last executing test programs: 25m34.744577878s ago: executing program 32 (id=8): syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7ffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x33d, 0x2000004}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044085}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x440d}}, 0x20}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x4, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x2, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x9eec, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0xf, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x10, 0x7, 0xf296, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x8, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x2, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x3, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd60, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x0, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x3, 0x5, 0x16]}, 0x45c) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402340000000400495a95e5f1305652bda3f13296937d4e92faadb7f9703460a4772d44785a9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x800, 0x0, 0x0, 0x14}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 25m31.728461575s ago: executing program 33 (id=18): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, r0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 25m24.093430998s ago: executing program 34 (id=32): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004e80), 0x0, 0x40000042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000240), &(0x7f0000000340), 0x2, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, @ib={0x1b, 0x401, 0x8, {"403e66fa7966df7361e97e6f26d552ab"}, 0x1, 0x8, 0x7fffffffffffffff}, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x118) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a640)={0x2020, 0x0, 0x0}, 0xfffffdfb) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, r5, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) chdir(&(0x7f0000000c80)='./file0\x00') syz_fuse_handle_req(r4, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x10000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x19, 0x0, 0x0, 0x0, {r3}}, 0x58) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x1, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x404c0c4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 25m24.074270529s ago: executing program 35 (id=34): syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7ffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x33d, 0x2000004}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044085}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x440d}}, 0x20}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x4, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x2, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x9eec, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0xf, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x10, 0x7, 0xf296, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x8, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x2, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x3, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd60, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x0, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x3, 0x5, 0x16]}, 0x45c) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402340000000400495a95e5f1305652bda3f13296937d4e92faadb7f9703460a4772d44785a9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x800, 0x0, 0x0, 0x14}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 25m14.093313734s ago: executing program 36 (id=45): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r5 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r8 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 25m14.070603535s ago: executing program 37 (id=46): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x80002) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r5, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0xe6025bc676a83de5, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r6, 0x80086303, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003700)={&(0x7f0000000140)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000300)="2a98e7422a2e196acdcb68c5c40d08888acfe0434f6d1aa193d2c2df3f46a83a97e25d10fe4551921df0ad3490c0be01a3c7a46480c8ca40d961499d646b2dd380c10b8db8d9267d35979f598153a4835754f2ab3e7a91d3d02fe28413ec82b8e96b5a0521fe9cfbbe46af6d34cad4339d6319f0527e155997b93d3594143bbe1ffbb57bcbaa5b090ccd66cac2402cb18fadb524ed8f5c6979f7005dff59da1ff6382673800bf8c8fe10a867c8be295817c13b06cc1f72cce843f7dc49dabf58bd90", 0xc2}, {&(0x7f0000000400)="e517bbc6171480a3851c86a00f62648d8f537db06982ac8b041360aa5ae8cb5c95669e1a7b429566604b69c00af03d2c010ceeb2ac0ca5662826658caf8fab4d4b5d7261658fd8b57c8ed79e728f3f5194f6e3bf3b121277933aa69087f7549bc612b1773da699043654a10989773e8fb9924cf9f1ff21503825dd5d49180e6ad5365c91c5330b237ccde8486f06c75b23a507", 0x93}, {0x0}, {&(0x7f0000002100)="72bd8e339cccc57228cfc088ade6d5be553d0bc94f02e7ebf4ee3dede9f50f0fbe12bb045fdafd558e90f5", 0x2b}, {0x0}, {&(0x7f0000002180)}, {0x0}, {&(0x7f0000003240)='||\nZ', 0x4}, {&(0x7f0000003280)="9ce32744e86ad85bd9b549b20bff0457a292c53d3383ee9f024a6e24643644f6956bea3369d121d5045eedb33078ac1ac479886486c937328471d586783d6a1ab84ec50b4ca6f7800d09167680c488ea70424c76c5251b7d5f3c09d8f678f5014d81ca705a7820ab193fb8183f8343a0e79b35e26716cd97f455f1de685a4e1fecb486192389d33b132a1e506cc30ffd686826e15c5d409e60563e1e90ad528c960bf5", 0xa3}], 0x9}, 0x20004000) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) getpriority(0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 25m11.091799107s ago: executing program 38 (id=51): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="eb", 0x1, 0xffffffffffffffff) r7 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) keyctl$invalidate(0x15, r6) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r8, r8) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r10, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x40, 0x8b) sendfile(r9, r11, 0x0, 0x7f) 25m2.052387536s ago: executing program 39 (id=62): r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = io_uring_setup(0x7c1c, &(0x7f00000003c0)={0x0, 0x80815f, 0x2000, 0x3}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x4) accept4(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20082) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x6, 0x490420, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r6, 0x100000000, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffbfbbbbbbbbbbbb08004f16005400680000cb069078ac141425e00000024420ecf00000000f0000000200000006ffffff010000000300008000000000008905e5fca30000000000000000000000000000000000000300004e2300004e2148705099c886b1f6f8c57a14659a63dbad31bb3eca5f12093bd36dc1e356a7a1bc8525175ea296b6d4fb3f63f20e46811676afe5876655045f27dc604e63b82fb33c1708d43de24d4c96ad8e3cb4f5fa9cde9f78b3b42a640e1164ea2f0915d8418f5cf4ee508004088fc28d15a1f127d288f20db3a69b"], 0x0) 24m50.054230592s ago: executing program 40 (id=73): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0xd6, 0x6, 0x2, 0x84, 0xffffffff, 0x40}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000280), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x80, @empty, 0x400000}, 0x1c) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001400010025bd070000000000000008100100000000000000060000000e00e60000c3000000060000000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="010000000400000009000000c7000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) r6 = eventfd2(0x1, 0x80801) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0x60000000}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x1, 0x3}, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2fcb", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)="eb", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff80fe}, 0x4c) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24m44.247718211s ago: executing program 41 (id=90): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x434, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xffe0}, {0xffe0, 0xf}, {0xfff3, 0x6}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0xc14, 0x3, 0xfffffff8, 0x101, 0x7, 0x2, 0xf, 0x27, 0x10001, 0x9, 0xfffffff9, 0x8001, 0x8001, 0x5, 0xf, 0x6, 0x4, 0xe78, 0x1, 0xfffffff7, 0x4, 0xf9bb, 0x7d, 0x5, 0x8, 0xfa, 0xa, 0x8, 0x0, 0x1ff, 0x1, 0x400, 0x0, 0x9, 0x5, 0x8, 0x2, 0x9, 0x8, 0xb0bc, 0x9f8d, 0x8, 0x7ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0xfffffff7, 0x9, 0x4, 0xfffffffe, 0x80, 0xa6f, 0x76a9, 0x9, 0x3, 0x9, 0x7, 0x7, 0xae, 0x9, 0x5, 0xfffff0f3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x4, 0x4, 0x5, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x7fffffff, 0x1, 0x6, 0xf, 0x4, 0x2, 0xa, 0x0, 0x0, 0x5, 0x9000000, 0xfffffff7, 0x3, 0x9, 0xcb, 0x1aed, 0x9b62, 0x4, 0x3, 0x9, 0xc2e, 0x0, 0x14000000, 0xc866, 0x4, 0x8, 0x0, 0x5, 0x3, 0x7, 0x7, 0x6, 0xb32c, 0x3, 0xfff, 0xcb, 0x10, 0xfffc, 0xfffffffd, 0x7e, 0x9, 0x1, 0xf, 0x40, 0x6, 0x6, 0x4, 0x40, 0x0, 0x9, 0x0, 0x4, 0x10, 0x72e3cc1, 0x6, 0x5, 0x1, 0x6, 0x7, 0x81, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x7, 0x50, 0x1, 0xffffff6a, 0xffff3c8b, 0x5913, 0xb, 0x10001, 0x7, 0x9, 0xe, 0xfffffffd, 0xc, 0x2, 0x400, 0x8, 0x8, 0x8, 0x100, 0x9, 0x8, 0xc043, 0x62da, 0x1, 0x4, 0xee4, 0x7f, 0xaaa6, 0x3d66, 0x0, 0x4, 0x2, 0xabe, 0x1, 0x1000005, 0x8001, 0x1, 0x5, 0xfffffffe, 0x1000, 0x9, 0x5, 0x8001, 0x7, 0xffff, 0x6, 0xffff, 0x2, 0x777, 0xfffffff1, 0x40, 0xc, 0x3, 0xe, 0x1, 0x0, 0x9, 0x0, 0x3, 0x401, 0x6, 0x6, 0x221, 0x4, 0x2, 0x4, 0x0, 0x8, 0x9, 0xffffffff, 0x401, 0xe, 0xffffffff, 0x7, 0xab, 0x0, 0x4e7, 0x6db2, 0x280, 0x10000, 0x8, 0x0, 0xc5e, 0x89b7, 0x1, 0x2, 0x0, 0x9, 0x9, 0xc, 0x1000, 0x4, 0xd60, 0x9, 0x9, 0x4, 0x2, 0x7, 0x80000001, 0xff, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0xc00, 0x9, 0x80000000, 0x2c]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x16, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x54}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 24m40.426038105s ago: executing program 42 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000300)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 24m33.794874577s ago: executing program 43 (id=114): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000005a00), 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xa, 0xfa11, 0xffffff7f}, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRES16], &(0x7f00000001c0)='GPL\x00'}, 0x94) (async) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) (async) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20, 0x0, 0x0, 0x4}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000008000"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r4}, 0x38) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c0000000190001000000000008000000fe888000000000000000000000000101ffffffff000000000000000000000000000000004e2300000a0080000000"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) (async) r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 24m27.353732645s ago: executing program 6 (id=126): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r1 = openat(r0, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r1, &(0x7f0000000300), 0x1000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x4f9, 0x0) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000c00), 0x141202, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x4b01, 0x0, 0x3, 0x2e0}, &(0x7f0000000980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2585, 0x200, 0x0, 0x15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69a, 0x4, 0x0, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5aa5, 0x800, 0x3, 0xe, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16b3, 0x30e704bc2ee1b508, 0x3, 0x13, 0x0, r2}}], 0x4, &(0x7f0000000480)={0x2e, 0x4, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, r4, '\x00', {0x2, 0xfcf, 0x0, &(0x7f00000031c0)=@buf_512="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"}}, &(0x7f0000004240)) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000180)={0xffffffff, 0x55595659, 0x1, @discrete={0x3}}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000180)=""/111, 0x6f}], 0x2, &(0x7f0000000400)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x42}], 0x10, 0x40080}, 0x4000000) syz_clone3(&(0x7f0000000340)={0x23810200, &(0x7f0000000040), 0x0, 0x0, {0x2000029}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd6}, 0xffffffffffffffb7) io_setup(0x8, &(0x7f0000000280)=0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r8, &(0x7f0000000180)=0xfe5f, 0x12) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xfc49}, 0x1, 0x0, 0x0, 0x400c080}, 0x24004151) recvmsg(r10, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000080)=""/228, 0xe4}], 0x2}, 0x40000000) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000100), 0x0) io_submit(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000000c0)={'team_slave_0\x00'}) 24m26.90439905s ago: executing program 44 (id=125): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, r0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 24m25.817470923s ago: executing program 6 (id=128): syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x5, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0x6, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x10000800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x4, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x2, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0x4, 0x312, 0x78, 0xea4, 0x10, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x4000005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffd, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e6, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x2200, 0x80, 0xf, 0xd, 0x2950bfaf, 0xdd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xaca, 0xbf, 0x2, 0x3, 0x4, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x7, 0xb, 0x7fffffff, 0x938, 0x7, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x22, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x6, 0x81, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x9, 0xa1f, 0x3, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2444, 0x41dc]}, 0x45c) futex(0x0, 0x3, 0x3, 0x0, 0x0, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) ppoll(&(0x7f00000003c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="52f48785eefa1f9d219c07e76705e9e05242bc69fccfea2521744eb4c2fb470e3597e043c7bcc1d010ed80c60ab23bf1bf9208fd9c9a1acebf", 0x39}, {&(0x7f00000004c0)="89", 0x1}], 0x2}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x7, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34, 0x0, 0x30]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x26, &(0x7f00000019c0), 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r5, 0x0, 0x0, 0x8000000000}]) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='lp', 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x40002, 0x803a0, 0x1, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, r7}, 0x38) 24m25.255446167s ago: executing program 6 (id=129): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x103002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20f4ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffff9c, &(0x7f0000000540), 0x802, 0x0) read(r4, &(0x7f00000015c0)=""/166, 0xa6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) r6 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0xb, @pix_mp={0x38305343, 0x9, 0x78110513, 0x0, 0x9, [{0xffff, 0x7}, {0x9}, {0x0, 0x7fffffff}, {0x9, 0xda}, {0x4, 0x8}, {0x8, 0x4}, {0x2, 0x400}, {0x6, 0x1000}], 0xff, 0x80, 0x3, 0x1, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ftruncate(r5, 0x0) 24m23.812626169s ago: executing program 6 (id=132): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, r0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r8, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r10 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 24m23.120038768s ago: executing program 6 (id=134): syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7ffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x33d, 0x2000004}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044085}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x440d}}, 0x20}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x4, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x2, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x9eec, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0xf, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x10, 0x7, 0xf296, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x8, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x2, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x3, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd60, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x0, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x3, 0x5, 0x16]}, 0x45c) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402340000000400495a95e5f1305652bda3f13296937d4e92faadb7f9703460a4772d44785a9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x800, 0x0, 0x0, 0x14}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 24m22.806174148s ago: executing program 6 (id=135): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) r2 = epoll_create1(0x80000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r4) r5 = epoll_create1(0x0) dup2(r3, r2) epoll_wait(r5, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x28, 0x80805, 0x40000) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r7}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x9, 0x0, 0xe, 0x4, @empty, @mcast1, 0x700, 0x10, 0x8, 0x5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 24m22.294775934s ago: executing program 45 (id=135): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) r2 = epoll_create1(0x80000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r4) r5 = epoll_create1(0x0) dup2(r3, r2) epoll_wait(r5, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x28, 0x80805, 0x40000) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r7}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x9, 0x0, 0xe, 0x4, @empty, @mcast1, 0x700, 0x10, 0x8, 0x5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 24m21.613817394s ago: executing program 4 (id=137): syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x5, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0x6, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x10000800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x4, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x2, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0x4, 0x312, 0x78, 0xea4, 0x10, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x4000005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffd, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e6, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x2200, 0x80, 0xf, 0xd, 0x2950bfaf, 0xdd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xaca, 0xbf, 0x2, 0x3, 0x4, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x7, 0xb, 0x7fffffff, 0x938, 0x7, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x22, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x6, 0x81, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x9, 0xa1f, 0x3, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2444, 0x41dc]}, 0x45c) futex(0x0, 0x3, 0x3, 0x0, 0x0, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) ppoll(&(0x7f00000003c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="52f48785eefa1f9d219c07e76705e9e05242bc69fccfea2521744eb4c2fb470e3597e043c7bcc1d010ed80c60ab23bf1bf9208fd9c9a1acebf", 0x39}, {&(0x7f00000004c0)="89", 0x1}], 0x2}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x7, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34, 0x0, 0x30]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x26, &(0x7f00000019c0), 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r5, 0x0, 0x0, 0x8000000000}]) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='lp', 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x40002, 0x803a0, 0x1, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, r7}, 0x38) 24m21.220989088s ago: executing program 4 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x71bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 24m21.104529485s ago: executing program 4 (id=139): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) read(r0, &(0x7f0000000000)=""/147, 0x93) 24m20.902886285s ago: executing program 4 (id=141): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, r0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r8, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r10 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 24m20.52255464s ago: executing program 4 (id=142): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e785", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 24m20.20188686s ago: executing program 4 (id=143): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, r0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r8, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r10 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 24m19.715947063s ago: executing program 46 (id=143): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f00000013c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, r0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000f80)={0xe, {0xfffffff9, 0x2d0, 0xfffffffd, 0x9cd}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000900)={0x1, 0xff}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r8, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r10 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 20m38.159993292s ago: executing program 5 (id=1101): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='secret\x00', &(0x7f0000000000)='+\xe0k\xf6A\xf0\xd2\xe2\x8e\xe6;b\xdd\v\xdf\xc8\xd9\xb5\xf62p\xd1EM\xfe\x17aS\x85\x88\x92\x8eQ\xf1\xa9\xcb\xb3\xb7R\xd4}\xacm\xf3\xd30!\xca\xed\xe2G\xc0\xb1\t\xb3A\xf2\xf8n\xbaO>+\xe89>\x96\xe6\xb9U\x8b\xde\x8e\xfdj\x02\x03m\xeb\xec/0\x9f\x93(\x95\xe2\xab\x9b\xb1\x90\xec\xd3\x8c+\xa4d\'F\xd9W\x15\x8b\xceW\x11n\x13\x02!\x87\xcb\x1d#i\x8b\xb5!\xd8x\x80\x9cA\x9f\x91\xb7>qT\x03\x93\v\xb5\x89\xfc\xf6\xc32DcAC*\xd3\xfd%UN\x01\xc1\x85\r\x18', 0x0) 20m38.069803457s ago: executing program 5 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000003c0)=0x716) close(r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000140)=0xfffffff7, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0xffffffffffffff42, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x6, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20m37.580815712s ago: executing program 5 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 20m37.545434497s ago: executing program 5 (id=1107): r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x1c, &(0x7f0000000100)="f03255bfacfa2f7bf8a531acd6bfc6025be4dad11d1c27ea68676590"}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) (async) r3 = openat$ttynull(0xffffff9c, &(0x7f0000000200), 0x121800, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) (async) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x30000, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0x6ec7, 0x0, 0x4, {0x3, @sdr={0xb5315258}}, 0x1}) (async, rerun: 32) sendmsg$rds(r4, &(0x7f0000002c80)={&(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/127, 0x7f}], 0x1, &(0x7f0000002b40)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x2}, &(0x7f0000000480)=0x3, &(0x7f00000004c0)=0x6, 0x8000000000000001, 0x3, 0xfffffffffffffffb, 0x8, 0x29, 0xfffffffffffffffd}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x401}, {&(0x7f0000000500)=""/105, 0x69}, &(0x7f0000001a00)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/250, 0xfa}, {&(0x7f0000001700)=""/34, 0x22}, {&(0x7f0000001740)=""/214, 0xd6}, {&(0x7f0000001840)=""/89, 0x59}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/220, 0xdc}], 0x8, 0x64, 0x6}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000001a80)=""/4096, 0x1000}, &(0x7f0000002a80), 0x20}}, @mask_fadd={0x58, 0x114, 0x8, {{0x24b6, 0xc}, &(0x7f0000002ac0)=0x9, &(0x7f0000002b00)=0x1, 0x10001, 0x2, 0x1000, 0x7, 0x2, 0x7}}], 0x124, 0x4008001}, 0x4040800) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x10, 0x1410, 0x10, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000010) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x20, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000044) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f00), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000003040)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x58, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x2a, 0x5b, "4e6fa9941608f3336eae52e99fea3c699d550b2fba1bb59715a623fa45ffaa208e1bfe1b2fb5"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) (async) read$snapshot(r3, &(0x7f0000003080)=""/93, 0x5d) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000003200)={&(0x7f0000003140)={0x1d, r7}, 0x10, &(0x7f00000031c0)={&(0x7f0000003180)={0x3, 0x176, 0xff, {0x0, 0x2710}, {}, {0x3, 0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "e3406354735fec28"}}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000045c0)={&(0x7f0000004540)=[{0x3ff, 0x1600, 0x1000, &(0x7f0000003240)="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"}, {0x0, 0x2000, 0x6e, &(0x7f0000004240)="4110dc23d889aa7eecc38ab02e12d626da476e64df9ff415245ce65bb9e96e29626bc6267a1571ebe3cd892990c9abcac2511ca84609e4e681c3f457776a6d6f5d56834d8cd5b6a8b1d17abbb2fb99d84a5aa8a80560a4e3d6da07bb241ca99fc2f9461a293cdc7403ab0f834d97"}, {0x2, 0x1000, 0x7, &(0x7f00000042c0)="baab09e57aae87"}, {0x3, 0x4a00, 0xb8, &(0x7f0000004300)="64c06634085708339aaf5b785f7b1ae8db016176a22d8f90603c96443eb83c3b7de1988ad1bcb175d6e2d3f88f2a2a5f1b76b03bf8513ffa3671f57cde37f79194f631125c066b22e89257941dc2f2562e0bc4a69763054213bb194a254085710738869eede86fe59d3efbde00de76619888a4eb1680a0cc8f7eb54d39e9a19b374446c5bc3748ac69f20f81e5589981e5402dd3f190aacdb97f3c37ac170d8f70ff3c1181eb9ecf9a1d35fef3f8428b9b0854c3ed04f302"}, {0x8001, 0x1001, 0x4d, &(0x7f00000043c0)="0e74f408716dcf68949cef8f09ed49a464a8a7be9d9ecf431d216dcbc644a34fcb6a30f15cb11131ccbdf6a3fd1ba0f3e98b946e6ed5ca1b088a715e02652fce0c5d4559879dc01990671dd137"}, {0x2, 0x0, 0x1c, &(0x7f0000004440)="13c8e33be997e724ec751ed76a3a22b5210dcca0666d993436188644"}, {0x7, 0x201, 0xad, &(0x7f0000004480)="ec9fc60939d5e8090035cedee2696b65f74938e81de4fb599f74dd90343b6083b71892c4517957138b832f1db65010caa50fd2cbfdeb600a36ea35dac93c9924c8e87d42ef2c9de0640de6623338819fea3fac085f46da16d1cc3619f4174d9d3305d8e123394e675c1ae8b721b2c694c4464a6ea5e42545263d8a8693a3ff40ddd71fbecac28a78ae9e80d511cde2a11bce16171cf3221dcff2d7157c97be5f02c604083cb75aba372c61da7a"}], 0x7}) (async, rerun: 32) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000004600)=@req={0x10, 0x6, 0x2, 0x1000}, 0x10) (async, rerun: 64) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000004640)={r4, 0x800}) (async, rerun: 64) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000004680)=0x9, 0x4) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000046c0)={0x0, r3}) (rerun: 64) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000004700)=0x6, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000004900)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004780)={0x128, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x56}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x29}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async, rerun: 64) r9 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) bind$l2tp6(r9, &(0x7f0000004940)={0xa, 0x0, 0x15, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x1}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004a80)={@cgroup=r4, 0x4, 0x1, 0xb8, &(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000049c0)=[0x0], &(0x7f0000004a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a40)=[0x0]}, 0x40) 20m37.41478543s ago: executing program 5 (id=1109): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x1000404, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) close(r0) (fail_nth: 2) 20m37.138180315s ago: executing program 5 (id=1110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1ab601) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffff, 0xfff]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r10) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0xf, 0x1}, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x81, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 20m21.764058722s ago: executing program 47 (id=1110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1ab601) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffff, 0xfff]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r10) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0xf, 0x1}, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x81, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 19m48.106998697s ago: executing program 0 (id=1257): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) r1 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0}, {0x99, 0x2000, 0x0, 0x0}], 0x2}) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0}], 0x10000000000000e1) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f00000002c0)="7e018f8bae9d30d247e73cc597cef7b49539e6ddec1beca62726be2385df1bb14964e812b8ca1cf70f819e3dea1f5711413097a36791f6dbaf3614016951bb46d3f77cb38c6d4ddf0593160664403323c6c24379d2a9f0041e19a2c6cebe523081fdde8db7f5cb1031c1", 0x6a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x401, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1ffc, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x7a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}, {0x1, 0x7, 0xba, 0x5}]}) fanotify_mark(0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x20308}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x1}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8044) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3, &(0x7f0000000340)=[{0x24, '\x00', @data=0x4, 0xad}]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='secret\x00', &(0x7f0000000000)='=\xe0k\xf6A\xf0\xd2\xe2\x8e\xe6;b\xdd\v\xdf\xc8\xd9\xb5\xf62p\xd1EM\xfe\x17aS\x85\x88\x92\x8eQ\xf1\xa9\xcb\xb3\xb7R\xd4}\xacm\xf3\xd30!\xca\xed\xe2G\xc0\xb1\t\xb3A\xf2\xf8n\xbaO>+\xe89>\x96\xe6\xb9U\x8b\xde\x8e\xfdj\x02\x03m\xeb\xec/0\x9f\x93(\x95\xe2\xab\x9b\xb1\x90\xec\xd3\x8c+\xa4d\'F\xd9W\x15\x8b\xceW\x11n\x13\x02!\x87\xcb\x1d#i\x8b\xb5!\xd8x\x80\x9cA\x9f\x91\xb7>qT\x03\x93\v\xb5\x89\xfc\xf6\xc32DcAC*\xd3\xfd%UN\x01\xc1\x85\r\x18', 0x0) 19m46.046059989s ago: executing program 0 (id=1263): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0]) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}}}, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020001000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001aa6920581171a9a17a758c6887e61e8a656dedafd24035310cb8cbc7b7bee13261f84fa0d56e9f4fa3828eab01cc69694eff2491b5e3db9d355a4c8c5cfe5d9dea9af8f94fd52829318d4109"], 0x88}}, 0x4001) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000001500)={0x2, @pix={0x70, 0x22000000, 0x33524742, 0x1, 0xe5b, 0x200d294, 0x3, 0x7fff, 0x0, 0x6}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x87}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d86dd4266b5efb88a2c87ed38fec7ac7a155603a081bac85ebd3c11f6b2f9a49d564054f171f1a922d5eb60ec68f7c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8fe91a07000000000000001ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5de"], 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f046707764f8d0e000058ea21274f844a69e9", 0x0, 0x9, 0x2, 0x2}, 0x3c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000440)={0x0, 0x0, 0x1, [0x7f, 0x5, 0x200, 0x0, 0x8], [0x65c2a0c6, 0x6, 0x4, 0x4, 0x0, 0x83, 0x68, 0x9, 0x1, 0x2, 0xfb, 0x1000, 0xdf, 0x4, 0x8, 0x6, 0xe4, 0x0, 0x5, 0x1, 0x7285, 0x3, 0x8000, 0x7, 0x0, 0xffffffff, 0x800, 0x97, 0x2e, 0x2, 0x5, 0x2, 0x5, 0x2, 0xcfe, 0x1, 0x9, 0x8, 0x8000000000000001, 0x4000000000, 0x10001, 0x8, 0xdf02, 0x7, 0x3, 0x4, 0x19f, 0xff, 0x100000000, 0x5, 0x3, 0x9, 0x3, 0x1, 0x2, 0x7, 0x101, 0x9, 0x0, 0x1, 0x3ff, 0x7, 0x0, 0x2, 0x6, 0x3d64, 0x5, 0x9, 0x4, 0x4, 0x1, 0x6a42, 0x10000, 0xf, 0xff, 0x9a, 0x3, 0x0, 0x0, 0x9, 0x2e46, 0x3, 0xfff, 0x3, 0xe, 0x4, 0xa, 0x1, 0x7, 0x7, 0x4, 0x6, 0x9, 0x3, 0x1000, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x7, 0x7f, 0xcf16, 0x0, 0xf, 0x1, 0x2, 0x56f, 0x0, 0x0, 0x3, 0x4, 0xffffffff, 0x7, 0xffffffffffff0000, 0xb, 0x0, 0x5, 0x81, 0x7c2b, 0x2, 0x7]}) 19m41.907694828s ago: executing program 0 (id=1277): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0)) openat$mixer(0xffffff9c, &(0x7f0000000040), 0x84200, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x1517f) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@netfilter={0x3, 0x0, 0x1}}, 0x20) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_pgetevents(0x0, 0x48cf, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x89, 0x5]}, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) getpid() 19m41.742737202s ago: executing program 0 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7f2b1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MTU={0x8, 0x4, 0xc032}]}, 0x44}}, 0x8000002) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f4, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x4044) r13 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r13, 0x1, 0x0, 0x0) 19m40.341201029s ago: executing program 0 (id=1284): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 19m38.481646628s ago: executing program 0 (id=1289): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0)) openat$mixer(0xffffff9c, &(0x7f0000000040), 0x84200, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x1517f) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@netfilter={0x3, 0x0, 0x1}}, 0x20) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_pgetevents(0x0, 0x48cf, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x89, 0x5]}, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) getpid() 19m23.189095708s ago: executing program 48 (id=1289): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000000c0)) openat$mixer(0xffffff9c, &(0x7f0000000040), 0x84200, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x1517f) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@netfilter={0x3, 0x0, 0x1}}, 0x20) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_pgetevents(0x0, 0x48cf, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x89, 0x5]}, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) getpid() 16m54.998577079s ago: executing program 2 (id=1890): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 16m54.918197084s ago: executing program 2 (id=1892): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) splice(r5, 0x0, r6, 0x0, 0x80, 0x8) 16m53.761500295s ago: executing program 2 (id=1896): socket$inet(0x2, 0x3, 0x6) r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$DVB_DEMUX_DMX_QBUF(0xffffffffffffffff, 0xc0186f3f, &(0x7f0000000000)={0x6, 0x40, 0x4, 0xd70, 0x14, 0x7}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, {0xa, 0x4e21, 0xfffffff3, @empty, 0x6}}}, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0xffffffbb, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0xfe, 0x8, &(0x7f0000000340)={0x17, "736ad373c2bf272690bb713bd646baa5088d400040d1f9ee96646faa2155462c86"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc01c5868, &(0x7f0000000740)={r4, &(0x7f0000000380)='\x00', 0x22400, &(0x7f0000000680)={@align=0x7, {0x7fff, 0x3090, 0x8, 0xac}}, 0x4, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xe}) ioctl$RTC_IRQP_READ(r5, 0x8004700b, &(0x7f0000000780)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, 0x0, 0x24044840) socket(0xa, 0x3, 0xff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000cd8000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r6, 0x180000000) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 16m52.280384704s ago: executing program 2 (id=1901): gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = fanotify_init(0x200, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read(r0, 0x0, 0x0) 16m51.283438357s ago: executing program 2 (id=1906): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0xfffffff8, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x8000f28, 0x5) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = memfd_create(&(0x7f0000000ec0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\b\xdb\xe2\xed\xff@\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\xc3;W\xed0\xd7\xfa\xe5!\xd3\xcfxi)<\xf7\x98\xc1\xba\xf4|\xe5|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'/%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\xe2\xce\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06\xa5M=\\Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\xe8)\xce\xefx\xcd\xaa\xad\x906\xd0sy\xc6T\x03\x00\x00\x00\x00\x00\x00\x00S\xff\x00\x02\x00\x00\x00\x00\x00\x00&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\x00\x00\x00\x00\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~G\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1\x00-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0072N\xf4\x81\xd0\xa7/P\x14\xb6\xf6\xb4H\x95v\xd2\x98$\x9b\x98\xe0\xff&n\xa5\xc7\xa6`\x9a\x94\xe2VJ~~?s|Pn\xa3i\x97\xce\xf4\x9c\x8d\xd0\x03\x00\x00\x00\x00\x00\x00\xe2\x00\x1du\xf7\xed\xeb;S)3\xf3\xc8\xee\xd4\x03\xc9\x89H\xb6>\xa0\x88\x98[\x96b\x88!\xcc\xfe\xf3c\xa8\xb8\"\x02\xb9?\xfby\xe4M\xfa\x1d-\n\xb7$\x04C)\x16\xa0x\xe7.\x7f\x90\re\x97\x986\xd3\x8e\xed\xfb>9\f}\x81$\xbd\x02\xa4\x13u\x0f,\xcc\x16\xdat@&\x12c\xc1\xd3G2\x1a\xda\x7f?\xdeA\xf0\xe8\x99\xf1\x9a=\x91\x88\xa8\xab\xa4\x13\xc6\x11X\xb3`\xbe\xe2~3\xea\x98\xdf\xe8\xc9q*\xaf\xb6\x9e\xf8\x13\xdb', 0x2) r8 = socket(0x6, 0x800, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r7], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0xe) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000080)=0x1) writev(r11, &(0x7f0000001fc0)=[{&(0x7f0000000d40)="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", 0x112}, {&(0x7f0000001f00)}], 0x2) syz_usb_connect(0x7, 0x1b7, &(0x7f0000002000)=ANY=[@ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r8, @ANYRES16=r0, @ANYRESDEC=r9], 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9, 0x10000}, 0x0, &(0x7f0000000180)={0x1ff, 0x80000001, 0x2, 0x4, 0x3, 0x3152eb0d, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 16m48.094608933s ago: executing program 2 (id=1923): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0xffffddcd}], 0x18, 0x80}], 0x1, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x436202) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0305602, &(0x7f00000000c0)={0x1, 0x0, {0xffffffff, 0x1}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000014c0)={0x2, "fa02791d0e000005000000ffffffffffff1020010000000800"}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000100)=0xffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc4}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x14) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x2, @private2, 0xfffffffc}, {0xa, 0x4e25, 0x0, @mcast2}, 0xc5, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x85f0}, @in6={0xa, 0x4e25, 0xf96, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0xb0a}, @in6={0xa, 0x4e24, 0x48000, @mcast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x80) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000140)={0x3}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) connect$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 16m32.461746564s ago: executing program 49 (id=1923): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0xffffddcd}], 0x18, 0x80}], 0x1, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x436202) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0305602, &(0x7f00000000c0)={0x1, 0x0, {0xffffffff, 0x1}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000014c0)={0x2, "fa02791d0e000005000000ffffffffffff1020010000000800"}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000100)=0xffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc4}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x14) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x2, @private2, 0xfffffffc}, {0xa, 0x4e25, 0x0, @mcast2}, 0xc5, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x85f0}, @in6={0xa, 0x4e25, 0xf96, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0xb0a}, @in6={0xa, 0x4e24, 0x48000, @mcast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x80) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000140)={0x3}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) connect$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 14.597846658s ago: executing program 1 (id=5702): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000080)=0x8) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/231, 0xe7, 0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x9, 0x7, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x26, 0x14, 0x9f12443852f025ca}]}, 0x38}}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f0000000440)={"2e591a4bc745c0de4b469ce4c7ff96be", 0x0, 0x0, {0x13}, {0xffffffffffff3573, 0x1}, 0x7f, [0x7fffffffffffffff, 0x80, 0x4b, 0x800, 0x7, 0x91b, 0x7, 0x3, 0x4807, 0x0, 0x401, 0x4, 0x1, 0x5e95, 0x7, 0x6]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)=r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0x50, 0xd, 0x1, 0x0, "e4000e8cb4c43207133603b4e4b2f5d969121f5709f2aa499f18a476d91b928a72eb126da0ed595ba1be4882d1644a7ac1b2850db13dda2604219061d48ae2e6a5a755e39bef170ff516adc3"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x150}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5c}, @exit], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) 11.506777007s ago: executing program 1 (id=5712): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r1 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x2, 0x1, 0x1, 0xad}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e63, 0x64}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0xf1, 0x5, 0xda, 0x8, 0x7}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x5000, 0xf00, 0x5e0, [0xff006f, 0x3f00]}]}}) syz_usb_connect$uac1(0x5, 0xd6, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x14}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x2, 0x7, 'i+.'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0xfa, 0x9, "", "ff7434"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xdd1, 0x36, 0xcd, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x7, 0x6, {0x7, 0x25, 0x1, 0x8, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x3, 0x8, "73c8fb"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd, 0x10, "ace1fe6cb011"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x0, 0x0, 0x8, 0xc}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x20, 0x40, "8e", "eb28"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x5, 0x7, 0x9a, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x80, {0x7, 0x25, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x9, 0x4, 0x10, 0x20, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0x42, &(0x7f0000000280)=@string={0x42, 0x3, "2ace169eea2d838945074eafc901f10fe7c9b5e1754a0f64421cddca475b75db868a637a0c37af5b312d0795f3ad1d28bff05904b156d47b1f74b37a56acf456"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x2b, &(0x7f0000000340)=@string={0x2b, 0x3, "79f5817cb51abdfe045f7bb1036fb1c8877dfc03d515db555567b23f2b78b5fd756783c4da7cdd2d8c"}}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b707000000fcf0ff5070000000000000480000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x6e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9145}, 0x1c) listen(r7, 0x5) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000480)={0x0, 0x1, 0x1}) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) syz_usb_control_io$printer(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendto$inet6(r0, &(0x7f0000000180)="e4eba9", 0x3, 0x800, 0x0, 0x0) 9.428382471s ago: executing program 3 (id=5717): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0xffffffffffffff38) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/19, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x59, 0x2) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) memfd_create(0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000002b4b00bd4d39badf45ac791986b0b6edeae1f55d791249c95853b29a24a93790340bd92abe35ba7b9f4d552f9c245249e9c6579f2cbb465a748b43"], 0x50) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xe, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x7fff, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000040)) 9.28849131s ago: executing program 8 (id=5720): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000a000000500004800000010073797a30000000000e44d2"], 0x64}}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000000240)={0x2020}, 0x2020) splice(r7, 0x0, r10, 0x0, 0x2000000008, 0x0) fcntl$setpipe(r9, 0x407, 0xb21) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[], 0xfffffe3e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x800) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 9.229026033s ago: executing program 1 (id=5721): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce822"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.978793303s ago: executing program 7 (id=5722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000000) socket(0x10, 0x2, 0x7e7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r2 = syz_usb_connect$uac1(0x6, 0xcc, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3, 0x0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3c}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x402, 0x5, 0x5, 0x9}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x1, 0xc, "29cf04"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x4, 0x5, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x403, 0x2, 0x2, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x2, 0xff, 'Z'}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x80, 0x5, 0x0, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x11, 0x4, 0x6, 0x2, "e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0xfffc, 0xe, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x9, 0x8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0xa5, 0x3, "8baf4b", '*'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x40, 0xfd, {0x7, 0x25, 0x1, 0x0, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x340, 0xce, 0x8, 0x7e, 0x8, 0x7}, 0x122, &(0x7f0000000380)={0x5, 0xf, 0x122, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x1, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4013dafefafe78e7232990aa0b1549e1"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x2, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6, 0x0, 0x72, [0xcf, 0x60ff, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0a66ff94a1763cc43212612115a66114"}, @generic={0xcc, 0x10, 0x4, "955804e87e2ed0a585142e089c486639e2f4e90fc10e13af3773f5c7b2615fca2a9310409f315050b814477d166400262072a9f388ecb09314917120a24b3bf4362596a84fef50e7b5be75be8dce4720f5acd62b0a33a95c2e17d4695375515655737abd024ce5b5f13d62f42e007ef21e9cd01f6f5902997b375d27030e4129e087613e3f57c5f058c72377e15fc83eb95695d2dda15df9155d5434e1162fa147b46195c83dea497b751a7f009cf426fdd82fa131aad0cb419ce6eb24b987cdebb854844310db332e"}]}, 0x2, [{0xf2, &(0x7f00000004c0)=@string={0xf2, 0x3, "608875e4738e59fcdd6ee2c03030d15b1799357d587ee73e52ee6ed1b2dd1604a70265e3f5e032bb85fd3c62d130395cdf16aab3e0b0699c5b99060c9d18058b93aa2bf465747887850e7053f287ede8893ebdbc731358b18582278c18878da45dccfd45d5e64b1d46b21212f5fbabcbfeb95527125f1d216b7a5d881e092376d02a7b0d7c750ac93e0d5cea3b5dcb931f85e28113b3c1991a7e02cb06de9d906d2bcb093230469b263e3cc1df679c3e9a79605abda1816e2dc8b931351c2e66360ea6fb3d4750fb338bf70c08232d942a187c6173fd0be07f4695d385f846ce67c9c14967bb88f57dfa9a6d0e2102c0"}}, {0xd5, &(0x7f00000005c0)=@string={0xd5, 0x3, "acdcc5e356a5fcd68520c3a551e949f26d9e9a826eff1d820805cf8e421a58ab360614ce0503290bbc62eb493774cc3ba3653274b5b04a36e45eb27fe4e1ab7256c0849a9edbac421516f0ced4a7ddc377987c8389be2b0795c14e2ae9f655a1850cb5c6dcca52a69021e8353391138d35d706c65c17472948c59659183ae607acd47bec9383774525571cc1725fcecb69e4b63474d1e2f3e122f2a2a5a1cf0121ab7da611a5473edf246c8ca233341af4087a74fa79482c5f171e3cc1be7b841d79ae5dff26645c34885b242b4a0c74eb2fc1"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000780)={0xc, &(0x7f0000000700)={0x40, 0x23, 0x2, {0x2, 0xa}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f00000009c0)={0x24, &(0x7f00000007c0)={0x40, 0xf, 0x5, "4600b6491b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x81, 0x2, "0904"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "dc5ee7"}, &(0x7f0000000900)={0x20, 0x83, 0x1, "da"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "7ce137"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "d7ac30"}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x100, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb72}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x10001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 8.563391924s ago: executing program 9 (id=5723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000080)=0x8) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x9, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x9, 0x7, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x26, 0x14, 0x9f12443852f025ca}]}, 0x38}}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f0000000440)={"2e591a4bc745c0de4b469ce4c7ff96be", 0x0, 0x0, {0x13}, {0xffffffffffff3573, 0x1}, 0x7f, [0x7fffffffffffffff, 0x80, 0x4b, 0x800, 0x7, 0x91b, 0x7, 0x3, 0x4807, 0x0, 0x401, 0x4, 0x1, 0x5e95, 0x7, 0x6]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)=r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0x50, 0xd, 0x1, 0x0, "e4000e8cb4c43207133603b4e4b2f5d969121f5709f2aa499f18a476d91b928a72eb126da0ed595ba1be4882d1644a7ac1b2850db13dda2604219061d48ae2e6a5a755e39bef170ff516adc3"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x150}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5c}, @exit], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) 8.270752353s ago: executing program 7 (id=5724): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="18"], 0x18, 0x24008084}, 0x20000000) ptrace$pokeuser(0x6, 0x0, 0x8, 0x7f) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a3040, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea648cf403) setsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000000)=0xfffffffc, 0x4) 8.035672005s ago: executing program 8 (id=5725): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x8, &(0x7f0000000700)={0xc, "7efe711cddad79a8b8935eaefb802b898e1a75b31a1a709cfc0a3c23e83417bcd4"}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="18"], 0x18, 0x24008084}, 0x20000000) ptrace$pokeuser(0x6, 0x0, 0x8, 0x7f) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a3040, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea648cf403) setsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000000)=0xfffffffc, 0x4) 7.830747644s ago: executing program 3 (id=5726): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0xffffffffffffff38) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/19, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x59, 0x2) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) memfd_create(0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000002b4b00bd4d39badf45ac791986b0b6edeae1f55d791249c95853b29a24a93790340bd92abe35ba7b9f4d552f9c245249e9c6579f2cbb465a748b438a02b89a9c77c48f3d45467a254d635e035d8f198a"], 0x50) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xe, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x7fff, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000040)) 6.689723355s ago: executing program 3 (id=5727): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r1 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x2, 0x1, 0x1, 0xad}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e63, 0x64}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0xf1, 0x5, 0xda, 0x8, 0x7}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x5000, 0xf00, 0x5e0, [0xff006f, 0x3f00]}]}}) syz_usb_connect$uac1(0x5, 0xd6, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x14}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x2, 0x7, 'i+.'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0xfa, 0x9, "", "ff7434"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xdd1, 0x36, 0xcd, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x7, 0x6, {0x7, 0x25, 0x1, 0x8, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x3, 0x8, "73c8fb"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd, 0x10, "ace1fe6cb011"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x0, 0x0, 0x8, 0xc}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x20, 0x40, "8e", "eb28"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x5, 0x7, 0x9a, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x80, {0x7, 0x25, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x9, 0x4, 0x10, 0x20, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "2ace169eea2d838945074eafc901f10fe7c9b5e1754a0f64421cddca475b75db868a637a0c37af5b312d0795f3ad1d28bff05904b156d47b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "79f5817cb51abdfe045f7bb1036fb1c8877dfc03d515db555567b23f2b78b5fd756783c4da7cdd2d8cfb2df15693"}}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b707000000fcf0ff5070000000000000480000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x6e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9145}, 0x1c) listen(r7, 0x5) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000480)={0x0, 0x1, 0x1}) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) syz_usb_control_io$printer(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendto$inet6(r0, &(0x7f0000000180)="e4eba9", 0x3, 0x800, 0x0, 0x0) 6.686560557s ago: executing program 9 (id=5737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r9, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x5}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0xb05, 0x70bd30, 0x25dfdbfe, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 6.174096987s ago: executing program 1 (id=5728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x3000) ftruncate(r1, 0x51a9497) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x1, &(0x7f0000000100)) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/4088, 0xce) syz_usb_control_io$printer(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400f9ff00", "bb670000000000000004d7b27caf00", "8c76287d", "001200"}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0xffff, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95b, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x14d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x40000001, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0xfffffffd, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x3, 0x5, 0x6, 0x8, 0x4, 0x80000001, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0x11, 0x2bf, 0x6c9, 0xc, 0xa, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x8, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7b, 0xa, 0x4, 0xc, 0x8, 0xffffff75, 0xff, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffff7f, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x3, 0x5, 0x8, 0x83, 0x80000003, 0x7f, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0xffffffff, 0x4, 0x6d01, 0x5, 0x36, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2940bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0x10003, 0x0, 0x17, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x3, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x108, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0xfffffffe, 0x0, 0x40, 0x8, 0x30b1d693, 0xa1f, 0x800, 0x7, 0x1, 0x20006c1f, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x8, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.684695899s ago: executing program 9 (id=5729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast1, 0x6}, 0x1c) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMWRITEOOB(r4, 0xc0104d03, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000c00)=0xea) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$uac3(0x4, 0xd2, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x2, 0x40, 0x18, {0x8, 0xb, 0x2, 0x2, 0x1, 0x22, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1e, 0x8}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x404, 0x5, 0x6, 0x800, 0xc9, 0xbc4e, 0x0, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xff}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xea, 0x8, 0x2, 0x8, 0x8}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x81, 0x0, "aa0f8df0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x3, 0x54, 0x5, "aab1141af274"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x5e, {0xa, 0x25, 0x25, 0x0, 0x10, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2, 0x7f, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x0, 0x6e, 0x20}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x7, 0x4, {0xa, 0x25, 0x25, 0x56fd, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x4, 0xff, 0x7, 0x8, 0x7}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x0, 0xf00, 0x6, [0x30, 0x30]}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x414}}, {0x21, &(0x7f0000000500)=@string={0x21, 0x3, "a1a16f4ad238e52c0a432185c0802c9fe7b63ddc6504492ca7ddb27472e5e3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x81d}}, {0x99, &(0x7f0000000580)=@string={0x99, 0x3, "656ab61f8e8f320f25cd254c57928359a7801dd9a7c0a552ea43d0ef48e24a55e438df974bd0fab5d31965a41e455d346f5b68e246f3a3081cd9f6a87d3ce8e36e514a32bc4a955019cad0d110e70a41ed054592562a8c0ce39f5d0bb2be71599316130f3b2bfc51f3e3c9611bd27016c4f6c38c52f1d44090838400f1cfe87e5afccc4e8af32bf8e98647c60b802d0057a54a475f93d8"}}, {0xc0, &(0x7f0000000680)=@string={0xc0, 0x3, "db0234e7ee4f985b660996bf64c8cc1616706ad8c1cd669eece9ce5c80757ba23eb634f84fd545db2746fc977a5db6f388ca8be7cf524375c2c8f23265e61bdfe0fc2d84b4a16a18a642605aab0e4abaab359266433d35edd36b7d2f10c23d0b7d67b3c9ac49bf38e3083d9d57f39d70393f6c6437d68d32c3a6d6632f999b2838336b23293fb76a47b5e43a278511959c36a6aaf80970780878fa6c76b8707b2500591f6c5e0e4d18a9c9015e15a5cc57b659b6a64d0fb3eb4d52a7dd66"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io$uac3(r6, &(0x7f0000000900)={0xc, &(0x7f0000000800)={0x40, 0x22, 0x77, {0x77, 0x10, "44214e83b1bf413f7cacc86a3a69f6243f08603c92de785280d886d6c98b3eb0d443e8fd6f1a406c0654baaee20819c6dabd81004a9d59e531b88c4f07b4df385db863879c2041da009f16b6d20d47a71cc2fab0f7c11ba712ce83f231a36568cdf06f186608999589b66e8ffe7ed06d6ab201bef5"}}, &(0x7f0000000880)={0x0, 0x3, 0x44, @string={0x44, 0x3, "7993a3bf5386d1cb4095fac9b34db7b8776eadb889e056a9ffcd6d5d3ba9efd45990856ef25024c0f970b2a5e88c11702cfa1cd9b93145f924df2683fec9f14581bf"}}}, &(0x7f0000000bc0)={0x24, &(0x7f0000000940)={0x0, 0xe, 0x72, "b11bd9bdbc662a24a9582f46556071c0e51759d875cc0550a768c41dc724be63ea0b360ed6e746d95d3481109aa93960c01d9f66d9f5755101bf81f1eddab34ea0e81506948d50dbf9f568e955de869db11c23d31cafe9c7472439333a5bb53a6346d721fc488945255db2cd402a28764742"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "6216"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "ab4751"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "17640d"}, &(0x7f0000000b40)={0x20, 0x84, 0x2, '{\\'}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "b2eb8f"}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="010029bd7000fddb06e59aef71f5df250b0001f47c5b"], 0x18}, 0x1, 0x0, 0x0, 0x20000050}, 0x8000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5.210625669s ago: executing program 7 (id=5730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000080)=0x8) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x9, 0x4) recvfrom(r0, &(0x7f00000001c0)=""/231, 0xe7, 0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x9, 0x7, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x26, 0x14, 0x9f12443852f025ca}]}, 0x38}}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f0000000440)={"2e591a4bc745c0de4b469ce4c7ff96be", 0x0, 0x0, {0x13}, {0xffffffffffff3573, 0x1}, 0x7f, [0x7fffffffffffffff, 0x80, 0x4b, 0x800, 0x7, 0x91b, 0x7, 0x3, 0x4807, 0x0, 0x401, 0x4, 0x1, 0x5e95, 0x7, 0x6]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)=r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0x50, 0xd, 0x1, 0x0, "e4000e8cb4c43207133603b4e4b2f5d969121f5709f2aa499f18a476d91b928a72eb126da0ed595ba1be4882d1644a7ac1b2850db13dda2604219061d48ae2e6a5a755e39bef170ff516adc3"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x150}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5c}, @exit], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) 5.091595874s ago: executing program 9 (id=5731): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000680)={0x9, @vbi={0x7, 0x2611500, 0xf, 0x30385056, [0x3ff, 0x5], [0x200, 0xe], 0x13a}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) readv(r2, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) openat$kvm(0x0, 0x0, 0xb00, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000087020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffcfc}, {0x4, @none, "40fef9efea518310c08b43e129089545c3e0aa1efb7d8b596ca666fcc6708b522b3c9119a043e367cc516feeb5111c81ed0ec0d07a09fa4a87c8864243feafdda0b1cc5a90c30c418c6efba5a292260168aed3433e5d6ab31ea56a25d4128d6d5f655c1cfd6eb54de914bda77d156fdcc5af2ea3aba9931216ff400a2413fe2fecb6705a038be6cdb6b05fb299a8616745294ce08982b15dc949d9665a4dda0a1ab9d0a9c2b723682bfa0c4f45d91aab4187fa00169f3289dc02a678a1ab6ae10b3240209aa5fc1706f8d7963e878950f20ad175cae28a0081b981924902ac89ced3d6493f0bac5f5a20b640fd2e09d1368a9b37cf451e1f"}}}, 0x102) 4.93713673s ago: executing program 8 (id=5732): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)={0x1c, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}, @generic="a2b92d"]}, 0x1c}], 0x1}, 0x20000084) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x168, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x3ff, 0x3]}, @CTA_NAT_DST={0xcc, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x882}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x808}]}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xbd37}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x204}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x168}}, 0x40000) getpid() sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x35, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1000000}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x15e, 0x1, 0x2800, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x40, 0x4, 0x8, 0xd6a, 0xffffffff, 0x10000}]}) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x26000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0xd, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x15000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x40020, 0x0, 0x1101, 0x2000, [0x9, 0x1ff, 0x86d, 0x8001]}) r12 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r12, 0x80685600, &(0x7f0000000100)) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x28, r13, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010004}, 0x44000) 4.830598481s ago: executing program 3 (id=5733): socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d0d, 0x0) io_setup(0x222, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0x195}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x54}}, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'ip6_vti0\x00', 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f7"], 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf5a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x1a9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12c365ffffffffffff05160240000102030109022dd891508d21d3581274635b5570c1e69700010101a0010904000000"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0]) ustat(0x7, &(0x7f00000001c0)) 4.686326271s ago: executing program 8 (id=5734): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000000) socket(0x10, 0x2, 0x7e7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r2 = syz_usb_connect$uac1(0x6, 0xcc, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3, 0x0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3c}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x402, 0x5, 0x5, 0x9}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x1, 0xc, "29cf04"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x4, 0x5, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x403, 0x2, 0x2, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x2, 0xff, 'Z'}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x80, 0x5, 0x0, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x11, 0x4, 0x6, 0x2, "e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0xfffc, 0xe, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x9, 0x8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0xa5, 0x3, "8baf4b", '*'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x40, 0xfd, {0x7, 0x25, 0x1, 0x0, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x340, 0xce, 0x8, 0x7e, 0x8, 0x7}, 0x122, &(0x7f0000000380)={0x5, 0xf, 0x122, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x1, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4013dafefafe78e7232990aa0b1549e1"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x2, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6, 0x0, 0x72, [0xcf, 0x60ff, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0a66ff94a1763cc43212612115a66114"}, @generic={0xcc, 0x10, 0x4, "955804e87e2ed0a585142e089c486639e2f4e90fc10e13af3773f5c7b2615fca2a9310409f315050b814477d166400262072a9f388ecb09314917120a24b3bf4362596a84fef50e7b5be75be8dce4720f5acd62b0a33a95c2e17d4695375515655737abd024ce5b5f13d62f42e007ef21e9cd01f6f5902997b375d27030e4129e087613e3f57c5f058c72377e15fc83eb95695d2dda15df9155d5434e1162fa147b46195c83dea497b751a7f009cf426fdd82fa131aad0cb419ce6eb24b987cdebb854844310db332e"}]}, 0x2, [{0xf2, &(0x7f00000004c0)=@string={0xf2, 0x3, "608875e4738e59fcdd6ee2c03030d15b1799357d587ee73e52ee6ed1b2dd1604a70265e3f5e032bb85fd3c62d130395cdf16aab3e0b0699c5b99060c9d18058b93aa2bf465747887850e7053f287ede8893ebdbc731358b18582278c18878da45dccfd45d5e64b1d46b21212f5fbabcbfeb95527125f1d216b7a5d881e092376d02a7b0d7c750ac93e0d5cea3b5dcb931f85e28113b3c1991a7e02cb06de9d906d2bcb093230469b263e3cc1df679c3e9a79605abda1816e2dc8b931351c2e66360ea6fb3d4750fb338bf70c08232d942a187c6173fd0be07f4695d385f846ce67c9c14967bb88f57dfa9a6d0e2102c0"}}, {0xd5, &(0x7f00000005c0)=@string={0xd5, 0x3, "acdcc5e356a5fcd68520c3a551e949f26d9e9a826eff1d820805cf8e421a58ab360614ce0503290bbc62eb493774cc3ba3653274b5b04a36e45eb27fe4e1ab7256c0849a9edbac421516f0ced4a7ddc377987c8389be2b0795c14e2ae9f655a1850cb5c6dcca52a69021e8353391138d35d706c65c17472948c59659183ae607acd47bec9383774525571cc1725fcecb69e4b63474d1e2f3e122f2a2a5a1cf0121ab7da611a5473edf246c8ca233341af4087a74fa79482c5f171e3cc1be7b841d79ae5dff26645c34885b242b4a0c74eb2fc1"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000780)={0xc, &(0x7f0000000700)={0x40, 0x23, 0x2, {0x2, 0xa}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f00000009c0)={0x24, &(0x7f00000007c0)={0x40, 0xf, 0x5, "4600b6491b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x81, 0x2, "0904"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "dc5ee7"}, &(0x7f0000000900)={0x20, 0x83, 0x1, "da"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "7ce137"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "d7ac30"}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x100, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb72}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x10001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.898386477s ago: executing program 8 (id=5735): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x5, {0x7, './file0'}}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405514, &(0x7f0000000540)={{0x44e0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3]}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x24200, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 3.208691717s ago: executing program 8 (id=5736): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000520006000500010000000800", @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 2.921162875s ago: executing program 7 (id=5738): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x7, 0x0, 0x7}, 0x76e0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000280)="4c00000012001f15b9409b849ac00a00a5784002000002000000030038c88cc055c5ac27a6c5b06875d8cb9cfe83f24cd0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x4c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x2280}], 0x1, 0x0, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000280)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x4, {}, 0x3810000, 0x0, 0x7, 0x0, 0x1b, '\x04nod\xff\x15\t\x00\x00\x00\x00\x00\x00\x00\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, '\xc6GtZ\xc8YR\xbf\xe0\xb0pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0xb6, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xff\xff^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89X\x12\xd7\xdc.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\x8a\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00d\t\x03K\xa9\xb5\x1eao\xd1\xf9$\xda\xdc\xd8\xd9\xc1\x12\xe3\x85h\xc8`\xefhR\xcc\x01>vQ\xb8\xd5k\xb3\x0el\xed5\x06\xd1\x06]\xd2\x8fsa\xf8\x01\xe1\xc5\x94\xea\x91\b\x11\xdb\x1a\xb1~\b\xa1)\xb7\x88\xdd8\xa8\xaf2\xfe=\x8e\"\x81\xf0\xf9*m\xfe\x90\x8f\xecv\x99\xa0b\xce\x9ac\xa2\b\x97\t\xba\xb1!\x14C\x03\xa6\xf0}P\b\x8d\xc5a =!Fy-\xb9 ', 0x0, 0x0, 0xee01}}, 0x21e) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4073, 0xfe9}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) 2.792655724s ago: executing program 1 (id=5739): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0xffffffffffffff38) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/19, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x59, 0x2) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) memfd_create(0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000002b4b00bd4d39badf45ac791986b0b6edeae1f55d791249c95853b29a24a93790340bd92abe35ba7b9f4d552f9c245249e9c6579f2cbb465a748b438a02b89a9c77c48f3d45467a254d635e035d8f198a25dd13fcf22d"], 0x50) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xe, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x7fff, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000040)) 2.585219685s ago: executing program 9 (id=5740): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x301, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "00000100"}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000100)='maps\x00') r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000003780)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x9, @empty, 0x8000}, 0x1b, 0x0, 0x0, &(0x7f0000001380)=[@hopopts={{0x14, 0x29, 0x36, {0x32}}}], 0x14}}], 0x1, 0xc040) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e24, @multicast1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, r8, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xd}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', r1, 0x40, 0x7800, 0x6, 0x1, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x68, 0x0, 0xc2, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x5, [{@private=0xa010102, 0x7fff}]}, @end, @noop, @lsrr={0x83, 0xb, 0x4d, [@remote, @loopback]}, @ra={0x94, 0x4}, @noop]}}}}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @local}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x14c, r8, 0xa12, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="d09a80b38518", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x0, 0x0, @multicast2}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendto$packet(r5, &(0x7f0000000000)="ff000000aab43d04d946f580e97169ebf724605e", 0x14, 0x20000050, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x10, 0x6, @remote}, 0x14) 2.476416109s ago: executing program 9 (id=5741): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0]) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020001000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001aa6920581171a9a17a758c6887e61e8a656dedafd24035310cb8cbc7b7bee13261f84fa0d56e9f4fa3828eab01cc69694eff2491b5e3db9d355a4c8c5cfe5d9dea9af8f94fd52829318d4109"], 0x88}}, 0x4001) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000001500)={0x2, @pix={0x70, 0x22000000, 0x33524742, 0x1, 0xe5b, 0x200d294, 0x3, 0x7fff, 0x0, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x87}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d86dd4266b5efb88a2c87ed38fec7ac7a155603a081bac85ebd3c11f6b2f9a49d564054f171f1a922d5eb60ec68f7c921"], 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f046707764f8d0e000058ea21274f844a69e9", 0x0, 0x9, 0x2, 0x2}, 0x3c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000440)={0x0, 0x0, 0x1, [0x7f, 0x5, 0x200, 0x0, 0x8], [0x65c2a0c6, 0x6, 0x4, 0x4, 0x0, 0x83, 0x68, 0x9, 0x1, 0x2, 0xfb, 0x1000, 0xdf, 0x4, 0x8, 0x6, 0xe4, 0x0, 0x5, 0x1, 0x7285, 0x3, 0x8000, 0x7, 0x0, 0xffffffff, 0x800, 0x97, 0x2e, 0x2, 0x5, 0x2, 0x5, 0x2, 0xcfe, 0x1, 0x9, 0x8, 0x8000000000000001, 0x4000000000, 0x10001, 0x8, 0xdf02, 0x7, 0x3, 0x4, 0x19f, 0xff, 0x100000000, 0x5, 0x3, 0x9, 0x3, 0x1, 0x2, 0x7, 0x101, 0x9, 0x0, 0x1, 0x3ff, 0x7, 0x0, 0x2, 0x6, 0x3d64, 0x5, 0x9, 0x4, 0x4, 0x1, 0x6a42, 0x10000, 0xf, 0xff, 0x9a, 0x3, 0x0, 0x0, 0x9, 0x2e46, 0x3, 0xfff, 0x3, 0xe, 0x4, 0xa, 0x1, 0x7, 0x7, 0x4, 0x6, 0x9, 0x3, 0x1000, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x7, 0x7f, 0xcf16, 0x0, 0xf, 0x1, 0x2, 0x56f, 0x0, 0x0, 0x3, 0x4, 0xffffffff, 0x7, 0xffffffffffff0000, 0xb, 0x0, 0x5, 0x81, 0x7c2b, 0x2, 0x7]}) 2.224921831s ago: executing program 3 (id=5742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast1, 0x6}, 0x1c) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMWRITEOOB(r4, 0xc0104d03, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000c00)=0xea) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$uac3(0x4, 0xd2, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x2, 0x40, 0x18, {0x8, 0xb, 0x2, 0x2, 0x1, 0x22, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1e, 0x8}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x404, 0x5, 0x6, 0x800, 0xc9, 0xbc4e, 0x0, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xff}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xea, 0x8, 0x2, 0x8, 0x8}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x81, 0x0, "aa0f8df0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x3, 0x54, 0x5, "aab1141af274"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x5e, {0xa, 0x25, 0x25, 0x0, 0x10, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2, 0x7f, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x0, 0x6e, 0x20}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x7, 0x4, {0xa, 0x25, 0x25, 0x56fd, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x4, 0xff, 0x7, 0x8, 0x7}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x0, 0xf00, 0x6, [0x30, 0x30]}]}, 0x7, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x414}}, {0x21, &(0x7f0000000500)=@string={0x21, 0x3, "a1a16f4ad238e52c0a432185c0802c9fe7b63ddc6504492ca7ddb27472e5e3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x81d}}, {0x99, &(0x7f0000000580)=@string={0x99, 0x3, "656ab61f8e8f320f25cd254c57928359a7801dd9a7c0a552ea43d0ef48e24a55e438df974bd0fab5d31965a41e455d346f5b68e246f3a3081cd9f6a87d3ce8e36e514a32bc4a955019cad0d110e70a41ed054592562a8c0ce39f5d0bb2be71599316130f3b2bfc51f3e3c9611bd27016c4f6c38c52f1d44090838400f1cfe87e5afccc4e8af32bf8e98647c60b802d0057a54a475f93d8"}}, {0x0, 0x0}, {0xc0, &(0x7f0000000680)=@string={0xc0, 0x3, "db0234e7ee4f985b660996bf64c8cc1616706ad8c1cd669eece9ce5c80757ba23eb634f84fd545db2746fc977a5db6f388ca8be7cf524375c2c8f23265e61bdfe0fc2d84b4a16a18a642605aab0e4abaab359266433d35edd36b7d2f10c23d0b7d67b3c9ac49bf38e3083d9d57f39d70393f6c6437d68d32c3a6d6632f999b2838336b23293fb76a47b5e43a278511959c36a6aaf80970780878fa6c76b8707b2500591f6c5e0e4d18a9c9015e15a5cc57b659b6a64d0fb3eb4d52a7dd66"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io$uac3(r6, &(0x7f0000000900)={0xc, &(0x7f0000000800)={0x40, 0x22, 0x77, {0x77, 0x10, "44214e83b1bf413f7cacc86a3a69f6243f08603c92de785280d886d6c98b3eb0d443e8fd6f1a406c0654baaee20819c6dabd81004a9d59e531b88c4f07b4df385db863879c2041da009f16b6d20d47a71cc2fab0f7c11ba712ce83f231a36568cdf06f186608999589b66e8ffe7ed06d6ab201bef5"}}, &(0x7f0000000880)={0x0, 0x3, 0x44, @string={0x44, 0x3, "7993a3bf5386d1cb4095fac9b34db7b8776eadb889e056a9ffcd6d5d3ba9efd45990856ef25024c0f970b2a5e88c11702cfa1cd9b93145f924df2683fec9f14581bf"}}}, &(0x7f0000000bc0)={0x24, &(0x7f0000000940)={0x0, 0xe, 0x72, "b11bd9bdbc662a24a9582f46556071c0e51759d875cc0550a768c41dc724be63ea0b360ed6e746d95d3481109aa93960c01d9f66d9f5755101bf81f1eddab34ea0e81506948d50dbf9f568e955de869db11c23d31cafe9c7472439333a5bb53a6346d721fc488945255db2cd402a28764742"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "6216"}, &(0x7f0000000ac0)={0x20, 0x82, 0x3, "ab4751"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "17640d"}, &(0x7f0000000b40)={0x20, 0x84, 0x2, '{\\'}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "b2eb8f"}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="010029bd7000fddb06e59aef71f5df250b0001f47c5b"], 0x18}, 0x1, 0x0, 0x0, 0x20000050}, 0x8000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.955359391s ago: executing program 7 (id=5743): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000a000000500004800000010073797a30000000000e44d2"], 0x64}}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000000240)={0x2020}, 0x2020) splice(r7, 0x0, r10, 0x0, 0x2000000008, 0x0) fcntl$setpipe(r9, 0x407, 0xb21) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[], 0xfffffe3e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x800) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 1.614369453s ago: executing program 3 (id=5744): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r1 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x2, 0x1, 0x1, 0xad}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e63, 0x64}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0xf1, 0x5, 0xda, 0x8, 0x7}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x5000, 0xf00, 0x5e0, [0xff006f, 0x3f00]}]}}) syz_usb_connect$uac1(0x5, 0xd6, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x2, 0x90, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x14}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x2, 0x7, 'i+.'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0xfa, 0x9, "", "ff7434"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xdd1, 0x36, 0xcd, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x7, 0x6, {0x7, 0x25, 0x1, 0x8, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x3, 0x8, "73c8fb"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd, 0x10, "ace1fe6cb011"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x0, 0x0, 0x8, 0xc}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x20, 0x40, "8e", "eb28"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x5, 0x7, 0x9a, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x80, {0x7, 0x25, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x9, 0x4, 0x10, 0x20, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0x3a, &(0x7f0000000280)=@string={0x3a, 0x3, "2ace169eea2d838945074eafc901f10fe7c9b5e1754a0f64421cddca475b75db868a637a0c37af5b312d0795f3ad1d28bff05904b156d47b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "79f5817cb51abdfe045f7bb1036fb1c8877dfc03d515db555567b23f2b78b5fd756783c4da7cdd2d8cfb2df15693"}}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x6e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9145}, 0x1c) listen(r7, 0x5) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000480)={0x0, 0x1, 0x1}) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) syz_usb_control_io$printer(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendto$inet6(r0, &(0x7f0000000180)="e4eba9", 0x3, 0x800, 0x0, 0x0) 947.601471ms ago: executing program 1 (id=5745): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0xffffffffffffff38) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/19, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x59, 0x2) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) memfd_create(0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000002b4b00bd4d39badf45ac791986b0b6edeae1f55d791249c95853b29a24a93790340bd92abe35ba7b9f4d552f9c245249e9c6579f2cbb465a748b438a02b89a9c77c48f3d45467a254d635e035d8f198a"], 0x50) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xe, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x7fff, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000040)) 0s ago: executing program 7 (id=5746): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000000) socket(0x10, 0x2, 0x7e7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r2 = syz_usb_connect$uac1(0x6, 0xcc, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3, 0x0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3c}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x402, 0x5, 0x5, 0x9}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x1, 0xc, "29cf04"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x4, 0x5, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x403, 0x2, 0x2, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x2, 0xff, 'Z'}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x80, 0x5, 0x0, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x11, 0x4, 0x6, 0x2, "e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0xfffc, 0xe, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x9, 0x8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0xa5, 0x3, "8baf4b", '*'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x40, 0xfd, {0x7, 0x25, 0x1, 0x0, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x340, 0xce, 0x8, 0x7e, 0x8, 0x7}, 0x125, &(0x7f0000000380)={0x5, 0xf, 0x125, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x1, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4013dafefafe78e7232990aa0b1549e1"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x2, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6, 0x0, 0x72, [0xcf, 0x60ff, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0a66ff94a1763cc43212612115a66114"}, @generic={0xcf, 0x10, 0x4, "955804e87e2ed0a585142e089c486639e2f4e90fc10e13af3773f5c7b2615fca2a9310409f315050b814477d166400262072a9f388ecb09314917120a24b3bf4362596a84fef50e7b5be75be8dce4720f5acd62b0a33a95c2e17d4695375515655737abd024ce5b5f13d62f42e007ef21e9cd01f6f5902997b375d27030e4129e087613e3f57c5f058c72377e15fc83eb95695d2dda15df9155d5434e1162fa147b46195c83dea497b751a7f009cf426fdd82fa131aad0cb419ce6eb24b987cdebb854844310db332ed7a4f4"}]}, 0x2, [{0xf2, &(0x7f00000004c0)=@string={0xf2, 0x3, "608875e4738e59fcdd6ee2c03030d15b1799357d587ee73e52ee6ed1b2dd1604a70265e3f5e032bb85fd3c62d130395cdf16aab3e0b0699c5b99060c9d18058b93aa2bf465747887850e7053f287ede8893ebdbc731358b18582278c18878da45dccfd45d5e64b1d46b21212f5fbabcbfeb95527125f1d216b7a5d881e092376d02a7b0d7c750ac93e0d5cea3b5dcb931f85e28113b3c1991a7e02cb06de9d906d2bcb093230469b263e3cc1df679c3e9a79605abda1816e2dc8b931351c2e66360ea6fb3d4750fb338bf70c08232d942a187c6173fd0be07f4695d385f846ce67c9c14967bb88f57dfa9a6d0e2102c0"}}, {0xd5, &(0x7f00000005c0)=@string={0xd5, 0x3, "acdcc5e356a5fcd68520c3a551e949f26d9e9a826eff1d820805cf8e421a58ab360614ce0503290bbc62eb493774cc3ba3653274b5b04a36e45eb27fe4e1ab7256c0849a9edbac421516f0ced4a7ddc377987c8389be2b0795c14e2ae9f655a1850cb5c6dcca52a69021e8353391138d35d706c65c17472948c59659183ae607acd47bec9383774525571cc1725fcecb69e4b63474d1e2f3e122f2a2a5a1cf0121ab7da611a5473edf246c8ca233341af4087a74fa79482c5f171e3cc1be7b841d79ae5dff26645c34885b242b4a0c74eb2fc1"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000780)={0xc, &(0x7f0000000700)={0x40, 0x23, 0x2, {0x2, 0xa}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f00000009c0)={0x24, &(0x7f00000007c0)={0x40, 0xf, 0x5, "4600b6491b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x81, 0x2, "0904"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "dc5ee7"}, &(0x7f0000000900)={0x20, 0x83, 0x1, "da"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "7ce137"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "d7ac30"}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x100, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb72}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x10001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): st failed: -71 [ 1558.362297][ T809] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 1558.387529][ T809] usb 2-1: USB disconnect, device number 79 [ 1558.702214][ T809] usb 4-1: USB disconnect, device number 72 [ 1558.777123][ T6812] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1558.939673][ T6812] usb 9-1: Using ep0 maxpacket: 32 [ 1558.950977][ T6812] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1558.968531][ T6812] usb 9-1: config 0 has no interface number 0 [ 1558.984856][ T6812] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1559.010046][ T6812] usb 9-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1559.032801][ T6812] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1559.053302][ T6812] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1559.063221][ T6812] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1559.072890][ T6812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.076464][ T809] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1559.102029][ T6812] usb 9-1: Product: syz [ 1559.110091][ T6812] usb 9-1: Manufacturer: syz [ 1559.120900][ T6812] usb 9-1: SerialNumber: syz [ 1559.152682][ T6812] usb 9-1: config 0 descriptor?? [ 1559.175450][T27624] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1559.267785][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 1559.283333][ T809] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1559.297064][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 1559.297080][ T29] audit: type=1326 audit(1785591455.540:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.333649][ T809] usb 4-1: config 179 has no interface number 0 [ 1559.352436][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1559.367780][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1559.379321][ T29] audit: type=1326 audit(1785591455.540:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.407853][T27634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1559.414870][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1559.430853][ T809] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1559.447241][ T29] audit: type=1326 audit(1785591455.540:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.473613][ T809] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1559.487252][ T809] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1559.496639][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.517081][ T29] audit: type=1326 audit(1785591455.540:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.569750][T27637] input: syz0 as /devices/virtual/input/input146 [ 1559.576635][ T29] audit: type=1326 audit(1785591455.540:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.603439][T27626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.665391][ T29] audit: type=1326 audit(1785591455.540:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.744221][ T29] audit: type=1326 audit(1785591455.540:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.790213][ T29] audit: type=1326 audit(1785591455.540:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.879640][ T29] audit: type=1326 audit(1785591455.540:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1559.905835][ T29] audit: type=1326 audit(1785591455.580:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27633 comm="syz.9.5541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 1560.498903][T27645] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1560.628395][ T5880] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1560.806483][ T5881] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1560.825514][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1560.837008][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1560.852132][ T5880] usb 2-1: config 212 has an invalid interface number: 244 but max is 0 [ 1560.871495][ T5880] usb 2-1: config 212 has no interface number 0 [ 1560.893405][ T5880] usb 2-1: config 212 interface 244 has no altsetting 0 [ 1560.920613][ T5880] usb 2-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=e5.0d [ 1560.932859][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.961821][ T5880] usb 2-1: Product: syz [ 1560.969950][ T5880] usb 2-1: Manufacturer: syz [ 1560.980726][ T5880] usb 2-1: SerialNumber: syz [ 1560.992111][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1561.016043][ T5881] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1561.037772][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1561.070347][ T5881] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1561.106053][ T5881] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1561.142144][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.203673][ T5881] usb 10-1: config 0 descriptor?? [ 1561.452091][ T6812] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1561.503254][ T6812] ipheth 9-1:0.196: probe with driver ipheth failed with error -71 [ 1561.595877][ T6812] usb 9-1: USB disconnect, device number 22 [ 1561.705045][ T5881] hdpvr 10-1:0.0: unexpected answer of status request, len -71 [ 1561.754649][ T5881] hdpvr 10-1:0.0: device init failed [ 1561.782881][ T5881] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1561.837783][ T5881] usb 10-1: USB disconnect, device number 22 [ 1562.321662][ T5881] usb 4-1: USB disconnect, device number 73 [ 1562.321686][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1562.336792][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1562.449084][ T5880] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 1562.498232][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 1562.539541][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1562.543097][T27660] sg_write: data in/out 435166/674 bytes for SCSI command 0x0-- guessing data in; [ 1562.543097][T27660] program syz.9.5546 not setting count and/or reply_len properly [ 1562.601703][ T5880] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 1562.656755][ T5880] usb 2-1: media controller created [ 1562.704188][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1562.713591][T27660] netlink: 84 bytes leftover after parsing attributes in process `syz.9.5546'. [ 1562.767459][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 1562.776012][ T5880] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 1562.790928][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input147 [ 1562.813049][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 1562.820479][ T5880] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 1562.838911][ T5880] usb 2-1: USB disconnect, device number 80 [ 1562.915320][ T5755] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1562.960639][T27672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5550'. [ 1562.988877][ T5880] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 1563.077660][ T5755] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1563.089076][ T5755] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1563.106748][ T5755] usb 8-1: config 0 has no interface number 0 [ 1563.119412][ T5755] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1563.134544][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.150302][ T5755] usb 8-1: Product: syz [ 1563.158527][ T5755] usb 8-1: Manufacturer: syz [ 1563.167526][ T5755] usb 8-1: SerialNumber: syz [ 1563.180354][ T5755] usb 8-1: config 0 descriptor?? [ 1563.215548][ T6812] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1563.336747][ T5880] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1563.360369][ T6812] usb 10-1: device descriptor read/64, error -71 [ 1563.396853][T27667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.407589][T27667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.517701][ T5880] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1563.530674][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1563.539388][ T5880] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1563.551221][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.574686][ T5880] usb 2-1: config 0 descriptor?? [ 1563.583220][T27670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1563.615227][ T6812] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1563.633787][ T5755] uvcvideo 8-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1563.654239][ T5755] uvcvideo 8-1:0.64: No valid video chain found. [ 1563.755344][ T6812] usb 10-1: device descriptor read/64, error -71 [ 1563.865990][ T6812] usb usb10-port1: attempt power cycle [ 1563.897405][ T5755] usb 8-1: USB disconnect, device number 41 [ 1564.033546][ T5880] hid (null): global environment stack underflow [ 1564.042541][ T5880] hid (null): unknown global tag 0xc [ 1564.076483][ T5880] hid_parser_main: 171 callbacks suppressed [ 1564.076499][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.090283][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.098935][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.106880][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.114294][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.122318][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.129986][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.137426][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.144842][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.153582][ T5880] waterforce 0003:1044:7A4D.00A7: unknown main item tag 0x0 [ 1564.163644][ T5880] waterforce 0003:1044:7A4D.00A7: global environment stack underflow [ 1564.171778][ T5880] waterforce 0003:1044:7A4D.00A7: item 0 2 1 11 parsing failed [ 1564.180550][ T5880] waterforce 0003:1044:7A4D.00A7: hid parse failed with -22 [ 1564.188098][ T5880] waterforce 0003:1044:7A4D.00A7: probe with driver waterforce failed with error -22 [ 1564.215198][ T6812] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1564.247565][ T6812] usb 10-1: device descriptor read/8, error -71 [ 1564.505615][ T6812] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1564.535318][ T5880] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1564.545506][ T6812] usb 10-1: device descriptor read/8, error -71 [ 1564.655609][ T6812] usb usb10-port1: unable to enumerate USB device [ 1564.717301][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1564.736726][ T5880] usb 4-1: config 114 has an invalid interface number: 32 but max is 0 [ 1564.750294][ T5880] usb 4-1: config 114 has no interface number 0 [ 1564.757111][ T5880] usb 4-1: config 114 interface 32 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1564.769985][ T5880] usb 4-1: config 114 interface 32 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1564.780556][ T5880] usb 4-1: config 114 interface 32 has no altsetting 0 [ 1564.782842][ T5880] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60 [ 1564.800472][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.800496][ T5880] usb 4-1: Product: syz [ 1564.800512][ T5880] usb 4-1: Manufacturer: syz [ 1564.800527][ T5880] usb 4-1: SerialNumber: syz [ 1564.809145][T27683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1564.898683][T27693] FAULT_INJECTION: forcing a failure. [ 1564.898683][T27693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.913913][T27693] CPU: 0 UID: 0 PID: 27693 Comm: syz.7.5556 Tainted: G L syzkaller #0 PREEMPT(full) [ 1564.913942][T27693] Tainted: [L]=SOFTLOCKUP [ 1564.913948][T27693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1564.913959][T27693] Call Trace: [ 1564.913967][T27693] [ 1564.913974][T27693] dump_stack_lvl+0xe8/0x150 [ 1564.914008][T27693] should_fail_ex+0x40c/0x560 [ 1564.914035][T27693] _copy_to_iter+0x59c/0x1810 [ 1564.914072][T27693] ? __pfx__copy_to_iter+0x10/0x10 [ 1564.914096][T27693] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.914117][T27693] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.914138][T27693] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1564.914155][T27693] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1564.914181][T27693] __skb_datagram_iter+0xf8/0x980 [ 1564.914200][T27693] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1564.914224][T27693] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1564.914252][T27693] skb_copy_datagram_iter+0xb5/0x240 [ 1564.914276][T27693] netlink_recvmsg+0x2b9/0xa50 [ 1564.914305][T27693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1564.914321][T27693] ? copy_compat_iovec_from_user+0xf8/0x140 [ 1564.914330][T27693] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1564.914343][T27693] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1564.914355][T27693] ? security_socket_recvmsg+0x7e/0x2c0 [ 1564.914376][T27693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1564.914397][T27693] sock_recvmsg+0x196/0x1e0 [ 1564.914420][T27693] ____sys_recvmsg+0x1e6/0x4a0 [ 1564.914436][T27693] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1564.914453][T27693] ? __lock_acquire+0x683/0x2cf0 [ 1564.914471][T27693] ___sys_recvmsg+0x213/0x5a0 [ 1564.914485][T27693] ? __pfx____sys_recvmsg+0x10/0x10 [ 1564.914499][T27693] ? __fget_files+0x2a/0x420 [ 1564.914520][T27693] ? __fget_files+0x3a2/0x420 [ 1564.914537][T27693] do_recvmmsg+0x38b/0x7f0 [ 1564.914553][T27693] ? __pfx_do_recvmmsg+0x10/0x10 [ 1564.914570][T27693] ? __mutex_unlock_slowpath+0x731/0x900 [ 1564.914589][T27693] __sys_recvmmsg+0x1a5/0x290 [ 1564.914601][T27693] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1564.914614][T27693] ? ksys_write+0x242/0x270 [ 1564.914626][T27693] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1564.914643][T27693] __do_fast_syscall_32+0x23e/0x6f0 [ 1564.914663][T27693] ? do_fast_syscall_32+0x33/0x70 [ 1564.914674][T27693] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.914686][T27693] ? asm_int80_emulation+0x1a/0x20 [ 1564.914696][T27693] ? do_int80_emulation+0x29f/0x550 [ 1564.914710][T27693] do_fast_syscall_32+0x33/0x70 [ 1564.914722][T27693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1564.914738][T27693] RIP: 0023:0xf7f380ec [ 1564.914754][T27693] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1564.914768][T27693] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1564.914786][T27693] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004680 [ 1564.914797][T27693] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1564.914806][T27693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1564.914816][T27693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1564.914826][T27693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1564.914842][T27693] [ 1565.365177][ T5880] usb 4-1: USB disconnect, device number 74 [ 1565.641778][T15589] usb 2-1: USB disconnect, device number 81 [ 1565.937033][ T5755] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1566.005204][T15589] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1566.097511][ T5755] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1566.110495][T27718] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5563'. [ 1566.120259][ T5755] usb 4-1: not running at top speed; connect to a high speed hub [ 1566.132680][ T5755] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1566.148887][ T5755] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1566.157461][ T5755] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.167839][T15589] usb 2-1: Using ep0 maxpacket: 8 [ 1566.173002][ T5755] usb 4-1: config 14 has no interface number 0 [ 1566.179674][ T5755] usb 4-1: config 14 has no interface number 1 [ 1566.187057][T15589] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1566.195542][T15589] usb 2-1: config 179 has no interface number 0 [ 1566.201880][ T5755] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1566.212864][T15589] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1566.224040][ T5755] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1566.236592][T15589] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1566.248181][ T5755] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1566.259745][T15589] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1566.271999][ T5755] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1566.288425][T15589] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1566.303195][ T5755] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1566.311840][T15589] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1566.325401][ T5755] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1566.332451][T15589] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1566.352136][ T5755] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1566.361465][T15589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.369800][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.378872][ T5755] usb 4-1: Product: syz [ 1566.384420][T27707] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1566.408238][ T5755] usb 4-1: Manufacturer: syz [ 1566.423110][ T5755] usb 4-1: SerialNumber: syz [ 1566.951625][ T5755] legousbtower 4-1:14.57: interrupt endpoints not found [ 1566.975237][ T6812] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1566.995852][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1566.995868][ T29] audit: type=1326 audit(1785591463.230:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.031983][ T5755] legousbtower 4-1:14.228: get version request failed: -71 [ 1567.040151][ T5755] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 1567.057121][T27724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1567.090270][ T5755] usb 4-1: USB disconnect, device number 75 [ 1567.101500][ T29] audit: type=1326 audit(1785591463.240:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.137081][ T29] audit: type=1326 audit(1785591463.240:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.171497][ T6812] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1567.205760][ T6812] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1567.214264][ T29] audit: type=1326 audit(1785591463.240:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.262269][ T29] audit: type=1326 audit(1785591463.240:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.266728][ T6812] usb 9-1: config 0 has no interface number 0 [ 1567.287695][ T29] audit: type=1326 audit(1785591463.240:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.377906][ T6812] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1567.399921][ T29] audit: type=1326 audit(1785591463.240:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.415061][ T6812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.429059][ T29] audit: type=1326 audit(1785591463.240:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.534977][ T6812] usb 9-1: Product: syz [ 1567.540870][ T29] audit: type=1326 audit(1785591463.240:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.565734][ T6812] usb 9-1: Manufacturer: syz [ 1567.580422][ T6812] usb 9-1: SerialNumber: syz [ 1567.602654][ T6812] usb 9-1: config 0 descriptor?? [ 1567.638876][ T29] audit: type=1326 audit(1785591463.240:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.7.5565" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1567.823860][T27722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.850608][T27722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.104785][ T6812] uvcvideo 9-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1568.129930][ T6812] uvcvideo 9-1:0.64: No valid video chain found. [ 1568.396418][ T187] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1568.560675][ T5755] usb 2-1: USB disconnect, device number 82 [ 1568.560743][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1568.560792][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1568.575168][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 1568.593430][ T187] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1568.604016][ T187] usb 4-1: config 0 has no interface number 0 [ 1568.613243][ T187] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1568.622599][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.631807][ T187] usb 4-1: Product: syz [ 1568.636199][ T187] usb 4-1: Manufacturer: syz [ 1568.640872][ T187] usb 4-1: SerialNumber: syz [ 1568.649829][ T187] usb 4-1: config 0 descriptor?? [ 1568.659651][ T187] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1569.059295][ T187] gspca_spca1528: reg_w err -71 [ 1569.085468][ T187] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1569.104237][ T187] usb 4-1: USB disconnect, device number 76 [ 1569.282508][T27743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5569'. [ 1569.294846][T27743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5569'. [ 1569.695261][T15589] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1569.733672][ T5755] usb 9-1: USB disconnect, device number 23 [ 1569.846703][T15589] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1569.858253][T15589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1569.864893][T15589] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1569.876051][T15589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.886998][T15589] usb 2-1: config 0 descriptor?? [ 1569.892797][T27746] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1570.015277][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1570.085732][ T5755] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1570.167048][ T24] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1570.175531][ T24] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1570.186338][ T24] usb 4-1: config 0 has no interface number 0 [ 1570.194511][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1570.203910][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.212030][ T24] usb 4-1: Product: syz [ 1570.216843][ T24] usb 4-1: Manufacturer: syz [ 1570.221481][ T24] usb 4-1: SerialNumber: syz [ 1570.228827][ T24] usb 4-1: config 0 descriptor?? [ 1570.235289][ T5755] usb 9-1: Using ep0 maxpacket: 8 [ 1570.245888][ T5755] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1570.256713][ T5755] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1570.266066][ T5755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.274087][ T5755] usb 9-1: Product: syz [ 1570.278418][ T5755] usb 9-1: Manufacturer: syz [ 1570.283068][ T5755] usb 9-1: SerialNumber: syz [ 1570.290351][ T5755] usb 9-1: config 0 descriptor?? [ 1570.298145][ T5755] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1570.306422][ T5755] usb 9-1: setting power ON [ 1570.311069][ T5755] dvb-usb: bulk message failed: -22 (2/0) [ 1570.318735][T15589] hid (null): global environment stack underflow [ 1570.328287][ T5755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1570.337606][T15589] hid (null): unknown global tag 0xc [ 1570.350190][ T5755] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1570.362335][T15589] hid_parser_main: 171 callbacks suppressed [ 1570.362349][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.375817][ T5755] usb 9-1: media controller created [ 1570.385314][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.396766][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1570.405193][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.413400][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.430873][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.438555][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.441126][T27748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.446269][ T5755] usb 9-1: selecting invalid altsetting 6 [ 1570.446291][ T5755] usb 9-1: digital interface selection failed (-22) [ 1570.446306][ T5755] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1570.447139][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.460311][T27748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.461077][ T5755] usb 9-1: setting power OFF [ 1570.497172][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.517768][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.532003][T15589] waterforce 0003:1044:7A4D.00A8: unknown main item tag 0x0 [ 1570.540059][ T5755] dvb-usb: bulk message failed: -22 (2/0) [ 1570.550718][T15589] waterforce 0003:1044:7A4D.00A8: global environment stack underflow [ 1570.559267][ T5755] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1570.568887][T15589] waterforce 0003:1044:7A4D.00A8: item 0 2 1 11 parsing failed [ 1570.576581][ T5755] (NULL device *): no alternate interface [ 1570.587511][T15589] waterforce 0003:1044:7A4D.00A8: hid parse failed with -22 [ 1570.601074][T15589] waterforce 0003:1044:7A4D.00A8: probe with driver waterforce failed with error -22 [ 1570.644961][ T5755] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1570.759831][ T24] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1570.775584][ T24] uvcvideo 4-1:0.64: No valid video chain found. [ 1571.022339][ T5880] usb 4-1: USB disconnect, device number 77 [ 1571.612785][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5575'. [ 1571.845348][ T5755] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1571.950807][T27768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5577'. [ 1571.995248][ T5755] usb 4-1: Using ep0 maxpacket: 8 [ 1572.003510][ T5755] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1572.012035][ T5755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.030077][ T5755] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1572.043027][ T5755] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1572.057025][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.067551][ T5755] usb 4-1: Product: syz [ 1572.072748][ T5755] usb 4-1: Manufacturer: syz [ 1572.078995][ T5755] usb 4-1: SerialNumber: syz [ 1572.088598][ T5755] usb 4-1: config 0 descriptor?? [ 1572.431229][ T187] usb 2-1: USB disconnect, device number 83 [ 1572.811361][ T24] usb 9-1: USB disconnect, device number 24 [ 1572.823969][ T5755] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1572.920845][T27781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5580'. [ 1572.932169][T27780] FAULT_INJECTION: forcing a failure. [ 1572.932169][T27780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1572.947154][T27781] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5580'. [ 1572.947740][T27780] CPU: 1 UID: 0 PID: 27780 Comm: syz.7.5582 Tainted: G L syzkaller #0 PREEMPT(full) [ 1572.947766][T27780] Tainted: [L]=SOFTLOCKUP [ 1572.947772][T27780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.947782][T27780] Call Trace: [ 1572.947790][T27780] [ 1572.947798][T27780] dump_stack_lvl+0xe8/0x150 [ 1572.947828][T27780] should_fail_ex+0x40c/0x560 [ 1572.947854][T27780] prepare_alloc_pages+0x230/0x650 [ 1572.947884][T27780] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1572.947911][T27780] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1572.947940][T27780] ? __pfx_policy_nodemask+0x10/0x10 [ 1572.947975][T27780] ? try_to_migrate+0x33d/0x400 [ 1572.947997][T27780] ? __pfx_try_to_migrate+0x10/0x10 [ 1572.948023][T27780] alloc_pages_mpol+0x212/0x380 [ 1572.948051][T27780] folio_alloc_mpol_noprof+0x39/0x160 [ 1572.948078][T27780] migrate_pages_batch+0xb08/0x4e50 [ 1572.948114][T27780] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1572.948138][T27780] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1572.948170][T27780] ? finish_task_switch+0x15d/0xc60 [ 1572.948188][T27780] ? lock_acquire+0x106/0x350 [ 1572.948220][T27780] ? finish_task_switch+0x412/0xc60 [ 1572.948238][T27780] ? lockdep_hardirqs_on+0x7a/0x110 [ 1572.948260][T27780] ? rcu_is_watching+0x15/0xb0 [ 1572.948278][T27780] ? trace_sched_exit_tp+0x3a/0x130 [ 1572.948297][T27780] ? __schedule+0x17ef/0x56c0 [ 1572.948321][T27780] migrate_pages+0x1b9f/0x2920 [ 1572.948341][T27780] ? vma_migratable+0x2ea/0x3e0 [ 1572.948373][T27780] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1572.948399][T27780] ? __pfx_migrate_pages+0x10/0x10 [ 1572.948419][T27780] ? irqentry_exit+0x218/0x8f0 [ 1572.948446][T27780] ? mas_next_slot+0xc91/0xd70 [ 1572.948577][T27780] __se_sys_mbind+0xe82/0x10e0 [ 1572.948608][T27780] ? __pfx___se_sys_mbind+0x10/0x10 [ 1572.948644][T27780] ? fput+0xa0/0xd0 [ 1572.948666][T27780] ? ksys_write+0x242/0x270 [ 1572.948687][T27780] ? __ia32_sys_mbind+0x21/0xf0 [ 1572.948712][T27780] __do_fast_syscall_32+0x23e/0x6f0 [ 1572.948734][T27780] ? do_fast_syscall_32+0x33/0x70 [ 1572.948754][T27780] ? lockdep_hardirqs_on+0x7a/0x110 [ 1572.948773][T27780] ? asm_int80_emulation+0x1a/0x20 [ 1572.948788][T27780] ? do_int80_emulation+0x29f/0x550 [ 1572.948809][T27780] ? trace_irq_disable+0x3b/0x140 [ 1572.948832][T27780] do_fast_syscall_32+0x33/0x70 [ 1572.948854][T27780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1572.948874][T27780] RIP: 0023:0xf7f380ec [ 1572.948890][T27780] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1572.948903][T27780] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 1572.948922][T27780] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000800000 [ 1572.948934][T27780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1572.948945][T27780] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1572.948992][T27780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1572.949001][T27780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1572.949026][T27780] [ 1573.007348][ T5755] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1573.281297][ T5755] usb 10-1: not running at top speed; connect to a high speed hub [ 1573.312729][ T5755] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1573.321200][ T5755] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1573.329669][ T5755] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.350594][ T5755] usb 10-1: config 14 has no interface number 0 [ 1573.372089][ T5755] usb 10-1: config 14 has no interface number 1 [ 1573.400608][ T5755] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1573.437078][ T5755] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1573.466203][ T5755] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1573.485694][ T5755] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1573.517353][ T5755] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1573.529861][ T5755] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1573.557327][ T5755] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1573.579545][ T5755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.596151][ T5755] usb 10-1: Product: syz [ 1573.607378][ T5755] usb 10-1: Manufacturer: syz [ 1573.619904][ T5755] usb 10-1: SerialNumber: syz [ 1574.081288][ T5755] legousbtower 10-1:14.57: interrupt endpoints not found [ 1574.102320][ T5755] legousbtower 10-1:14.228: get version request failed: -71 [ 1574.117274][ T5755] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1574.137930][ T5755] usb 10-1: USB disconnect, device number 27 [ 1574.485266][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1574.546912][T27802] trusted_key: syz.8.5588 sent an empty control message without MSG_MORE. [ 1574.559787][T27802] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5588'. [ 1574.623736][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5589'. [ 1574.652866][ T5755] usb 4-1: USB disconnect, device number 78 [ 1574.673689][ T24] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1574.699006][ T24] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1574.733457][ T24] usb 2-1: config 0 has no interface number 0 [ 1574.742244][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1574.752347][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.760724][ T24] usb 2-1: Product: syz [ 1574.765277][ T24] usb 2-1: Manufacturer: syz [ 1574.769966][ T24] usb 2-1: SerialNumber: syz [ 1574.778798][ T24] usb 2-1: config 0 descriptor?? [ 1574.988639][T27799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.998915][T27799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.056831][ T5682] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1575.145247][ T5755] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1575.213475][ T24] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1575.220886][ T5682] usb 10-1: Using ep0 maxpacket: 8 [ 1575.226558][ T24] uvcvideo 2-1:0.64: No valid video chain found. [ 1575.239806][ T5682] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1575.249647][ T5682] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1575.258619][ T5682] usb 10-1: Product: syz [ 1575.263069][ T5682] usb 10-1: Manufacturer: syz [ 1575.268311][ T5682] usb 10-1: SerialNumber: syz [ 1575.283967][ T5682] usb 10-1: config 0 descriptor?? [ 1575.298604][ T5682] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1575.307696][ T5755] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1575.319316][ T5755] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1575.321778][T27813] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5592'. [ 1575.326805][ T5755] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1575.345319][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.359728][ T5755] usb 4-1: config 0 descriptor?? [ 1575.373701][T27809] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1575.481016][ T5880] usb 2-1: USB disconnect, device number 84 [ 1575.790260][ T5755] hid (null): global environment stack underflow [ 1575.797011][ T5755] hid (null): unknown global tag 0xc [ 1575.825649][ T5755] hid_parser_main: 171 callbacks suppressed [ 1575.825671][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.849543][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.861827][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.876365][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.888684][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.901127][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.917488][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.934004][ T5682] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1575.941666][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.958232][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.969724][ T5682] sq905 10-1:0.0: probe with driver sq905 failed with error -71 [ 1575.984175][ T5755] waterforce 0003:1044:7A4D.00A9: unknown main item tag 0x0 [ 1575.997427][ T5682] usb 10-1: USB disconnect, device number 28 [ 1576.030263][ T5755] waterforce 0003:1044:7A4D.00A9: global environment stack underflow [ 1576.072897][ T5755] waterforce 0003:1044:7A4D.00A9: item 0 2 1 11 parsing failed [ 1576.095026][ T5755] waterforce 0003:1044:7A4D.00A9: hid parse failed with -22 [ 1576.112970][ T5755] waterforce 0003:1044:7A4D.00A9: probe with driver waterforce failed with error -22 [ 1576.343174][T27823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1576.361198][T27823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1576.715296][ T5755] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1576.865308][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 1576.872303][ T5755] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1576.881612][ T5755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.891751][ T5755] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1576.902447][ T5755] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1576.912808][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.920927][ T5755] usb 2-1: Product: syz [ 1576.925223][ T5755] usb 2-1: Manufacturer: syz [ 1576.929844][ T5755] usb 2-1: SerialNumber: syz [ 1576.937177][ T5755] usb 2-1: config 0 descriptor?? [ 1577.655213][ T187] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1577.746241][ T5880] usb 4-1: USB disconnect, device number 79 [ 1577.807152][ T187] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1577.815221][ T5755] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1577.824746][ T187] usb 10-1: not running at top speed; connect to a high speed hub [ 1577.833901][ T187] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1577.842827][ T187] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1577.851507][ T187] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.862215][ T187] usb 10-1: config 14 has no interface number 0 [ 1577.869020][ T187] usb 10-1: config 14 has no interface number 1 [ 1577.875996][ T187] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1577.887052][ T187] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1577.899727][ T187] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1577.911480][ T187] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1577.924163][ T187] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1577.931115][ T187] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1577.939911][ T187] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1577.949987][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.958198][ T187] usb 10-1: Product: syz [ 1577.962561][ T187] usb 10-1: Manufacturer: syz [ 1577.965280][ T5755] usb 8-1: Using ep0 maxpacket: 32 [ 1577.967658][ T187] usb 10-1: SerialNumber: syz [ 1577.979862][ T5755] usb 8-1: config 5 has an invalid interface number: 117 but max is 0 [ 1577.989341][ T5755] usb 8-1: config 5 has no interface number 0 [ 1577.995769][ T5755] usb 8-1: config 5 interface 117 has no altsetting 0 [ 1578.004749][ T5755] usb 8-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=f4.2d [ 1578.015882][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.023957][ T5755] usb 8-1: Product: syz [ 1578.029475][ T5755] usb 8-1: Manufacturer: syz [ 1578.034166][ T5755] usb 8-1: SerialNumber: syz [ 1578.125223][ T5880] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1578.279077][ T5880] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1578.287722][ T5880] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1578.299223][ T5880] usb 4-1: config 0 has no interface number 0 [ 1578.310801][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1578.322240][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.332532][ T5880] usb 4-1: Product: syz [ 1578.337073][ T5880] usb 4-1: Manufacturer: syz [ 1578.342288][ T5880] usb 4-1: SerialNumber: syz [ 1578.351463][ T5880] usb 4-1: config 0 descriptor?? [ 1578.392869][T27854] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5605'. [ 1578.441947][ T187] legousbtower 10-1:14.57: interrupt endpoints not found [ 1578.459995][ T187] legousbtower 10-1:14.228: get version request failed: -71 [ 1578.475446][ T187] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1578.506532][ T187] usb 10-1: USB disconnect, device number 29 [ 1578.577109][T27848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.621258][T27848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.864386][ T5880] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1578.882645][ T5880] uvcvideo 4-1:0.64: No valid video chain found. [ 1579.141718][ T24] usb 4-1: USB disconnect, device number 80 [ 1579.423489][T27866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5607'. [ 1579.439967][T27866] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5607'. [ 1579.502099][ T5880] usb 2-1: USB disconnect, device number 85 [ 1579.777121][T27872] netlink: 'syz.1.5608': attribute type 1 has an invalid length. [ 1579.800625][T27872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'. [ 1580.668459][ T5755] rndis_host 8-1:5.117: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1580.744685][ T5755] usb 8-1: USB disconnect, device number 42 [ 1581.085703][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1581.085719][ T29] audit: type=1326 audit(1785591477.330:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.125368][ T29] audit: type=1326 audit(1785591477.360:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.155401][ T29] audit: type=1326 audit(1785591477.360:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.182019][ T29] audit: type=1326 audit(1785591477.360:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.185198][ T5755] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1581.243803][ T29] audit: type=1326 audit(1785591477.360:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.273748][ T29] audit: type=1326 audit(1785591477.360:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.303324][ T29] audit: type=1326 audit(1785591477.360:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="syz.3.5616" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1581.376960][ T5755] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1581.410038][ T5755] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1581.428969][ T5755] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1581.451738][ T5755] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.473054][ T5755] usb 8-1: config 0 descriptor?? [ 1581.494873][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1581.513879][T27889] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1581.716305][T27904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5619'. [ 1581.743280][T27904] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5619'. [ 1581.835618][ T809] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1581.958372][ T5755] hid (null): global environment stack underflow [ 1581.966265][ T5755] hid (null): unknown global tag 0xc [ 1581.994592][ T5755] hid_parser_main: 171 callbacks suppressed [ 1581.994608][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.009558][ T809] usb 10-1: Using ep0 maxpacket: 8 [ 1582.015583][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.028890][ T809] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1582.037651][ T809] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1582.047232][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.055061][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.058561][ T809] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1582.075960][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.083537][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.092017][ T809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.100605][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.115278][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1582.124766][ T809] usb 10-1: Product: syz [ 1582.132927][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.142751][ T809] usb 10-1: Manufacturer: syz [ 1582.152275][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.160081][ T809] usb 10-1: SerialNumber: syz [ 1582.181166][ T5755] waterforce 0003:1044:7A4D.00AA: unknown main item tag 0x0 [ 1582.191499][ T809] usb 10-1: config 0 descriptor?? [ 1582.236647][ T5755] waterforce 0003:1044:7A4D.00AA: global environment stack underflow [ 1582.261802][ T5755] waterforce 0003:1044:7A4D.00AA: item 0 2 1 11 parsing failed [ 1582.279742][ T5755] waterforce 0003:1044:7A4D.00AA: hid parse failed with -22 [ 1582.298304][ T24] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1582.307225][ T5755] waterforce 0003:1044:7A4D.00AA: probe with driver waterforce failed with error -22 [ 1582.318654][ T24] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1582.342058][ T24] usb 4-1: config 0 has no interface number 0 [ 1582.358183][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1582.367947][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.378116][ T24] usb 4-1: Product: syz [ 1582.382381][ T24] usb 4-1: Manufacturer: syz [ 1582.389642][ T24] usb 4-1: SerialNumber: syz [ 1582.412704][ T24] usb 4-1: config 0 descriptor?? [ 1582.636558][T27907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.667356][T27907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.917104][ T24] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1582.934569][ T24] uvcvideo 4-1:0.64: No valid video chain found. [ 1583.182380][ T5755] usb 4-1: USB disconnect, device number 81 [ 1583.355279][ T5880] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1583.506927][ T5880] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1583.515806][ T5880] usb 9-1: config 0 has no interface number 0 [ 1583.521962][ T5880] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1583.538430][ T5880] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1583.558123][ T5880] usb 9-1: config 0 interface 255 has no altsetting 0 [ 1583.565302][ T5880] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1583.574424][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.586527][ T5880] usb 9-1: config 0 descriptor?? [ 1583.594947][ T5880] ums-realtek 9-1:0.255: USB Mass Storage device detected [ 1583.716200][T27930] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 1583.729262][T27930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1583.751193][ T5880] usb 8-1: USB disconnect, device number 43 [ 1583.874738][T27923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.908269][T27923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.652617][ T5880] usb 10-1: USB disconnect, device number 30 [ 1584.963438][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5631'. [ 1584.988290][T27948] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5631'. [ 1585.168067][T27953] tipc: Enabled bearer , priority 2 [ 1585.425195][ T5880] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1585.425220][ T5755] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1585.598796][ T5880] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 1585.613955][ T5880] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.627227][ T5880] usb 10-1: config 0 has no interface number 0 [ 1585.633855][ T5880] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1585.644940][ T6812] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1585.653590][ T5880] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1585.669996][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 1585.691929][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1585.706041][ T5880] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1585.713704][ T5755] usb 2-1: config 3 has an invalid interface number: 92 but max is 1 [ 1585.715989][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.723386][ T5755] usb 2-1: config 3 has an invalid interface number: 120 but max is 1 [ 1585.732713][ T5880] usb 10-1: Product: syz [ 1585.745650][ T5880] usb 10-1: Manufacturer: syz [ 1585.750733][ T5880] usb 10-1: SerialNumber: syz [ 1585.763174][ T5880] usb 10-1: config 0 descriptor?? [ 1585.783111][T27956] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1585.784581][ T5755] usb 2-1: config 3 has an invalid interface number: 92 but max is 1 [ 1585.818754][ T6812] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1585.838868][ T6812] usb 8-1: not running at top speed; connect to a high speed hub [ 1585.861489][ T6812] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1585.874078][ T5880] vmk80xx 10-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 1585.885501][ T6812] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1585.891419][ T5755] usb 2-1: config 3 has no interface number 0 [ 1585.897243][ T5880] vmk80xx 10-1:0.6: probe with driver vmk80xx failed with error -22 [ 1585.911112][ T6812] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.930274][ T6812] usb 8-1: config 14 has no interface number 0 [ 1585.942553][ T6812] usb 8-1: config 14 has no interface number 1 [ 1585.950061][ T6812] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1585.952148][ T5755] usb 2-1: config 3 has no interface number 1 [ 1585.961607][ T6812] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1585.990308][ T6812] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1586.012241][ T5755] usb 2-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 1586.026963][ T6812] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1586.041690][ T5755] usb 2-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1586.057617][ T5755] usb 2-1: config 3 interface 92 has no altsetting 0 [ 1586.064398][ T6812] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1586.075165][ T5755] usb 2-1: config 3 interface 92 has no altsetting 1 [ 1586.083054][ T6812] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1586.094610][ T5755] usb 2-1: config 3 interface 120 has no altsetting 0 [ 1586.113999][ T5755] usb 2-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7 [ 1586.140683][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.152528][ T6812] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1586.162298][ T6812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.174362][ T5755] usb 2-1: Product: syz [ 1586.178819][ T6812] usb 8-1: Product: syz [ 1586.178839][ T6812] usb 8-1: Manufacturer: syz [ 1586.178854][ T6812] usb 8-1: SerialNumber: syz [ 1586.202802][ T24] tipc: Node number set to 1908447837 [ 1586.225209][ T5755] usb 2-1: Manufacturer: syz [ 1586.231758][ T5755] usb 2-1: SerialNumber: syz [ 1586.257997][ T24] usb 9-1: USB disconnect, device number 25 [ 1586.460157][ T5755] usb 2-1: selecting invalid altsetting 1 [ 1586.479330][ T5755] sierra 2-1:3.92: Sierra USB modem converter detected [ 1586.503939][ T5755] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1586.540101][ T5755] sierra 2-1:3.120: Sierra USB modem converter detected [ 1586.561016][ T5755] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1586.593008][ T5755] usb 2-1: USB disconnect, device number 86 [ 1586.621205][ T5755] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1586.641960][ T6812] legousbtower 8-1:14.57: interrupt endpoints not found [ 1586.655529][ T24] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1586.668610][ T5755] sierra 2-1:3.92: device disconnected [ 1586.674213][ T6812] legousbtower 8-1:14.228: get version request failed: -71 [ 1586.690459][ T6812] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1586.720994][ T5755] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1586.740112][ T5755] sierra 2-1:3.120: device disconnected [ 1586.753752][ T6812] usb 8-1: USB disconnect, device number 44 [ 1586.858334][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1586.882516][ T24] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.907596][ T24] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1586.948050][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1586.965155][ T24] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1586.984546][ T24] usb 9-1: Product: syz [ 1586.994669][ T24] usb 9-1: Manufacturer: syz [ 1587.621685][T27984] netlink: 'syz.7.5642': attribute type 1 has an invalid length. [ 1587.630020][T27984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5642'. [ 1587.685271][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1587.777820][ T5755] usb 10-1: USB disconnect, device number 31 [ 1587.866577][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1587.877233][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1587.895027][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1587.923932][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1587.951186][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.966742][T27990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5643'. [ 1587.977499][ T24] usb 2-1: Product: syz [ 1587.988067][ T24] usb 2-1: Manufacturer: syz [ 1587.996648][ T24] usb 2-1: SerialNumber: syz [ 1588.004090][T27990] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5643'. [ 1588.017554][ T24] usb 2-1: config 0 descriptor?? [ 1588.813440][ T29] audit: type=1326 audit(1785591485.050:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1588.843756][ T29] audit: type=1326 audit(1785591485.050:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1588.870030][ T29] audit: type=1326 audit(1785591485.110:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71373eb code=0x7ffc0000 [ 1588.898553][ T29] audit: type=1326 audit(1785591485.110:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1588.923602][ T29] audit: type=1326 audit(1785591485.110:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1588.949549][ T29] audit: type=1326 audit(1785591485.110:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1588.974558][ T29] audit: type=1326 audit(1785591485.110:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1588.992999][T18651] Bluetooth: hci2: command 0x0406 tx timeout [ 1589.009877][ T29] audit: type=1326 audit(1785591485.110:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1589.035022][ T29] audit: type=1326 audit(1785591485.110:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1589.060015][ T29] audit: type=1326 audit(1785591485.120:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.7.5646" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1589.089355][T28006] netlink: 'syz.3.5656': attribute type 1 has an invalid length. [ 1589.107186][T28006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5656'. [ 1589.379845][ T6812] usb 9-1: USB disconnect, device number 26 [ 1589.841590][T28015] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5648'. [ 1590.265406][ T5755] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1590.444931][ T6812] usb 2-1: USB disconnect, device number 87 [ 1590.474300][ T5755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.503453][ T5755] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1590.542327][ T5755] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1590.587680][ T5755] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1590.614059][ T5755] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1590.640475][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.666566][ T5755] usb 4-1: Product: syz [ 1590.681258][ T5755] usb 4-1: Manufacturer: syz [ 1590.691944][ T5755] usb 4-1: SerialNumber: syz [ 1590.710319][ T5755] usb 4-1: config 0 descriptor?? [ 1590.823301][T28029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5654'. [ 1590.861932][T28029] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5654'. [ 1590.939726][T28021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.966668][T28021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.996624][ T5880] usb 4-1: USB disconnect, device number 82 [ 1591.085195][ T5755] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1591.249874][ T5755] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1591.265953][ T5755] usb 9-1: not running at top speed; connect to a high speed hub [ 1591.280732][ T5755] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1591.296082][ T5755] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1591.309311][ T5755] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.325267][ T5755] usb 9-1: config 14 has no interface number 0 [ 1591.345703][ T5755] usb 9-1: config 14 has no interface number 1 [ 1591.352219][ T5755] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1591.369733][ T5755] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1591.381883][ T5755] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1591.399447][ T5755] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1591.412887][ T5755] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1591.419890][ T5755] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1591.425379][ T5880] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1591.429988][ T5755] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1591.443932][ T5755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.452126][ T5755] usb 9-1: Product: syz [ 1591.457128][ T5755] usb 9-1: Manufacturer: syz [ 1591.461801][ T5755] usb 9-1: SerialNumber: syz [ 1591.585228][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1591.592359][ T5880] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1591.601910][ T5880] usb 2-1: config 0 has no interface number 0 [ 1591.608347][ T5880] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1591.622769][ T5880] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1591.634260][ T5880] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1591.655942][ T5880] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1591.667622][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1591.682166][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.692697][T28046] netlink: 'syz.3.5660': attribute type 1 has an invalid length. [ 1591.700698][ T5880] usb 2-1: Product: syz [ 1591.705013][ T5880] usb 2-1: Manufacturer: syz [ 1591.710017][ T5880] usb 2-1: SerialNumber: syz [ 1591.732268][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5660'. [ 1591.746168][ T5880] usb 2-1: config 0 descriptor?? [ 1591.754082][T28039] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1591.944548][ T5755] legousbtower 9-1:14.57: interrupt endpoints not found [ 1592.009555][ T5755] legousbtower 9-1:14.228: get version request failed: -71 [ 1592.027475][ T5755] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 1592.082220][ T5755] usb 9-1: USB disconnect, device number 27 [ 1592.178127][T28050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1593.286997][ T187] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1593.295316][ T5682] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1593.455177][ T187] usb 10-1: Using ep0 maxpacket: 8 [ 1593.456826][ T5682] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1593.462410][ T187] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1593.472203][ T5682] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1593.484688][ T187] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1593.494640][ T5682] usb 9-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1593.497072][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.516597][ T5682] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.532216][ T5682] usb 9-1: config 0 descriptor?? [ 1593.544169][T28057] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1593.544324][ T187] usb 10-1: Product: syz [ 1593.569900][ T187] usb 10-1: Manufacturer: syz [ 1593.582198][ T187] usb 10-1: SerialNumber: syz [ 1593.607683][ T187] usb 10-1: config 0 descriptor?? [ 1593.618083][ T187] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1593.658942][ T187] usb 10-1: setting power ON [ 1593.663646][ T187] dvb-usb: bulk message failed: -22 (2/0) [ 1593.725973][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1593.739714][ T187] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1593.748482][ T187] usb 10-1: media controller created [ 1593.768468][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1593.796283][ T187] usb 10-1: selecting invalid altsetting 6 [ 1593.802582][ T187] usb 10-1: digital interface selection failed (-22) [ 1593.809427][ T187] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1593.821926][ T187] usb 10-1: setting power OFF [ 1593.832899][ T187] dvb-usb: bulk message failed: -22 (2/0) [ 1593.840476][ T187] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1593.850200][ T187] (NULL device *): no alternate interface [ 1593.893188][ T187] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1593.960302][ T5682] hid (null): global environment stack underflow [ 1593.975319][ T5682] hid (null): unknown global tag 0xc [ 1594.004303][ T5682] hid_parser_main: 171 callbacks suppressed [ 1594.004318][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.020119][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.027519][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.034863][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.042985][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.050637][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.058732][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.066122][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.073445][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.080883][ T5682] waterforce 0003:1044:7A4D.00AB: unknown main item tag 0x0 [ 1594.089853][ T5682] waterforce 0003:1044:7A4D.00AB: global environment stack underflow [ 1594.101027][ T5682] waterforce 0003:1044:7A4D.00AB: item 0 2 1 11 parsing failed [ 1594.125069][ T5682] waterforce 0003:1044:7A4D.00AB: hid parse failed with -22 [ 1594.127148][ T5880] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1594.132546][ T5682] waterforce 0003:1044:7A4D.00AB: probe with driver waterforce failed with error -22 [ 1594.141314][ T5880] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 1594.167177][ T5755] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1594.176852][ T5880] usb 2-1: USB disconnect, device number 88 [ 1594.257438][T28070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5667'. [ 1594.269991][T28070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5667'. [ 1594.339453][ T5755] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1594.348053][ T5755] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1594.358419][ T5755] usb 8-1: config 0 has no interface number 0 [ 1594.369278][ T5755] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1594.378456][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.386725][ T5755] usb 8-1: Product: syz [ 1594.391078][ T5755] usb 8-1: Manufacturer: syz [ 1594.404494][ T5755] usb 8-1: SerialNumber: syz [ 1594.414582][ T5755] usb 8-1: config 0 descriptor?? [ 1594.629927][T28066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.639948][T28066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.695211][ T5880] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1594.847146][ T5880] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1594.856855][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.867252][ T5755] uvcvideo 8-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1594.874726][ T5755] uvcvideo 8-1:0.64: No valid video chain found. [ 1594.878528][ T5880] usb 2-1: USB2VGA dongle found at address 89 [ 1594.901013][ T5880] usb 2-1: Allocated 8 output buffers [ 1595.108206][ T5880] usb 2-1: Failed to early initialize device [ 1595.123469][ T5880] usb 2-1: USB disconnect, device number 89 [ 1595.143726][ T6812] usb 8-1: USB disconnect, device number 45 [ 1595.700251][T28075] FAULT_INJECTION: forcing a failure. [ 1595.700251][T28075] name failslab, interval 1, probability 0, space 9, times 0 [ 1595.714120][T28075] CPU: 1 UID: 0 PID: 28075 Comm: syz.7.5669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.714147][T28075] Tainted: [L]=SOFTLOCKUP [ 1595.714155][T28075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1595.714169][T28075] Call Trace: [ 1595.714176][T28075] [ 1595.714183][T28075] dump_stack_lvl+0xe8/0x150 [ 1595.714217][T28075] should_fail_ex+0x40c/0x560 [ 1595.714245][T28075] should_failslab+0xa8/0x100 [ 1595.714274][T28075] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1595.714294][T28075] ? local_lock_release+0x9c/0x160 [ 1595.714316][T28075] ? __alloc_skb+0x1d7/0x7a0 [ 1595.714330][T28075] ? __alloc_skb+0x1d7/0x7a0 [ 1595.714351][T28075] __alloc_skb+0x1d7/0x7a0 [ 1595.714373][T28075] _sctp_make_chunk+0x59/0x290 [ 1595.714397][T28075] sctp_make_datafrag_empty+0x12a/0x240 [ 1595.714415][T28075] ? __kasan_kmalloc+0x93/0xb0 [ 1595.714439][T28075] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1595.714464][T28075] ? sctp_datamsg_from_user+0x88/0xef0 [ 1595.714484][T28075] ? sctp_datamsg_from_user+0x88/0xef0 [ 1595.714500][T28075] ? sctp_auth_send_cid+0x69/0x250 [ 1595.714522][T28075] sctp_datamsg_from_user+0x735/0xef0 [ 1595.714562][T28075] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 1595.714593][T28075] ? process_measurement+0x443/0x1c10 [ 1595.714626][T28075] ? do_raw_spin_lock+0x12b/0x2f0 [ 1595.714654][T28075] ? lock_sock_nested+0x6a/0x100 [ 1595.714679][T28075] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1595.714705][T28075] ? sctp_sendmsg+0xbb8/0x2d00 [ 1595.714727][T28075] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 1595.714752][T28075] sctp_sendmsg+0x1bb5/0x2d00 [ 1595.714788][T28075] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1595.714832][T28075] ? aa_sk_perm+0x6d5/0x900 [ 1595.714863][T28075] ? sock_rps_record_flow+0x19/0x350 [ 1595.714885][T28075] ? inet_sendmsg+0x298/0x320 [ 1595.714906][T28075] ? __pfx_inet_sendmsg+0x10/0x10 [ 1595.714923][T28075] sock_sendmsg_nosec+0x10e/0x180 [ 1595.714950][T28075] ____sys_sendmsg+0x54e/0x850 [ 1595.714977][T28075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.715011][T28075] ___sys_sendmsg+0x2a5/0x360 [ 1595.715031][T28075] ? __lock_acquire+0x683/0x2cf0 [ 1595.715059][T28075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.715084][T28075] ? kstrtoull+0x12f/0x1d0 [ 1595.715126][T28075] ? __fget_files+0x2a/0x420 [ 1595.715148][T28075] ? __fget_files+0x3a2/0x420 [ 1595.715177][T28075] __sys_sendmmsg+0x2de/0x4d0 [ 1595.715203][T28075] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1595.715247][T28075] ? fput+0xa0/0xd0 [ 1595.715269][T28075] ? ksys_write+0x242/0x270 [ 1595.715294][T28075] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1595.715319][T28075] __do_fast_syscall_32+0x23e/0x6f0 [ 1595.715344][T28075] ? do_fast_syscall_32+0x33/0x70 [ 1595.715362][T28075] ? lockdep_hardirqs_on+0x7a/0x110 [ 1595.715380][T28075] ? asm_int80_emulation+0x1a/0x20 [ 1595.715397][T28075] ? do_int80_emulation+0x29f/0x550 [ 1595.715417][T28075] ? trace_irq_disable+0x3b/0x140 [ 1595.715441][T28075] do_fast_syscall_32+0x33/0x70 [ 1595.715463][T28075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1595.715483][T28075] RIP: 0023:0xf7f380ec [ 1595.715500][T28075] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1595.715515][T28075] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1595.715534][T28075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004c40 [ 1595.715546][T28075] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1595.715556][T28075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1595.715566][T28075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1595.715576][T28075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1595.715601][T28075] [ 1596.160431][ T6812] usb 9-1: USB disconnect, device number 28 [ 1596.232481][ T5880] usb 10-1: USB disconnect, device number 32 [ 1596.544873][T28087] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5672'. [ 1596.574397][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1596.975198][ T5755] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1597.138129][ T5755] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1597.156796][ T5755] usb 10-1: not running at top speed; connect to a high speed hub [ 1597.181394][ T5755] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1597.204168][T28096] netlink: 'syz.3.5676': attribute type 15 has an invalid length. [ 1597.215588][ T5755] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1597.240227][T28098] netlink: 'syz.1.5675': attribute type 1 has an invalid length. [ 1597.273652][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1597.282599][ T5755] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.282626][ T5755] usb 10-1: config 14 has no interface number 0 [ 1597.282642][ T5755] usb 10-1: config 14 has no interface number 1 [ 1597.282703][ T5755] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1597.282726][ T5755] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1597.282752][ T5755] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1597.282775][ T5755] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1597.282796][ T5755] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1597.282813][ T5755] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1597.379812][ T5755] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1597.405600][ T5755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.440629][ T5755] usb 10-1: Product: syz [ 1597.456021][ T5755] usb 10-1: Manufacturer: syz [ 1597.491800][ T5755] usb 10-1: SerialNumber: syz [ 1597.575872][T28103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5678'. [ 1597.615987][T28103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5678'. [ 1597.755621][ T5682] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1597.975207][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 1597.987792][ T5682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.016198][ T5755] legousbtower 10-1:14.57: interrupt endpoints not found [ 1598.024873][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1598.057061][ T5755] legousbtower 10-1:14.228: get version request failed: -71 [ 1598.067030][ T5755] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1598.076719][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1598.106266][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1598.120612][ T5755] usb 10-1: USB disconnect, device number 33 [ 1598.141812][ T5682] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1598.162012][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1598.186015][ T5682] usb 4-1: Product: syz [ 1598.190989][ T5682] usb 4-1: Manufacturer: syz [ 1598.198814][ T5682] usb 4-1: SerialNumber: syz [ 1598.218858][ T5682] usb 4-1: config 0 descriptor?? [ 1598.315196][ T5682] rc_core: IR keymap rc-imon-rsc not found [ 1598.324004][ T5682] Registered IR keymap rc-empty [ 1598.399916][ T5682] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1598.464005][ T5682] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input148 [ 1598.514234][ T5682] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 1598.559067][ T5682] usb 4-1: USB disconnect, device number 83 [ 1598.678555][ T5755] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1598.858997][ T5755] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.892812][ T5755] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1598.926690][ T5755] usb 9-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 1598.945661][ T5755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.954022][ T5755] usb 9-1: Product: syz [ 1598.961045][ T5755] usb 9-1: Manufacturer: syz [ 1598.971693][ T5755] usb 9-1: SerialNumber: syz [ 1599.145302][ T5880] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1599.195250][ T6812] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1599.201791][ T5755] usb 9-1: 0:1 : does not exist [ 1599.208934][ T5755] usb 9-1: unit 0 not found! [ 1599.213741][ T5755] usb 9-1: unit 63 not found! [ 1599.259664][ T5755] usb 9-1: USB disconnect, device number 29 [ 1599.292603][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1599.307022][ T5880] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1599.334285][ T5880] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1599.342500][ T5880] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1599.354591][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.362804][ T6812] usb 2-1: Using ep0 maxpacket: 8 [ 1599.369582][ T6812] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1599.381858][ T5880] usb 10-1: config 0 descriptor?? [ 1599.390984][T28118] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1599.402924][ T6812] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1599.413700][ T6812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.423381][ T6812] usb 2-1: Product: syz [ 1599.427727][ T6812] usb 2-1: Manufacturer: syz [ 1599.432379][ T6812] usb 2-1: SerialNumber: syz [ 1599.439658][ T6812] usb 2-1: config 0 descriptor?? [ 1599.448694][ T6812] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1599.459152][ T6812] usb 2-1: setting power ON [ 1599.463699][ T6812] dvb-usb: bulk message failed: -22 (2/0) [ 1599.472056][ T6812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1599.482229][ T6812] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1599.492309][ T6812] usb 2-1: media controller created [ 1599.507532][ T6812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1599.527697][ T6812] usb 2-1: selecting invalid altsetting 6 [ 1599.533494][ T6812] usb 2-1: digital interface selection failed (-22) [ 1599.540609][ T6812] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1599.550210][ T6812] usb 2-1: setting power OFF [ 1599.554892][ T6812] dvb-usb: bulk message failed: -22 (2/0) [ 1599.561058][ T6812] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1599.570961][ T6812] (NULL device *): no alternate interface [ 1599.593545][ T6812] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1599.813239][ T5880] hid (null): global environment stack underflow [ 1599.821335][ T5880] hid (null): unknown global tag 0xc [ 1599.842678][ T5880] hid_parser_main: 171 callbacks suppressed [ 1599.842700][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.845290][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5686'. [ 1599.850049][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.874554][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.895578][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.904200][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.925475][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.948710][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.964359][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.972096][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1599.979774][ T5880] waterforce 0003:1044:7A4D.00AC: unknown main item tag 0x0 [ 1600.012076][ T5880] waterforce 0003:1044:7A4D.00AC: global environment stack underflow [ 1600.020297][ T5880] waterforce 0003:1044:7A4D.00AC: item 0 2 1 11 parsing failed [ 1600.055944][ T5880] waterforce 0003:1044:7A4D.00AC: hid parse failed with -22 [ 1600.063425][ T5880] waterforce 0003:1044:7A4D.00AC: probe with driver waterforce failed with error -22 [ 1600.106870][ T5880] usb 10-1: USB disconnect, device number 34 [ 1600.505407][ T187] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1600.657955][ T5880] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1600.668183][ T187] usb 8-1: Using ep0 maxpacket: 32 [ 1600.678068][ T187] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 1600.686552][ T187] usb 8-1: config 0 has no interface number 0 [ 1600.692740][ T187] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1600.703337][ T187] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1600.714076][ T187] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1600.726507][ T187] usb 8-1: config 0 interface 196 has no altsetting 0 [ 1600.736580][ T187] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1600.746535][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.756010][ T187] usb 8-1: Product: syz [ 1600.760244][ T187] usb 8-1: Manufacturer: syz [ 1600.764837][ T187] usb 8-1: SerialNumber: syz [ 1600.773119][ T187] usb 8-1: config 0 descriptor?? [ 1600.782585][T28133] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1600.835340][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 1600.843437][ T5880] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1600.852999][ T5880] usb 9-1: config 179 has no interface number 0 [ 1600.860837][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1600.873594][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1600.886518][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1600.899862][ T5880] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1600.912299][ T5880] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1600.928539][ T6812] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1600.938591][ T5880] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1600.953571][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.968036][T28135] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1601.095298][ T6812] usb 10-1: Using ep0 maxpacket: 8 [ 1601.104321][ T6812] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1601.113738][ T6812] usb 10-1: config 179 has no interface number 0 [ 1601.121939][ T6812] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1601.142747][ T6812] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1601.155648][ T6812] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1601.169042][ T6812] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1601.180948][ T6812] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1601.197078][ T6812] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1601.206346][ T6812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.222680][T28137] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1601.357140][T28143] netlink: 'syz.3.5692': attribute type 1 has an invalid length. [ 1601.365867][T28143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1602.078012][ T5755] usb 2-1: USB disconnect, device number 90 [ 1603.259293][ T24] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1603.282572][ T187] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1603.305409][ T187] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 1603.366288][ T187] usb 8-1: USB disconnect, device number 46 [ 1603.437827][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1603.468163][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1603.515649][ T24] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1603.555341][ T24] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1603.600179][ T24] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.614968][ T5682] usb 9-1: USB disconnect, device number 30 [ 1603.614968][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1603.615011][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1603.680620][ T24] usb 2-1: config 14 has no interface number 0 [ 1603.708730][ T24] usb 2-1: config 14 has no interface number 1 [ 1603.734808][ T24] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1603.795069][ T24] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1603.834057][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1603.880914][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1603.924807][ T24] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1603.952383][ T24] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1603.977284][ T24] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1603.997370][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.024644][ T24] usb 2-1: Product: syz [ 1604.040590][ T24] usb 2-1: Manufacturer: syz [ 1604.062710][ T24] usb 2-1: SerialNumber: syz [ 1604.672713][ T24] legousbtower 2-1:14.57: interrupt endpoints not found [ 1604.703200][ T5755] usb 10-1: USB disconnect, device number 35 [ 1604.703206][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1604.703347][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1604.725256][ T24] legousbtower 2-1:14.228: get version request failed: -71 [ 1604.757617][ T24] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 1604.826511][ T24] usb 2-1: USB disconnect, device number 91 [ 1605.035267][ T187] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1605.244235][ T187] usb 9-1: config index 0 descriptor too short (expected 46747, got 36) [ 1605.272973][ T187] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1605.324789][ T187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1605.368362][ T187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.408646][ T187] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1605.455256][ T187] usb 9-1: New USB device found, idVendor=056a, idProduct=4bc0, bcdDevice= 0.00 [ 1605.488689][ T187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.512673][ T187] usb 9-1: config 0 descriptor?? [ 1605.560149][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5700'. [ 1605.583433][T28174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5700'. [ 1605.665283][ T5880] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1605.771338][T28183] fuse: Unknown parameter '' [ 1605.797394][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1605.797405][ T29] audit: type=1326 audit(1785591502.040:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1605.828815][ T29] audit: type=1326 audit(1785591502.040:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1605.853786][ T29] audit: type=1326 audit(1785591502.040:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1605.857565][ T5880] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1605.880448][ T29] audit: type=1326 audit(1785591502.040:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1605.899116][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.915248][ T29] audit: type=1326 audit(1785591502.040:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1605.951956][ T29] audit: type=1326 audit(1785591502.040:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1605.980340][ T29] audit: type=1326 audit(1785591502.040:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1606.007230][ T29] audit: type=1326 audit(1785591502.040:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1606.033059][ T29] audit: type=1326 audit(1785591502.040:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1606.065427][ T6812] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1606.067929][ T29] audit: type=1326 audit(1785591502.040:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28182 comm="syz.7.5703" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1606.074917][ T5690] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1606.128088][T28165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.137850][T28165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.255301][ T6812] usb 4-1: Using ep0 maxpacket: 32 [ 1606.263454][ T5690] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1606.276589][ T6812] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1606.286489][ T6812] usb 4-1: config 0 has no interface number 0 [ 1606.293700][ T5690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1606.300634][ T6812] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1606.311046][ T5690] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1606.320227][ T6812] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1606.330752][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.339288][ T6812] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1606.351518][ T5690] usb 2-1: config 0 descriptor?? [ 1606.360808][T28180] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1606.372464][ T6812] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1606.394882][ T5880] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1606.414116][ T6812] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1606.423875][ T6812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.432412][ T5880] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1606.441440][ T6812] usb 4-1: Product: syz [ 1606.448278][ T5880] cxacru 10-1:1.0: probe with driver cxacru failed with error -71 [ 1606.457381][ T6812] usb 4-1: Manufacturer: syz [ 1606.462050][ T6812] usb 4-1: SerialNumber: syz [ 1606.481502][ T5880] usb 10-1: USB disconnect, device number 36 [ 1606.492602][ T6812] usb 4-1: config 0 descriptor?? [ 1606.501365][T28181] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1606.682668][ T187] usbhid 9-1:0.0: can't add hid device: -71 [ 1606.696812][ T187] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1606.741673][ T187] usb 9-1: USB disconnect, device number 31 [ 1606.789213][ T5690] hid (null): global environment stack underflow [ 1606.803593][ T5690] hid (null): unknown global tag 0xc [ 1606.843501][ T5690] hid_parser_main: 171 callbacks suppressed [ 1606.843567][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1606.878012][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1606.899895][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1606.922117][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1606.937568][T28192] netlink: 'syz.8.5705': attribute type 1 has an invalid length. [ 1606.945578][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1606.958854][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1606.969801][T28192] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5705'. [ 1606.981740][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1607.004499][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1607.030616][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1607.040989][ T5690] waterforce 0003:1044:7A4D.00AD: unknown main item tag 0x0 [ 1607.069517][ T5690] waterforce 0003:1044:7A4D.00AD: global environment stack underflow [ 1607.087597][ T5690] waterforce 0003:1044:7A4D.00AD: item 0 2 1 11 parsing failed [ 1607.109554][ T5690] waterforce 0003:1044:7A4D.00AD: hid parse failed with -22 [ 1607.133154][ T5690] waterforce 0003:1044:7A4D.00AD: probe with driver waterforce failed with error -22 [ 1607.399494][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.409485][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.138058][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5709'. [ 1608.154046][T28206] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5709'. [ 1608.345276][ T5755] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1608.496847][ T5755] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1608.509011][ T5755] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1608.515821][ T5755] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1608.525288][ T5755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.537245][ T5755] usb 10-1: config 0 descriptor?? [ 1608.543121][T28204] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1608.553490][ T187] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1608.661240][ T6812] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1608.662133][ T24] usb 2-1: USB disconnect, device number 92 [ 1608.680163][ T6812] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 1608.720954][ T187] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1608.738022][ T6812] usb 4-1: USB disconnect, device number 84 [ 1608.749629][ T187] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1608.780371][ T187] usb 9-1: config 0 has no interface number 0 [ 1608.800464][ T187] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1608.814801][ T187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.835624][ T187] usb 9-1: Product: syz [ 1608.841310][ T187] usb 9-1: Manufacturer: syz [ 1608.855148][ T187] usb 9-1: SerialNumber: syz [ 1608.862196][ T187] usb 9-1: config 0 descriptor?? [ 1608.976771][ T5755] hid (null): global environment stack underflow [ 1608.983465][ T5755] hid (null): unknown global tag 0xc [ 1609.014144][ T5755] waterforce 0003:1044:7A4D.00AE: global environment stack underflow [ 1609.024649][ T5755] waterforce 0003:1044:7A4D.00AE: item 0 2 1 11 parsing failed [ 1609.037895][ T5755] waterforce 0003:1044:7A4D.00AE: hid parse failed with -22 [ 1609.046362][ T5755] waterforce 0003:1044:7A4D.00AE: probe with driver waterforce failed with error -22 [ 1609.080092][T28208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.090475][T28208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.116255][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1609.223658][ T5755] usb 10-1: USB disconnect, device number 37 [ 1609.266840][ T6812] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1609.287445][ T24] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1609.304501][ T24] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1609.306766][ T187] uvcvideo 9-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1609.323323][ T24] usb 2-1: config 0 has no interface number 0 [ 1609.331550][ T187] uvcvideo 9-1:0.64: No valid video chain found. [ 1609.332141][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1609.354185][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.362535][ T24] usb 2-1: Product: syz [ 1609.367918][ T24] usb 2-1: Manufacturer: syz [ 1609.372748][ T24] usb 2-1: SerialNumber: syz [ 1609.381190][ T24] usb 2-1: config 0 descriptor?? [ 1609.461549][ T6812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1609.470898][ T6812] usb 4-1: not running at top speed; connect to a high speed hub [ 1609.481022][ T6812] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1609.490697][ T6812] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1609.499986][ T6812] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.510815][ T6812] usb 4-1: config 14 has no interface number 0 [ 1609.517152][ T6812] usb 4-1: config 14 has no interface number 1 [ 1609.534007][ T6812] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1609.546402][ T6812] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1609.561231][ T6812] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1609.576487][ T6812] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1609.588420][ T6812] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1609.601136][ T187] usb 9-1: USB disconnect, device number 32 [ 1609.616204][ T6812] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1609.631321][T28214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.634159][ T6812] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1609.653825][ T6812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.659507][T28214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.666370][ T6812] usb 4-1: Product: syz [ 1609.674809][ T6812] usb 4-1: Manufacturer: syz [ 1609.680903][ T6812] usb 4-1: SerialNumber: syz [ 1609.927206][ T24] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1609.934567][ T24] uvcvideo 2-1:0.64: No valid video chain found. [ 1610.045222][ T5755] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 1610.157255][ T6812] legousbtower 4-1:14.57: interrupt endpoints not found [ 1610.202600][ T5755] usb 8-1: config 0 has no interfaces? [ 1610.206191][ T6812] legousbtower 4-1:14.228: get version request failed: -71 [ 1610.224853][ T6812] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 1610.227623][ T5755] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1610.241040][ T6812] usb 4-1: USB disconnect, device number 85 [ 1610.300250][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.318695][ T5755] usb 8-1: Product: syz [ 1610.326785][ T5755] usb 8-1: Manufacturer: syz [ 1610.331657][ T5755] usb 8-1: SerialNumber: syz [ 1610.339671][ T5755] usb 8-1: config 0 descriptor?? [ 1610.380503][ T187] usb 2-1: USB disconnect, device number 93 [ 1610.609578][ T5755] usb 8-1: USB disconnect, device number 47 [ 1610.800648][T28228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5718'. [ 1610.813062][T28228] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5718'. [ 1610.949692][T28232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1611.126282][T28239] netlink: 'syz.8.5720': attribute type 1 has an invalid length. [ 1611.153810][T28239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5720'. [ 1611.225693][ T6812] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1611.415208][ T6812] usb 2-1: Using ep0 maxpacket: 32 [ 1611.434372][ T6812] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.468658][ T6812] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1611.520774][ T6812] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1611.543317][ T6812] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1611.571072][ T6812] usb 2-1: Product: syz [ 1611.590080][ T6812] usb 2-1: Manufacturer: syz [ 1611.621244][ T6812] hub 2-1:4.0: bad descriptor, ignoring hub [ 1611.642623][ T6812] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1611.671248][ T6812] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1612.005275][ T5755] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1612.178981][ T5755] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1612.206255][ T24] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1612.218517][ T5755] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1612.235626][ T5755] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1612.255136][ T5755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.276903][ T5755] usb 10-1: config 0 descriptor?? [ 1612.284379][T28249] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1612.397112][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1612.404265][ T24] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1612.414918][ T24] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1612.424338][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.432388][ T24] usb 8-1: Product: syz [ 1612.436653][ T24] usb 8-1: Manufacturer: syz [ 1612.441281][ T24] usb 8-1: SerialNumber: syz [ 1612.452071][ T24] usb 8-1: config 0 descriptor?? [ 1612.456627][ T6812] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1612.469064][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1612.485407][ T24] usb 8-1: setting power ON [ 1612.489961][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1612.501946][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1612.515209][T28258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1612.524903][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1612.533592][ T24] usb 8-1: media controller created [ 1612.547959][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1612.566770][ T24] usb 8-1: selecting invalid altsetting 6 [ 1612.572577][ T24] usb 8-1: digital interface selection failed (-22) [ 1612.579540][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1612.588934][ T24] usb 8-1: setting power OFF [ 1612.593591][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1612.599650][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1612.612011][ T24] (NULL device *): no alternate interface [ 1612.616877][ T6812] usb 9-1: Using ep0 maxpacket: 8 [ 1612.633637][ T6812] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1612.647306][ T6812] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1612.657485][ T6812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.685056][ T6812] usb 9-1: Product: syz [ 1612.708903][ T5755] hid (null): global environment stack underflow [ 1612.709372][ T6812] usb 9-1: Manufacturer: syz [ 1612.732214][ T5755] hid (null): unknown global tag 0xc [ 1612.759981][ T6812] usb 9-1: SerialNumber: syz [ 1612.793695][ T5755] hid_parser_main: 352 callbacks suppressed [ 1612.793713][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.803462][ T6812] usb 9-1: config 0 descriptor?? [ 1612.839041][ T6812] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1612.850042][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.852770][ T6812] usb 9-1: setting power ON [ 1612.864361][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.880754][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.881052][ T6812] dvb-usb: bulk message failed: -22 (2/0) [ 1612.916081][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.931943][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.949269][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.963346][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.971403][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.978379][ T6812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1612.988370][ T5755] waterforce 0003:1044:7A4D.00AF: unknown main item tag 0x0 [ 1612.990556][ T5755] waterforce 0003:1044:7A4D.00AF: global environment stack underflow [ 1613.003012][ T6812] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1613.018001][ T6812] usb 9-1: media controller created [ 1613.029738][ T5755] waterforce 0003:1044:7A4D.00AF: item 0 2 1 11 parsing failed [ 1613.061690][ T6812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1613.080646][ T5755] waterforce 0003:1044:7A4D.00AF: hid parse failed with -22 [ 1613.100796][ T5755] waterforce 0003:1044:7A4D.00AF: probe with driver waterforce failed with error -22 [ 1613.141447][ T5755] usb 10-1: USB disconnect, device number 38 [ 1613.164993][ T6812] usb 9-1: selecting invalid altsetting 6 [ 1613.189582][ T6812] usb 9-1: digital interface selection failed (-22) [ 1613.198596][ T6812] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1613.208715][ T6812] usb 9-1: setting power OFF [ 1613.213553][ T6812] dvb-usb: bulk message failed: -22 (2/0) [ 1613.255547][ T6812] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1613.281829][ T6812] (NULL device *): no alternate interface [ 1613.331380][ T6812] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1613.785747][ T6812] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1613.948614][ T6812] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1613.963654][ T6812] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1613.976955][ T6812] usb 4-1: config 0 has no interface number 0 [ 1613.993053][ T6812] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1614.010838][ T6812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.036795][ T6812] usb 4-1: Product: syz [ 1614.045619][ T6812] usb 4-1: Manufacturer: syz [ 1614.050909][ T6812] usb 4-1: SerialNumber: syz [ 1614.069067][ T6812] usb 4-1: config 0 descriptor?? [ 1614.286233][T28267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.305178][T28267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.340727][ T187] usb 2-1: reset high-speed USB device number 94 using dummy_hcd [ 1614.363821][ T187] usb 2-1: device reset changed ep0 maxpacket size! [ 1614.386816][ T187] usb 2-1: USB disconnect, device number 94 [ 1614.551269][ T6812] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1614.559283][ T6812] uvcvideo 4-1:0.64: No valid video chain found. [ 1614.580294][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5729'. [ 1614.695430][ T187] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1614.815952][ T6812] usb 4-1: USB disconnect, device number 86 [ 1614.847386][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1614.859102][ T187] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1614.869008][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1614.879056][ T187] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1614.892766][ T187] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1614.902228][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.910585][ T187] usb 2-1: Product: syz [ 1614.914778][ T187] usb 2-1: Manufacturer: syz [ 1614.920336][ T187] usb 2-1: SerialNumber: syz [ 1614.928684][ T187] usb 2-1: config 0 descriptor?? [ 1614.936929][ T187] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1614.975939][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1615.002721][ T24] usb 8-1: USB disconnect, device number 48 [ 1615.151106][ T187] scsi host1: usb-storage 2-1:0.0 [ 1615.248483][ T5682] usb 9-1: USB disconnect, device number 33 [ 1615.312101][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5732'. [ 1615.341357][T28284] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5732'. [ 1615.396793][ T24] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1615.567988][ T24] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1615.586207][ T6812] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1615.617720][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1615.640946][ T24] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1615.662215][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.689801][ T24] usb 8-1: config 0 descriptor?? [ 1615.704401][T28279] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1615.805243][ T5682] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1615.843131][ T6812] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1615.856719][ T6812] usb 10-1: not running at top speed; connect to a high speed hub [ 1615.866635][ T6812] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1615.880748][ T6812] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1615.897766][ T6812] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.921823][ T6812] usb 10-1: config 14 has no interface number 0 [ 1615.945199][ T6812] usb 10-1: config 14 has no interface number 1 [ 1615.957975][ T5682] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1615.964834][ T6812] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1615.970506][ T5682] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1615.997727][ T5682] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1616.015408][ T5682] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1616.024731][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1616.033039][ T5682] usb 4-1: Product: syz [ 1616.037328][ T5682] usb 4-1: Manufacturer: syz [ 1616.041985][ T5682] usb 4-1: SerialNumber: syz [ 1616.054926][ T6812] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1616.056004][ T5682] usb 4-1: config 0 descriptor?? [ 1616.067191][ T6812] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1616.083931][ T6812] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1616.124261][ T6812] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1616.141843][ T6812] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1616.160326][ T6812] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1616.179991][ T6812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.200055][ T6812] usb 10-1: Product: syz [ 1616.200665][ T24] hid (null): global environment stack underflow [ 1616.217927][ T5682] usb 4-1: selecting invalid altsetting 0 [ 1616.230725][ T6812] usb 10-1: Manufacturer: syz [ 1616.247802][ T6812] usb 10-1: SerialNumber: syz [ 1616.275867][ T24] hid (null): unknown global tag 0xc [ 1616.457781][ T24] waterforce 0003:1044:7A4D.00B0: global environment stack underflow [ 1616.487654][ T24] waterforce 0003:1044:7A4D.00B0: item 0 2 1 11 parsing failed [ 1616.506015][ T24] waterforce 0003:1044:7A4D.00B0: hid parse failed with -22 [ 1616.520169][ T24] waterforce 0003:1044:7A4D.00B0: probe with driver waterforce failed with error -22 [ 1616.552688][T28290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.600157][T28290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.611761][ T24] usb 8-1: USB disconnect, device number 49 [ 1616.794263][ T6812] legousbtower 10-1:14.57: interrupt endpoints not found [ 1616.819911][ T6812] legousbtower 10-1:14.228: get version request failed: -71 [ 1616.833617][ T6812] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1616.883530][ T6812] usb 10-1: USB disconnect, device number 39 [ 1617.133950][T28290] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 1617.146932][ T5880] usb 2-1: USB disconnect, device number 95 [ 1617.190311][ T5690] usb 4-1: USB disconnect, device number 87 [ 1617.293451][ T6812] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1617.512478][ T6812] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1617.536441][ T6812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.900761][T28310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5739'. [ 1618.015335][ T5880] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1618.033815][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5742'. [ 1618.195200][ T5880] usb 10-1: Using ep0 maxpacket: 8 [ 1618.208253][ T5880] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1618.216929][ T5880] usb 10-1: config 179 has no interface number 0 [ 1618.223471][ T5880] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1618.238664][ T5880] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1618.251532][ T5880] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1618.305232][ T5880] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1618.330604][ T5880] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1618.352340][ T5880] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1618.368591][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.394543][T28306] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1618.472384][T28319] netlink: 'syz.7.5743': attribute type 1 has an invalid length. [ 1618.489915][T28319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5743'. [ 1618.905370][ T809] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1619.081138][ T809] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1619.092163][ T809] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1619.114138][ T809] usb 4-1: config 0 has no interface number 0 [ 1619.134310][ T809] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1619.162533][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.202378][ T809] usb 4-1: Product: syz [ 1619.212387][ T809] usb 4-1: Manufacturer: syz [ 1619.227432][ T809] usb 4-1: SerialNumber: syz [ 1619.257583][ T809] usb 4-1: config 0 descriptor?? [ 1619.448465][T28328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5745'. [ 1619.481770][T28322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.523306][T28322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.804642][ T809] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1619.833184][ T809] uvcvideo 4-1:0.64: No valid video chain found. [ 1620.082094][ T809] usb 4-1: USB disconnect, device number 88 [ 1620.346728][ T6812] cxacru_cm: 60 callbacks suppressed [ 1620.346752][ T6812] cxacru 9-1:1.0: send of cm 0x84 failed (-104) [ 1620.361809][ T6812] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 1620.374614][ T6812] ------------[ cut here ]------------ [ 1620.380294][ T6812] URB ffff88802b099600 submitted while active [ 1620.386603][ T6812] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:9/6812 [ 1620.397046][ T6812] Modules linked in: [ 1620.401710][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.413652][ T6812] Tainted: [L]=SOFTLOCKUP [ 1620.418573][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1620.429008][ T6812] Workqueue: usb_hub_wq hub_event [ 1620.434157][ T6812] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1620.439783][ T6812] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 d9 cb d2 fa 49 83 3e 00 74 40 e8 5e 33 65 fa 48 8d 3d 07 ac 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 43 33 65 fa eb 05 e8 3c 33 [ 1620.459549][ T6812] RSP: 0018:ffffc90003896858 EFLAGS: 00010287 [ 1620.465969][ T6812] RAX: ffffffff8761e172 RBX: ffff88802b099600 RCX: 0000000000100000 [ 1620.474053][ T6812] RDX: ffffc90016022000 RSI: ffff88802b099600 RDI: ffffffff90658d80 [ 1620.482137][ T6812] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 1620.490212][ T6812] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000040 [ 1620.498311][ T6812] R13: 0000000000000000 R14: ffff88802b099608 R15: 0000000000000cc0 [ 1620.506523][ T6812] FS: 0000000000000000(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 1620.516821][ T6812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1620.523431][ T6812] CR2: 00000000f53d4ff4 CR3: 000000007f45c000 CR4: 00000000003526f0 [ 1620.531966][ T6812] Call Trace: [ 1620.535348][ T6812] [ 1620.538336][ T6812] ? __raw_spin_lock_init+0x45/0x100 [ 1620.543685][ T6812] ? __init_swait_queue_head+0xa8/0x150 [ 1620.549348][ T6812] cxacru_cm+0x21a/0xf10 [ 1620.553728][ T6812] ? usb_new_device+0x99d/0x1620 [ 1620.558865][ T6812] ? hub_event+0x28e8/0x4d30 [ 1620.563525][ T6812] ? process_scheduled_works+0xa8e/0x14e0 [ 1620.569426][ T6812] ? kthread+0x388/0x470 [ 1620.573848][ T6812] ? __pfx_cxacru_cm+0x10/0x10 [ 1620.578875][ T6812] ? __kasan_kmalloc+0x93/0xb0 [ 1620.583744][ T6812] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1620.589883][ T6812] ? __kmalloc_cache_noprof+0x150/0x660 [ 1620.595695][ T6812] ? cxacru_poll_status+0x14b/0x1110 [ 1620.601149][ T6812] ? cxacru_poll_status+0x14b/0x1110 [ 1620.606641][ T6812] cxacru_poll_status+0x178/0x1110 [ 1620.611889][ T6812] ? cxacru_atm_start+0x176/0x360 [ 1620.617113][ T6812] ? __pfx_cxacru_poll_status+0x10/0x10 [ 1620.623511][ T6812] ? __mutex_unlock_slowpath+0x731/0x900 [ 1620.630041][ T6812] ? atm_register_sysfs+0x18e/0x360 [ 1620.635584][ T6812] cxacru_atm_start+0x185/0x360 [ 1620.640546][ T6812] usbatm_atm_init+0x144/0x3a0 [ 1620.645538][ T6812] usbatm_usb_probe+0x15cb/0x1db0 [ 1620.650674][ T6812] cxacru_usb_probe+0x17f/0x220 [ 1620.655714][ T6812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1620.661672][ T6812] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 1620.667415][ T6812] usb_probe_interface+0x653/0xc60 [ 1620.672763][ T6812] ? __pfx_usb_probe_interface+0x10/0x10 [ 1620.678564][ T6812] really_probe+0x254/0xae0 [ 1620.683396][ T6812] __driver_probe_device+0x1e8/0x360 [ 1620.688880][ T6812] driver_probe_device+0x4f/0x240 [ 1620.694029][ T6812] __device_attach_driver+0x270/0x410 [ 1620.699565][ T6812] bus_for_each_drv+0x258/0x2f0 [ 1620.704664][ T6812] ? __pfx___device_attach_driver+0x10/0x10 [ 1620.710737][ T6812] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1620.716254][ T6812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1620.722218][ T6812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1620.728533][ T6812] __device_attach+0x2c4/0x450 [ 1620.733373][ T6812] ? __pfx___device_attach+0x10/0x10 [ 1620.738835][ T6812] ? do_raw_spin_unlock+0xf5/0x210 [ 1620.744069][ T6812] ? _raw_spin_unlock+0x28/0x50 [ 1620.749050][ T6812] device_initial_probe+0xa1/0xd0 [ 1620.754189][ T6812] bus_probe_device+0x12a/0x220 [ 1620.759162][ T6812] device_add+0x7d7/0xb80 [ 1620.763587][ T6812] usb_set_configuration+0x1ad8/0x2180 [ 1620.769191][ T6812] usb_generic_driver_probe+0x8d/0x150 [ 1620.774853][ T6812] usb_probe_device+0x1c3/0x3b0 [ 1620.779841][ T6812] ? __pfx_usb_probe_device+0x10/0x10 [ 1620.785356][ T6812] really_probe+0x254/0xae0 [ 1620.789964][ T6812] __driver_probe_device+0x1e8/0x360 [ 1620.795425][ T6812] driver_probe_device+0x4f/0x240 [ 1620.800551][ T6812] __device_attach_driver+0x270/0x410 [ 1620.806070][ T6812] bus_for_each_drv+0x258/0x2f0 [ 1620.811015][ T6812] ? __pfx___device_attach_driver+0x10/0x10 [ 1620.817034][ T6812] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1620.823166][ T6812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1620.829188][ T6812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1620.835067][ T6812] __device_attach+0x2c4/0x450 [ 1620.839958][ T6812] ? __pfx___device_attach+0x10/0x10 [ 1620.845332][ T6812] ? do_raw_spin_unlock+0xf5/0x210 [ 1620.850513][ T6812] ? _raw_spin_unlock+0x28/0x50 [ 1620.855486][ T6812] device_initial_probe+0xa1/0xd0 [ 1620.860681][ T6812] bus_probe_device+0x12a/0x220 [ 1620.865679][ T6812] device_add+0x7d7/0xb80 [ 1620.870108][ T6812] usb_new_device+0x99d/0x1620 [ 1620.874933][ T6812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1620.880998][ T6812] ? __pfx_usb_new_device+0x10/0x10 [ 1620.886352][ T6812] ? _raw_spin_unlock_irq+0x23/0x50 [ 1620.891618][ T6812] hub_event+0x28e8/0x4d30 [ 1620.896197][ T6812] ? __pfx_hub_event+0x10/0x10 [ 1620.901101][ T6812] ? process_scheduled_works+0xa20/0x14e0 [ 1620.907002][ T6812] ? rcu_is_watching+0x15/0xb0 [ 1620.911848][ T6812] ? process_scheduled_works+0xa20/0x14e0 [ 1620.917672][ T6812] process_scheduled_works+0xa8e/0x14e0 [ 1620.923307][ T6812] ? __pfx_process_scheduled_works+0x10/0x10 [ 1620.930130][ T6812] ? assign_work+0x3cf/0x5d0 [ 1620.934730][ T6812] worker_thread+0xa47/0xfb0 [ 1620.939842][ T6812] kthread+0x388/0x470 [ 1620.944016][ T6812] ? __pfx_worker_thread+0x10/0x10 [ 1620.949303][ T6812] ? __pfx_kthread+0x10/0x10 [ 1620.953984][ T6812] ret_from_fork+0x514/0xb70 [ 1620.958729][ T6812] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.963917][ T6812] ? load_gs_index+0x97/0xc0 [ 1620.968608][ T6812] ? __switch_to+0xc89/0x1420 [ 1620.973424][ T6812] ? __pfx_kthread+0x10/0x10 [ 1620.978169][ T6812] ret_from_fork_asm+0x1a/0x30 [ 1620.983051][ T6812] [ 1620.986235][ T6812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1620.993531][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1621.004471][ T6812] Tainted: [L]=SOFTLOCKUP [ 1621.008796][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1621.018860][ T6812] Workqueue: usb_hub_wq hub_event [ 1621.023903][ T6812] Call Trace: [ 1621.027175][ T6812] [ 1621.030100][ T6812] vpanic+0x56c/0xa60 [ 1621.034082][ T6812] ? __pfx__printk+0x10/0x10 [ 1621.038664][ T6812] ? __pfx_vpanic+0x10/0x10 [ 1621.043172][ T6812] ? is_bpf_text_address+0x292/0x2b0 [ 1621.048450][ T6812] ? is_bpf_text_address+0x26/0x2b0 [ 1621.053648][ T6812] panic+0xc5/0xd0 [ 1621.057361][ T6812] ? __pfx_panic+0x10/0x10 [ 1621.061773][ T6812] ? ret_from_fork_asm+0x1a/0x30 [ 1621.066698][ T6812] __warn+0x315/0x4c0 [ 1621.070662][ T6812] ? usb_submit_urb+0x79/0x18b0 [ 1621.075529][ T6812] ? usb_submit_urb+0x79/0x18b0 [ 1621.080411][ T6812] __report_bug+0x276/0x570 [ 1621.084992][ T6812] ? unwind_next_frame+0x8f/0x2550 [ 1621.090092][ T6812] ? usb_submit_urb+0x79/0x18b0 [ 1621.094933][ T6812] ? __pfx___report_bug+0x10/0x10 [ 1621.099952][ T6812] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1621.105850][ T6812] ? rcu_is_watching+0x15/0xb0 [ 1621.110610][ T6812] report_bug_entry+0x19a/0x290 [ 1621.115456][ T6812] ? usb_submit_urb+0x7c/0x18b0 [ 1621.120307][ T6812] ? usb_submit_urb+0x81/0x18b0 [ 1621.125156][ T6812] handle_bug+0xce/0x200 [ 1621.129393][ T6812] exc_invalid_op+0x1a/0x50 [ 1621.133889][ T6812] asm_exc_invalid_op+0x1a/0x20 [ 1621.138726][ T6812] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1621.144182][ T6812] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 d9 cb d2 fa 49 83 3e 00 74 40 e8 5e 33 65 fa 48 8d 3d 07 ac 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 43 33 65 fa eb 05 e8 3c 33 [ 1621.163782][ T6812] RSP: 0018:ffffc90003896858 EFLAGS: 00010287 [ 1621.169848][ T6812] RAX: ffffffff8761e172 RBX: ffff88802b099600 RCX: 0000000000100000 [ 1621.177808][ T6812] RDX: ffffc90016022000 RSI: ffff88802b099600 RDI: ffffffff90658d80 [ 1621.185773][ T6812] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 1621.193737][ T6812] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000040 [ 1621.201698][ T6812] R13: 0000000000000000 R14: ffff88802b099608 R15: 0000000000000cc0 [ 1621.209667][ T6812] ? usb_submit_urb+0x72/0x18b0 [ 1621.214537][ T6812] ? usb_submit_urb+0x72/0x18b0 [ 1621.219437][ T6812] ? __raw_spin_lock_init+0x45/0x100 [ 1621.224715][ T6812] ? __init_swait_queue_head+0xa8/0x150 [ 1621.230258][ T6812] cxacru_cm+0x21a/0xf10 [ 1621.234500][ T6812] ? usb_new_device+0x99d/0x1620 [ 1621.239438][ T6812] ? hub_event+0x28e8/0x4d30 [ 1621.244030][ T6812] ? process_scheduled_works+0xa8e/0x14e0 [ 1621.249747][ T6812] ? kthread+0x388/0x470 [ 1621.253991][ T6812] ? __pfx_cxacru_cm+0x10/0x10 [ 1621.258760][ T6812] ? __kasan_kmalloc+0x93/0xb0 [ 1621.263518][ T6812] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1621.269063][ T6812] ? __kmalloc_cache_noprof+0x150/0x660 [ 1621.274600][ T6812] ? cxacru_poll_status+0x14b/0x1110 [ 1621.279883][ T6812] ? cxacru_poll_status+0x14b/0x1110 [ 1621.285169][ T6812] cxacru_poll_status+0x178/0x1110 [ 1621.290276][ T6812] ? cxacru_atm_start+0x176/0x360 [ 1621.295297][ T6812] ? __pfx_cxacru_poll_status+0x10/0x10 [ 1621.300838][ T6812] ? __mutex_unlock_slowpath+0x731/0x900 [ 1621.306476][ T6812] ? atm_register_sysfs+0x18e/0x360 [ 1621.311674][ T6812] cxacru_atm_start+0x185/0x360 [ 1621.316695][ T6812] usbatm_atm_init+0x144/0x3a0 [ 1621.321457][ T6812] usbatm_usb_probe+0x15cb/0x1db0 [ 1621.326491][ T6812] cxacru_usb_probe+0x17f/0x220 [ 1621.331337][ T6812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1621.337135][ T6812] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 1621.342514][ T6812] usb_probe_interface+0x653/0xc60 [ 1621.347629][ T6812] ? __pfx_usb_probe_interface+0x10/0x10 [ 1621.353254][ T6812] really_probe+0x254/0xae0 [ 1621.357756][ T6812] __driver_probe_device+0x1e8/0x360 [ 1621.363036][ T6812] driver_probe_device+0x4f/0x240 [ 1621.368069][ T6812] __device_attach_driver+0x270/0x410 [ 1621.373440][ T6812] bus_for_each_drv+0x258/0x2f0 [ 1621.378285][ T6812] ? __pfx___device_attach_driver+0x10/0x10 [ 1621.384169][ T6812] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1621.389543][ T6812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1621.394732][ T6812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1621.400541][ T6812] __device_attach+0x2c4/0x450 [ 1621.405302][ T6812] ? __pfx___device_attach+0x10/0x10 [ 1621.410576][ T6812] ? do_raw_spin_unlock+0xf5/0x210 [ 1621.415681][ T6812] ? _raw_spin_unlock+0x28/0x50 [ 1621.420528][ T6812] device_initial_probe+0xa1/0xd0 [ 1621.425549][ T6812] bus_probe_device+0x12a/0x220 [ 1621.430391][ T6812] device_add+0x7d7/0xb80 [ 1621.434716][ T6812] usb_set_configuration+0x1ad8/0x2180 [ 1621.440188][ T6812] usb_generic_driver_probe+0x8d/0x150 [ 1621.445646][ T6812] usb_probe_device+0x1c3/0x3b0 [ 1621.450493][ T6812] ? __pfx_usb_probe_device+0x10/0x10 [ 1621.455864][ T6812] really_probe+0x254/0xae0 [ 1621.460392][ T6812] __driver_probe_device+0x1e8/0x360 [ 1621.465676][ T6812] driver_probe_device+0x4f/0x240 [ 1621.470728][ T6812] __device_attach_driver+0x270/0x410 [ 1621.476100][ T6812] bus_for_each_drv+0x258/0x2f0 [ 1621.480948][ T6812] ? __pfx___device_attach_driver+0x10/0x10 [ 1621.486836][ T6812] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1621.492207][ T6812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1621.497402][ T6812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1621.503209][ T6812] __device_attach+0x2c4/0x450 [ 1621.507974][ T6812] ? __pfx___device_attach+0x10/0x10 [ 1621.513253][ T6812] ? do_raw_spin_unlock+0xf5/0x210 [ 1621.518360][ T6812] ? _raw_spin_unlock+0x28/0x50 [ 1621.523204][ T6812] device_initial_probe+0xa1/0xd0 [ 1621.528234][ T6812] bus_probe_device+0x12a/0x220 [ 1621.533089][ T6812] device_add+0x7d7/0xb80 [ 1621.537416][ T6812] usb_new_device+0x99d/0x1620 [ 1621.542185][ T6812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1621.548161][ T6812] ? __pfx_usb_new_device+0x10/0x10 [ 1621.553363][ T6812] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.558556][ T6812] hub_event+0x28e8/0x4d30 [ 1621.563004][ T6812] ? __pfx_hub_event+0x10/0x10 [ 1621.567757][ T6812] ? process_scheduled_works+0xa20/0x14e0 [ 1621.573475][ T6812] ? rcu_is_watching+0x15/0xb0 [ 1621.578231][ T6812] ? process_scheduled_works+0xa20/0x14e0 [ 1621.583960][ T6812] process_scheduled_works+0xa8e/0x14e0 [ 1621.589527][ T6812] ? __pfx_process_scheduled_works+0x10/0x10 [ 1621.595504][ T6812] ? assign_work+0x3cf/0x5d0 [ 1621.600095][ T6812] worker_thread+0xa47/0xfb0 [ 1621.604697][ T6812] kthread+0x388/0x470 [ 1621.608758][ T6812] ? __pfx_worker_thread+0x10/0x10 [ 1621.613859][ T6812] ? __pfx_kthread+0x10/0x10 [ 1621.618445][ T6812] ret_from_fork+0x514/0xb70 [ 1621.623034][ T6812] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.628137][ T6812] ? load_gs_index+0x97/0xc0 [ 1621.632723][ T6812] ? __switch_to+0xc89/0x1420 [ 1621.637398][ T6812] ? __pfx_kthread+0x10/0x10 [ 1621.641982][ T6812] ret_from_fork_asm+0x1a/0x30 [ 1621.646755][ T6812] [ 1621.650045][ T6812] Kernel Offset: disabled [ 1621.654354][ T6812] Rebooting in 86400 seconds..