22 [ 1932.310424][T29728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.436076][T24550] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1932.519146][T29728] team0: Port device team_slave_0 added [ 1932.542342][T29728] team0: Port device team_slave_1 added [ 1932.645986][T24550] usb 3-1: Using ep0 maxpacket: 8 [ 1932.653825][T24550] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1932.684762][T24550] usb 3-1: can't read configurations, error -22 [ 1932.698751][T29812] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6579'. [ 1932.718168][T24550] usb usb3-port1: attempt power cycle [ 1932.729668][T29728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.746738][T29728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.810949][T29728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.849491][T29728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.862758][T29728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.896776][T29821] netlink: 'syz.9.6582': attribute type 1 has an invalid length. [ 1932.904854][T29728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.992877][T29821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1933.070793][T29728] hsr_slave_0: entered promiscuous mode [ 1933.076599][T24550] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1933.086926][T29728] hsr_slave_1: entered promiscuous mode [ 1933.116467][T24550] usb 3-1: Using ep0 maxpacket: 8 [ 1933.135940][T16411] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 1933.147819][T24550] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1933.159445][T24550] usb 3-1: can't read configurations, error -22 [ 1933.296837][T16411] usb 1-1: device descriptor read/64, error -71 [ 1933.298018][T24550] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1933.347140][T24550] usb 3-1: Using ep0 maxpacket: 8 [ 1933.355228][T24550] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1933.374560][T24550] usb 3-1: can't read configurations, error -22 [ 1933.409587][T24550] usb usb3-port1: unable to enumerate USB device [ 1933.532519][T29834] futex_wake_op: syz.9.6585 tries to shift op by 32; fix this program [ 1933.557039][T16411] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 1933.707556][T16411] usb 1-1: device descriptor read/64, error -71 [ 1933.815309][T29841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.827832][ T5649] Bluetooth: hci0: command tx timeout [ 1933.840301][T29841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.850378][T16411] usb usb1-port1: attempt power cycle [ 1933.883998][T29841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.896558][T29841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.906687][T29841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.915538][T29841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.196375][T16411] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1934.246659][T16411] usb 1-1: device descriptor read/8, error -71 [ 1934.473466][T29728] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1934.487951][T29728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1934.497800][T16411] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1934.509446][T29728] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1934.535549][T29728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1934.538495][T16411] usb 1-1: device descriptor read/8, error -71 [ 1934.554029][T29728] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1934.574270][T29845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.587976][T29728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1934.596771][T29845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.606309][T29728] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1934.623369][T29728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1934.669963][T16411] usb usb1-port1: unable to enumerate USB device [ 1934.821775][T29845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.834790][T29728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.849420][T29845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.876150][T29845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6589'. [ 1934.892033][T29858] fuse: Bad value for 'fd' [ 1934.902675][T29728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.964021][T27791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.971267][T27791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.067177][T27791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.077109][T27791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.145042][T29863] loop3: detected capacity change from 0 to 7 [ 1935.159834][T29863] Dev loop3: unable to read RDB block 7 [ 1935.166643][T29863] loop3: unable to read partition table [ 1935.176962][T29863] loop3: partition table beyond EOD, truncated [ 1935.183393][T29863] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1935.352807][T29728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1935.502972][T29728] veth0_vlan: entered promiscuous mode [ 1935.542944][T29728] veth1_vlan: entered promiscuous mode [ 1935.638715][T29728] veth0_macvtap: entered promiscuous mode [ 1935.650370][T16419] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1935.662062][T29728] veth1_macvtap: entered promiscuous mode [ 1935.732698][T29728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1935.792468][T29728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1935.840663][T27793] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.890019][T27793] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.906336][T29866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.940790][T27793] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.942289][T29866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1935.969581][T27793] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1936.003620][T16419] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1936.026165][T16419] usb 3-1: can't read configurations, error -71 [ 1936.456822][T29882] binder: 29879:29882 ioctl 40106e80 200000000600 returned -22 [ 1936.568634][T29881] kvm: kvm [29878]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000f3a5 [ 1936.580859][T29881] netlink: 364 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1936.852372][T27790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1936.918145][T27790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1937.159488][T29896] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1937.339410][T27793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1937.365930][T27793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1937.784949][T29903] tipc: Failed to remove unknown binding: 66,1,1/0:2040320006/2040320008 [ 1938.406293][T24520] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 1938.586174][T24520] usb 10-1: Using ep0 maxpacket: 32 [ 1938.631645][T24520] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1938.692357][T24520] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1938.755119][T24520] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1938.814252][T24520] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1938.871505][T24520] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1938.988315][T24520] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1939.006050][T16401] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1939.022466][T24520] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1939.053456][T24520] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.147182][T24520] usb 10-1: config 0 descriptor?? [ 1939.197937][T16401] usb 3-1: device descriptor read/64, error -71 [ 1939.392650][T29911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.443889][T24520] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1939.468263][T29911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.478749][T16401] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1939.499430][T29911] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6606'. [ 1939.627781][T16401] usb 3-1: device descriptor read/64, error -71 [ 1939.660682][ T30] audit: type=1326 audit(1781129917.981:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1939.715116][T16404] usb 10-1: USB disconnect, device number 127 [ 1939.745376][ T30] audit: type=1326 audit(1781129917.981:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1939.780949][T16404] usblp0: removed [ 1939.786722][T16401] usb usb3-port1: attempt power cycle [ 1939.834615][ T30] audit: type=1326 audit(1781129918.011:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4593f5d68e code=0x7ffc0000 [ 1939.930125][ T30] audit: type=1326 audit(1781129918.021:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.038053][ T30] audit: type=1326 audit(1781129918.021:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.137394][ T30] audit: type=1326 audit(1781129918.031:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.148245][T16401] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1940.227207][T16401] usb 3-1: device descriptor read/8, error -71 [ 1940.282849][ T30] audit: type=1326 audit(1781129918.031:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.395006][ T30] audit: type=1326 audit(1781129918.051:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.410907][T29945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1940.495995][T16401] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1940.536431][T16401] usb 3-1: device descriptor read/8, error -71 [ 1940.577000][ T30] audit: type=1326 audit(1781129918.061:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.708061][ T5649] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1940.749705][ T30] audit: type=1326 audit(1781129918.061:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29937 comm="syz.7.6614" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4593f9ce59 code=0x7ffc0000 [ 1940.786673][T16401] usb usb3-port1: unable to enumerate USB device [ 1941.309683][T29959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.363511][T29959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.767523][T29969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.800174][T29959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1941.814792][T29969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.007868][T29944] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1942.119811][T29944] bond1 (unregistering): Released all slaves [ 1942.770755][T29966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1942.778282][T29966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.867848][T29971] veth2: entered allmulticast mode [ 1943.390789][T29991] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 1943.735769][T24520] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1943.808252][T30000] netlink: 'syz.4.6630': attribute type 27 has an invalid length. [ 1943.912250][T24520] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.948803][T24520] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1943.981005][T24520] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1944.023793][T24520] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1944.059415][T24520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.096949][T24520] usb 1-1: Product: syz [ 1944.119381][T24520] usb 1-1: Manufacturer: syz [ 1944.135613][T24520] usb 1-1: SerialNumber: syz [ 1944.495867][T16414] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1944.710964][ T5649] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1944.727516][ T5649] Bluetooth: hci4: Injecting HCI hardware error event [ 1944.740571][T24369] Bluetooth: hci4: hardware error 0x00 [ 1945.500642][T30016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.554804][T30016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.358498][T30020] trusted_key: encrypted_key: insufficient parameters specified [ 1946.410237][T30020] trusted_key: encrypted_key: insufficient parameters specified [ 1946.475365][T24520] usb 1-1: 0:2 : does not exist [ 1946.785116][T24520] usb 1-1: USB disconnect, device number 68 [ 1946.865896][T24369] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1947.207145][T16414] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1947.406410][T16414] usb 10-1: Using ep0 maxpacket: 32 [ 1947.426200][T16414] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1947.428204][T16404] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1947.451310][T16414] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1947.472672][T16414] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1947.493268][T16414] usb 10-1: config 14 has no interface number 0 [ 1947.516738][T16414] usb 10-1: config 14 has no interface number 1 [ 1947.534666][T16414] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1947.561962][T16414] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1947.593158][T16414] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1947.620941][T16414] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1947.655775][T24520] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1947.670044][T16404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.680306][T16414] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1947.680368][T16414] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1947.680419][T16414] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1947.680461][T16414] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1947.683168][T16414] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1947.773340][T16414] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.798138][T16414] usb 10-1: Product: syz [ 1947.810815][T16414] usb 10-1: Manufacturer: syz [ 1947.818000][T16404] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1947.834242][T24520] usb 1-1: Using ep0 maxpacket: 16 [ 1947.850036][T24520] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1947.868446][T24520] usb 1-1: config 1 has no interface number 0 [ 1947.878523][T16414] usb 10-1: SerialNumber: syz [ 1947.889970][T24520] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1947.905272][T30047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1947.923184][T24520] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1947.936246][T30047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.957151][T24520] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1947.979284][T24520] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1947.990155][T24520] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1948.006773][T16404] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1948.010488][T24520] usb 1-1: Product: syz [ 1948.050365][T24520] usb 1-1: Manufacturer: syz [ 1948.062941][T16404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.064228][T24520] usb 1-1: SerialNumber: syz [ 1948.116496][T30045] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1948.124326][T30045] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1948.132402][T16404] usb 3-1: Product: syz [ 1948.160799][T16404] usb 3-1: Manufacturer: syz [ 1948.188152][T16404] usb 3-1: SerialNumber: syz [ 1948.240451][T16404] usb 3-1: config 0 descriptor?? [ 1948.456073][T16414] legousbtower 10-1:14.57: interrupt endpoints not found [ 1948.578321][T30045] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1948.590776][T30042] vlan3: entered promiscuous mode [ 1948.602849][T30045] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1948.612632][T30042] hsr0: entered promiscuous mode [ 1948.640762][T30042] vlan3: entered allmulticast mode [ 1948.655602][T30042] hsr0: entered allmulticast mode [ 1948.671272][T30042] hsr_slave_0: entered allmulticast mode [ 1948.688550][T30042] hsr_slave_1: entered allmulticast mode [ 1948.740382][T16404] usb 3-1: USB disconnect, device number 49 [ 1948.841317][T24520] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 1948.873561][T16414] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1948.910778][T24520] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 1948.942177][T16414] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1949.630750][T30056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.643687][T30056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.659481][T30056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.677375][T30056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.693031][T30056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1950.094905][T30066] tipc: Started in network mode [ 1950.110140][T30066] tipc: Node identity 8693229db046, cluster identity 4711 [ 1950.133863][T30066] tipc: Enabled bearer , priority 0 [ 1950.156506][T30067] syzkaller0: entered promiscuous mode [ 1950.177982][T30067] syzkaller0: entered allmulticast mode [ 1950.319692][T30066] tipc: Resetting bearer [ 1950.349473][T30065] tipc: Resetting bearer [ 1950.447197][T30065] tipc: Disabling bearer [ 1950.857848][T30074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.891833][T30074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.335385][T30086] netlink: 'syz.2.6652': attribute type 9 has an invalid length. [ 1951.450759][T30097] binder: 30084:30097 ioctl c0306201 200000000080 returned -14 [ 1951.747579][T16401] usb 1-1: USB disconnect, device number 69 [ 1951.842658][T16411] usb 10-1: USB disconnect, device number 2 [ 1951.881802][T16411] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 1951.938288][T30111] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1951.944857][T30111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1951.969186][T30113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.990985][T30113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.999095][T30111] vhci_hcd vhci_hcd.0: Device attached [ 1952.025856][T16404] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1952.034371][T30114] vhci_hcd: connection closed [ 1952.036314][T27783] vhci_hcd vhci_hcd.0: stop threads [ 1952.065887][T27783] vhci_hcd vhci_hcd.0: release socket [ 1952.086433][T27783] vhci_hcd vhci_hcd.0: disconnect device [ 1952.118710][T30120] loop3: detected capacity change from 0 to 7 [ 1952.126142][T30120] Dev loop3: unable to read RDB block 7 [ 1952.131839][T30120] loop3: unable to read partition table [ 1952.138728][T30120] loop3: partition table beyond EOD, truncated [ 1952.145001][T30120] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1952.199588][T16404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.215054][T30113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.226737][T16404] usb 3-1: config 0 has no interfaces? [ 1952.234839][T30113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.243252][T16404] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1952.255141][T30113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1952.262135][T16404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.284989][T16404] usb 3-1: Product: syz [ 1952.298341][T16404] usb 3-1: Manufacturer: syz [ 1952.313439][T16404] usb 3-1: SerialNumber: syz [ 1952.332535][T16404] usb 3-1: config 0 descriptor?? [ 1952.406051][T16401] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1952.557055][T16401] usb 1-1: device descriptor read/64, error -71 [ 1952.670030][T16411] usb 3-1: USB disconnect, device number 50 [ 1952.806151][T16401] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1952.966243][T16401] usb 1-1: device descriptor read/64, error -71 [ 1953.077585][T16401] usb usb1-port1: attempt power cycle [ 1953.089421][T30130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.101400][T30130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1953.375806][T16404] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1953.415028][T30138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1953.426399][T16401] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1953.457379][T16401] usb 1-1: device descriptor read/8, error -71 [ 1953.557415][T16404] usb 10-1: not running at top speed; connect to a high speed hub [ 1953.567704][T16404] usb 10-1: config 1 has an invalid interface number: 167 but max is 0 [ 1953.580605][T16404] usb 10-1: config 1 has no interface number 0 [ 1953.587784][T16404] usb 10-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 1953.600138][T16404] usb 10-1: config 1 interface 167 has no altsetting 0 [ 1953.611548][T16404] usb 10-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 1953.624143][T16404] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.640336][T16404] usb 10-1: Product: syz [ 1953.651544][T16404] usb 10-1: Manufacturer: syz [ 1953.669992][T16404] usb 10-1: SerialNumber: syz [ 1953.720146][T16401] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1953.759841][T16401] usb 1-1: device descriptor read/8, error -71 [ 1953.775737][T24520] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1953.887564][T16401] usb usb1-port1: unable to enumerate USB device [ 1953.928158][T16404] em28xx 10-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 1953.935900][T24520] usb 3-1: Using ep0 maxpacket: 16 [ 1953.958510][T16404] em28xx 10-1:1.167: Device initialization failed. [ 1953.959155][T24520] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.975698][T16404] em28xx 10-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 1953.998534][T24520] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1954.003388][T16404] usb 10-1: USB disconnect, device number 3 [ 1954.027808][T30146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.045854][T24520] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1954.053029][T30146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.070183][T24520] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1954.086465][T24520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.096072][T16411] IPVS: starting estimator thread 0... [ 1954.121620][T24520] usb 3-1: config 0 descriptor?? [ 1954.137034][T24520] usbhid 3-1:0.0: can't add hid device: -22 [ 1954.146547][T24520] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1954.197030][T30147] IPVS: using max 30 ests per chain, 72000 per kthread [ 1954.417628][T30148] [ 1954.419990][T30148] ============================================ [ 1954.426136][T30148] WARNING: possible recursive locking detected [ 1954.432306][T30148] syzkaller #0 Tainted: G L [ 1954.438297][T30148] -------------------------------------------- [ 1954.444455][T30148] syz.2.6667/30148 is trying to acquire lock: [ 1954.450519][T30148] ffffffff8f3d6690 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1954.460796][T30148] [ 1954.460796][T30148] but task is already holding lock: [ 1954.468165][T30148] ffffffff8f3d6690 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1954.478394][T30148] [ 1954.478394][T30148] other info that might help us debug this: [ 1954.486451][T30148] Possible unsafe locking scenario: [ 1954.486451][T30148] [ 1954.493897][T30148] CPU0 [ 1954.497175][T30148] ---- [ 1954.500449][T30148] lock(qp_broker_list.mutex); [ 1954.505302][T30148] lock(qp_broker_list.mutex); [ 1954.510151][T30148] [ 1954.510151][T30148] *** DEADLOCK *** [ 1954.510151][T30148] [ 1954.518291][T30148] May be due to missing lock nesting notation [ 1954.518291][T30148] [ 1954.526609][T30148] 1 lock held by syz.2.6667/30148: [ 1954.531716][T30148] #0: ffffffff8f3d6690 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1954.542349][T30148] [ 1954.542349][T30148] stack backtrace: [ 1954.548237][T30148] CPU: 0 UID: 0 PID: 30148 Comm: syz.2.6667 Tainted: G L syzkaller #0 PREEMPT(full) [ 1954.548266][T30148] Tainted: [L]=SOFTLOCKUP [ 1954.548272][T30148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1954.548283][T30148] Call Trace: [ 1954.548291][T30148] [ 1954.548299][T30148] dump_stack_lvl+0xe8/0x150 [ 1954.548323][T30148] print_deadlock_bug+0x279/0x290 [ 1954.548347][T30148] __lock_acquire+0x253f/0x2cf0 [ 1954.548366][T30148] ? is_bpf_text_address+0x292/0x2b0 [ 1954.548385][T30148] ? is_bpf_text_address+0x26/0x2b0 [ 1954.548402][T30148] ? kernel_text_address+0xa5/0xe0 [ 1954.548426][T30148] ? __kernel_text_address+0xd/0x30 [ 1954.548449][T30148] ? vmci_qp_broker_detach+0x117/0xf20 [ 1954.548470][T30148] lock_acquire+0x106/0x350 [ 1954.548487][T30148] ? vmci_qp_broker_detach+0x117/0xf20 [ 1954.548512][T30148] __mutex_lock+0x1a3/0x1550 [ 1954.548532][T30148] ? vmci_qp_broker_detach+0x117/0xf20 [ 1954.548554][T30148] ? kasan_save_track+0x4f/0x80 [ 1954.548576][T30148] ? kasan_save_track+0x3e/0x80 [ 1954.548595][T30148] ? kasan_save_free_info+0x46/0x50 [ 1954.548613][T30148] ? __kasan_slab_free+0x5c/0x80 [ 1954.548633][T30148] ? kfree+0x1c5/0x640 [ 1954.548651][T30148] ? vmci_ctx_put+0x5ef/0xc40 [ 1954.548665][T30148] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1954.548681][T30148] ? vmci_datagram_dispatch+0x450/0xc60 [ 1954.548699][T30148] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1954.548719][T30148] ? vmci_host_close+0x98/0x160 [ 1954.548737][T30148] ? vmci_qp_broker_detach+0x117/0xf20 [ 1954.548757][T30148] ? exit_to_user_mode_loop+0x193/0x680 [ 1954.548773][T30148] ? __pfx___mutex_lock+0x10/0x10 [ 1954.548794][T30148] vmci_qp_broker_detach+0x117/0xf20 [ 1954.548817][T30148] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1954.548835][T30148] ? kasan_quarantine_put+0xbb/0x1f0 [ 1954.548854][T30148] ? lockdep_hardirqs_on+0x7a/0x110 [ 1954.548870][T30148] ? kfree+0x1c5/0x640 [ 1954.548888][T30148] ? vmci_ctx_put+0x5ef/0xc40 [ 1954.548901][T30148] ? vmci_ctx_put+0x141/0xc40 [ 1954.548915][T30148] vmci_ctx_put+0x64e/0xc40 [ 1954.548929][T30148] ? __pfx___schedule+0x10/0x10 [ 1954.548950][T30148] ? vmci_ctx_put+0x141/0xc40 [ 1954.548964][T30148] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1954.548979][T30148] ? preempt_schedule_thunk+0x16/0x30 [ 1954.548999][T30148] ? preempt_schedule_common+0x82/0xd0 [ 1954.549015][T30148] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1954.549033][T30148] vmci_datagram_dispatch+0x450/0xc60 [ 1954.549051][T30148] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1954.549070][T30148] vmci_qp_broker_detach+0x8dd/0xf20 [ 1954.549095][T30148] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1954.549114][T30148] ? kasan_quarantine_put+0xbb/0x1f0 [ 1954.549135][T30148] ? kfree+0x1c5/0x640 [ 1954.549152][T30148] ? vmci_ctx_put+0x5ef/0xc40 [ 1954.549164][T30148] ? vmci_ctx_put+0x141/0xc40 [ 1954.549179][T30148] vmci_ctx_put+0x64e/0xc40 [ 1954.549194][T30148] ? vmci_ctx_put+0x141/0xc40 [ 1954.549208][T30148] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1954.549228][T30148] vmci_host_close+0x98/0x160 [ 1954.549246][T30148] ? __pfx_vmci_host_close+0x10/0x10 [ 1954.549271][T30148] __fput+0x44f/0xa60 [ 1954.549295][T30148] task_work_run+0x1d9/0x270 [ 1954.549315][T30148] ? __pfx_task_work_run+0x10/0x10 [ 1954.549337][T30148] exit_to_user_mode_loop+0x193/0x680 [ 1954.549351][T30148] ? rcu_is_watching+0x15/0xb0 [ 1954.549368][T30148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.549384][T30148] do_syscall_64+0x353/0x580 [ 1954.549398][T30148] ? trace_irq_disable+0x3b/0x140 [ 1954.549420][T30148] ? clear_bhb_loop+0x40/0x90 [ 1954.549437][T30148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.549452][T30148] RIP: 0033:0x7f9630b9ce59 [ 1954.549467][T30148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1954.549480][T30148] RSP: 002b:00007f96319b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1954.549499][T30148] RAX: 0000000000000000 RBX: 00007f9630e16090 RCX: 00007f9630b9ce59 [ 1954.549509][T30148] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 1954.549519][T30148] RBP: 00007f9630c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1954.549528][T30148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1954.549537][T30148] R13: 00007f9630e16128 R14: 00007f9630e16090 R15: 00007f9630f3fa48 [ 1954.549554][T30148]