last executing test programs: 38m14.371363452s ago: executing program 32 (id=1333): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x88, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x1060bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x2c638}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4012}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008086}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 27m42.546505663s ago: executing program 33 (id=3753): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) syz_usb_connect(0x1, 0x1c1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_io_uring_setup(0x74f9, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="6800000000000000170100000200000050000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9caa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f40000000018000000000001001701000004"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)='?', 0x1}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000100)={0x2, 0x0, 0x4, 0xfffffff9, 0x8001, 0x7, 0x5}) mq_notify(0xffffffffffffffff, 0x0) 25m56.582220698s ago: executing program 34 (id=4286): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) ioctl$KVM_TDX_INIT_MEM_REGION(r0, 0xc008aeba, &(0x7f0000000480)={0x3, 0x0, &(0x7f0000000440)={&(0x7f0000000000/0x13000)=nil, 0x41000, 0x1}}) set_mempolicy(0x8003, &(0x7f0000000080)=0xdd3e, 0x6) set_mempolicy(0x4000, &(0x7f00000004c0)=0x1, 0x31b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x87b, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000540)={0xdfc, 0x7}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x244, 0x0, 0x904, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @NL80211_ATTR_FRAME={0x40, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac, {0x4, 0x81}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1}}, @val={0x0, 0x1b, @random="180fa6a843177e3ba14050561fc95fa2a735ac10cef50ead4bee85"}, @void, @val={0x3, 0x1, 0xa5}, @void, @void}}, @NL80211_ATTR_FRAME={0x1bc, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ff8}, @device_b, @device_b, @initial, {0x5, 0x5}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x6}, {0x0, 0x1}]}, @void, @void, @void, [{0xdd, 0x5d, "ea32450335960ce3cc7bb8f8e4d04659c583991b072519524ee2e4771e07e436eefe99cf39c3ff03d3123c1f39c10f524659d9d41e34b05e4dc5712c6d2f7bf6b55e8dece601b126c5f0c010bd5af8e80454bf76d5769bffe0ce07cde0"}, {0xdd, 0x53, "9660efbc831a23e567b0eb2668c60d1f1a2766686781c9236b103e20e587491a100cb8d572c0d06a3947b87eac3365d52f23a149847c3254dc31040d606a1d7ec0438b8a1b2cdf668cdc8df38408a40daac74e"}, {0xdd, 0xd6, "4cbcdad33407ee90b0ed9cd8bd041759040773fc69075d56f5beba6a466aa3a8cef53477f45b37a5e06e6666becb45687b5a30ae86f3f74cc0343a3eccc12bb6f13461463a749718f32f7f32b7c4ddfb68a19adcfd27842af120ff86d9863f57e48efeb8ca90bd34e311157a520c07e21e06e529b064d7ee8c9e2e0bc9db6d7ad9db0096b2f3697a5a19cc62986ff7339f9f93d956547cdafe9bdef83e8d0c89c98791af3cccea5a1c2cfc77cefe2a42c5c9de814564f8df1d272e8256f20c55a10c82b892cb3d9d98d25c6409180b07da6706b18f87"}, {0xdd, 0x6, "fcc4cf80e71f"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x623}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x4, 0x5, 0x100000, 0x762, 0x3, 0xf, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xfc55, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x200, 0x0, 0xa, 0x1000000, 0xd8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x200, 0x9, 0xfffffffe, 'syz1\x00', 'syz0\x00', {0x8290}}}}, {{@ip={@empty, @loopback, 0xff, 0xffffff00, 'team_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x48}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a000005241301"], 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) 24m6.500328412s ago: executing program 7 (id=4793): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaa"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0x6105583a, 0x0, 0xfffc, 0xf4f, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffff7) dup2(r2, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x60) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0xffffe000) socket$kcm(0x29, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 24m3.29568679s ago: executing program 7 (id=4815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x4, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="362e0fc77de80f01f6f3660f0017c4c35d46deb98246fb0cc744240004000000c744240214b9cc13c7442406000000000f011c240fb0dab961020000b800000100ba000000000f303e0f08c4e17853f6", 0x50}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000140)=@svm={0x10f, 0x1, 0x1080, {}, {"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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m2.984938435s ago: executing program 7 (id=4817): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66b88e008ec02d1aa80000460f1c460041ae", 0x46}], 0x1, 0x6c, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) 24m1.41784595s ago: executing program 7 (id=4826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) munlockall() move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@deltclass={0x44, 0x29, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {0xfff1, 0x2}, {0xa, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x71, 0x5}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_taprio={0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 24m0.62837903s ago: executing program 7 (id=4833): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0xffffffffffffffcc, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="a3", 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020605000700000000100004000000e80000008008001200000000000500ceff06000000050005000200000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000404) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000140)=0xfff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="f32748000000000000000700000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x6}, 0x4020) 23m59.24803453s ago: executing program 7 (id=4838): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xffffffffffffe9b7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0xb6180059b49153d6, "4b6d055c0a34b1d615e98b3a6d08fd8a5e21166f9ba0d3e78dacc38282806e55", 0x42475252}) r1 = socket$inet6(0xa, 0xa, 0x3) r2 = socket(0x1a, 0x6db05393a0f85e0f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x0, 0x1800, 0x6, r7}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r7}, 0x8) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000140)={0x7ff, 0x10, 0x0, 0x1}) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r9], 0x30}}], 0x1, 0xc0) 23m58.691454629s ago: executing program 35 (id=4838): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xffffffffffffe9b7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0xb6180059b49153d6, "4b6d055c0a34b1d615e98b3a6d08fd8a5e21166f9ba0d3e78dacc38282806e55", 0x42475252}) r1 = socket$inet6(0xa, 0xa, 0x3) r2 = socket(0x1a, 0x6db05393a0f85e0f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x0, 0x1800, 0x6, r7}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r7}, 0x8) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000140)={0x7ff, 0x10, 0x0, 0x1}) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r9], 0x30}}], 0x1, 0xc0) 21m33.799981937s ago: executing program 1 (id=5449): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x1, @raw_data="a2da51bdc4fe5e07d2d43ae8f1d96e791d103fa28507544190e94ab94e142b8d13889cf4c1bc1c73200bff6cf42a9c402b09cc7c92d8476a4ff583c6df0dd03cc7e689a10358aa7d71e99b792b300b777c9811efe8d414509dea44b59a7efff995d548f10695f232fd0a14c033e9faa146931cbb31628c401947b12d0e319da11c28ed41fdadd5a2736dcc0e4ea303c52a218ad93d5a900300b68f70f8198b20bdb5a3564655abc678a76aa9204f22b03bd8a4bc0fcae8a4e91d996d924de46cbebc23eab40f142d"}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) write$6lowpan_enable(r2, &(0x7f0000000140)='0', 0x1) r5 = userfaultfd(0x80001) shmget(0x1, 0x4000, 0x4, &(0x7f00005cf000/0x4000)=nil) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001100)={{&(0x7f0000ac5000/0x4000)=nil, 0x4000}}) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x200000) mmap$usbmon(&(0x7f0000a30000/0x4000)=nil, 0x4000, 0x2000004, 0x736fb286a70d137e, r6, 0x95) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 21m33.60780725s ago: executing program 1 (id=5450): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x3a0af83a) shutdown(r2, 0x1) listen(r2, 0x28) shutdown(r2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000140)={{r2}, "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"}) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2643) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x83, 0x3, &(0x7f0000000000)={0x1b, "e551595944bd993e9f03000000787d91f7dd2a35446df6de515c5a5ae4e1e1b0fb"}}) 21m32.038293057s ago: executing program 1 (id=5457): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200, 0x8) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x202181, 0x167) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0x62, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x20000881}, 0x2) splice(r4, 0x0, r3, 0x0, 0x3b, 0x9) splice(r1, 0x0, r5, 0x0, 0x80, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) write$tun(r2, &(0x7f0000000980)=ANY=[], 0x107c) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f00000006c0)={'veth0_macvtap\x00', {0x2, 0x0, @dev}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000680)={{0x3, 0x3, 0x8, 0x2}}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1b4, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "9c444cc88db6181e4ca57da7770e1d54ccef686d90b5274507c46cba5e40a650ce26f7e13439d09aceb05b3e6c173b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, './binderfs2/custom1\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ae}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#\\$:-%[/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, './binderfs2/custom1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x255}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x14}, 0x4000800) 21m31.865630788s ago: executing program 1 (id=5459): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x340080) getitimer(0xe, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x5, 0x208080) ioctl$HIDIOCGUSAGE(r3, 0x40025b0c, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0x0, 0x110001, 0x7}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1, 0x2, 0xfbfffffc, 0x1, 0x20000}}) 21m29.977584468s ago: executing program 1 (id=5463): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, 0x0, 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x15) 21m28.939996729s ago: executing program 1 (id=5467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x110, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000082020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 21m13.189105921s ago: executing program 36 (id=5467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x110, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000082020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 18m9.503843123s ago: executing program 8 (id=6331): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x200000000000006, 0x200}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) (async) syz_fuse_handle_req(r0, &(0x7f00000063c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000001c0)='hugetlb', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x1, &(0x7f0000000600)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x2c040480) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x5393, 0x0) 18m9.108752069s ago: executing program 8 (id=6332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000202010400000000000000000a00000014000300fe80000000000000000000000030b7aa1400040000000000000000000000ffffac1414fe0c000280050001"], 0x50}}, 0x24) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) 18m8.898758092s ago: executing program 8 (id=6333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x4e22, 0xfa06, 0x4e23, 0x1, 0xa, 0x80, 0x0, 0x89}, {0x1, 0x3, 0x9, 0x96e2, 0x9, 0x4, 0xfffffffffffffffb, 0x101}, {0x10, 0x0, 0xfff, 0xc0}, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@private1, 0x4d5, 0x33}, 0x8, @in6=@private1, 0x3507, 0x4, 0x2, 0x0, 0x4, 0x80000000, 0x10}}, 0xe8) syz_usb_control_io(r1, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x80000000, 0x1016}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r4, 0x0, 0x3) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x9, 0x8}, 'syz0\x00', 0x4c}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 18m6.419274402s ago: executing program 8 (id=6347): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000040)={0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x100, 0x61, 0x4, 0x5, 0x6, 0x0}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000140)={r1, 0xffff, 0x0, 0x0, r2}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200201, 0x18) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x8a3, "83465ff7c784f85fa5649fb9c09945397032fffec06e61d020a616a08d24fdd4"}) r3 = syz_ublk_setup_io_uring(0x2e5b, &(0x7f0000000240)={0x0, 0x6c50, 0x8000, 0x3, 0x7d}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) r7 = io_uring_setup(0x3c2c, &(0x7f0000000380)={0x0, 0x1dfd, 0x2, 0x1, 0x13a, 0x0, r3}) r8 = syz_open_dev$vcsu(&(0x7f0000000400), 0x100, 0x10900) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa9}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0xbd003b845fc0fbb6) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000600)={0x7, &(0x7f00000005c0)=[{0x7, 0x5d, 0x52, 0x40}, {0xc8, 0x0, 0x1a, 0xfffffffa}, {0x2, 0x0, 0x2, 0x9}, {0x20, 0xfc, 0x7, 0x10001}, {0x100, 0x3, 0x7d, 0x6}, {0x7, 0x7a, 0x9, 0x9}, {0x2, 0x0, 0x4b, 0x1}]}) r9 = fcntl$getown(r8, 0x9) sched_setscheduler(r9, 0x6, &(0x7f0000000640)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_add_dev(r7, r4, r5, r6, &(0x7f00000006c0)={0x2e, 0x4, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x1, 0x1b0, 0x0, 0x0, 0x1000, 0x3, r9, 0x0, 0x18}}}, &(0x7f0000000740)) r12 = syz_ublk_setup_io_uring(0x1c7b, &(0x7f0000000780)={0x0, 0xe6a0, 0x2, 0x3, 0x37e, 0x0, r7}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000940)=""/209, 0xd1}, {&(0x7f0000000a40)=""/226, 0xe2}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/72, 0x48}], 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x21, 0x8, 0x101, 0xa, 0x22d1, r8, 0x80, '\x00', 0x0, r8, 0x0, 0x1, 0x3}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000d80)={0x4, 0x61, 0x9, 0x3, 0x4, 0xffff, "74ea5583aecca4a07be0829a16588333", 0x0, 0x5, 0x5, 0x2, 0x4, 0xb7, 0xf5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000dc0)={0x6, 0x86b, 0x1}) rt_sigqueueinfo(r9, 0x23, &(0x7f0000000e00)={0x12, 0x74, 0x8000}) write$P9_RSTAT(r8, &(0x7f0000000e80)={0x65, 0x7d, 0x1, {0x0, 0x5e, 0x101, 0x1, {0x10, 0x3}, 0x48000000, 0x19d38, 0x3e, 0x9, 0x12, '/dev/ublk-control\x00', 0x5, 'syz0\x00', 0x2, '(^', 0x12, '/dev/ublk-control\x00'}}, 0x65) syz_ublk_add_dev(r7, 0x0, r5, r13, &(0x7f0000000f40)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000f00)=@any_dev={0x3, 0xd80, 0x0, 0x0, 0x1000, 0x8, r9, 0x0, 0x173}}}, &(0x7f0000000fc0)) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001000)={0x1, 0x7, 0x5, 0x71, 0xd421, 0xfffff27e, 0x5, 0xfffffff9, 0x0}, &(0x7f0000001040)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000001080)={r15, 0x10000}, &(0x7f00000010c0)=0x8) r16 = semget$private(0x0, 0x4, 0x64) semtimedop(r16, &(0x7f0000001100)=[{0x0, 0x2}, {0x1, 0x5a}, {0x3, 0x4, 0x1000}, {0x3, 0xd92, 0x1c00}, {0x3, 0x3, 0x1800}, {0x3, 0x3}], 0x6, &(0x7f0000001140)={0x77359400}) 18m6.16044639s ago: executing program 8 (id=6350): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000540)={@multicast2, @rand_addr=0x64010100, 0x1, "8259a674521722707762dbd5a1f19302df3b251696e503316d3c1ca3f0dbc85d", 0x80, 0xfffffff7, 0x5, 0x9}, 0x3c) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12013301020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000008090511ee40000000000904010000020d000009040101"], 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12013301020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000008090511ee40000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000300)) landlock_restrict_self(r3, 0xf) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) getpgid(0x0) (async) r7 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r7}) (async) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r7}) sendmmsg$unix(r4, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000, 0x0, 0x4000, 0x0, 0xfffc, 0x0, 0x800, 0x0, 0x3d3, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="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", 0xfc) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="3422020000000223d69612dba0b2d62721e3bd228c95cdbf95a74f0e1f832bffff3c905f5053158ab12ec4044a39f1f4623a3d9a0855efba0b185651732ef5f61f657605"], 0x0, 0x0, 0x0, 0x0}, 0x0) 18m5.149811783s ago: executing program 8 (id=6354): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000005000300000000"], 0x20}}, 0x801) r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f00000005c0)='GPL\x00', 0x401, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000004, 0x3}, 0x8}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) syz_usb_disconnect(r1) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, &(0x7f00000000c0)=0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff09, &(0x7f0000000280)={0x0, 0x40}}, 0x48000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) msgctl$IPC_RMID(0x0, 0x13) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="0884b6263f5beb66000000000200000018000000040000000000000003000000179a02000a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500004006000000ffffff9500000000000000f9ef713f29b86ca63fbea3cc4d4bccfc4ccbd06d6f27c2f8d389dd03789a9dd316a37093157613d13234b4d9b93581700fc10d135a9d1545c733286669d3963ff6fe7da936fd0247492023b2a7a2d6a7fa5098455661aa4ad508fe4fd8404df957c29bdae6926594c55eb5d3e5928100"/236], &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0xc1, &(0x7f00000003c0)=""/193, 0x41100, 0x44, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x81, 0x8}, 0x10, 0x1a11a, r3, 0x0, &(0x7f0000000680)=[r3, r3, r3], 0x0, 0x10, 0x3}, 0x94) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0xfffb, 0x800}, {0x1, 0x7, 0x3800}], 0x2) 17m49.760961854s ago: executing program 37 (id=6354): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000005000300000000"], 0x20}}, 0x801) r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f00000005c0)='GPL\x00', 0x401, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000004, 0x3}, 0x8}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) syz_usb_disconnect(r1) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, &(0x7f00000000c0)=0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff09, &(0x7f0000000280)={0x0, 0x40}}, 0x48000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) msgctl$IPC_RMID(0x0, 0x13) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="0884b6263f5beb66000000000200000018000000040000000000000003000000179a02000a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500004006000000ffffff9500000000000000f9ef713f29b86ca63fbea3cc4d4bccfc4ccbd06d6f27c2f8d389dd03789a9dd316a37093157613d13234b4d9b93581700fc10d135a9d1545c733286669d3963ff6fe7da936fd0247492023b2a7a2d6a7fa5098455661aa4ad508fe4fd8404df957c29bdae6926594c55eb5d3e5928100"/236], &(0x7f0000000380)='syzkaller\x00', 0xffffffff, 0xc1, &(0x7f00000003c0)=""/193, 0x41100, 0x44, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x81, 0x8}, 0x10, 0x1a11a, r3, 0x0, &(0x7f0000000680)=[r3, r3, r3], 0x0, 0x10, 0x3}, 0x94) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0xfffb, 0x800}, {0x1, 0x7, 0x3800}], 0x2) 17m8.591513727s ago: executing program 0 (id=6593): socket$can_raw(0x1d, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 17m7.36572448s ago: executing program 0 (id=6597): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)="48f2cb47b91d51d267b2b312252f32280e85f974ed62f94d8cab7d59218ae447437d468a7b9ad3fb20ed0558622f06d887e67293d8497838e1c2f76899312c6726b882e1e2c92c7392608ae7b630a7cbf79586ac4c7bbc6b2c7be9da91a9c1cad3743539b5e307364bec81aa8c2e586384348f1e46ee9c8b7e7fd7a3423df63d479694c9bd0859e9ff7a4c0c25428b35f26b11ba79d538f80e46699ce5269066ce66c9403d5dceb3f0100e8979fd73d801f2c82850df1b0f58eaea549e5b2786291f8c90c028bdaaefbcc1d2da07bdaabd8b7501ba06218fc00ca34adb2b", &(0x7f00000002c0)="53cbc9476c0b2e4e4771938190f2df41328ea952a41cc7c4d2f57ac355b6", 0x1003, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)="48f2cb47b91d51d267b2b312252f32280e85f974ed62f94d8cab7d59218ae447437d468a7b9ad3fb20ed0558622f06d887e67293d8497838e1c2f76899312c6726b882e1e2c92c7392608ae7b630a7cbf79586ac4c7bbc6b2c7be9da91a9c1cad3743539b5e307364bec81aa8c2e586384348f1e46ee9c8b7e7fd7a3423df63d479694c9bd0859e9ff7a4c0c25428b35f26b11ba79d538f80e46699ce5269066ce66c9403d5dceb3f0100e8979fd73d801f2c82850df1b0f58eaea549e5b2786291f8c90c028bdaaefbcc1d2da07bdaabd8b7501ba06218fc00ca34adb2b", &(0x7f00000002c0)="53cbc9476c0b2e4e4771938190f2df41328ea952a41cc7c4d2f57ac355b6", 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000c6f4baf9fdbce95a96fe5e9dea3db8f20000080000001e0000000000"], 0x0, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000c6f4baf9fdbce95a96fe5e9dea3db8f20000080000001e0000000000"], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010003000000206307032040000102030109028d00030104007f080b0101010a20020904000000010120000924010500061500b20c24030500040a25007f008009040100000102200009040101010102200008240201040302061024010505000110000005050000400109050109000206998008250101181e00006d3578329c5a5609040200000102200009040201010102200009058209000244045208cf82f027adea737955a8e35f6840e44ddfa8c0c669ef1406d1770fd944e33a1b133daa95"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000440)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10b000, 0x20}) 17m4.013955894s ago: executing program 0 (id=6606): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x440) ioctl$RTC_UIE_OFF(r0, 0x7004) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) mknod(0x0, 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103802, 0xf0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) write$FUSE_WRITE(r3, 0x0, 0x0) readv(r3, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 17m0.557634064s ago: executing program 0 (id=6622): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) sendto$unix(r4, &(0x7f00000001c0)="9ca81833985d8f29a7e6f66592817fe2679858ab0ed4edea8746d24b67378cb8890649862dc74f85e695443adb3fed04c897f6f8b92e771f1ee909d1b9966b4f79935746fa01a7b40a8c4726f2d0f5f05ea6ccfc458e0c02145c98f0974ef44a7ca9732b208726445f646ace6d875044652d07f263b469cd958632547edb9eb348cd4d38a6a6fa520c62d77ccb45f7e2f2153c82484d138aa1da752496e57a87dcdc46ec67cb042a0dac68213a8136a55909c20fe176f9ca600f", 0xba, 0x810, &(0x7f0000000480)=@file={0x1, './file1\x00'}, 0x6e) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r12, &(0x7f0000000100)=""/134, 0x86) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m0.264492154s ago: executing program 0 (id=6624): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES64=r0], 0x50) futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, &(0x7f0000000100)=0x4, 0xc3000000) unshare(0x22020600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, 0x1}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x16}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x800, 0xc, &(0x7f0000000280)=""/12, 0x41100, 0xe, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x1, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1], 0x0, 0x10, 0x6}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @multicast1}, @RTA_IIF={0x8, 0x3, r12}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @local}, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000014d29b053f93fd34cb8e5d955c0f9a4637d60ce584f93cf7c22f5419606758767d8781fb41b72577e0a3c9a39d07d6e709e7f52e82cb6ee103e7ce4b71f1ea5aa9b905748da11125f8efb685754d30188b68ecffe6ceb092cddaf1f0e055c60ab7b48e1b52a043a5d095a7ef2bdc3e8e21a1557bf080a24cc2cf97be3915c65906603b849d2ad41b51971552", @ANYBLOB="d38a2bfea174307105c738102a97046d5e29c965034528da7273c6ecdde465b27771d8d09560597a12e6f4d7c9921cad9a996494214630da7a9746f9ad2044dacf9aa278bf61a9ab87ed3205ec29868abe7b32bdd09fe9a42ca947c11d869500a002e1332b4b74d3a56776efe75eaa1d76fcfc89c08f6ba72f7165ad2d83df6eeb8e66c12d87c69d2043ae231f7b0e1aa4793f5ed9dabbc2105449d9fb7ed7d7b164f0afa2e7119c10493b5bbd0f8d2904f92261af917334c8fa27", @ANYBLOB="000000001e86000000952d5f71e3d6353e337cf19d3c4ca43e8118ad73986fd946d533326410f319697cf36bb9102043b424c84e8657a99175742d461f87f4ba06f15b4ac3d6dbb70e2fbd3772e82aa770fa6c12f27c655b92f716671037b29278ad7c0044a3563ec90f932ad6a32d1bfb87702d06bcfcc53f72ff96477fb5d94803f3a48a2fbc57ff241518c68b2fc40c54036af4dac54c790457562a35e5bc85d3c973d4e9ff399c3e1e902b15e6163ce13a4fe258d77dc66ee3327a52045b5848425e1bb0a7b4b1fb0d7c727fe403ecc75354a2367081e38c658a706d13778614ddca05eba2b1"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r13, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000b40)={{0x7, 0x0, 0xfffffff8, 0x8, 'syz1\x00', 0x5}, 0x1, [0x9, 0xfffffffffffffc01, 0x0, 0xa, 0x3, 0xb6, 0x7, 0x7fffffff, 0x0, 0x5, 0x0, 0xe2b7, 0x7f, 0x1, 0x6, 0x10, 0x5, 0xf, 0x31e, 0x34, 0x100000001, 0xf545, 0xfffffffffffffffe, 0x100000001, 0x10001, 0x0, 0x0, 0xfffffffffffffff7, 0xe, 0x7, 0x8, 0x841, 0x9, 0x0, 0xc7eb, 0x0, 0x74, 0x7, 0x77c00000000000, 0x0, 0x0, 0x8001, 0x1b, 0xc, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0xffffffff, 0x7, 0xa556, 0x1ff, 0x2, 0x3, 0x1, 0x690706b0, 0x5, 0x182, 0x100000000, 0x1, 0x4, 0xc, 0xfffffffffffffe00, 0x7a6716ff, 0xd, 0x929, 0x18f, 0x6, 0x1f2e, 0x3, 0x9, 0x8, 0xd00, 0x2, 0x1000, 0x4, 0xffffffffffff635d, 0x0, 0x5c, 0x342, 0x8, 0x10, 0x0, 0x5, 0x7, 0x8, 0x7f, 0x5, 0x4, 0xc, 0x2, 0x0, 0x5, 0x9, 0xa, 0x6, 0x5, 0x4, 0x1, 0x5, 0x8, 0x283, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x3, 0x80, 0x8, 0x44, 0x200, 0x8, 0x9a, 0x4, 0xc79, 0x1, 0x2, 0x3, 0x3, 0x3, 0x3, 0x2, 0x8]}) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) 16m59.507643704s ago: executing program 0 (id=6627): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x8, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x8, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x92, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x3, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x3, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x6, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x0, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4e, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x3ff, 0x8, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0xfffffff4, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0xb}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x2480, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc03}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0x0, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x21, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x5}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0x2}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x4}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 16m59.345669475s ago: executing program 38 (id=6627): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x8, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x8, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x92, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x3, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x3, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x6, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x0, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4e, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x3ff, 0x8, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0xfffffff4, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0xb}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x2480, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc03}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0x0, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x21, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x5}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0x2}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x4}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 16m31.759360846s ago: executing program 6 (id=6720): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) r0 = socket$inet(0x2, 0x6, 0x1b4) syz_clone3(&(0x7f0000000900)={0x3800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = epoll_create(0x457f) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x1d, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x20}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0xc800301d}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x2000000c}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000069047d08bf0a70330e030000000109021200be000000000904"], 0x0) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)=@generic={0x1e, "709f054817e46fdfa16bfcb2cca927daf9e5f209493eae2334938ad4d80b3c79bab58f535352390afa0b8cc56a295e2849edc3f14d4ffb8a41f48c845aa1237598379fb15cecaa3d6e3af3bae4a3ba45c8ac75cee09c312e3e02efec015a453291db609b9a14b0ea28dbc3b76bb46ef636517899c99ec536dac5184d8d57"}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)="d1155ebdc8514c786c8bfb089d6f9220a82d8facef82f617e5b55ba4fb6e9b69", 0x20}, {&(0x7f0000000180)="4f4fe0e84407e0c14a2fcd3fd055473fda46f0c857ff7c4f43fd3d2ab6898fb2b34791aadee052f6ddb9ce04786c9f92f2d2aaac0fcf8d99b7751a49a2046097e1c221e006df3f5bef1c65d35a96823ea4c8f241fc068fe09de601fd91aa68db21d16263eadbb8548ad2b28e7fd7636c19c3951dbff305e85b5b12f4810eef5689f470837f710e3a", 0x88}, {&(0x7f0000000580)="e7d17c49881f459e5ae8b2ea4e145e2b4860eb04ec0e1ed1233c05163c65d4801ae385e38d15bd002c46ad8e30a6e0f009c38bf751b3e8abecfdf04962214651ce9ee5d72796f97e25bb618f30b940", 0x4f}, {&(0x7f0000000240)="d8384369f82cea687acb0eb7a3de95b539e970f94ecb4b2ca86e24a7ba982a39785a3511392e1830d171585e47f971ca1b066196df1f553c99ea9349ad078abd2d1259f4376ccbd25657135b85", 0x4d}], 0x4}}, {{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x4e24, 0x6, @private0, 0x4}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000380)="9ee7a4c8420d1eba3aa04181b5aa53fd6bdf0b85c052732e3b62c20bc60e64c56f4c76be2b49c072e147340dd5d09f1c39edf42dea9a90100ac36a6a5d3f", 0x3e}], 0x1, &(0x7f0000000640)=[{0xb0, 0x104, 0x9, "e08d731a349170e11867bfd0ec013f0346bb30c445359aea2b3a3fae47289d3d399fe1f812e315601dd01725823870c1c4d3b8da0947bd0706ccd612071bdee0ff0384fab53affbefed7138fa55e62f6ceaac0d7465933d80da1f1f935945e34229faf79d1e91a6ed1c0f8526ecddeec4f1e4c3d9c8824daec78f201577439c0ef5adcc87284b8b559b98ea4aba4961bf2d82d6ed21dd461a57c1e"}, {0x38, 0x0, 0x0, "77a58269ccadcbad7bd3b97ec67eee71868114b3f8425ab561629d6b76f57af3d28abddaabf8012a"}], 0xe8}}], 0x2, 0x4000000) 16m28.504027211s ago: executing program 6 (id=6736): openat$vcsa(0xffffffffffffff9c, &(0x7f0000002a40), 0x82a01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) r1 = socket(0x28, 0x5, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000140)=0x6, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) 16m26.026044767s ago: executing program 6 (id=6747): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00000ee000/0x3000)=nil, 0x3000, 0xe) r3 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x2b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() prlimit64(r6, 0xd, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x4040) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "d7a0fb375b22bdb5", "7391cbca7e9d56753373d29ae38c089ae4f66034f1624d31b2dec9019ad6b6ab", "dfd33ae3", "5b92ed17e5ac83f5"}, 0x17) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000100)={r1, 0x0, 0x7, 0x7, 0xffffffffffffffff, 0x1}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r9, r9, 0x0, 0xb) 16m22.560996924s ago: executing program 6 (id=6754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030104000000001500000000000010080001000100003b"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000906c3c0ce6a68c1a7577eb18c64e83f9f1cfe3de02fa9a54f0ee7da1912e9d1d7844150fa2d0d1d6af2465cc83d31146e45f0830a91872d62670828a86362de43ce117f838dbcf57cd327188a9f83524f09b4f087dd87df89e5fecb71ad73d2e168e616084952d310a7adfbb8c09aac302c4343fdc4d1ce8f434ceb6fa806139", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030104000000001500000000000010080001000100003b"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000906c3c0ce6a68c1a7577eb18c64e83f9f1cfe3de02fa9a54f0ee7da1912e9d1d7844150fa2d0d1d6af2465cc83d31146e45f0830a91872d62670828a86362de43ce117f838dbcf57cd327188a9f83524f09b4f087dd87df89e5fecb71ad73d2e168e616084952d310a7adfbb8c09aac302c4343fdc4d1ce8f434ceb6fa806139", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 16m22.103897181s ago: executing program 6 (id=6756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f0000000200)={r5, 0x0, 0x7}, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x80, 0x6, 0x5, 0x0, 0x4, 0x5, 0x40, 0x7, 0x6, 0x56, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x8, 0x4, 0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m21.386745382s ago: executing program 6 (id=6761): r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x440) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @remote, 0xe9}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x9ba6, @local, 0xa}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e22, @multicast1}], 0x78) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) timer_getoverrun(r6) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0xe4, 0x18, 0x0, 0x12}) unshare(0x20000400) 16m20.400296094s ago: executing program 39 (id=6761): r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x440) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @remote, 0xe9}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x9ba6, @local, 0xa}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e22, @multicast1}], 0x78) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) timer_getoverrun(r6) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0xe4, 0x18, 0x0, 0x12}) unshare(0x20000400) 7.921886945s ago: executing program 3 (id=10165): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0x3, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x8, 0xf0, 0x1, {0x22, 0x73b}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x7, 0x3, 0xff, 0x7}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xb1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3001}}]}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/237, 0xed}, 0xfffffffa}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000001980)=""/118, 0x76}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/246, 0xf6}], 0x2}, 0x8}, {{&(0x7f0000001bc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002080)=[{0x0}, {&(0x7f0000001d40)=""/104, 0x68}, {&(0x7f0000001dc0)=""/5, 0x5}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000002000)=""/8, 0x8}, {&(0x7f0000002040)=""/39, 0x27}], 0x6, &(0x7f0000002100)=""/199, 0xc7}, 0xb2c7}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002280)=""/24, 0x18}, {&(0x7f00000022c0)=""/102, 0x66}, {0x0}, {&(0x7f00000024c0)=""/245, 0xf5}, {0x0}, {0x0}], 0x6, &(0x7f00000026c0)=""/212, 0xd4}, 0xffffffff}], 0x5, 0x10021, &(0x7f0000002900)={0x77359400}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf\x14o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x0, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xffff, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x20048884) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) r9 = memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) fcntl$getownex(r9, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x32, 0x75, 0x2, 0x20, 0x4da, 0x250d, 0x1d43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x3, 0x8, 0x1, 0xda, 0x6e, 0x3a, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x9, 0xff, 0x4}}]}}, {{0x9, 0x4, 0x32, 0x6, 0x0, 0xff, 0x2, 0xa9}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1800000016005f021dfffffffffffff80700000301", 0x15) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 7.104197483s ago: executing program 4 (id=10167): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000040)=[@out_dx={0x6a, 0x28, {0xb007, 0x0, 0x100}}, @in_dx={0x69, 0x20, {0xe14f}}, @set_irq_handler={0xc8, 0x20, {0xad}}, @code={0xa, 0x7a, {"48b82e000000000000000f23d80f21f835800000300f23f8b90a0600000f3247defec423d90c8900000000e80f20d835200000000f22d8d235a62b0000b8010000000f01c166baf80cb868d9f78def66bafc0ced410f01efb9b2080000b80fd60000ba000000000f30"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x9e, 0x2, 0xfffffffffffff5e9, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xe8, 0x7, 0x9, 0x3}}, @nested_vmresume={0x130, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x14, 0x5, 0xffffffffffffff19, 0x3}}, @wr_crn={0x67, 0x20, {0x8, 0x39b}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x2c, 0x3, 0x7d77}}, @wr_drn={0x68, 0x20, {0x6, 0x4}}, @uexit={0x0, 0x18, 0x5}, @set_irq_handler={0xc8, 0x20, {0x9, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xb4, 0x86, 0xfffffffffffff6b7, 0x5e54}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @nested_load_code={0x12e, 0x68, {0x0, "c4c17852e1b9010400000f32c4615962fbb948030000b853890000ba000000000f30b8010000000f01c136420f07f30f09640fc72d00000000c423f95f0300b985080000b811000000ba000000000f30"}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x4d, 0x4, 0x1d, 0x1}}, @cpuid={0x64, 0x18, {0x6, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x7}, @set_irq_handler={0xc8, 0x20, {0xb6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x9, 0x7fff, 0xfffffffffffffff9}}, @nested_load_code={0x12e, 0x79, {0x1, "b92a0b0000b8ba000000ba000000000f3066b8f6008ee8676626440f00dc0f015b9ac48178ae1b48b8fa4f0000000000000f23d80f21f835c00000800f23f8c421796e1dc68b000066baf80cb8546fb38fef66bafc0cb04ceef0ff4cdb030f01ca"}}], 0x4f3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000580), 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000005c0)) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000600)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000640)=0x1, 0x8) (async, rerun: 32) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000680)={[0x7, 0x5, 0x200, 0x3, 0x0, 0x7, 0x1000, 0x7, 0xe6, 0x10001, 0xf, 0x0, 0x7f, 0xa9, 0x1, 0x7], 0xdddd1000, 0x2000}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 32) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 32) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000002800)={0x18, 0x0, r6, {0x7}}, 0x18) r7 = dup2(r1, r4) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000002840)={0xb73d459d1662cd74, 0xb95}) (async) r8 = add_key$fscrypt_provisioning(&(0x7f0000002880), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000002900)={0x3, 0x0, @d}, 0x18, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000002940)={@id={0x2, 0x0, @c}, 0x21, r8, '\x00', @c}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f00000029c0)) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000002a00)='-3/\x00', 0x0, r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003580)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000002a80)={0xa, 0x4e20, 0x9, @private1, 0x2}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000002ac0)="72e6d7757e3f8a3c4c38f3a7ede2ca748502", 0x12}, {&(0x7f0000002b00)="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", 0xfd}, {&(0x7f0000002c00)="cf513c18a7", 0x5}, {&(0x7f0000002c40)="89efcc1c6643ef7406b00d4acf2ef1a1dc30d00c33f53bd733e64874c58fdeded903080419d41712180e6e3461529c1c444ef630c5576e26702c46c56818359ae4cf879f606652381d42b0ce54b924b99ce4b5b6c28c7a7d0d7a9b11aa36204fe7407514163878f96f37fc7b5143f9cc0dd9fbd03340eb2aa250969752ff8e2d1bd8754d4183c389690cf708f605fadf", 0x90}, {&(0x7f0000002d00)="98767dea257ea6573b86cc9d00cd5c8b8a5f72d1cef83cd46a7721f58723f095b205a9754bae0800bb979c8b6e122f8c20cf4c82609c25", 0x37}, {&(0x7f0000002d40)="3f18719821a14ca4b796c39449224e7161062e216cfc25f7017b71a8540141f8625cae8a16fd514b7308c9986fde2035b93cf43428ef115d5fd364b5d9157c4c68bf5e430a02ebedebae81bffec16b361585044ce319af0436b3dcd2b534c74bf2e33dcc51c35d03b79c744a0f0c2b9679c481b456c1dc073ad5adb0ac787eb910051764595489114b641628df8ae3cd48aa3e0b603b66628eaa66f6e58b7960786dfce476362d909b28c39b085953d124353b8d7853389d75", 0xb9}, {&(0x7f0000002e00)="eb077ec13c64ed22b880ef77b59b02292906e38cbd40b847f45d7990c96b72e7393a33eb0d6c8bfb665b7d2422ae9ab97dd657a56a84aa9c82760b91d9c20d1531960d799b68a1bf4014a1f63926d3ad8710085e28f9ab79c8faf62caa6013e1dd8292aa9288b808fd98d91b566ab89c27a05b0f8a4667a6b4856a23a5df2d355bb8cf98518b41e8230968486625a08292188fc918de6ad66215d084e8ebd299feb5d8d435af1460ff6eb6c218", 0xad}, {&(0x7f0000002ec0)="0cf24a13cd871fc2ab1019d85cd4b8aa7bf6dfd35869aa70fbf4b1f95d40a4feedc520b5c4a18f073176bbcd00bf6bc7362a5912bfea866fdb6c6e5b9d66de4d3e5951083f564700ed7a4f01a7ad40d1093dbba56e40798a83a818900b9bd8a8f3b17096f7d749bcaa57e056caedb945daf85b9db176dc9cfdaa20050a4679ec824ae56a0b5d53cb", 0x88}], 0x8}}, {{&(0x7f0000003000)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000003040)="358d5525b9c290e0a590070d58079c78b160707316cfdfb93818085e479256149488f74bec2462f47191187c04126a573c668b1498f08e363516506b23bf9e717444d9b5cac7c1c59b5ad1cfe28a778b78afba881bab801cbb4c2639db63d1815c2466b73e8a4caf8a4eeaad707b1135bffc5b8ce0266d28889b", 0x7a}], 0x1}}, {{&(0x7f0000003100)={0xa, 0x4e24, 0x5, @empty, 0x40}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000003140)="7b817e6988a2606f97c33669888b70a50f7a38938106a543ec7c2299c34b7e079e1bf850de35d4346aeff5cf4b5faf5366b84c8521726a819c0e3ca31134682bbae01599d0bec6a347ef823dd8630dafb0713d5e78fbab5dd80842ca019d0b0ddd5fb6252b09ca4cd0dac30ad7d0f01fb4fab150642a8b2671f5eb3bfa24050ac0bcecb9e7881dc44e114f90d62af03adf89b618f46b0416cad28ebc7011ac1af987dedfcbc9", 0xa6}, {&(0x7f0000003200)="af", 0x1}, {&(0x7f0000003240)="47f865d6a506bfcc4390ebd3c57fdf85153b12db9e7449d5a4b8fac88d033f866edb64e92e8c5d9e4ef7b9c2936cce19363fbc21f626734fe65d75f4d722c6bb2a1f006c0e5bc9e057337d245235c2dcc855b8376d458796a4342a67dff947afdba24b924e1b7c1f6077961fab2435d83f4e894869024485cc1a72ca0b3fcea9dc23dbdc56c67346be082c9e1460f1c3fd590d930bb73a4a41272f222b166d19cd0168eb26a84cc32ad0868ece5f5da946bfaa158ebf7cb8c904eab31f082f44519fb3bb1e31c063e6af388c4964", 0xce}, {&(0x7f0000003340)="60fbbb8da3a501d5c182fdbbb29593db7bcff77a02c6b24226ce3b2bad4c3bf630fb8058763962d9d50f741e9eff38e2c74836175994d8f264d5b99333463f779475693b02b389b65098b45740b46cdb3af5d56b7e1ad9ddb111016506b59ff6e1f234c8e8c476a7ac3e4c18a8015610812ce184eb9805686361875f2f5e2c473eb8f1fa4591e030c3573dc2c3aa06b57d2080f833e0e2687317b4de6b71f66963bdf7136ad7c9469a52f9f02d80593ef68c1395198d9270798aeedc41feca05690401497e4e0e7157187a3ce7bffe150e26d08989cba55ccb9d5206c5208b7d737cea698f30ef24996849c438e8e919", 0xf0}, {&(0x7f0000003440)="4d2140825d0df167d6b8cb7ac3593dcfb36e0ff5371b19288218afa66243c6b40813c417", 0x24}, {&(0x7f0000003480)="91395ec4c9fb0636b00d13d38479e66dbebd6885b048a6e06dbdb6ee350e37ad18b6e8a09d44f0a5a8ec3d859da33e34b07d9e0b16309749701a8b67de14dcc28e9f933ad972e5fbb1c22565a2f7a1002350f5dddf9030c07cebe0dc30", 0x5d}], 0x6, &(0x7f00000035c0)=[@rthdr={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r10}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x2b, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7, 0xd4, [0x9, 0x3, 0x0, 0xffffffffffffff7f, 0x4, 0x3]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x7f8}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x7d, 0x1, '\x00', [@ra={0x5, 0x2, 0x310c}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x5}]}}}, @hopopts={{0xe0, 0x29, 0x36, {0x29, 0x19, '\x00', [@generic={0x2, 0xc6, "12a4f8447c8c753a9a154f60ab43c72409d0ee5d710e24fa369ec33d0f1ce636ac64a0ab6dbee8c2c50314d347e7b0d2ff4b758d67165638c5dc9c6dd20ed1d6516dcd926ecf4367a3f7d058eff38f69992c3e2e5a057905734e3fc7f7f389e2f13c11e8be44de5febc01936ddb0f52bb9b4a941ee524f1dc4b5ca52b425168627beb43ea56f6712a2a07f13e436262517def5154872f2bb2641615b37e8bad1dcee804ec832f505474e5bec8949fb97bd48387405042bb83e17098f6dbcccc52b61c085ec61"}]}}}], 0x268}}], 0x3, 0x20004000) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000003d40)={'ip6tnl0\x00', &(0x7f0000003cc0)={'syztnl0\x00', r10, 0x29, 0x1, 0x5, 0x6, 0x7, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x7, 0x0, 0x4}}) sendmmsg$inet(r11, &(0x7f0000003dc0)=[{{&(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000003c80)=[{&(0x7f0000003940)="f3eb88870e518f36849994564d797af0f96fcfe05951eeb3a2e97f4f7652ec80f44dd093f1e0e7fac222964f93bc0d840a30dbc88a58a4e7976f81974b810af5e860e9a3b1138837d0b596884d4e198241eef5b078626e4a11264aa67a1981b4799b0023344bbc3b62a31a9015f4f07c01f08b6ac363ab00b6eae0771a47415d324381d17c8eeb1e96f5", 0x8a}, {&(0x7f0000003a00)="17acacd6438a3f0371f4889f1a6887a5eb4a3646efd3bb2714fcf589cf573bce5a6de8b5fe92728b7815a1828ff4d9d0c6bf01ba57727ba7c242045a3bcec2c460bf0b1355429b1ab1b650d1b632852c3cceee773f9b367a599d9e280865e894ff8f800f5d87e7b7a03c40948dc273706b24160f4b9d48de16950d86cfba5496c9860ee64b465f8463500473a2b5a623bd6d355e25a93f98934bd880c2cf", 0x9e}, {&(0x7f0000003ac0)="4a9744cefa71ff3dbcb378d7e7e74a0ae85f5b1ef0670529ee7d64d9a4a8ad9fc4e76a9deac14c7ad96462a152c85c5ddbca9b331338677deca1e0c1ff58a25565e24787ef3dccfa5e6133a620a6064f8f05cc629cce31e86c7bef135bef9b147edf2170529db7b23b50bf4262edc260dcafc1aa8b72f0d57140fd2d827ededeb026d2b4c2e18cfe6669c31c3e267f36fe64b90eed8501f51242e0b0e9fa52d53a0d40824e65048ab37e1542f913a0244b7f25", 0xb3}, {&(0x7f0000003b80)="90456a6af912a584d54a0083b8c9f4c04d01805c5266add54fa7a130ff2242bd0ddcb81b36aad635652c9166786b838503b0f3848dd597ed4a9c11d569d3d5905b1c21993ce7a8b9d1dcfc853eee93660c5ebeac9906af309d8c2e12f776b79d4987a3c1010e9b529b8948c8ba46f5c7619927169040dfa3caca2ab7d3f324f812dbb15dfef7f8a041d74dd43a6b146d8a55318e8a5f1176ab8ed55a30181be01eb4f52184caf6b36313d49a36a72a2626d5cf04eb70aba670a50967400a1303b040e90b0556cbb03cdbe31d9eb65a03d45f1f826648d4fd985f932ac2d3d8f72d4939c80cddac531a6fb2ff544478b1e8ad", 0xf2}], 0x4, &(0x7f0000003d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x28}}}}], 0x40}}], 0x1, 0x4004090) (async) ioctl$TCSBRK(r7, 0x5409, 0x8) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000003e00)={0xc}) 6.81404297s ago: executing program 4 (id=10168): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, &(0x7f00000001c0), 0xa1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x9355, 0xc000, 0x8, 0xc1, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0x76, &(0x7f0000000500)={0x1003, 0x8000, 0x8204, 0x100009, 0xfffffffc, 0x8, 0x3ff, 0x40000008}, &(0x7f0000000280)=0x20) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg$unix(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x10003) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233", 0x90}, {&(0x7f00000012c0)="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", 0xa30}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002280)=""/4083, 0xff3}], 0x1}, 0x40002160) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6.542188577s ago: executing program 2 (id=10169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x96, 0x8, 0xe5, 0xb9, 0xdb, 0xa, 0x4, 0x7, 0x81, 0x39, 0x0, 0x7, 0x0, 0x4, 0xff, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xffffffff, 0xfffffff7, 0xffff9c81, 0x0, 0x0, [{0x9, 0x81, 0x5, '\x00', 0xf4}, {0x7f, 0x1e, 0x7, '\x00', 0x1}, {0x3, 0xa6, 0x0, '\x00', 0x66}, {0x3, 0xbc, 0x6, '\x00', 0x6}, {0xa3, 0x1, 0x7, '\x00', 0x8}, {0x48, 0x2, 0xfe, '\x00', 0xd}, {0x8, 0x0, 0x8, '\x00', 0x1}, {0x9e, 0x2, 0x6, '\x00', 0x82}, {0x20, 0x83, 0x99, '\x00', 0x2}, {0x79, 0xfb, 0x4, '\x00', 0x4}, {0x80, 0x0, 0x7f, '\x00', 0x5}, {0x0, 0x0, 0x8, '\x00', 0x80}, {0x9, 0xe7, 0x7, '\x00', 0x81}, {0x3, 0x7, 0x5, '\x00', 0xff}, {0x7, 0x5, 0x8, '\x00', 0xfd}, {0x46, 0x2, 0x8b, '\x00', 0x67}, {0xb, 0x4, 0x3, '\x00', 0x9}, {0x7, 0x80, 0xc6, '\x00', 0x2}, {0x4, 0xc, 0xb5, '\x00', 0x4}, {0x8, 0x8, 0x6, '\x00', 0x1}, {0xc, 0x8, 0x6, '\x00', 0x7}, {0x12, 0xf1, 0x80, '\x00', 0xfc}, {0x3, 0x7, 0xc, '\x00', 0xff}, {0x40, 0x9, 0x0, '\x00', 0x2}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x6, 0x8000000000000, 0x80000004000080, 0x0, 0x5, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.288077986s ago: executing program 2 (id=10170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0xfffffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0909, 0xfffffff7, '\x00', @p_u32=&(0x7f0000000580)=0x800006}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@mcast2, 0x1a, 0x30, 0x18}]}, 0x38}}, 0x40408c0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) socket$inet(0x2, 0x1, 0x10001) 6.287290305s ago: executing program 9 (id=10171): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000000040)={0x0}) ioctl$UBLK_U_CMD_STOP_DEV(r0, 0xc0207507, &(0x7f00000000c0)={r1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000180)=0x6) (async) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) read$FUSE(r2, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) (async) stat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002780)={{}, {}, [{0x2, 0x4, r3}], {0x4, 0x5}, [{0x8, 0x4, 0xee00}, {0x8, 0x5, r4}, {0x8, 0x2, r5}, {0x8, 0x4, r7}, {0x8, 0x4, r9}, {0x8, 0x7, r11}, {0x8, 0x2, r12}, {0x8, 0x5, r13}], {0x10, 0x6}, {0x20, 0x2}}, 0x6c, 0x2) (async) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000002800)=@md0, r10, &(0x7f0000002840)) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000002880), 0x80000, 0x0) (async) mount$fuseblk(&(0x7f00000028c0), &(0x7f0000002900)='./file1\x00', &(0x7f0000002940), 0x80, &(0x7f0000002980)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x100000000}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@blksize}], [{@pcr={'pcr', 0x3d, 0xe}}, {@audit}, {@dont_appraise}, {@fowner_lt={'fowner<', r6}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@flag='silent'}]}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002c00)={'ip6gre0\x00', &(0x7f0000002b80)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xe, 0x1, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x80, 0x7800, 0x5, 0x9}}) sendmsg$nl_route_sched(r2, &(0x7f0000002d00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)=@getchain={0x74, 0x66, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x9, 0xc}, {0x1, 0x1}, {0xf, 0x3}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfffff000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x820) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002e80)={0x14, &(0x7f0000002d40)={0x40, 0xf, 0xf1, {0xf1, 0x21, "585c66e827e2e560a73ac599eabd095570fa46c704992e242c909b0e204ea3569ec86bc4a42d625a1b0afbc1fe49f32a8a05e5daab50633b1b561a28beb3a376b5a2bdbe6200bf090e9c2d2bca10056953d841b7b9c768287f5ae9581a7f7d6f638f17de1469269c34e02bdeb26d0df1f453119f00fa3ba9fc7a3256ee8ab95fa52ebcd2d84227ab109366cf840dabef43971341624dde4da695916229f1cfc0c14f0fe30626e927091ae602bb2ef056b95024c80f8b8a2d0926f220b34157a1ed25762aff755da7be03689a8db481c71adcbbdaf0811d05da4532ff4aa0e50e59c8a419c6a1bd27f3abda07a60505"}}, &(0x7f0000002e40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003100)={0x44, &(0x7f0000002ec0)={0x40, 0x11, 0x6f, "126974e9582b3ac7f055b6211d1a1c388ab54a6dd3bc059f68c190f0e7b471bc13feb9dad7951a10f8bb57e2905a0670339e9ffcf3236071348d0c929465d1df269b8ec2f49b5aefc837b36e02b73c1d6f9acd7bbbb2951ad3aef0c4f7919c6723f50b2ab2f04777d7643a343565bd"}, &(0x7f0000002f40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002f80)={0x0, 0x8, 0x1}, &(0x7f0000002fc0)={0x20, 0x80, 0x1c, {0x9, 0x2, 0xcbba, 0x40, 0x101, 0x0, 0x4, 0x1, 0x3, 0x401, 0x2, 0x83}}, &(0x7f0000003000)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000003040)={0x20, 0x83, 0x2}, &(0x7f0000003080)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000030c0)={0x20, 0x89, 0x2}}) (async) ioctl$LOOP_CLR_FD(r2, 0x4c01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000031c0)={0x1, &(0x7f0000003180)=[{0x6, 0x40, 0x2, 0x80000001}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000003200), 0x404802, 0x0) (async) r15 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000003240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x78, 0x403, 0x6030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0xcd, 0x2, 0x3, 0x1, 0x162362056b33ede0, 0x6, {0x9, 0x21, 0xb, 0x9, 0x1, {0x22, 0xbd0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x50, 0x1, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000003300)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x200, 0x9, 0x4, 0x6, 0x40, 0x4}, 0x13, &(0x7f00000032c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x5, 0xe64a}]}}) mmap(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0xa, 0x130010, 0xffffffffffffffff, 0x18a3000) (async) ioctl$UBLK_U_CMD_GET_DEV_INFO(r2, 0x80207502, &(0x7f0000003380)={0x0, 0xffff, 0x40, &(0x7f0000003340)=@ublk_ctrl_dev_info_existing}) (async) syz_usb_control_io$hid(r15, &(0x7f0000003580)={0x24, &(0x7f0000003400)={0x0, 0x13, 0x32, {0x32, 0xa, "b1e50c0cd27cb0709ae82c2d7658488ab08c50f28b993e65d8d12bbc0cecefe81987cb3a7e99c29d00b4650cb5aca9a5"}}, &(0x7f0000003440)={0x0, 0x3, 0x99, @string={0x99, 0x3, "6f076eb1531f8631f653014064a8e7d127ef80c8107e733374fb4fe93938c61a7a46299a75e30f8c3ce53c2d2613b0bfb4100b2ea9fcd65d78e6ba93c0319d87f1c22008a327aa7dde0448d0900f85a83b0cdf97429a194f6ddaedf5320a6077a09a0f0b1a00dd14d843138a268016740f2cc19a304778e0e4ace4f3116bf27c9c62d4f9255940101a0c0658370e6b7850743cf6649201"}}, &(0x7f0000003500)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f5ad569e"}]}}, &(0x7f0000003540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xb9, 0x1, {0x22, 0xdbb}}}}, &(0x7f00000037c0)={0x2c, &(0x7f00000035c0)={0x0, 0x6, 0x12, "474e2d611ac766493a32e7619cd06098c857"}, &(0x7f0000003600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003680)={0x20, 0x1, 0xf8, "0cc1c69d04d7b30bed3063cfe1f53ec8e1e6fa0ae465bb5de5e62a5299b5e80009b1648e3b7c8d4067bab038ad672573b5e048b89715077d258a4ef7ab1903feb7841ede4bd4ea500d9604559ea8f86a5a45734c10c21c18564491d29b62b55ca298033338d10d3f24c3efa401122961242fa1b904f334bdece5acc33cfa5361093b4077cb888d1503d3edfc0f7c8bd10a8e92c201b100c0c2cbde04333cc9cc27b936e53f5fc6a46fc7bfb79fa05c5e8a74f852a65aa8e510702be8d7019acaf176c79265764dfb37cf818515f331f5f4ba330c40781fee424500aac6d519468de426e29ba4fda721bea52e9cea8bfa3c0f347a9624a334"}, &(0x7f0000003780)={0x20, 0x3, 0x1, 0x6a}}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000003800)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) (async) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000003880), r2) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x1c, r16, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4004) 6.115927555s ago: executing program 9 (id=10172): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1c) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) close(r2) open(0x0, 0x0, 0x1) 6.058682939s ago: executing program 2 (id=10173): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004780)=ANY=[@ANYBLOB="f02500000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000b8250380581000804c100280e40f0100e2a88f49028684dd136d015d4e3fc6f5805d59c579902f46cd8cf58dc9407de66d4b787e77cf89e046da0ed7c68ed4237d608062d30e1a176cd1d093b04e8b50be4a1fe7db08ce2492a71913590ae5dcbcd2eabf79674c18f18bfae6b8b982611f0ff4f70ea25f5abd37d8d7aac7dde197ae95b91005d21b569971eaa03df88382cf23e37aba0fe03546b2a8f29798247f2f7622b14df536daf16ff40ddf0fac2b01792333e5efdae4f323b3b07bac09b464e389c98a058e7b81f47559a819af255f342e812824c31a05ec0f7aa79d5e31b1c8d348087a66263020b06f571b11d2d7db0b938e07ebc1dea5c437e718502811e6e403a4444268b9e25b1342a4ac075e0bc30f2982ee85a7e4145cdbf65ad6f751dbe83fa2d99eb372fce177ecee3ff8c72dc93ea3b111cd39ef4bdd7713caa8919deb162def4fef1eb1b52d1e1a7722de69c046114c4747d5ae38c83e508423fd6960902697b08ac2b370daebc444b877d9339aa930b95a629d04b7a3db9577c5ee3dc51f8e5d17816ad32567fcf9a86738da0d3cf2f014f7889d9d72408f2f216b6492bdfc2937cf31fbc8bc9435b3466b64c5726991fca19e780f704d7a608125d6779f91b2423d25ec8ff292f3e09889a9687f9fa5ed66767bd02630aef661a8bcd0f8c0730cd64ec2d5b01da3c9dd5709aaac2c94ade21dc351a51fa9812b1b5507f1439603dbac7f139909772e0abbedd9b10c4c5c53f2aff4aa94790bd42335366de313600288edd41457e7dbb50c625f39d9c52f95b29b5179cf7806ac16035390fd07f6be72f303a3b3dc3d8dfc837107485937b87f80f8a794d562cd0b7e457fbc10a6f79160536c21f9136d00f0e46e3a04b2e810f236d06b219d7ef06963e076bcaee72cde819e11260ef63dbec6a565696bee47f8a849e55c790a3b46f425a8c4c0a8a8d729ed308aaf17fd7332b750a4424b283be1a579662072bfd3b0dd63f58be35958fa708f5d6e578fc835d15dc88a19e7ecc9708a40899aa88e7c84d63816d706b37353a800d1dadc62cbb12d0726b4c8e55af9304c1aeb8ea4ffe0861e03a2effdd2fdd12022a45f0145e2d537bab68c282b1d4d6e5ab7d346f3682d8e40d2ad9bc9a4cff4ae39564c5afa87e8006f7c2f8a324509afaefe15ddc56009e6e00509b7634ba7531240a40a3f51dcacbbf5590b54ccc5c32190a1c7b370013b93cbc225a4aef3e125dd3500330563f5bb536c56ad42184bee554093be0ced77afc988df250f63e9cb472e0d14f243f69e3209559469b9b8abe154ebb6f555881da37517c3c1083ae3cb8158416df0996fe070157a72538719778e9aca67da67f6bb0326a5e932def9a65a7ce097bd5728e711fbd60606225d9555e7c32f744af4ed0d54c56a32a8c174b6ca6e74eb309e75a325b4e3d8213d3e6f20c8da65d757b091a2ee2fe393854f5317697183bfa21aff6d1f7831a2487ad6a1d6941774dfa21c1bbe112e06e4613cc5930d1af4b64d7dc1fa53c65557f526441b6e93be4e3151e0a7d60fe607b8a8c109590eec03a456afd60cccd36f6747954ed555b8593b09f314cbfacf7f0f6a53d400cc552e43c06cb91eb9c7055b14a2e34765657da82880ae941ece5751b4796c843c83294a1b02af9d1510ffce9bbe0a1ce802689236ad0971a646b52f535b340f2d0d079d9c1cac9824d546611001145214e82bcf33dd367385c1880a5cfcd4ce19c378e8f2d491c787b0cf63093af29d45a5830669af0cfd15fd5f1b5bfa4d2c9b6292ed96573a22e43de30768db73323593d8769e91563e93ef1eb07126706c1db0ff9392361c555056535900317b5efd6619fa1470fd7de6893210b0a8fe9f1f315bcc6c8ca5fe9ac9ae73ddc19bcc24f2fb6ac1d16afa24a132b9c0d87222944887348b4b10f3f0fa75acb88947275db0db01765480f62f713371ac2a6a85900c44826626408226b2a3c502d28063409f03c90c643baecdf31e51b60e2acc47d5e2ad335ac6b744cccc6c2e7ada766a1d8832017e4d56f12850a3d9da10e6c8a4f7c29d8a79ce35c7d757f707cb364bc0d8cac340cb9f7a49b37c6244067747d03b9825e1204fbe7317c89d1b09c246c88c00c718e3f5b052f8fd701d2d3693e4d88d5cfe18c6b6c1dfb30711f0a2b5b80607055918425dc708655faa4964cca474498b1803aac6ac67ac4b3b8e4bd3136c03b9371f4e3449fcadd5e0c839b6264d2af6eb77039f431e87f874d772e9131f692132f6d8a75c3d643e4c3687fcc3689f9075b5421b62dfa1d988b2d7faecf918d77a7bf486764ac8c322fbcbe700cadb6f96ccb29977ec091283be82fa70af619d25376f880b13e08b95e09b58f7ed808a07b8020424e84495d17cbd8b9607348dda31d69e4c85752e37d3e8626ec1dfe2d88a192a618f983827b0669e22df01b5b256739eb5d741aacc07988b790398367c5f85677fa5c71e468b6cddc5786419d3763e1d16c4cc420a9f45456f13a70276b6f906b02193bc7b391538fc760e3a6570be0c6bf1320f3b211dafbc56a224b1f23c18a329186674fc5d4cf774a826c28c896b4eb6c3a91f0aa80e4bfc5ed74bffa7ff03ac06e8c87d0edf3a2db6d902e88c01ff5f7a8245a172d57b01b6c05b54da158a63a540b17f6b1bd4390730e6b348313a1251c74af5d088f97f8b4ff3d0cb4adacf4af93f80f83100fadf4c6c13b33bcb889cb21022ddb4563c1bed4324d238377ef1a22761048e5361ae52f501dca336dda91d08f4100612ca93809ece21d013f83dfe765f31983e6f373362ceb98b5dd23cc2a3ad4172e3a44627f6357c26427bda142b2f47378e4210fd722b2c7885d05bd64813d342c072abbfdf8bbb0bea83f3461c810962cea2152650cda7215653fa6ecd6202ba30bf1499b333a686e3c2e839da716cdd888719e3f0516d86cb1f8c5c6dec442d888f998a46114bfd821754deb2e250709b4cc476bb41b0f9f8011d2315ff11f2b7c789b5f2c89e4ee0b3668b72e7562bdc830710d89eb2a21defc35089164b108f1dc52034917af599e75e8c5595c9e4f4fd39c36f4205154787a52bc278371e7e2bf0cac370b3f75a53801089820cf1d4bf5e4ee41bcb2e769cbd3dd8ae5ec7f7f2f22307371d3f82d7b732d0e0eefd002ba10efb9255981bdcbb5ffa4147316319dfce001468317767e4c08026a7b12144426b5f66be873a23066ff4c7873f240fcd17b5742f5060ca662d52069e6949f4ff86f0b52907905fb22b1a04e37723ad84edb16af809b1ee8c211f330125993274c7ef27d25b5d256db54072fde5e121bd964375b8ec2c933ed3e8dac909a6eca86d00852f62c24e595f7df827c084434f3b2db447601b8bbe995d2a380d68c602ee25b0d50a3f12c2a2ac909712817ea8b80315b655cc3555384ce7624384384488adbdfcc9ac5c917e97fda314e053d585c3164208c24d6f6da8d057714b3505f3b25071b356d5d5c6b1fc5888f38a7fbaa3bf3055921cdc6fbc43c93201fe23d9d750695851d49f0127a068e87c8b7a95dec7dc2f6866d6fae0f272482c42664be2b35033ba1319f4e25edbfded3c32868f319ff6062bc52dd1f855dba1d361c2199217652e0ae76e22630db133dc749d5412863dffce5e288a4b9d21e75be1e7bc6bf556dbedb130ce60a5e4cae0596bfd6b4e14d6373998e588aa8b28f21f2fc170ee3dbc876a87e6bb1c897b52ab88f9bb9019e5b59475e0875bf56399699f09d5d59db415fa8cfc60e569cc7d5fb622cb36b9cd284b9d14196d20999b629809709b82755992c3249014ead31ec28b9af9ba7fe0003b4360e86e3f61a5ca90c673103a0ae071846cbac20f39d5ebf7bc509e5167bd6148ad0728340bfa9b585855624e45566c668508545950c61f576a5245023fb061f597f0845de6b54fe9d8e3dd24b60d9198731711f1731c0c2abc96abab863b24a377ef50afbd4c8b16a25b5f1592c3699ddb30c04dcd93f769fa36d19a3de63cb74f10600dddd5ea702fa9aaa21abb2e586ad27d003bc62ae1fb249c6cbdbfad32567511c7290d4bb9d1bbf38837dca72d5f6cc7cf9bf609d5a4f0c04f0823b5bc8e8524657e7ad89c3e23c2217898e0ae7ac4fe7ea3e8871a0a01de868c403719bffd857f9b41444fddf42794de3add8c0f12fe4f425731a60ec25cc716b42c7a9ded99bbd77c8cc210c95b7ccd3960b93c88a9f382b1e0f7450ed42bc6c879ceafa4c72bd53bc310a7915bde63295f0dd8451aa9b3b4b39e6d0fab2e849b8eb84de74bd891944ecc15661bf15fd02ef8f23b0565b0bb3b12001aec9f71257a3969cb895d277810bf7a2d4901805c01d5a0d077433a3d062ed6d2b0f2316f3226e1a562c14bf06cceb9638e236edce86358b7f9dd99576bc9380cd81208f0b60f4bdd1aa942a2110d954b585780d7b490903273ff035c93dbea70b2f9b3fd0a7926b54868a2fdb82267bb56ef59ef92d7209b375842f2182daec560c1efd7c06bfa17e6e5da84cf4385ff57b9743e70057965e24f5ff4ac41bb2b09fdcc17d2c214b99e27416187f216fc00194f803b1336b977150d8204857da0e2413262af4140977e0c8deb51e9cc1bac8840c054752e940d94a835f1e6dcde4a2806afc674274666b444164dbd0e09912187165eb24961d21ff7531fe8c5d0e5fbf29b148fe0617a670a7a4c01861054f67fe2aae7f42bdac2321370cc10197eb0bee1a4afddc804833ed5955e843821f6489dd5b72e36feb3876a48d620ff66ced3cfd18054dc14df93e84143ad15308f20998929275ccf8dc64fcccda341f7df92a47a2c7fe1e1304b8f7335364a8644bd1c9ae5a9e70215fc9966b359395693d695a7e1e781a8142e2c6348d759677b7d1e2f2a3d771722ac0566cb68226c14792270c77b8b2c0b5caaad7efdaeb441da7445322fdb88391d4b362be3d74b083c043dc9985a1ff590e61f43a840c15bd9121129053f1621f514065beaaba139c877da1473b413a9d5ed84cfdb03732962e33bd6862595a80b76bc5b7f6bd1a8d5b491fba0e31da99b831630b1204db335535450178954fc18ea7192105a3b1bbff9b1598cbb57affef623175d6bf7e2da1eef7cf4f771b837f174036d2f67a591d656229f7a0e8f47d6375e3d3bf0c69e02c8c4bb5a42c59bcefb415d99b4a2b59ad3f2f4b0b9f606d60e46fbed42773b947a1bfcf6251c6d51bdb208e73cb7b3f0437c8a0ca84d0668682017e75dc56fbff9ff99e15e426c99f69b55b06c6f6b332d7a0757215ac4be12fc17c179edec2eb201f9ef8a3067f08698efafa8673ee4ee6ce777442b36d66e9ee73ac6a5f7cedb5e65d0b361e8a813cd080902b132997e0c41ec25f0a6c5588c5b42641677397d537a5503729d822e40fbe4013f4135a64f90254dd7099269d2587f84202911c7c7b518f82a2c9f0993d094627f15e49495e79596e2e869d43eadbce27cdc146fe0ee9a5000e5efdcfff6a893fd91a19316c25aabb6ce84ae820cff50efbbef89a084729906e267befc2e2337e361b391a82635c14c3fe8d08152b29034855f82c71ecf73eb0a76a21e607a9e0159df4357e3017963f203b0428229dd845589a871b288bf30b84f3f89207eb63195403f4ddcaec0f22baddca3b1863f8c09f55d54d6d6e5e7a9908cb63d0ea00c92675a32e2db1fd5c0da26bde275f46684d9ca9853e98d41c59d89c7d83dcd9d3a9eb0c3e00ee4e28e4cf1ea276f841400028008000180ffffffff08000180fffffffd4f000100e3b1d492f03b92270e9ad5fdb78cf6efc5bfe94ff5abf4b629e295023226ed6abfb7036ad2f6e1cd771a83a11b3489f897701d7bd66c36b603a832000000000000000000000000000000000008000340000000025c1500800c0004400000000000008428f00002801c0001000707f0ad7dc5114455335d05faa81e735cc026ef3a3d652804000100340002800900020073797a3000000000080003400000000308000340000000020900020073797a3000000000080003400000000498000100dff0b3fcdccc13a4b3d28f080aa78228b5430cebe8fae869d8c850a4e4f0db971765c0a2f34f4d7044954090dfa587704a7f8f00c54030d635f6312419ebbbd64323d510335086faee5d514f7b20014e656ce4710aa3379875e1a81caaba9c0c4a965d39ad72fed0376b14a0417ccc48d4928c680580fbec51cb4ceb3ec95d1b430cf0289cbe0aaa649c5c1202802c00028008000340000000040900020073797a320000000008000340000000030900020073797a31000000000410010008c5062b30696bb34491a841ecce9aae54a9a40621787cd76360d637014182dfbbe4646557a36aea91d7c0a65883a48230fe3908de642df0e3e9b6defe582899ccda20e8e61150b3a2f98c5d621bbe47b6223447aa661ecbd5083e98a37661c765cffe9b3f8b3a4738dab10933ca58b7e3540d841e3fc4a54e15b8c442220f415b405613859accb7a994cbe56ae11029e8582c9e54e56ae94a98f9922ca949996ac3e05d9b935c48209df4524d08e307de3533233713cc36754f05dd93b74461faf6bb8d145f6521e9f555540a09cbda779269fe608d7fadaaecf963ce207531ef7c1337bc92ce9b7796b239121731d7f2c4e87cd74a0dcfd1d5ba51f406360b5777692b5c0c6e39a66243a365bf7183cfba1dc7e50db8277ca0e95e05f26160905ebaa228171cb3bb1054bf5198f4318f27f2ff2edc4625caf66b34e090667cef63ba9af783952a986ac2f1a2ee9366fff5cf48c5ce63554370e64a153aa262c83cfdd4542dbd47d3cd966616c8a506e69277546395e0df43706e5b37f16b07ede7916ab9bc8869e49f6634482a68aad53a300a0f6266e05b5d665bed748993529e9b398a3cdf535223614a37109924318128a1008ee2aab9653334e22cae6a7728b4c324fc54fc0caa453702ada300383e19919e47afeb1bd852a6a38629cc28ddfe4e6f6b30b6461fcda28079db1235998f3fbfd9990d25a7a3fdcf6f50df4af09520e7eceb4f4c9e1d8fe4806e3c8b5364baf6a8f7ac02037e87af55e70e42d9648264fdb561fbf1054a1c33780b7de64dd4568736afaec7988bc33bac11f468b251e37a0c00ab91f1daface6c0778e408c360fdaec593041d07824a2f803499a324f269d485cdc04849aaec72a4a44a1bb8b9b89215eb3eb7273dd66efe898a15a8529c9ebe4370605145eecf896d54800f053b3680cf151a658d71c33585f623171b601509d9e7bbc976acbc3fb586e546a0a808b45b91bb05c198d8fef42f1d672c3ad51b846a6e66ff3be492bf85add203e9a2a212c46e885911eefe408e519f2b6bfe597fe7bdbd88b4b01224557c5233da547b4f3fb1fa4bc91345d516f72ad21c22baab19f9f006b3762f147d13cc34b322609e527bb14729e2693347e178195bc9e1a2575789907a2f5fa0abd7c50fe3aa5f4ef455d46b92646787911e09672423ae466100aaa2f5129ed6dde48a9bf149ded566e3e5e031d9c37ee10f65cfce375428d7a782c6f4ceff3a52618831aa915026b61e4d3c0c4c02035fec44d0d56b4d263ffe08bf3208fe267c89438499c268b5afa441e2ac6abfed28ee77939b66cfea9207bc5320d7c32a543ee9e57eb5597ac031d004190e857cb35b39735ef0db82f1f8d1cd669fbe916c8380fd0c19188bf3c6a6576a43d17950ef668f8c52864178f9b7b2c2bcc33971986101924b5ab6e642ab32114702b0c08f068f132da79eb189e80be4ed44c6fdb7f7b9b4c6db1fde4edc1db51dee57c94138c988b02f0ae4897d5fea2a1aa74cd87fbfc946e5b9f5fefb0fba46583c9ffa47303f9af17e1c96d54d46a49a0117d0dde300314955e95fd01af3d55d8f6bfdcc768640967cf3f5c8664f6d6417e29b050dc77b3958a65e56d8ae0310d89fd4c586e70c8c422b01db80b417cae9513342cb07851a15becbc1436c44fc67d8cd6cbd91996dfaa7899e0f4eb3e2a3f5eb4f754161f9d308998a0783a00b5ccd783053ba048319c209dcbd76bdb3cf986c14f10673db19391935a73c652948a614d61d9bcb5d89eb440b9427f3b025f960f5a2c60c229b5cdd862876f741b95d88b4c1179b254271b0b857ef51fd8896062faf98c889395ab64a81e3e3e274e365e3328fcf4a468e444d170147dc73059c44216b2ac2f4796de28f4de96aa9f9ec04eabd22c5cc77b286afc0cc6baeb8f22e2285bbe9303017e29e618c79b0f842a2f905bbdc634fda66839122e9daa338328098e6dfe8f7a53df149b8a1acf85bb560d6a81d91b030efd1080da3bcb065e3a931475b8197ff6dcde51c9f5c075b9a66efb5cb7c15696db7560a1bd94b63695d076f6fd3dd8d6acfe81232c4b25bbb1eac9689d17b8b607ed582da5dbd56aadbe40a2a3a381046e90a78c112bcdc3cea5d549a1b1742d968b03b8ba5d2e9996fe003810c2d2c26b7fee7e0d91470f3900896f6b4a31931a600392196f8466e32777115e57342b4d16674ceb0e4cf7a8d9f734a7b312b84b120a2754ff76462f04ba85a3d0d349cb75ad2c02d636c2bd174f16c3bed3120a54b1122dc425aee963618d9ac0e22e598f7c27d2c3dbf8241502c5a9aba1922c78ca5527768f0fb57bfe1dbbab22bf71ba07f7ab21cdb02ba31c8f1c4717504281b635fee84781a7ea7bc62138fab3fa918604a43b6f895234322c677186d4db4717f1eb62ce53e9b98380bb5dbe684608cb39986d718d9f09e9dec62c9a5f4b93d4d291560b8688299e6ef3030d1630e81e55b7a3183dc92e8714d563b7391fb00d4621246ffa8436f776958e6d98645acaca264733fa72b094dfd2896cc3b756be18ad6c563e635f1026aff4e2d20b4460c96ee0f28992837fa8ad7ef50ff2a8f1943661cf8c180017b8d839466d3c1164aeb1c64ce82fdbca831468219c8c3ab0bf7b98d580ef2dd978dc918735a979c8dcb8065f61c05325b5a4b5cc77ad4e9f44b13326c6e1a09d965b451059b06ab6e1936dc4c228a270a2869ff0042f8627df3804e61fc6de5f3bc6b3154045211860c59da8963d8a06c88d9c6165aff75830e0335e41a1bde2d53f68efa0bae40eb3017f8cedf4457749c5a8f41691583768e3cbf099872d67d86e40806973d71def9217015183f2ab7779f601fa36c1c25a20be0152c0dd943f2e556a9407617a030696de16697f93bf47fc25490dc50c886eec7dd9dae9a7821dbb6009c24879da53d31808192cc7bd3e58aaeacf53621695444b9047e336134c3e8353909a3512cff4259e21fd49b96a4c66dcf83fda2f0bd06fd3e62013eb55f72a9d1c7aa8ce50b2a81e91788d44b30e2491a5ad0be23c4c6d32993764741ce8d1099e049b8a42fe3adfa0e8e545496dfd6b7bca820be119b3f3d6e338248359e9bb89dcb22aa57ec7a32715f512fa99d52f9506434624eb4c82099f0791896fbabae51c2f3af4bc3b8266a4739c70d10b1c2975493639807f4269f26322f4e85875c0a94fe29ab18c1c4c93ac842f7590c2eb2a1d1cd7e998a93c0fb8dcbed8bd44abbcd6768580475386f309fbb0b52a45db2f635565d4fab7dfed004f1cf6546b41d90e94e5e07a0cd3b4c87dbeb81aabada71b0b205f59a031b78bbac03b7eebd2edb929c9bd7214becf080b7703679303ade056372ffea9d52973ef47d7e4cb37c30a00663fdad2847b0ff674b2bae1e3ca83563aa6f10b6db19f2d39a5e02fe606667ad33ed60fb608e011f301e8d3a29fa8c1ec128a42dfc891bd8e9fdb397ce06933c22df1d3df91764c8ca4f675f64a9c3dc38b0fa6c0f08ed1b471df7e996dd2fb4c844d0ce52f54ac5755e768098460d06e2b831d22f44aded1913abb76d066eca40e42a7f4da94e9c2f4ec880be87887e780c152fa9bdf634744c5e5f4039ad2ba707fc63342c8366911da5a03e3edb6b9e3d1e91179c83964a055e529d9d264c4f2c2ef0d4736c5e8010ce5b38941f260e679f13a4b9d26be3f118e82cb96ad1221a0ed92dd3f05a0c235a5bda537d9e7cb0032f2530e2660e1a76f048db0f6fd1536582968d8bbdb6d10f290344b78ecd409a5bc3bfd1db1d4cc7d2a5d94e72952bf0a38357edd85e480af83582d0bbf2ecf1de2ec2c3c407665897dd7a268c611a0bc3029720c09e57cc379570f651421f1e803e38cdc33b73202e0af08ece07ba9912f5e3541efd913752ba5501f37b9b6d64449936185285f756c950ea3de98fb34061849943cdefca675f8ec47f657f2199b2cff1843bcb06654be132df6af33e868ffbeca0d1c646afc3759cfcdf70279553ae451a623cccf76231ee272e566389d8506491a6fbc7f6a73100be544352cd1607a3bae4086dd8f036beca3ed02b694e6cfccac5f020cb89fe86e86badaeced5bb9ef7a5aceb152841bcd6a2f2e8725fc4eceeb8b27728e67e316cbe7dd163529a7e5a22fd862db9ed9215966e0dd6a84b9bbc5cc807a144558c5368302e0c1b3e03f18f4d0539d4c71e6c921338deceaf7934fa81969376e2de998c4cb85d5a408c9d3eea0a486735775a4ef04865303e9f18efea915cd64054383d1871752be7b7ee7c009097b9210234e0db97cef345b96637e0bf2051566fac668ebdafc97d5c82418087986ef3cae75f83bc1bb11697bcd4a22b6a0f0ebe6b8f655f4d8e7c1634bdc9afdd8df32a6441b03e7a8b9e73bb78d8bd653d7038d1e0602993cd853d7da452b335fc15fb41a37fc29f7765a4d208ac892c6079b436d653ffd52745a17016244f610536292df06710e3fb59212f154a4c295404ac5b14c083ff0fe35b36f3170515c60ccb8099ed6da5d7bef9ff6bf159bec1d913a17d3682b1907ab67eae75b0335baf27af6e770a5cdf0b990f14eaa8df8d52659b1c95425e0fb115884e7171df6e8552afedf1ce4eebe5fe436e4e130d8c1ec3449be94c0c250219bd65b7bd373624b3ea632ebbf4cc18c0163687f9c51a8addf421d2b9c690b60ac0cc90779d9a78e3d0c77152c047e93dfad90db71c0865440d077d03fb537edad32ff4d1365b9dddc52529775431e29b14c6f41c69328ee6a500af158213c1b6c640702f87b528ae226194a08a1766c90a6d6eba13c3c19560c0c419746f68eadf9e0f12d50e92581e2a14da8ed014e572375cd312d6a133099d18fd63914174846ce142af5b432cdbb2784a5c5073740132bb0dac46c7ca20c3ebba84ad7a79dd08d8ca49f480a35271a99fd01e8d447c6fcf413932e198935c1d45df177e033ebcffffd0214a29078d0508a222fb9fce3ac59a575da0f2102cbe5521e96a402140f47bcdfa1f345ab3a8bff457c0bf76856c59018cc3781b1a923ad633cf094f633cc1cd8c39f66f085ab088760aeb05416323ed8079116f1d7fcfad00d4877ce5e3561f517fbf92fe4fe33439f396c9bdc151a776b0d51bdd969ea33ce9d01814568cd58b34c3c780987d08c8cc27eea6009080dd25d414b01f436a0874e90a8bf50628068ea8f4e47de0ca8b0724be82c97921e4ccfde8848962680be648a33ce63a6005000575badb92880104fcec5d2a477f2093150c3bdc0b17e28df11853e5f10ac241086d9f868b31ea524d818991052ac2a8b779a6717ec715bffd5aa0be3046705b0e88fa6c00413839ad1889092954d4cea53dc8100517857d3293e53fdb606329208bfd99642ce0e269ab1299b23da60ec0b190365a506e0e3f6deb359fb4b0b472e79324ee1ae2ccdf1e3a0b1b4e20f2d413054ab8c03a8b923976b3429273d228fe61ebcdba92ff17f5caf9f1e23e15c45a7b4a5c083652b0fc807af887cc299a394a998b6abbfcff07a00e1ba7606828e59a3a5e0dbfd28df47e1e9e2bf9c1f59b8602df8b54456fc31843110f8d4a9cb072e779344865da54b353ffd5bec1912311fbde934ba7fa0f9858506cefeca60624cf5ea64ab8cb3c5d8cb1fca7ceb577a0db67237eab985f860ef8b4cb57a2c932b8fbfa9ad432ec909c6613bd1bc7e18e81ff4edbfb3234b773d107e7a365aca1f8d09282acbd1afacbb8859800a958b6126c558bf97f644ff2ec21282e49e477b81e11e0000100e3a7bd4a61325a2f0679ddb28aae3c2d6fd1954847ce04d9030598e50b9b1d3adb3d9849fa61190eeddbbbd95accff110aa03266e354bdb60db624d32057ea46c7eb02726f78033b3eb4c8f5c83568da7b854b4545b5cc8470be3ac54c624361dca8e056d8303f4bc3d418aad7cf57a20c1ea40a31121a55afe05fdbc255a66e62638f4ddd9aff551bb227df2f971604fb768594dd6fbab09e1b7d1bbf0f66242edba0b3b4269ea2d8267271a6713ded0d8f227be36696e4466f9868b624548d36ff42744c864613828601bf93b4b50abd4adfbb034c6bf0e90b3524100002800900020073797a310000000083000100991b44414bd818ad0de434c12a4fe37d11d34a40fdae63309ce86b02ea0863f4da49038907a65074c408a3d8f71c39db0d2b6d6d74df2da3d1423b051a3c3e46fe94a5478eb00b3e87c2721e267259ee6d400cda726ec953f1e1ee21e2ed998e7e32f19d836efac323ffae5e8cadc20763b46b078e2c39bd2cd8d9ba9f528b00b3000100fc9ab46ade7bf80bfd60aae44e829a3480f1cc0992fee81042df77d18d4e9851a07854a759e45c5e5205d7dbb0110e8cc89f1fce2708461b5a177c225f1e82cc8e44c9984e61fdb097f900662490db1906501817696976709ab4072bcf67669dc449de24be6ebf47cbecdb144608b5df7c0c71de1547498434b22f3336c76b5dc3c4aef43deee6d9cb8a62bcf6a8f63ef3a7ce24aec09be5a9fa7bdc98e143f4c90505facfa166fc84dd95e06be56a002c010b8010000180090001006c61737400000000100001800a00010072656469720000001800018011000100666c6f775f6f66666c6f6164000000004c0001800a00010071756575650000003c00028008000440000000160600014000020000080004400000000a06000240000500000600014004010000060003400002000006000240130d0000100001800b00010072656a6563740000640001800a00010071756f7461000000540002800c000140000000007fffffff0c000140000000000000000008000240000000030c00044000000000000000030c000140fffffffffffffff90c00044000000000000000090c000440000000000000000820000180070001007274000014000280080001400000000d080001400000000c100001800c0001007061796c6f6164000c00054000000000000000020c00054000000000000000040900090073797a3000000000a4000280330001007eac9dfc30a65fcb39fba36b8315967d21a1048c167b95b47d64985626d211466d78230d56b907c746c3c737cc1afe0053000100faa786cd5789a212dc2db544fb83bed1fb03bbd8b60fe72af937c49432c05856847e1736e87c0921d0d32eaa83794b18bacd953abdae554ccb8f6f04ea4dc570f6c5614ffa76d0a52133722620525800180001002919cf5b36474604ab6a906a4281b9805d8172dc0c00044000000000000000020900010073797a31000000000c063bb8edfe8d3daf21acac2fd2ad8e5e1aec61877fcc3bffb9f2c392e6abde98a063d26529787abf6c71686899ecb7cf4fe48734e21ec3b6aa2a4a5da9336fc45920f5995e9a9c12ecbb9ea3e21a988900"/9783], 0x25f0}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r5 = socket$inet(0xa, 0x801, 0x200) listen(r5, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) fanotify_mark(0xffffffffffffffff, 0x161, 0x8000000, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r7, 0x3}}, 0x18) 5.84442417s ago: executing program 9 (id=10174): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x18fd, 0x59, 0x3, 0xe, 0x8, 0x1400000, 0xfffffffa}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0xffff0eab, 0xa, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x94, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) fsopen(0x0, 0x1) socket(0x1, 0x1, 0xc) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000240)=0x20) gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x205c) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) 5.819517798s ago: executing program 4 (id=10175): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) syz_open_pts(r0, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') close(0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000080)={0x30, 0x0, 0x2000000, 0x0, 0x5, 0x400, 0x1, 0x0}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f3fdc20221802324a1301020301f1011bb82e9b85db3956e74d26eb83bef61a90799a51604de01f0001"], 0x0) 4.779825352s ago: executing program 9 (id=10176): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @mss={0x2, 0x4}, @sack_perm, @window={0x3, 0x2, 0x9}], 0x4) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000100a58000000060a0b0400000000000000030000000000000080281d4eb4a8000100637400001c0002870500030001000000080001400000001708000240000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000040000000a"], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x8c, r7, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8156}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76d50055}]}]}]}, 0x8c}}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$igmp6(0xa, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4010) syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a80)=ANY=[@ANYBLOB="02c830e9"], 0xee) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan0\x00') io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x106, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) 4.59215433s ago: executing program 3 (id=10177): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x70a}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) epoll_create(0xb4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x109402) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4020}], 0xe) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000180)={0x1, 0x6, 0xffff, 0x800}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000080)={0x80}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.020122237s ago: executing program 9 (id=10180): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x1, "1a"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0x7, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) unshare(0x22020400) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x3) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.859600419s ago: executing program 2 (id=10182): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000100)="fe82", 0x2}], 0x1, &(0x7f0000003340)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x3, 0xa, 0x9}}], 0x20, 0x4080}], 0x1, 0x884) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xc3, 0x9c, 0xab, 0x8, 0x10c4, 0x8857, 0x6f95, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x5c, 0x0, 0x1, 0x5b, 0xc5, 0x11, 0x0, [], [{{0x9, 0x5, 0xf, 0x3, 0x10, 0x8, 0x1, 0xff}}]}}]}}]}}, 0x0) 3.519948064s ago: executing program 3 (id=10185): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r7 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x20000000e) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@deltfilter={0xd70, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xfa53}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0xd28, 0x2, [@TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x6, 0x0, 0x7ff, {0x7, 0x2, 0x8, 0x100, 0xe, 0xa}, {0x7, 0x2, 0x10, 0x4, 0xb, 0x2}, 0xffffffff, 0x4, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1b}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x3, 0x10000, 0x5, 0x6, 0x9, 0x8, 0x2, 0x8, 0x3, 0x5d1, 0x80000000, 0x2, 0xc, 0x4, 0x2, 0x8, 0x4d74, 0x99f8, 0x1, 0x9, 0x101, 0x9, 0x3, 0xf, 0x8, 0x4, 0x740, 0x8, 0x3, 0x9, 0xc, 0x30, 0xb, 0x29c765c0, 0x0, 0x2, 0xf563, 0xffffffff, 0x6, 0x80000000, 0x5, 0x400, 0xffffff0a, 0x3, 0x6, 0x5, 0x0, 0x7, 0x80000000, 0x1, 0x1d9, 0x4, 0x5, 0x5, 0xe, 0x1, 0x9, 0x5, 0x81, 0xffffffe0, 0x7, 0x81e, 0x5, 0x7f, 0x7, 0x3, 0x7, 0xffff, 0x0, 0x7de1, 0x2, 0x1ff, 0x374d, 0x0, 0xfffffffb, 0x3, 0x8, 0x8, 0x4, 0x0, 0x7f, 0x9b, 0x8e97bb19, 0x5, 0x6, 0x9, 0x3000, 0xaab, 0x7, 0x9, 0x86, 0x90, 0x101, 0x4, 0x4, 0x5, 0xffffffff, 0x6, 0x2, 0x8, 0x7, 0x7, 0x0, 0x1, 0x47, 0x10001, 0x1000, 0x2, 0x7, 0xd, 0x0, 0xdc5, 0x3, 0x5, 0x1, 0x80000000, 0x24000, 0xfffffff8, 0x1ff, 0x8001, 0x4, 0x10, 0x2, 0x80, 0x401, 0x4, 0x6, 0xc3, 0x4bec3e5, 0x2, 0x8, 0x5, 0x7ff, 0x4, 0x6, 0x3, 0x7fffffff, 0x6d3, 0x8, 0xb7e, 0xb, 0x4, 0x8, 0x640, 0x1, 0x8, 0xcd31, 0x4, 0x4, 0x4, 0x4, 0x3, 0x4, 0x81, 0x7, 0x7fff, 0x1, 0x0, 0x2, 0x5, 0x7, 0x3, 0x171a, 0x0, 0x80000001, 0x3, 0x1, 0xa, 0x9, 0x2, 0x800, 0x4, 0x7, 0x0, 0xd, 0x1, 0x80000001, 0x20a8, 0x80e2, 0x2, 0x1004000, 0x9, 0xfffffff9, 0xfffffa41, 0xde, 0x9, 0xa11, 0xc000000, 0xfffffff8, 0x2, 0x9, 0x1, 0x9, 0x1, 0x3, 0xcb15, 0x5, 0x5, 0x4, 0x8, 0xf, 0x3, 0x7, 0x1, 0x6, 0xc743, 0x3, 0x1, 0xfffff507, 0x0, 0x2, 0x578, 0x2, 0x400, 0x40, 0x1ff, 0xfc, 0x40, 0x3a, 0x1, 0xffff7fff, 0x4, 0x6, 0x3, 0x8, 0xd9, 0x8, 0x6, 0x2, 0x3199, 0x5, 0x7, 0x0, 0x1, 0xfffffff7, 0x2, 0x5, 0xa0, 0xffffffff, 0x1, 0x5, 0x40, 0x0, 0x8000, 0x4, 0xfffffffa, 0xffffffc0, 0x6, 0x10000, 0x9, 0x800, 0x6]}, @TCA_POLICE_RESULT={0x8}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfc00}}]}, @TCA_BASIC_POLICE={0x8a8, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x8, 0x0, 0x9, {0x53, 0x2, 0x7, 0x8, 0xff, 0x7}, {0x4, 0x2, 0x3, 0x4bc4, 0xe, 0x7d8d}, 0x800, 0xe, 0x7ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0xffff, 0x3, 0xf, {0xfd, 0x0, 0x7, 0x0, 0x2, 0x2}, {0x83, 0x2, 0x318b, 0x7, 0xa, 0xe0000000}, 0x0, 0xd13d, 0x8000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x299f, 0x0, 0x3, 0x0, 0x80000000, 0x4, 0x80, 0x7, 0x0, 0x2, 0xed, 0xb, 0x4, 0x1, 0x8001, 0x5, 0x3, 0x4262, 0x276, 0x0, 0x4, 0x4, 0x7f, 0x7, 0x2bb, 0x8, 0x8, 0x2, 0x2, 0x9, 0x2, 0x9, 0x32, 0x1, 0x10, 0x1000, 0x1, 0x4, 0x10000, 0x8e1, 0x5, 0x0, 0x8, 0x3, 0x5, 0xde23, 0x689f, 0x9, 0x4, 0x8, 0x208d5150, 0x7, 0x8, 0x6, 0x8e, 0x6, 0x2, 0x6, 0x80, 0x4, 0xfaa, 0xffff, 0x0, 0x0, 0xa, 0x4, 0x7, 0xfff, 0x8, 0x9, 0x3, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6d9, 0x5, 0x6, 0x7, 0x2, 0x7, 0x7, 0x10001, 0x8001, 0x0, 0x10001, 0xfffffff9, 0x2, 0x4, 0x3ff, 0x2000000, 0x4, 0x1, 0xe, 0x1000, 0x9, 0x9, 0x3, 0x0, 0x0, 0x1, 0x4, 0xd5, 0x6, 0x8, 0x7f, 0x7, 0x9, 0x5, 0x7, 0x9, 0x3, 0x9, 0x5, 0xd3, 0x2, 0x80000001, 0x6a, 0x1, 0x400, 0x80a5, 0x6, 0x80000000, 0x3, 0x1ff, 0x80000001, 0x1ff, 0x1, 0x8, 0x3ff, 0xc15a, 0x6, 0x1ff, 0x2, 0x8001, 0xffff, 0xd, 0x5bb2, 0x6, 0xfffffffe, 0x5, 0x7703, 0x0, 0x5, 0x1, 0x0, 0x2, 0x7, 0x1, 0xb, 0xfffffff1, 0x4e1, 0x3, 0x2, 0x8001, 0xd, 0x1, 0x3, 0x1000, 0x200, 0x9, 0x7, 0x5, 0x1, 0x5, 0x8001, 0x3, 0x8, 0xf, 0x80000001, 0x80, 0x7ff, 0xdc4e, 0x1fc, 0x4, 0xfffff0f1, 0x6, 0x7, 0x2, 0x4, 0x7fffffff, 0x2, 0x81, 0x2, 0x80000000, 0x2, 0x1ff, 0xeb, 0x0, 0x7f, 0x0, 0x3, 0x139, 0x6, 0x7, 0x9, 0x401, 0x80, 0x4, 0x3, 0x2, 0x89, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x4, 0xf7b, 0x3, 0x4, 0x8, 0xa8e, 0xe36, 0x0, 0x7, 0x2, 0x2, 0x5289, 0x2, 0x9, 0x6, 0x6, 0x400, 0x6, 0x5, 0x0, 0xa07, 0x1ff, 0x8, 0x1, 0x3, 0x6, 0x371, 0xb7, 0x3, 0x81, 0x96be, 0xf, 0x6, 0x3ff, 0x1ff, 0x100, 0x2, 0x81, 0x8, 0x1, 0x1, 0xc, 0x80000000, 0x6, 0x81, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x7, 0x4, 0x1e47, 0x9, 0x9, 0x200, 0x6, 0x19ae, 0xe, 0x2, 0x10001, 0x6, 0x1, 0xc0000, 0xff, 0x4, 0xcd, 0x9, 0x9, 0xd23, 0xfffeffff, 0x0, 0x80000001, 0x10001, 0x3, 0x8001, 0x4df9, 0x7fffffff, 0x1, 0x2, 0x1, 0x8001, 0x0, 0x80000000, 0x1, 0xfffffff2, 0x2, 0x10001, 0x4, 0x6, 0x3, 0xfffffff8, 0x80000001, 0x1, 0xf85, 0x5, 0x18000, 0x8000, 0xfffff45e, 0x6, 0x3, 0xfffffffe, 0x0, 0x5, 0xffffffff, 0x80000000, 0x65d3, 0x7, 0xfffffeff, 0x8000, 0x1, 0x7, 0x4, 0x5, 0x4, 0x8, 0x2, 0x1974, 0x7, 0x7, 0x8, 0xfff, 0x1ff, 0x5, 0x1, 0x0, 0x2, 0x1, 0x3, 0x3, 0x3, 0xfffffffb, 0x4, 0x10, 0xa, 0x7, 0x10000, 0x9, 0x4, 0x4, 0x6, 0x40, 0x73b6, 0x3, 0x9, 0x9, 0x4, 0x19, 0x8, 0x1, 0xe, 0x6, 0x9, 0x7fff, 0x7, 0x6, 0xe33, 0x1, 0x1, 0x800, 0x9, 0xfffffffb, 0x7, 0x40000000, 0xb, 0x7, 0xf4b, 0xd, 0x1000, 0x5, 0x80000001, 0x0, 0x1ff, 0x3, 0x63, 0x2, 0x958, 0xf, 0x800, 0x182, 0x9, 0x7fff, 0xfffffffe, 0x4, 0x1, 0x7fffffff, 0x8, 0x6585, 0x7ff, 0x97, 0x9779, 0x650, 0x4, 0x0, 0xb, 0x2, 0x0, 0x2, 0x7, 0xacf, 0xffffffff, 0x7f8, 0xa8e, 0x3, 0x6, 0xe74, 0x7, 0x83e, 0x7, 0x6, 0x7fff, 0x3, 0x401, 0x6, 0xf4e9, 0x9, 0x1, 0x3ff, 0x0, 0xf, 0x3ff, 0x1, 0x7f, 0x1, 0x95b, 0x0, 0xeb, 0x2, 0x6, 0xd1d, 0xb1f6, 0x5, 0xfd16, 0x2, 0x8001, 0x1, 0xd553, 0x81, 0x4, 0x9, 0x9, 0x75c, 0xb3bb, 0x9, 0x7, 0x8, 0x1455, 0x80000000, 0x4, 0x4, 0x1, 0x8000, 0x5, 0x1, 0x7fffffff, 0xba, 0x1, 0x5, 0x52e, 0x7ff, 0xc, 0x2, 0x4, 0x80000001, 0x622, 0xb14d, 0x947, 0x9, 0x6, 0x9, 0x0, 0x1, 0x3, 0xd, 0x1, 0x81, 0x5ff, 0x27e, 0x9, 0x3, 0x6, 0x8, 0x2, 0x4, 0x9, 0x7, 0x1, 0xac, 0x8000, 0x9, 0xf6, 0x1, 0x101, 0x0, 0x9, 0x1, 0x4d, 0x200, 0x3, 0x8, 0x7fffffff, 0xfffff6d2, 0x9, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x5}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xfffc}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xd70}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 3.431937401s ago: executing program 5 (id=10186): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f00003e4000/0x1000)=nil, 0x1000, 0x3000000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x7fffffff, 0xf}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @private=0xa010101}}}, &(0x7f0000000140)=0x84) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0xbc, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x2, @mcast2, 0xa}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0x9a72}, @in6={0xa, 0x4e22, 0xbf65, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0xf, @remote, 0x800}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0x3, @mcast2}]}, &(0x7f0000000280)=0x10) 3.262698465s ago: executing program 5 (id=10187): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000140)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) (async) read(r0, &(0x7f00000002c0)=""/153, 0x99) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x5, 0x0, 0x0, 0xa00, 0x1e, 0x0, 0x8, 0xa}) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xc3) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000415000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000b06000/0x11000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xd486, 0x4000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) (async) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 2.823758235s ago: executing program 5 (id=10188): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150005012a7f7000000000000000000000000000000000000000000100000008000300000a00d00033000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000000000000140b00000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000ff010000b56b6e000300030300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x80000021, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b702000000001500850000008600000018110000", @ANYRES64=r2], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80004}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x23) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000017c0)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card2/oss_mixer\x00', 0x48102, 0x0) write$proc_mixer(r6, 0x0, 0x8c) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000240)=0x1) r7 = socket$inet6(0xa, 0x1, 0x0) mremap(&(0x7f000017c000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f000011b000/0x1000)=nil) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) 2.765253674s ago: executing program 3 (id=10189): unshare(0x60000000) r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x2, @broadcast}, 0x10) io_uring_setup(0x671d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xfe7}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 2.632627832s ago: executing program 5 (id=10190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x40000) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a00000008000000"], 0x0, 0x5e}, 0x28) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c07c47000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x20004000) 2.607854034s ago: executing program 4 (id=10191): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000ffff06bd7000085cf7c5c0d04ec0", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x10008810}, 0x40080) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7, 0x40, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x0, 0x0, 0x0, 0xc000, 0x5, 0x4], [0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0xa, 0xfffffffe]], '\x00', [{}, {}, {0x200}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0xa}, {0x20004, 0x4}, {0x9}, {0x7ff, 0x200000}, {0x659, 0xffff}, {0x4008, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000305ffffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="4400000000a921239271a80f1af67515cc000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000ffff06bd7000085cf7c5c0d04ec0", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x10008810}, 0x40080) (async) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7, 0x40, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffc], [0x2, 0x0, 0x0, 0x0, 0xc000, 0x5, 0x4], [0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0xa, 0xfffffffe]], '\x00', [{}, {}, {0x200}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0xa}, {0x20004, 0x4}, {0x9}, {0x7ff, 0x200000}, {0x659, 0xffff}, {0x4008, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000305ffffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="4400000000a921239271a80f1af67515cc000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) (async) 2.47756691s ago: executing program 2 (id=10192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}}, 0x880) (async) 1.907985033s ago: executing program 2 (id=10193): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101afb4f2102505a0a40000010203010902240001fe00c0000904eb02027f9c1f000905da05000002000209058202", @ANYRES8], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000900), 0x4000000000000007, 0x0) r4 = syz_usb_connect$midi(0x1, 0x105, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x1, 0x1, 0x47, 0xb0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x1, 0x5, [{0x6}, {0x80, 0x8}, {0xec, 0x5e}, {0xb7, 0xb6}, {0x8, 0x60}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x4}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0xc, 0x7, [{0xbc, 0xf7}, {0xb, 0x7f}, {}, {0xe, 0x10}, {0x5, 0x80}, {0x4, 0x7f}, {0x18, 0x2}], 0xf}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x6, 0x5, [{0x7f, 0xe}, {0x6, 0xc5}, {0x3, 0x3}, {0x1, 0x4}, {0x8}], 0x1}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3ff, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x1, 0x4, [{0xdf, 0x3}, {0x9, 0x3}, {0xfc, 0x7f}, {0xf, 0x5}], 0x39}], [{{0x9, 0x5, 0x80, 0x0, 0x3df, 0x10, 0x5, 0x52, {0xc, 0x25, 0x1, 0x8, "3be0258bcc059799"}}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x5, 0x5, 0x3, {0x5, 0x25, 0x1, 0x1, "9c"}}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x4, 0x97, 0x9, {0x7, 0x25, 0x1, 0x3, "3a1e39"}}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x7, 0xbd, 0x2, {0xb, 0x25, 0x1, 0x7, "115bf55b124f9f"}}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x10, 0x0, {0xf, 0x25, 0x1, 0xb, "b724e57258d3ee408407e0"}}}, {{0x9, 0x5, 0x7, 0x0, 0x387, 0x2, 0x1, 0x9, {0x12, 0x25, 0x1, 0xe, "0accd9dabc3b04232796486f9b5e"}}}]}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0x2, 0x2, 0x7, 0xff, 0xe8}, 0x36, &(0x7f0000000b00)={0x5, 0xf, 0x36, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x4, 0xf, 0x7, [0xffffc0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x80, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x1, 0x4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x7, 0xf}]}, 0x4, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x455}}, {0xfd, &(0x7f0000000bc0)=@string={0xfd, 0x3, "eccfce204efcf49f6162413b7d54f030b8b102f32f29f0c4778a360ba68efd6aaccc04c4f31aac85db7badc6e91b9318a2d33650ab309008cdf013e1dcae456e9c947098858adec4a412f7cb708bb4fd10f44d54e2a789ef99d92951dfa5a872e42316a46fd122a175db4448bc19d6dc1231a367f1a89ac18ebc0826130695a16eae7b82e87f2632bd1212f4da76e74b187ed16781d62e40bf6eb3f4c80366706bdacd44b72bd56a3b6a7b8c328c275986d422c0a2fa859285fe993780e96938949254020c9c4fba630440793e8ac81777c5122f9b0deb0d1b8c0bcf921a41941be944804aa562b11e643b83feb797064c9beb3cbd9962d235a7f1"}}, {0x101, &(0x7f0000000cc0)=@string={0x101, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000f00)={0x14, &(0x7f0000000e80)={0x20, 0x3, 0x1a, {0x1a, 0x24, "79c2553cc64d9348410eafc533f1e2b7d3fbbc506a2cfc3e"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000f40)={0x20, 0x1, 0xb8, "3bb9d76af02be1a02d9d9da5d726e587dbf2ee6d580b6c0009ef950028a25507fc8973534f2e5d1a375239222f3b407b657047e7732d4e4380442ddbb906d910126d84fd6c1a7a53d6b6358820e4bebde20873d4dbe60da5d025df35b5b1f30035c21054b4491a801be234dee00fc29cb14760c0d0f23907fe0a445eaef9c8dc21da8a3ecc6ee0c8d7764d1c61491028ca13e9521aa3e6ec794f97ea2e78f22e8cfac885d8ba81c545bd5f9ae14d1ea1c7948ded564a4078"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001080)={0x20, 0x80, 0x1c, {0xff00, 0x2, 0x40, 0x8, 0x3, 0x8, 0x44, 0x200, 0x8, 0x4, 0x6, 0xff}}, &(0x7f00000010c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001100)={0x20, 0x83, 0x2}, &(0x7f0000001140)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000001180)={0x20, 0x89, 0x2}}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000940)=0x8) statfs(&(0x7f0000002100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002080)=""/101) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f00000008c0)=0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xa}, {0xdedf0d8c1d41c28, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0xb0, {0xb0, 0x21, "05bd0f7963a2700a336d2cc663e166ceb3d9405d0d444e80412b4765c886e732621f42c192e07112102a2da404556fdcd4296fb1b2f786ca32f7bd240c080c7446fa0db31f6bf012fcf61586ad3d2628bbda04fa4a78bc1a4d4f40f0ff158b601d65aad83b252a1f6c6c8d375125ab1f2b7cf3bd3e362d08db345ed03f6dc0d914e64c978f02decc1389966cc4fb004fa160e95351526adc008fe1e294ab62753c61327b58e70fde367856cb4c91"}}, &(0x7f0000000100)={0x0, 0x3, 0x5, @string={0x0, 0x3, "381199"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x0, 0x1, "d56070be", "b35ecd24"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x6, 0x9, 0x0, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x20, 0xd, 0x59, "1f03c9a7cf188e7aac1dfe60936b551df4eb4bd1d61b99cab7da9825f9d7ca26f640952bb16271a8771f16f5ed6d373248c4abc95d8a13ffc8b72eba8228188533d2894a5fb15e98b6630af5a5a7d1b2aaac74b10713a9451b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000480)={0x40, 0xb, 0x2, "a8b7"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "023c"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x390e}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xac}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x81}}) 1.835646683s ago: executing program 5 (id=10194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x240802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000200)={0x0, 0x3, 0x1, [0x3, 0xee, 0xfffffffffffffff9, 0xbcc8, 0x1], [0x8, 0x2, 0xe, 0x1, 0x8, 0x7, 0x3, 0x0, 0x100000000, 0xff, 0x5, 0x1, 0x4, 0x1d, 0x3, 0xffffffffffffff06, 0xf104, 0x3, 0x0, 0x9, 0x3, 0x2, 0x5, 0x4000, 0x8, 0x3, 0xfffffffffffffff6, 0xfffffffffffffff8, 0x0, 0x5, 0x30fef79b, 0x0, 0x9, 0x8, 0x10000, 0xffffffffffffa8a9, 0x9, 0xd3, 0x5, 0x2, 0x7f, 0x62a, 0x6239b277, 0x4, 0x9, 0x0, 0x85, 0x6, 0x7ff, 0x47de, 0x2, 0x5d, 0xe, 0x1470dcdc, 0x7, 0x4, 0x1dca, 0x5, 0x8, 0x9, 0x5d4, 0xcf29, 0x3, 0x5, 0x0, 0x9d, 0x5, 0x375, 0x0, 0x5, 0xa1f3, 0xd, 0x1, 0x8000000000000000, 0x6, 0x2, 0x6, 0xc52c, 0x40, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff4, 0xe3f, 0x7, 0xfff, 0xfffffffffffffff9, 0x4, 0xfffffffffffffffa, 0x6, 0x0, 0x1, 0x81, 0x7f, 0x1, 0x1, 0x8000000000000000, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x9f44, 0x400, 0x6, 0x0, 0x8, 0xffffffffffffff7c, 0x1, 0x2d, 0x8, 0x800, 0x4, 0x5, 0x2, 0x7, 0x81, 0x8, 0x2, 0x200, 0x9, 0x5, 0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.787215634s ago: executing program 9 (id=10195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x2b, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f00000001c0)={0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 1.375970449s ago: executing program 3 (id=10196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x732) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) fanotify_init(0x200, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1.088120924s ago: executing program 4 (id=10197): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="630000000094060000000000000000000000000000000000ff010000000000000002500200ff020000000000000000000000000001fc01000000000000000000000000000000000000000000000000ffffe00000012f0000000000000005020009000000003b000000000000000000000000000000000000000000000300004e2100004e2000000004000000020000000000000000fffffff70000c9741cb0000000000003000000080000000000000030"], 0xbc) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r4 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1) r5 = dup(r4) write$binfmt_elf32(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4000000d, r5, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg$unix(r5, &(0x7f0000010c40)=[{{&(0x7f0000001840), 0x6e, &(0x7f0000005600)=[{&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)}, {&(0x7f0000005180)=""/112, 0x70}, {&(0x7f0000005200)=""/57, 0x39}, {&(0x7f0000005240)}, {&(0x7f0000005280)=""/147, 0x93}, {&(0x7f0000005340)=""/156, 0x9c}, {&(0x7f0000005400)=""/47, 0x2f}, {&(0x7f0000005440)=""/220, 0xdc}, {&(0x7f0000005540)=""/149, 0x95}], 0xa, &(0x7f00000056c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000005700)=@abs, 0x6e, &(0x7f0000009740)=[{&(0x7f0000005780)=""/112, 0x70}, {&(0x7f0000005800)=""/164, 0xa4}, {&(0x7f00000058c0)=""/106, 0x6a}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)}, {&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/47, 0x2f}, {&(0x7f00000082c0)=""/56, 0x38}, {&(0x7f0000008680)=""/4096, 0x1000}, {&(0x7f0000009680)=""/129, 0x81}], 0xa, &(0x7f0000009800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000098c0)=@abs, 0x6e, &(0x7f000000be40)=[{&(0x7f0000009940)=""/169, 0xa9}, {&(0x7f0000009a00)=""/48, 0x30}, {&(0x7f0000009a40)=""/237, 0xed}, {&(0x7f0000009b40)=""/101, 0x65}, {&(0x7f0000009bc0)=""/73, 0x49}, {&(0x7f0000009c40)=""/152, 0x98}, {&(0x7f0000009d00)=""/69, 0x45}, {&(0x7f0000009d80)=""/4096, 0x1000}, {&(0x7f000000ad80)=""/188, 0xbc}, {&(0x7f000000ae40)=""/4096, 0x1000}], 0xa, &(0x7f000000bf00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f000000c040), 0x6e, &(0x7f000000e180)=[{&(0x7f000000c0c0)=""/4096, 0x1000}, {&(0x7f000000d0c0)=""/140, 0x8c}, {&(0x7f000000d180)=""/4096, 0x1000}], 0x3, &(0x7f000000e1c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f000000e280)=@abs, 0x6e, &(0x7f000000e300), 0x0, &(0x7f000000e340)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f000000e3c0), 0x6e, &(0x7f000000f6c0)=[{&(0x7f000000e440)=""/247, 0xf7}, {&(0x7f000000e540)=""/4096, 0x1000}, {&(0x7f000000f540)=""/178, 0xb2}, {&(0x7f000000f600)=""/142, 0x8e}], 0x4}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000010980)=[{&(0x7f000000f780)=""/56, 0x3e}, {&(0x7f000000f7c0)=""/196, 0xc4}, {&(0x7f000000f8c0)=""/76, 0x4c}, {&(0x7f000000f940)=""/4096, 0x1000}, {&(0x7f0000010940)=""/19, 0x13}], 0x5}}, {{&(0x7f0000010a00), 0x6e, &(0x7f0000010b80)=[{&(0x7f0000010a80)=""/7, 0x7}, {&(0x7f0000010ac0)=""/116, 0x74}, {&(0x7f0000010b40)=""/42, 0x2a}], 0x3, &(0x7f0000010bc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x4000030, 0x1eeb22c9dd45357d, &(0x7f0000010e40)={0x77359400}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) pwritev2(r7, &(0x7f00000017c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="d7c49846d10a32c664b6d6e5b55391206224eb1052f5ccc5", 0x18}, {&(0x7f0000001500)="7510a46b578a385517c2fd8bfa9722c90a15d2e0c7e2152bc9a910bbe14ebb8bd141ed3e6ec28e17e6cfa920c80a0713a60b3c448ca6a426985358b1c988d066d1a14f70ce45a93543480468af8430ae2736d99f615ede3376b6a18ca29f5538de58fe431aa27921", 0x68}, {&(0x7f0000001580)="98a918a31e368b771e1792a653f6049621ac1491d50f6cf98d3ab2c31573c572851d8f9911166999fbed827d38f3ad844fa6d7d43c602239be8520cec3d4e3e08a1e3ef3c57dfde042fcc479817ded31886b514f45b71a5652606011dbb685df23c345bc0de0bbdb7cbecda3b69dbeaa3989df02ac408d1af65501828927b5266efa2b97f25264b0a0db6cf3eac309cd0a52eeb7585731923a2a73bb4c843757a9511a6176647bd17084b5b51411750aadf697742edb0f3d0550fccbdbe4ecf5d730573562157976a37dab3d16fee2e0c457491f08e752e93438870c814cd830610c72135cc5", 0xe6}, {&(0x7f0000001680)="42cdbc4016868dc9dec8db0ee0e3700c8491463322fcad8fd2ca666b6f9a927bdc", 0x21}, {&(0x7f00000016c0)="fedc9bf86ad0e4517e21cf84e18bcda4e161fe5f0f1daa97fe4a41ad73a1a919b23ab65a8f2e8073d708def1d3f0425a40e32e99d989fb9b58c40894b704b84549", 0x41}, {&(0x7f0000001740)="9acc04ec8f188423829480f40c84c21bdcc71a660196e5be82f08a6b1914624d8c8358d810cf60ce4b95", 0x2a}, {&(0x7f0000001780)="d60fd47f530a91aa4c266b6b3c8c7e7178ad1f8c6c8e4a4122f1b668bbe24c5f42b0104126f3dffe", 0x28}], 0x8, 0xff, 0x1ff, 0x6) r8 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x200}) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x200000000000002, 0x80000000700, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54bfa2a80875397bdb22d0000b420a1a93c5240f45f819dfe177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 558.891152ms ago: executing program 5 (id=10198): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010300ff000040720501cb6526010203010902120001000000000904"], 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x4000, 0x0, 0x39d}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 129.472385ms ago: executing program 3 (id=10199): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x5, 0x7, 0x2f516708, 0x30940}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x13, '\x00', @data=0xffffffff, 0x87}, {0x1d, '\x00', @st={0x4, [{0x3}, {0x2, @svalue=0xffff}, {0x0, @uvalue=0x51}, {0x1, @uvalue=0x7}]}, 0x6}, {0x2f, '\x00', @data=0x7, 0xa}, {0x40, '\x00', @st={0x4, [{0x1, @svalue=0x100000000003}, {0x1, @uvalue=0x952}, {0x3, @svalue=0x1}, {0x1, @uvalue=0x8}]}, 0x2}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000240)={0x5, 0x9, {0x0}, {}, 0x2, 0x1}) wait4(r3, &(0x7f0000000280), 0x1, &(0x7f0000000440)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x11, '\x00', @data=0x3, 0x1}, {0x1c, '\x00', @buffer={"6143a3613b5be0f134f431fab524ff137a2ab1b71c4345b306516e597721742e", 0x20}, 0xffffff81}, {0x13, '\x00', @buffer={"95ca19eefa35a8f58daa6564ddbc5707158a584a93f6d961df63f599b1305c4b", 0x20}, 0x4ea8}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x4044) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) 0s ago: executing program 4 (id=10200): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902000000000000000904000901030001000921050000012205000905810300022bc54a924e7348fa60bb41962ec2fd5e9aa4f1023131537b2ca2198c561525f7ee29e203f964a83d31fae18d631130b147a0405106ae2d441abef71514"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x8, 0x80000000000000, 0x65732774, 0x8, 0x1000, 0x2, 0x1002, 0xd, 0x8, 0x81, 0xffffffffffffffff, 0x236f, 0x8003, 0x7, 0x3f8, 0x208], 0x25000, 0x216156}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x54) r7 = syz_open_dev$usbfs(&(0x7f0000000300), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, 0x0) fcntl$getownex(r7, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setregs(0xf, r8, 0x1, &(0x7f0000000200)="9d198efc6a7940cb4bcd723d3dd2daf40d0fdb1caa7317d4e0d73267c4e2a017afe37fb0e134a3076f4701c085e368ea26032ce578c33dcc1660439c0e27b9edb35901bd9eca025d0453b95394e31f84c9f42833b1b4960d50ab0830ee3375210d0673fb010a6cf4e8848e34ce5d2ee926855b5d1e68c076adc771717b88cfd68d5a015c4b40b987e5cb85a14f48f320") syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x4, 0xfffff800, 0x3138413f, 0x31303453, [0x6, 0xa], [0x58e3, 0x741], 0x1}}) ioctl$HIDIOCGUSAGE(r9, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) r11 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r12 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000040)={r11, r12, r12}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): /virtual/input/input259 [ 2596.782797][ T5506] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2596.797582][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2596.818270][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2596.826644][ T5506] asix 5-1:0.188: probe with driver asix failed with error -32 [ 2596.848292][T30542] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2596.969362][ T5506] usb 5-1: USB disconnect, device number 109 [ 2597.228944][ T4994] Dev loop5: unable to read RDB block 7 [ 2597.234805][ T4994] loop5: unable to read partition table [ 2597.241705][ T4994] loop5: partition table beyond EOD, truncated [ 2597.447029][T30548] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2597.490543][T11666] usb 4-1: USB disconnect, device number 90 [ 2597.622537][T30548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.637928][T30548] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2597.640689][ T4994] Dev loop5: unable to read RDB block 7 [ 2597.649267][T30548] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.653367][ T4994] loop5: unable to read partition table [ 2597.668315][ T4994] loop5: partition table beyond EOD, truncated [ 2597.668821][T30548] usb 10-1: config 0 descriptor?? [ 2597.789968][ T5506] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2597.822132][ T4994] Dev loop5: unable to read RDB block 7 [ 2597.828186][ T4994] loop5: unable to read partition table [ 2597.834304][ T4994] loop5: partition table beyond EOD, truncated [ 2597.876671][T11617] sctp: [Deprecated]: syz.5.9818 (pid 11617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2597.876671][T11617] Use struct sctp_sack_info instead [ 2597.891276][T30548] usbhid 10-1:0.0: can't add hid device: -71 [ 2597.913309][T30548] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2597.931235][T30548] usb 10-1: USB disconnect, device number 15 [ 2597.955100][ T5506] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2597.967074][ T5506] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2597.985752][ T5506] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 2597.999160][ T5506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.007942][ T5506] usb 5-1: Product: syz [ 2598.012288][ T5506] usb 5-1: Manufacturer: syz [ 2598.018445][ T5506] usb 5-1: SerialNumber: syz [ 2598.050864][ T5506] usb 5-1: config 0 descriptor?? [ 2598.059718][ T4994] Dev loop5: unable to read RDB block 7 [ 2598.066322][ T4994] loop5: unable to read partition table [ 2598.073798][ T4994] loop5: partition table beyond EOD, truncated [ 2598.090943][ T5506] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 2598.108720][ T5506] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 2598.147248][T30542] usb 4-1: Service connection timeout for: 256 [ 2598.155222][T30542] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2598.174281][T30542] ath9k_htc: Failed to initialize the device [ 2598.202920][T11666] usb 4-1: ath9k_htc: USB layer deinitialized [ 2598.323123][T17948] usb 5-1: USB disconnect, device number 110 [ 2598.374362][T11117] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2598.502844][ T5506] IPVS: starting estimator thread 0... [ 2598.547809][T11117] usb 6-1: Using ep0 maxpacket: 8 [ 2598.557193][T11666] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 2598.559485][T11117] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2598.588800][T11117] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2598.606917][T11117] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2598.618728][T11636] IPVS: using max 26 ests per chain, 62400 per kthread [ 2598.632863][T11117] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2598.644306][T11117] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2598.654767][T11117] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2598.671563][T11117] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2598.683920][T11117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.719782][T11666] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2598.731361][T11666] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2598.744468][T11666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2598.756712][T11666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2598.767808][T11666] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2598.785621][T11666] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2598.795648][T17948] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2598.804058][T11666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2598.813261][T11666] usb 4-1: Product: syz [ 2598.817999][T11666] usb 4-1: Manufacturer: syz [ 2598.822661][T11666] usb 4-1: SerialNumber: syz [ 2598.831718][T11666] usb 4-1: config 0 descriptor?? [ 2598.900174][T11117] usb 6-1: GET_CAPABILITIES returned 0 [ 2598.906794][T11117] usbtmc 6-1:16.0: can't read capabilities [ 2598.967148][T17948] usb 3-1: Using ep0 maxpacket: 16 [ 2598.977897][T17948] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2598.997028][T17948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.015432][T17948] usb 3-1: Product: syz [ 2599.020037][T17948] usb 3-1: Manufacturer: syz [ 2599.024749][T17948] usb 3-1: SerialNumber: syz [ 2599.039256][T17948] usb 3-1: config 0 descriptor?? [ 2599.062707][T11666] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2599.081345][T17948] usb 3-1: selecting invalid altsetting 1 [ 2599.088477][T11666] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2599.114406][T17948] technisat-usb2: could not set alternate setting to 0 [ 2599.128821][T11666] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 2599.154618][T11666] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2599.171417][T30551] usb 6-1: USB disconnect, device number 36 [ 2599.193536][ T4994] Dev loop5: unable to read RDB block 7 [ 2599.209148][ T4994] loop5: unable to read partition table [ 2599.214239][T11666] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2599.221782][ T4994] loop5: partition table beyond EOD, truncated [ 2599.283119][T17948] technisat-usb2: firmware version: 0.0 [ 2599.289905][T17948] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 2599.309172][T11653] blktrace: Concurrent blktraces are not allowed on nullb0 [ 2599.329681][T11666] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 2599.495315][ T4994] Dev loop5: unable to read RDB block 7 [ 2599.502212][ T4994] loop5: unable to read partition table [ 2599.508355][ T6041] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2599.517590][ T4994] loop5: partition table beyond EOD, truncated [ 2599.668030][ T6041] usb 5-1: Using ep0 maxpacket: 16 [ 2599.683671][ T6041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2599.708191][ T4994] Dev loop5: unable to read RDB block 7 [ 2599.723783][ T4994] loop5: unable to read partition table [ 2599.725695][T17948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2599.729852][ T4994] loop5: partition table beyond EOD, [ 2599.739387][ T6041] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 2599.747378][ T6041] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2599.772969][T17948] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 2599.774214][ T4994] truncated [ 2599.785937][ T6041] usb 5-1: can't read configurations, error -61 [ 2599.799161][T17948] usb 3-1: media controller created [ 2599.814739][T17948] technisat-usb2: i2c-error: out failed 53 = -22 [ 2599.834986][T17948] dvb-usb: MAC address reading failed. [ 2599.844909][ T4994] Dev loop5: unable to read RDB block 7 [ 2599.855287][ T4994] loop5: unable to read partition table [ 2599.868350][ T4994] loop5: partition table beyond EOD, truncated [ 2599.880031][T17948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2599.937159][ T6041] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2599.946766][T11666] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2600.007498][T11666] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 2600.092736][T17948] DVB: Unable to find symbol stv090x_attach() [ 2600.109509][T17948] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 2600.120076][ T6041] usb 5-1: Using ep0 maxpacket: 16 [ 2600.138978][ T6041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2600.167076][ T6041] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 2600.190508][ T6041] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2600.207031][ T6041] usb 5-1: can't read configurations, error -61 [ 2600.220725][ T6041] usb usb5-port1: attempt power cycle [ 2600.245864][T11630] vivid-006: disconnect [ 2600.255252][T11645] xt_cgroup: path and classid specified [ 2600.262542][T11630] xt_cgroup: path and classid specified [ 2600.276163][T11645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.295650][T11645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.305365][T17948] rc_core: IR keymap rc-technisat-usb2 not found [ 2600.313976][ T4994] Dev loop5: unable to read RDB block 7 [ 2600.326248][ T4994] loop5: unable to read partition table [ 2600.333751][T17948] Registered IR keymap rc-empty [ 2600.341391][T11629] vivid-006: reconnect [ 2600.341673][ T4994] loop5: partition table beyond EOD, [ 2600.352318][T17948] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2600.357847][ T4994] truncated [ 2600.374900][T11666] usb 4-1: USB disconnect, device number 91 [ 2600.409400][ T31] audit: type=1400 audit(1785086731.754:7670): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.414981][T17948] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input261 [ 2600.490711][ T31] audit: type=1400 audit(1785086731.754:7671): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.526746][T17948] dvb-usb: schedule remote query interval to 100 msecs. [ 2600.535273][ T31] audit: type=1400 audit(1785086731.754:7672): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.536473][T17948] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 2600.561722][ T31] audit: type=1400 audit(1785086731.754:7673): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.589631][ T6041] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2600.591983][ T31] audit: type=1400 audit(1785086731.754:7674): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.627670][ T31] audit: type=1400 audit(1785086731.754:7675): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.649451][ T31] audit: type=1400 audit(1785086731.784:7676): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11674 comm="syz.5.9832" [ 2600.658925][T30551] dvb-usb: error -71 while querying for an remote control event. [ 2600.680250][ T6041] usb 5-1: Using ep0 maxpacket: 16 [ 2600.688853][ T6041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2600.697112][ T6041] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 2600.700231][ T4994] Dev loop5: unable to read RDB block 7 [ 2600.712490][ T6041] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2600.722421][ T6041] usb 5-1: can't read configurations, error -61 [ 2600.733435][T17948] usb 3-1: USB disconnect, device number 75 [ 2600.739871][ T4994] loop5: unable to read partition table [ 2600.754045][ T4994] loop5: partition table beyond EOD, truncated [ 2600.889365][T17948] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 2600.900849][ T6041] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2600.939161][ T6041] usb 5-1: Using ep0 maxpacket: 16 [ 2600.951909][ T6041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2600.971871][ T6041] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 2600.991516][ T6041] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2601.006778][ T6041] usb 5-1: can't read configurations, error -61 [ 2601.014078][ T6041] usb usb5-port1: unable to enumerate USB device [ 2601.227127][T11117] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2601.335461][ T4994] Dev loop5: unable to read RDB block 7 [ 2601.344373][ T4994] loop5: unable to read partition table [ 2601.355112][ T4994] loop5: partition table beyond EOD, truncated [ 2601.377992][T11117] usb 4-1: device descriptor read/64, error -71 [ 2601.397414][ T5506] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2601.556988][ T5506] usb 10-1: Using ep0 maxpacket: 8 [ 2601.570728][ T5506] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2601.587641][ T5506] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2601.595769][ T5506] usb 10-1: Product: syz [ 2601.606885][ T5506] usb 10-1: Manufacturer: syz [ 2601.613124][ T5506] usb 10-1: SerialNumber: syz [ 2601.634018][ T5506] usb 10-1: config 0 descriptor?? [ 2601.652245][ T5506] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2601.658784][T11117] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2601.807014][T11117] usb 4-1: device descriptor read/64, error -71 [ 2601.919685][T11117] usb usb4-port1: attempt power cycle [ 2602.277173][T11117] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2602.299511][T11117] usb 4-1: device descriptor read/8, error -71 [ 2602.453524][ T5506] gspca_sonixj: reg_r err -71 [ 2602.458501][ T5506] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 2602.470499][ T5506] usb 10-1: USB disconnect, device number 16 [ 2602.547209][T11117] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2602.568007][T11117] usb 4-1: device descriptor read/8, error -71 [ 2602.687540][T11117] usb usb4-port1: unable to enumerate USB device [ 2619.988141][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2652.630865][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.637356][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2675.835411][T11716] input: syz1 as /devices/virtual/input/input262 [ 2675.886310][T11717] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9843'. [ 2675.921367][T11717] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2676.009090][ T31] audit: type=1326 audit(1785086807.364:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.061856][ T4994] Dev loop5: unable to read RDB block 7 [ 2676.096357][ T4994] loop5: unable to read partition table [ 2676.100171][ T31] audit: type=1326 audit(1785086807.384:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.117992][ T4994] loop5: partition table beyond EOD, [ 2676.137436][T11117] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2676.159036][ T4994] truncated [ 2676.195066][ T31] audit: type=1326 audit(1785086807.394:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.260846][ T31] audit: type=1326 audit(1785086807.394:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.321004][ T31] audit: type=1326 audit(1785086807.394:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.349389][ T31] audit: type=1326 audit(1785086807.394:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccaa55e6ce code=0x7ffc0000 [ 2676.352622][T11117] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2676.406273][T11117] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2676.428370][ T4994] Dev loop5: unable to read RDB block 7 [ 2676.434050][ T4994] loop5: unable to read partition table [ 2676.439667][ T31] audit: type=1326 audit(1785086807.394:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.447080][ T4994] loop5: partition table beyond EOD, [ 2676.477076][ T5506] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2676.481311][ T31] audit: type=1326 audit(1785086807.394:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.9846" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccaa59de99 code=0x7ffc0000 [ 2676.485996][T11117] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 2676.490854][ T4994] truncated [ 2676.527991][T11666] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2676.535737][T17948] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2676.592214][T11117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.600425][T11117] usb 4-1: Product: syz [ 2676.604710][T11117] usb 4-1: Manufacturer: syz [ 2676.619851][T11117] usb 4-1: SerialNumber: syz [ 2676.655432][ T4994] Dev loop5: unable to read RDB block 7 [ 2676.657250][ T5506] usb 3-1: Using ep0 maxpacket: 8 [ 2676.668693][ T4994] loop5: unable to read partition table [ 2676.674747][ T4994] loop5: partition table beyond EOD, truncated [ 2676.679343][ T5506] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2676.692268][ T5506] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2676.707805][T17948] usb 10-1: Using ep0 maxpacket: 16 [ 2676.714078][T11666] usb 5-1: Using ep0 maxpacket: 32 [ 2676.715619][ T5506] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2676.731074][T11666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2676.742164][ T5506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.742195][ T5506] usb 3-1: Product: syz [ 2676.742249][ T5506] usb 3-1: Manufacturer: syz [ 2676.742267][ T5506] usb 3-1: SerialNumber: syz [ 2676.766697][T17948] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 2676.781042][T17948] usb 10-1: config 0 has no interface number 0 [ 2676.788954][T17948] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2676.803982][T11666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2676.814229][T17948] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2676.828024][T11666] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2676.841114][T17948] usb 10-1: config 0 interface 255 has no altsetting 0 [ 2676.848216][T11666] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2676.857776][T11666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.875228][T17948] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 2676.884653][T17948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.897517][T17948] usb 10-1: Product: syz [ 2676.903047][T17948] usb 10-1: Manufacturer: syz [ 2676.911400][T17948] usb 10-1: SerialNumber: syz [ 2676.920125][T11666] usb 5-1: config 0 descriptor?? [ 2676.944277][T17948] usb 10-1: config 0 descriptor?? [ 2676.974219][T17948] gspca_main: spca508-2.14.0 probing 041e:4018 [ 2676.988599][ T5506] usb 3-1: unit 6 not found! [ 2676.996977][ T1138] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 2677.102401][ T5506] usb 3-1: USB disconnect, device number 76 [ 2677.105498][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2677.148586][ T1138] usb 6-1: device descriptor read/64, error -71 [ 2677.156762][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2677.166044][T17948] gspca_spca508: reg_read err -32 [ 2677.172100][T17948] gspca_spca508: reg_read err -32 [ 2677.194403][T11746] udevd[11746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2677.308688][T11117] usb 4-1: unit 5 not found! [ 2677.384145][T11731] binder: 11728:11731 ioctl 4008af30 200000000440 returned -22 [ 2677.396450][T17948] gspca_spca508: reg_read err -71 [ 2677.401510][T11117] usb 4-1: USB disconnect, device number 96 [ 2677.424209][T17948] gspca_spca508: reg_read err -71 [ 2677.434379][T17948] gspca_spca508: reg write: error -71 [ 2677.441508][T17948] spca508 10-1:0.255: probe with driver spca508 failed with error -71 [ 2677.458002][ T1138] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 2677.492074][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2677.510989][T17948] usb 10-1: USB disconnect, device number 17 [ 2677.597162][ T1138] usb 6-1: device descriptor read/64, error -71 [ 2677.640267][T11753] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2677.718221][ T1138] usb usb6-port1: attempt power cycle [ 2678.057074][ T1138] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 2678.083382][ T1138] usb 6-1: device descriptor read/8, error -71 [ 2678.349717][ T1138] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 2678.378379][ T1138] usb 6-1: device descriptor read/8, error -71 [ 2678.447138][T17948] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2678.497486][ T1138] usb usb6-port1: unable to enumerate USB device [ 2678.622690][T17948] usb 10-1: config 32 has an invalid interface number: 255 but max is 0 [ 2678.631550][T17948] usb 10-1: config 32 has no interface number 0 [ 2678.638990][T17948] usb 10-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2678.651394][T17948] usb 10-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2678.667776][T17948] usb 10-1: config 32 interface 255 has no altsetting 0 [ 2678.675026][T17948] usb 10-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 2678.688684][T17948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.715876][T17948] usb-storage 10-1:32.255: USB Mass Storage device detected [ 2678.739802][T17948] usb-storage 10-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 2678.915866][ T1138] usb 10-1: USB disconnect, device number 18 [ 2679.053400][ T31] audit: type=1326 audit(1785086810.404:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11786 comm="syz.3.9862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c81b9de99 code=0x0 [ 2679.158362][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9862'. [ 2679.354808][T11666] usbhid 5-1:0.0: can't add hid device: -71 [ 2679.380086][T11666] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2679.410931][T11666] usb 5-1: USB disconnect, device number 115 [ 2679.600054][T11799] input: syz1 as /devices/virtual/input/input263 [ 2679.867271][T11117] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 2679.886682][T11806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3510796679 (3510796679 ns) > initial count (2572487644 ns). Using initial count to start timer. [ 2680.007027][T11117] usb 5-1: device descriptor read/64, error -71 [ 2680.021455][T11809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2680.266964][T11117] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 2680.407420][T17948] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 2680.417174][T11117] usb 5-1: device descriptor read/64, error -71 [ 2680.497303][T11666] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 2680.528304][T11117] usb usb5-port1: attempt power cycle [ 2680.574044][T17948] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2680.585856][T17948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.594558][T17948] usb 4-1: Product: syz [ 2680.598930][T17948] usb 4-1: Manufacturer: syz [ 2680.603622][T17948] usb 4-1: SerialNumber: syz [ 2680.611992][T17948] usb 4-1: config 0 descriptor?? [ 2680.653890][T11666] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2680.671495][T11666] usb 6-1: not running at top speed; connect to a high speed hub [ 2680.698556][T11666] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 2680.722487][T11666] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 2680.732117][T11666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.762840][T11666] usb 6-1: Product: syz [ 2680.784255][T11666] usb 6-1: Manufacturer: syz [ 2680.792886][T11666] usb 6-1: SerialNumber: syz [ 2680.821439][T17948] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2680.897008][T11117] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 2680.928088][T11117] usb 5-1: device descriptor read/8, error -71 [ 2681.002540][T11834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9876'. [ 2681.090041][T17948] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2681.121879][T17948] usb 4-1: USB disconnect, device number 97 [ 2681.177406][T11117] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 2681.233419][T11117] usb 5-1: device descriptor read/8, error -71 [ 2681.241252][T11666] usb 6-1: USB disconnect, device number 41 [ 2681.291977][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2681.367619][T11117] usb usb5-port1: unable to enumerate USB device [ 2681.388965][T11847] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9880'. [ 2681.677178][ T1138] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2681.721348][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9881'. [ 2681.850196][ T1138] usb 3-1: device descriptor read/64, error -71 [ 2682.107085][ T1138] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2682.130121][T17003] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 2682.169582][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9884'. [ 2682.189910][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9884'. [ 2682.232268][T21079] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2682.246715][T21079] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2682.265656][T21079] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2682.289037][ T1138] usb 3-1: device descriptor read/64, error -71 [ 2682.298888][T21079] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2682.320736][T17003] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2682.348473][T17003] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2682.363617][T17003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.373847][T17003] usb 10-1: Product: syz [ 2682.382080][T17003] usb 10-1: Manufacturer: syz [ 2682.387974][T17003] usb 10-1: SerialNumber: syz [ 2682.389151][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9885'. [ 2682.411646][T17003] usb 10-1: config 0 descriptor?? [ 2682.417004][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9885'. [ 2682.429071][ T1138] usb usb3-port1: attempt power cycle [ 2682.450890][T17003] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2682.787385][ T1138] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2682.819419][ T1138] usb 3-1: device descriptor read/8, error -71 [ 2683.086989][ T1138] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2683.138780][ T1138] usb 3-1: device descriptor read/8, error -71 [ 2683.158329][T17003] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input264 [ 2683.280156][ T1138] usb usb3-port1: unable to enumerate USB device [ 2683.539604][T17949] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 2683.709417][T17949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2683.732202][T17949] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2683.754711][T17949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 2683.770045][T17949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 2683.781685][T17949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2683.813848][T17949] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2683.823830][T17949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.833722][T17949] usb 6-1: Product: syz [ 2683.838978][T17949] usb 6-1: Manufacturer: syz [ 2683.843901][T17949] usb 6-1: SerialNumber: syz [ 2683.871275][T17949] usb 6-1: config 0 descriptor?? [ 2683.885349][T11890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2684.058841][T17949] rc_core: IR keymap rc-xbox-dvd not found [ 2684.069945][T17949] Registered IR keymap rc-empty [ 2684.096759][T17949] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2684.150664][T17949] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input265 [ 2684.282989][T17949] usb 6-1: USB disconnect, device number 42 [ 2684.289087][ C0] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 2684.808980][T17948] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2684.967037][T17948] usb 5-1: Using ep0 maxpacket: 32 [ 2684.989737][T17948] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2685.006272][T17948] usb 5-1: config 0 has no interface number 0 [ 2685.017799][T17003] usb 10-1: USB disconnect, device number 19 [ 2685.039813][T17948] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2685.072619][T17948] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2685.091945][T11918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9900'. [ 2685.107149][T17948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2685.140045][T17948] usb 5-1: Product: syz [ 2685.156414][T17948] usb 5-1: Manufacturer: syz [ 2685.183543][T17948] usb 5-1: SerialNumber: syz [ 2685.212860][T17948] usb 5-1: config 0 descriptor?? [ 2685.567247][T17003] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 2685.606962][T11666] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 2685.649418][T11928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 2685.763747][T17003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 192, setting to 64 [ 2685.793118][T11666] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2685.820397][T11666] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2685.836415][T11666] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2685.843579][T11666] usb 6-1: New USB device found, idVendor=09ef, idProduct=022b, bcdDevice= 0.00 [ 2685.852924][T17003] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2685.852983][T17003] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2685.853008][T17003] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.896637][T11666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.959102][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2685.993058][T11666] usb 6-1: config 0 descriptor?? [ 2686.010649][T11924] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2686.025503][T17003] usb 10-1: config 0 descriptor?? [ 2686.054774][T11920] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2686.544314][T17003] plantronics 0003:047F:FFFF.00C1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2687.258564][T11117] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2687.364614][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2687.392373][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2687.436945][T11117] usb 3-1: Using ep0 maxpacket: 8 [ 2687.456342][T11117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2687.488811][T11117] usb 3-1: config 4 interface 0 has no altsetting 0 [ 2687.522012][T11117] usb 3-1: string descriptor 0 read error: -22 [ 2687.533445][T11117] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2687.554037][T11117] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2687.596426][T11117] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2687.686429][T11117] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2687.761402][T11117] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2687.818873][T11117] usb 3-1: media controller created [ 2687.904766][T11117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2688.297062][T11117] usb 3-1: USB disconnect, device number 81 [ 2688.407123][T17948] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 2688.454542][T17948] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 2688.491630][T17948] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2688.534333][T17948] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 2688.616032][T17948] usb 5-1: USB disconnect, device number 120 [ 2688.662047][ T1138] usb 10-1: USB disconnect, device number 20 [ 2689.123168][T11975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9916'. [ 2689.155045][T11666] usbhid 6-1:0.0: can't add hid device: -71 [ 2689.163306][T11975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9916'. [ 2689.176587][T17948] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2689.196494][T11666] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2689.225272][T11666] usb 6-1: USB disconnect, device number 43 [ 2689.357114][T17948] usb 5-1: Using ep0 maxpacket: 8 [ 2689.368456][T17948] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 2689.386436][T17948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2689.405700][T17948] usb 5-1: config 0 has no interface number 0 [ 2689.413231][T17948] usb 5-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 2689.432724][T17948] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 2689.444607][T17948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.461216][T17948] usb 5-1: Product: syz [ 2689.478912][T17948] usb 5-1: Manufacturer: syz [ 2689.493979][T17948] usb 5-1: SerialNumber: syz [ 2689.516089][T17948] usb 5-1: config 0 descriptor?? [ 2689.742713][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9915'. [ 2690.025119][T12003] fuse: Bad value for 'user_id' [ 2690.034146][T12003] fuse: Bad value for 'user_id' [ 2690.048340][T12003] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9925'. [ 2690.287766][T12008] netlink: 'syz.3.9927': attribute type 1 has an invalid length. [ 2690.343248][T12007] gretap1: entered allmulticast mode [ 2690.366262][T12007] bond1: (slave gretap1): making interface the new active one [ 2690.375763][T12007] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2690.377286][ T1138] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2690.536989][ T1138] usb 10-1: Using ep0 maxpacket: 8 [ 2690.550846][ T1138] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2690.570148][ T1138] usb 10-1: config 4 interface 0 has no altsetting 0 [ 2690.590383][ T1138] usb 10-1: string descriptor 0 read error: -22 [ 2690.607285][ T1138] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2690.627098][ T1138] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2690.653971][ T1138] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2690.683109][ T1138] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2690.742607][ T1138] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2690.776968][ T1138] usb 10-1: media controller created [ 2690.854244][ T1138] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2691.179501][ T1138] usb 10-1: USB disconnect, device number 21 [ 2692.032009][T17948] usb 5-1: NFC: intf ffff88805341c000 id ffffffff8f63cda0 [ 2692.077796][ T1138] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2692.087576][T17948] usb 5-1: USB disconnect, device number 121 [ 2692.141825][ T31] audit: type=1800 audit(1785086823.484:7686): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9935" name="bus" dev="ramfs" ino=278567 res=0 errno=0 [ 2692.329428][ T1138] usb 10-1: Using ep0 maxpacket: 16 [ 2692.354665][ T1138] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2692.410076][ T1138] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2692.447674][ T1138] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2692.469708][ T1138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2692.486019][ T1138] usb 10-1: Product: syz [ 2692.492254][ T1138] usb 10-1: Manufacturer: syz [ 2692.525032][ T1138] usb 10-1: SerialNumber: syz [ 2692.595570][ T1138] usb 10-1: config 0 descriptor?? [ 2692.768008][T30548] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2692.928176][T30548] usb 5-1: Using ep0 maxpacket: 32 [ 2692.944506][T30548] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2692.970066][T30548] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2693.001678][T30548] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2693.054806][T30548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.104943][T30548] usb 5-1: config 0 descriptor?? [ 2693.197324][T12086] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2693.267507][ T6041] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2693.440746][ T6041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2693.466981][ T6041] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2693.486975][ T6041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2693.505363][ T6041] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2693.522010][ T6041] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2693.543140][ T6041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.556074][ T6041] usb 4-1: config 0 descriptor?? [ 2693.572265][T12049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2693.583067][T12049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2693.591633][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2693.610714][T17948] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2693.733552][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2693.750026][ T1138] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input266 [ 2693.766055][T12083] netlink: 'syz.3.9946': attribute type 26 has an invalid length. [ 2693.771043][ T1138] imon:send_packet: packet tx failed (-71) [ 2693.778713][T17948] usb 6-1: Using ep0 maxpacket: 8 [ 2693.795797][ T6041] hdpvr 4-1:0.0: firmware version 0xd dated jl;S11!vOp [ 2693.795797][ T6041] 4(r [ 2693.795797][ T6041] d2}d~٭^r [ 2693.813366][T17948] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2693.823459][ T1138] imon 10-1:0.0: panel buttons/knobs setup failed [ 2693.834692][T17948] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2693.864076][T17948] usb 6-1: string descriptor 0 read error: -22 [ 2693.873110][T17948] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2693.895740][T17948] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2693.942327][T17948] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2694.018328][T17948] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2694.045820][T17948] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2694.056942][ T1138] rc_core: IR keymap rc-imon-pad not found [ 2694.074538][ T1138] Registered IR keymap rc-empty [ 2694.080421][T17948] usb 6-1: media controller created [ 2694.081403][ T1138] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2694.096620][ T1138] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2694.106695][ T1138] imon:send_packet: packet tx failed (-71) [ 2694.137105][ T1138] imon 10-1:0.0: remote input dev register failed [ 2694.146312][ T1138] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 2694.203811][T17948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2694.329380][ T6041] hdpvr 4-1:0.0: Could not setup controls [ 2694.351634][ T6041] hdpvr 4-1:0.0: registering videodev failed [ 2694.455314][ T1138] imon 10-1:0.0: unable to initialize intf0, err 0 [ 2694.471156][ T1138] imon:imon_probe: failed to initialize context! [ 2694.491616][ T1138] imon 10-1:0.0: unable to register, err -19 [ 2694.513595][ T6041] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 2694.550375][ T6041] usb 4-1: USB disconnect, device number 98 [ 2694.646633][ T1138] usb 10-1: USB disconnect, device number 22 [ 2694.669832][T17948] usb 6-1: USB disconnect, device number 44 [ 2695.707006][T30548] usbhid 5-1:0.0: can't add hid device: -71 [ 2695.717486][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9953'. [ 2695.748900][T30548] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2695.812128][T30548] usb 5-1: USB disconnect, device number 122 [ 2695.902032][T12117] netlink: 'syz.4.9954': attribute type 2 has an invalid length. [ 2696.266998][ T31] audit: type=1800 audit(1785086827.614:7687): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9952" name="bus" dev="ramfs" ino=278911 res=0 errno=0 [ 2696.304245][T30548] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2696.496919][T30548] usb 5-1: Using ep0 maxpacket: 32 [ 2696.514786][T30548] usb 5-1: config 7 has an invalid interface number: 194 but max is 0 [ 2696.532388][T30548] usb 5-1: config 7 has no interface number 0 [ 2696.549794][T30548] usb 5-1: config 7 interface 194 altsetting 245 has an invalid descriptor for endpoint zero, skipping [ 2696.579502][T30548] usb 5-1: config 7 interface 194 altsetting 245 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2696.603320][T30548] usb 5-1: config 7 interface 194 altsetting 245 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2696.627259][T30548] usb 5-1: config 7 interface 194 has no altsetting 0 [ 2696.645665][T30548] usb 5-1: New USB device found, idVendor=19d2, idProduct=1278, bcdDevice=cf.d4 [ 2696.660829][T30548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.667235][T17948] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2696.695165][T30548] usb 5-1: Product: 秝忏儆쪗槱芥꿸퐚냠௡ẕ뇃⇉쟺 [ 2696.719486][T30548] usb 5-1: Manufacturer: 䠊 [ 2696.733341][T30548] usb 5-1: SerialNumber: ь [ 2696.767052][T11666] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2696.827081][T17948] usb 10-1: Using ep0 maxpacket: 16 [ 2696.841245][T17948] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2696.869862][T17948] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2696.894495][T17948] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 2696.921740][T17948] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 2696.945537][T11666] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2696.954487][T17948] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2696.966743][T17948] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2696.979319][T11666] usb 6-1: not running at top speed; connect to a high speed hub [ 2697.007616][T11666] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2697.024321][T17948] usb 10-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2697.049646][T30548] option 5-1:7.194: GSM modem (1-port) converter detected [ 2697.052454][T11666] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2697.067500][T30548] usb 5-1: USB disconnect, device number 123 [ 2697.113139][T17948] usb 10-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 2697.117396][T30548] option 5-1:7.194: device disconnected [ 2697.150675][T17948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.166133][T17948] usb 10-1: Product: syz [ 2697.171661][T11666] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 2697.181147][T11666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.182287][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9960'. [ 2697.190342][T17948] usb 10-1: Manufacturer: syz [ 2697.205232][T11666] usb 6-1: Product: syz [ 2697.210483][T11666] usb 6-1: Manufacturer: syz [ 2697.217933][T17948] usb 10-1: SerialNumber: syz [ 2697.227933][T11666] usb 6-1: SerialNumber: syz [ 2697.239067][T17948] usb 10-1: config 0 descriptor?? [ 2697.264386][T12137] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2697.300539][T17948] iuu_phoenix 10-1:0.0: iuu_phoenix converter detected [ 2697.348946][T17948] usb 10-1: iuu_phoenix converter now attached to ttyUSB0 [ 2697.470563][T11666] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2697.477745][T11666] usb 6-1: MIDIStreaming interface descriptor not found [ 2697.541025][T17003] usb 10-1: USB disconnect, device number 23 [ 2697.567285][T30548] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2697.591817][T17003] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 2697.603189][T11666] usb 6-1: USB disconnect, device number 45 [ 2697.610923][T17003] iuu_phoenix 10-1:0.0: device disconnected [ 2697.706447][T11737] udevd[11737]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 2697.747233][T30548] usb 5-1: Using ep0 maxpacket: 8 [ 2697.762265][T30548] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2697.796963][T30548] usb 5-1: config 4 interface 0 has no altsetting 0 [ 2697.821308][T30548] usb 5-1: string descriptor 0 read error: -22 [ 2697.847273][T30548] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2697.875234][T30548] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2697.921269][T30548] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2697.948287][T30548] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2697.959313][T30548] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2697.968662][T30548] usb 5-1: media controller created [ 2698.005449][T30548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2698.135964][T12161] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2698.406559][T30548] usb 5-1: USB disconnect, device number 124 [ 2698.616932][ T5506] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 2698.817747][ T5506] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.835264][ T5506] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2698.847900][ T5506] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x55, changing to 0x5 [ 2698.859846][ T5506] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2698.938180][ T5506] usb 4-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 2698.960263][ T5506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.973181][ T5506] usb 4-1: Product: syz [ 2698.983144][ T5506] usb 4-1: Manufacturer: syz [ 2698.990427][ T5506] usb 4-1: SerialNumber: syz [ 2699.124926][ T31] audit: type=1326 audit(1785086830.474:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12177 comm="syz.4.9968" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a3cd9de99 code=0x0 [ 2699.848759][T11666] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2700.028939][T11666] usb 3-1: Using ep0 maxpacket: 32 [ 2700.053463][T11666] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2700.080166][T11666] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 2700.102288][T11666] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2700.112164][ T31] audit: type=1800 audit(1785086831.454:7689): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9969" name="bus" dev="ramfs" ino=279080 res=0 errno=0 [ 2700.135374][T11666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.144951][T11666] usb 3-1: Product: syz [ 2700.150671][T11666] usb 3-1: Manufacturer: syz [ 2700.156629][T11666] usb 3-1: SerialNumber: syz [ 2700.343505][T12200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9973'. [ 2700.615889][T11666] usb 3-1: USB disconnect, device number 82 [ 2700.738510][T11750] udevd[11750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2700.897779][T17003] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2700.991441][ T5506] usb 4-1: unit 4 not found! [ 2700.996720][ T5506] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 2701.066946][T17003] usb 10-1: Using ep0 maxpacket: 16 [ 2701.088115][T17003] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2701.119219][T17003] usb 10-1: config 9 has an invalid interface number: 88 but max is 0 [ 2701.150431][T17003] usb 10-1: config 9 has no interface number 0 [ 2701.174480][T17003] usb 10-1: config 9 interface 88 has no altsetting 0 [ 2701.179662][T12211] geneve0: entered promiscuous mode [ 2701.188266][ T5506] usb 4-1: USB disconnect, device number 99 [ 2701.209868][T17003] usb 10-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 2701.210638][T12211] batadv0: entered promiscuous mode [ 2701.235467][T17003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2701.274584][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2701.290596][T12211] geneve0: left promiscuous mode [ 2701.297904][T12211] batadv0: left promiscuous mode [ 2701.306483][T17003] usb 10-1: Product: syz [ 2701.316221][T17003] usb 10-1: Manufacturer: syz [ 2701.325053][T17003] usb 10-1: SerialNumber: syz [ 2701.553126][T17003] ums-datafab 10-1:9.88: USB Mass Storage device detected [ 2701.697281][T17003] ums-sddr55 10-1:9.88: USB Mass Storage device detected [ 2701.778429][ T5506] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2701.830583][T17003] usb 10-1: USB disconnect, device number 24 [ 2701.997209][ T5506] usb 5-1: Using ep0 maxpacket: 8 [ 2702.005302][ T5506] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2702.017196][ T5506] usb 5-1: config 4 interface 0 has no altsetting 0 [ 2702.048285][ T5506] usb 5-1: string descriptor 0 read error: -22 [ 2702.078304][ T5506] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2702.103202][ T5506] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2702.134576][T12228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9980'. [ 2702.178977][ T5506] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2702.230086][ T5506] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2702.284896][ T5506] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2702.316959][ T5506] usb 5-1: media controller created [ 2702.366145][ T5506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2702.734800][ T5506] usb 5-1: USB disconnect, device number 125 [ 2703.630096][ T5506] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2703.837139][ T5506] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2703.872156][ T5506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2703.905194][ T5506] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 2703.925780][ T5506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.967010][ T5506] usb 5-1: Product: syz [ 2703.981851][ T5506] usb 5-1: Manufacturer: syz [ 2704.010988][ T5506] usb 5-1: SerialNumber: syz [ 2704.117246][ T31] audit: type=1326 audit(1785086835.464:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2704.236850][T12263] netlink: 'syz.9.9989': attribute type 2 has an invalid length. [ 2704.264035][ T31] audit: type=1326 audit(1785086835.474:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2704.330160][ T31] audit: type=1326 audit(1785086835.494:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2704.363734][T12259] fuse: Bad value for 'rootmode' [ 2704.385970][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9988'. [ 2704.436593][ T31] audit: type=1326 audit(1785086835.494:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2704.573654][T12248] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[10320] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[12248] [ 2704.615764][ T31] audit: type=1326 audit(1785086835.494:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2704.721040][ T5506] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 2704.791920][ T31] audit: type=1326 audit(1785086835.504:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2704.923826][T12273] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9992'. [ 2704.969795][ T31] audit: type=1326 audit(1785086835.504:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2705.058526][ T5506] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2705.111283][ T31] audit: type=1326 audit(1785086835.504:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2705.120019][ T5506] usb 5-1: USB disconnect, device number 126 [ 2705.161747][T12275] netlink: 'syz.2.9993': attribute type 1 has an invalid length. [ 2705.173113][T12279] netlink: 'syz.9.9995': attribute type 1 has an invalid length. [ 2705.206191][T12275] netlink: 62739 bytes leftover after parsing attributes in process `syz.2.9993'. [ 2705.213116][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2705.288457][ T31] audit: type=1326 audit(1785086835.504:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39f035e6ce code=0x7ffc0000 [ 2705.333111][ T31] audit: type=1326 audit(1785086835.504:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39f035e6ce code=0x7ffc0000 [ 2705.359062][ T31] audit: type=1326 audit(1785086835.504:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.9.9989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f039de99 code=0x7ffc0000 [ 2705.364583][T12279] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2705.632753][T12284] bond6: (slave geneve3): making interface the new active one [ 2705.659067][T12284] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 2706.116975][ T6041] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2706.300576][ T6041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2706.320364][ T6041] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2706.335808][ T6041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.353973][ T6041] usb 5-1: Product: syz [ 2706.367192][ T6041] usb 5-1: Manufacturer: syz [ 2706.373362][ T6041] usb 5-1: SerialNumber: syz [ 2706.387629][ T5506] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2706.393715][ T6041] usb 5-1: selecting invalid altsetting 1 [ 2706.418227][ T6041] usb 5-1: unit 6 not found! [ 2706.423761][ T6041] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2706.437121][ T6041] usb 5-1: selecting invalid altsetting 1 [ 2706.444490][ T6041] usb 5-1: unit 6 not found! [ 2706.450738][ T6041] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2706.474080][ T6041] usb 5-1: selecting invalid altsetting 1 [ 2706.497518][ T6041] usb 5-1: unit 6 not found! [ 2706.507180][T17949] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2706.527227][ T5506] usb 10-1: device descriptor read/64, error -71 [ 2706.573503][ T6041] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2706.643057][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2706.660816][ T6041] usb 5-1: USB disconnect, device number 127 [ 2706.667198][T17949] usb 6-1: Using ep0 maxpacket: 32 [ 2706.687481][T17949] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2706.718935][T17949] usb 6-1: config 0 has no interface number 0 [ 2706.741777][T17949] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2706.751945][T17949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.760598][T17949] usb 6-1: Product: syz [ 2706.764842][T17949] usb 6-1: Manufacturer: syz [ 2706.770353][T17949] usb 6-1: SerialNumber: syz [ 2706.779070][T17949] usb 6-1: config 0 descriptor?? [ 2706.787168][ T5506] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2706.790521][T17949] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2706.937008][ T5506] usb 10-1: device descriptor read/64, error -71 [ 2707.011609][T17949] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2707.042607][T17949] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2707.057888][ T5506] usb usb10-port1: attempt power cycle [ 2707.214699][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 8 [ 2707.410691][ T5506] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2707.459114][ T5506] usb 10-1: device descriptor read/8, error -71 [ 2707.583204][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2707.629478][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2707.630491][T17003] usb 6-1: USB disconnect, device number 46 [ 2707.708927][T17003] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2707.738568][ T5506] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2707.764979][T17003] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2707.800881][ T5506] usb 10-1: device descriptor read/8, error -71 [ 2707.811056][T17003] quatech2 6-1:0.51: device disconnected [ 2707.927295][ T5506] usb usb10-port1: unable to enumerate USB device [ 2708.086946][ T1138] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2708.197281][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10005'. [ 2708.249211][ T1138] usb 4-1: device descriptor read/64, error -71 [ 2708.527026][ T1138] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2708.586943][ T5506] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2708.669363][ T1138] usb 4-1: device descriptor read/64, error -71 [ 2708.760943][ T5506] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2708.770803][ T5506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2708.779267][ T5506] usb 6-1: Product: syz [ 2708.783521][ T5506] usb 6-1: Manufacturer: syz [ 2708.789131][ T1138] usb usb4-port1: attempt power cycle [ 2708.794742][ T5506] usb 6-1: SerialNumber: syz [ 2708.802911][ T5506] usb 6-1: config 0 descriptor?? [ 2708.811181][ T5506] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2708.937126][T11666] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 2709.088803][T11666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2709.100115][T11666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2709.111122][T11666] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2709.121322][T11666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.135334][T11666] usb 5-1: config 0 descriptor?? [ 2709.147062][ T1138] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2709.188254][ T1138] usb 4-1: device descriptor read/8, error -71 [ 2709.458957][ T1138] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2709.509686][ T1138] usb 4-1: device descriptor read/8, error -71 [ 2709.632857][ T1138] usb usb4-port1: unable to enumerate USB device [ 2709.688943][T12355] set match dimension is over the limit! [ 2709.791667][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2709.819430][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2709.848172][T11666] usbhid 5-1:0.0: can't add hid device: -71 [ 2709.863651][T11666] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2709.895739][T11666] usb 5-1: USB disconnect, device number 2 [ 2710.530246][T12364] ip6gretap1: entered allmulticast mode [ 2710.540875][T12364] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2710.548344][ T5506] gspca_stk1135: reg_w 0xf err -110 [ 2710.554868][T12364] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2710.583460][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.590944][ T5506] gspca_stk1135: Sensor write failed [ 2710.600121][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.611897][ T5506] gspca_stk1135: Sensor write failed [ 2710.622122][T12364] batman_adv: batadv0: Interface activated: ip6gretap1 [ 2710.630939][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.652007][ T5506] gspca_stk1135: Sensor read failed [ 2710.677881][T17003] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2710.685727][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.694204][ T5506] gspca_stk1135: Sensor read failed [ 2710.700108][ T5506] gspca_stk1135: Detected sensor type unknown (0x0) [ 2710.708085][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.714560][ T5506] gspca_stk1135: Sensor read failed [ 2710.721172][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.739585][ T5506] gspca_stk1135: Sensor read failed [ 2710.754710][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.770249][ T5506] gspca_stk1135: Sensor write failed [ 2710.781409][ T5506] gspca_stk1135: serial bus timeout: status=0x00 [ 2710.797012][ T5506] gspca_stk1135: Sensor write failed [ 2710.805422][ T5506] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 2710.836984][T17003] usb 10-1: Using ep0 maxpacket: 16 [ 2710.856024][T17003] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2710.890888][T17003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2710.920591][T17003] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2710.963679][T17003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.981852][T17003] usb 10-1: Product: syz [ 2710.987819][T17003] usb 10-1: Manufacturer: syz [ 2710.992681][T17003] usb 10-1: SerialNumber: syz [ 2711.009808][T12369] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10019'. [ 2711.031586][T17003] usb 10-1: config 0 descriptor?? [ 2711.049459][T17003] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2711.072066][T17003] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 2711.113113][ T5506] IPVS: starting estimator thread 0... [ 2711.217300][T12377] IPVS: using max 25 ests per chain, 60000 per kthread [ 2711.649483][ T5506] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 2712.193040][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 2712.193060][ T31] audit: type=1800 audit(1785086843.544:7727): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10018" name="bus" dev="ramfs" ino=279608 res=0 errno=0 [ 2712.395929][T12386] netlink: 'syz.9.10016': attribute type 13 has an invalid length. [ 2712.556698][ T6041] usb 6-1: USB disconnect, device number 47 [ 2712.583284][T17003] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2712.589782][T17003] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 2712.714489][ T5506] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2712.741477][ T5506] usb 4-1: can't read configurations, error -71 [ 2712.793115][T17003] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 2712.818181][T17003] em28xx 10-1:0.0: No AC97 audio processor [ 2713.257048][T17003] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 2713.392073][T12410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2713.546725][T17003] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 2713.609577][T12419] usb usb8: usbfs: process 12419 (syz.3.10029) did not claim interface 0 before use [ 2713.643033][T17003] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2713.712156][T17003] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2713.783737][T12419] input: syz1 as /devices/virtual/input/input269 [ 2713.823110][T17003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2713.878909][T17003] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 2713.938726][T17003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2714.021212][T17003] usb 3-1: config 0 descriptor?? [ 2714.060666][T12401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2714.073341][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.085787][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.117307][ T5506] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2714.317045][ T5506] usb 5-1: Using ep0 maxpacket: 8 [ 2714.348180][ T5506] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2714.398543][ T5506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2714.486599][ T5506] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2714.539771][ T5506] pvrusb2: ********** [ 2714.585127][ T5506] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2714.648836][T12428] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2714.677985][T12428] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2714.693930][ T5506] pvrusb2: Important functionality might not be entirely working. [ 2714.693950][ T5506] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2714.693962][ T5506] pvrusb2: ********** [ 2714.728536][T17003] usbhid 3-1:0.0: can't add hid device: -71 [ 2714.809893][T17003] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2714.843278][T17003] usb 3-1: USB disconnect, device number 83 [ 2714.868034][ T2367] pvrusb2: Invalid write control endpoint [ 2715.152824][T17949] usb 5-1: USB disconnect, device number 3 [ 2715.237677][ T5506] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2715.350708][ T2367] pvrusb2: Invalid write control endpoint [ 2715.434356][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2715.456746][ T5506] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 2715.495208][ T5506] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.529340][ T5506] usb 4-1: config 0 has no interface number 0 [ 2715.542572][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2715.582579][ T5506] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2715.619383][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2715.631706][ T5506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.659257][ T5506] usb 4-1: Product: syz [ 2715.681694][ T5506] usb 4-1: Manufacturer: syz [ 2715.703972][ T5506] usb 4-1: SerialNumber: syz [ 2715.724499][ T2367] pvrusb2: Device being rendered inoperable [ 2715.754750][ T5506] usb 4-1: config 0 descriptor?? [ 2715.793067][ T2367] cx25840 6-0044: Unable to detect h/w, assuming cx23887 [ 2715.820300][ T5506] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 2715.906969][T30542] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2715.944400][ T2367] cx25840 6-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2716.121272][ T5506] usb 10-1: USB disconnect, device number 29 [ 2716.181244][ T5506] em28xx 10-1:0.0: Disconnecting em28xx [ 2716.270697][ T2367] pvrusb2: Attached sub-driver cx25840 [ 2716.287096][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2716.347207][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2716.420489][ T5506] em28xx 10-1:0.0: Freeing device [ 2716.469423][T12454] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10037'. [ 2716.552667][T12454] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10037'. [ 2717.193472][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10039'. [ 2717.225346][ T31] audit: type=1800 audit(1785086848.574:7728): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10035" name="bus" dev="ramfs" ino=280874 res=0 errno=0 [ 2717.249379][T17949] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2717.407344][T17949] usb 5-1: device descriptor read/64, error -71 [ 2717.565303][T12479] netlink: 9 bytes leftover after parsing attributes in process `syz.5.10043'. [ 2717.585593][T12479] 1: renamed from c0 [ 2717.602539][T12479] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2717.624904][T12479] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2717.646732][T12479] 1: entered allmulticast mode [ 2717.647068][T17949] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2717.657243][T12479] hsr_slave_0: entered allmulticast mode [ 2717.683165][T12479] hsr_slave_1: entered allmulticast mode [ 2717.703909][T12479] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 2717.737025][T17948] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2717.827517][T17949] usb 5-1: device descriptor read/64, error -71 [ 2717.889915][ T6041] usb 4-1: USB disconnect, device number 106 [ 2717.909662][T17948] usb 10-1: Using ep0 maxpacket: 16 [ 2717.958679][T17948] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2717.970002][T17949] usb usb5-port1: attempt power cycle [ 2717.977446][T17948] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2717.987664][T17948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.000280][T17948] usb 10-1: config 0 descriptor?? [ 2718.317798][T17949] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2718.338066][T17949] usb 5-1: device descriptor read/8, error -71 [ 2718.429253][T17948] mcp2221 0003:04D8:00DD.00C2: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 2718.567394][T30542] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2718.644773][T17949] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2718.706362][T17949] usb 5-1: device descriptor read/8, error -71 [ 2718.795213][T30542] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 2718.806564][T30542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.818537][T17949] usb usb5-port1: unable to enumerate USB device [ 2718.819865][T30542] usb 3-1: Product: ࠌ [ 2718.848303][T12510] bond0: entered promiscuous mode [ 2718.851614][T30542] usb 3-1: Manufacturer: syz [ 2718.864992][T12510] bond_slave_0: entered promiscuous mode [ 2718.866854][T30542] usb 3-1: SerialNumber: 충黍စfi䉮ۣ騸໑椈埯᧎㿔ꤧ﬇凣ꝸቋ䌎㵬孲裟桮컙ꡄ碋ꑽ␣퀹㜗㤯轀灧耑 [ 2718.885088][T12510] bond_slave_1: entered promiscuous mode [ 2718.906486][T12510] batadv0: entered promiscuous mode [ 2718.936347][T30542] usb 3-1: config 0 descriptor?? [ 2718.955575][T30542] hub 3-1:0.0: bad descriptor, ignoring hub [ 2718.972297][T30542] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2718.984345][T12510] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2718.992054][T30542] f81232 3-1:0.0: f81534a converter detected [ 2719.010389][T12510] bond0: left promiscuous mode [ 2719.015904][T12510] bond_slave_0: left promiscuous mode [ 2719.022060][T30542] f81534a ttyUSB0: f81232_set_register failed status: -32 [ 2719.031590][T30542] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 2719.041171][T12510] bond_slave_1: left promiscuous mode [ 2719.064136][T12510] batadv0: left promiscuous mode [ 2719.327158][T30542] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 2719.479433][T30542] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2719.490547][T30542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 2719.501992][T30542] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2719.515216][T30542] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 2719.524340][T30542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.536239][T30542] usb 6-1: config 0 descriptor?? [ 2719.542623][T12515] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2719.970317][T30542] dragonrise 0003:0079:0011.00C3: unknown main item tag 0x3 [ 2719.983240][T30542] dragonrise 0003:0079:0011.00C3: unexpected long global item [ 2719.992311][T30542] dragonrise 0003:0079:0011.00C3: parse failed [ 2719.998662][T30542] dragonrise 0003:0079:0011.00C3: probe with driver dragonrise failed with error -22 [ 2720.168349][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2720.183322][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2720.195455][T30542] usb 6-1: USB disconnect, device number 48 [ 2720.522680][T30542] usb 10-1: USB disconnect, device number 30 [ 2720.670855][T12537] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10060'. [ 2720.707364][T17949] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2720.871356][T17949] usb 5-1: device descriptor read/64, error -71 [ 2721.116952][T17949] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2721.227477][ T6041] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2721.259233][T17949] usb 5-1: device descriptor read/64, error -71 [ 2721.311115][T30542] usb 3-1: USB disconnect, device number 85 [ 2721.339397][T30542] f81232 3-1:0.0: device disconnected [ 2721.377432][T17949] usb usb5-port1: attempt power cycle [ 2721.397703][ T6041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2721.416768][ T6041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.437421][ T1138] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2721.440650][ T6041] usb 4-1: Product: syz [ 2721.464053][ T6041] usb 4-1: Manufacturer: syz [ 2721.480447][ T6041] usb 4-1: SerialNumber: syz [ 2721.525135][T17948] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2721.566315][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10069'. [ 2721.622941][ T1138] usb 10-1: Using ep0 maxpacket: 8 [ 2721.639093][ T1138] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2721.671142][ T1138] usb 10-1: config 0 has no interface number 0 [ 2721.685692][ T1138] usb 10-1: config 0 interface 1 has no altsetting 0 [ 2721.722988][ T1138] usb 10-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 2721.747068][T17949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2721.754905][ T1138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.775088][ T1138] usb 10-1: Product: syz [ 2721.785335][ T1138] usb 10-1: Manufacturer: syz [ 2721.791167][T17949] usb 5-1: device descriptor read/8, error -71 [ 2721.791316][ T1138] usb 10-1: SerialNumber: syz [ 2721.812502][ T1138] usb 10-1: config 0 descriptor?? [ 2722.037305][T17949] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2722.077638][T17949] usb 5-1: device descriptor read/8, error -71 [ 2722.197860][T17949] usb usb5-port1: unable to enumerate USB device [ 2722.447370][T17949] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2722.559333][ T1138] i2c-cp2615 10-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 2722.593099][ T1138] usb 10-1: USB disconnect, device number 31 [ 2722.607067][T17949] usb 6-1: Using ep0 maxpacket: 32 [ 2722.620425][T17949] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2722.643266][T17949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2722.671412][T17949] usb 6-1: config 0 has no interface number 0 [ 2722.688552][T17949] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2722.727587][T17949] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2722.749148][T17949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.772546][T17949] usb 6-1: Product: syz [ 2722.785892][T17949] usb 6-1: Manufacturer: syz [ 2722.817128][T17949] usb 6-1: SerialNumber: syz [ 2722.824869][T17949] usb 6-1: config 0 descriptor?? [ 2722.842985][T17949] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 2722.867475][T17949] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 2723.043607][T17949] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 2723.067387][T17949] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 2723.085346][T17949] usb 6-1: USB disconnect, device number 49 [ 2723.157663][T12596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2723.187888][T17948] usb 4-1: Service connection timeout for: 258 [ 2723.194582][T17948] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2723.230997][T17948] ath9k_htc: Failed to initialize the device [ 2723.254273][T17948] usb 4-1: ath9k_htc: USB layer deinitialized [ 2723.371057][T12598] ipt_REJECT: ECHOREPLY no longer supported. [ 2723.381639][T12598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2723.726976][T17003] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2723.905731][T12606] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10081'. [ 2723.927707][T17003] usb 5-1: Using ep0 maxpacket: 16 [ 2723.942087][T17003] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2723.956691][T17003] usb 5-1: config 7 has an invalid interface number: 106 but max is 3 [ 2723.975403][T17003] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 2723.993167][T17003] usb 5-1: config 7 has an invalid interface number: 148 but max is 3 [ 2724.003290][T17003] usb 5-1: config 7 has an invalid interface number: 227 but max is 3 [ 2724.011709][T17003] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2724.024083][T17003] usb 5-1: config 7 has no interface number 0 [ 2724.030590][T17003] usb 5-1: config 7 has no interface number 1 [ 2724.037414][T17003] usb 5-1: config 7 has no interface number 2 [ 2724.043638][T17003] usb 5-1: config 7 has no interface number 3 [ 2724.074886][T17003] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2724.113825][T17003] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 2724.134963][T17003] usb 5-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 2724.162378][T17003] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2724.197074][T17003] usb 5-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 2724.244220][T17003] usb 5-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2724.275977][T17003] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 2724.295156][T17003] usb 5-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 2724.306738][T17003] usb 5-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 2724.346956][T17003] usb 5-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2724.375934][T17949] usb 4-1: USB disconnect, device number 107 [ 2724.378449][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2724.433642][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 2724.459643][T30551] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2724.467693][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 2724.547116][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 2724.622354][T30551] usb 10-1: device descriptor read/64, error -71 [ 2724.631457][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2724.683342][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 2724.728347][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 2724.776088][T30035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2724.801914][T30035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2724.819633][T30035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2724.836902][T30035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2724.845104][T30035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2724.853861][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 2724.878533][T30551] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 2724.952692][T17003] usb 5-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 2724.984000][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 2725.026391][T17003] usb 5-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 2725.031145][T30551] usb 10-1: device descriptor read/64, error -71 [ 2725.055144][T17003] usb 5-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 2725.087123][T17003] usb 5-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2725.146877][T17003] usb 5-1: config 7 interface 106 has no altsetting 0 [ 2725.155588][T17003] usb 5-1: config 7 interface 182 has no altsetting 0 [ 2725.174510][T17003] usb 5-1: config 7 interface 148 has no altsetting 0 [ 2725.184699][T17003] usb 5-1: config 7 interface 227 has no altsetting 0 [ 2725.207651][T17003] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 2725.236915][T17003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2725.237437][T30551] usb usb10-port1: attempt power cycle [ 2725.251503][T17003] usb 5-1: Product: syz [ 2725.266168][T17003] usb 5-1: Manufacturer: syz [ 2725.271108][T17003] usb 5-1: SerialNumber: syz [ 2725.640399][T30551] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2725.667968][T30551] usb 10-1: device descriptor read/8, error -71 [ 2725.874755][T17003] usb 5-1: USB disconnect, device number 12 [ 2725.907938][T30551] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2725.961524][T30551] usb 10-1: device descriptor read/8, error -71 [ 2726.087789][T30551] usb usb10-port1: unable to enumerate USB device [ 2726.591583][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10091'. [ 2726.696991][T30551] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2726.818456][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 2726.825778][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 2726.833374][T12620] bridge_slave_0: entered allmulticast mode [ 2726.841661][T12620] bridge_slave_0: entered promiscuous mode [ 2726.853152][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 2726.871056][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 2726.872667][T30551] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2726.878757][T12620] bridge_slave_1: entered allmulticast mode [ 2726.895982][T12620] bridge_slave_1: entered promiscuous mode [ 2726.902155][T30551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2726.913233][T30551] usb 5-1: config 0 descriptor?? [ 2726.947373][T30035] Bluetooth: hci2: command tx timeout [ 2727.031671][T12620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2727.063967][T12620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2727.343487][T12620] team0: Port device team_slave_0 added [ 2727.531201][T12620] team0: Port device team_slave_1 added [ 2727.690933][T30551] [drm:udl_init] *ERROR* Selecting channel failed [ 2727.780823][T12659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2727.795651][T12620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2727.813908][T12659] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2727.823329][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2727.855003][T12659] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 2727.874852][T12659] netlink: 'syz.2.10099': attribute type 26 has an invalid length. [ 2727.902739][T12620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2727.913800][T17003] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 2727.963589][T30551] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2728.004730][T30551] [drm] Initialized udl on minor 2 [ 2728.030996][T30551] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2728.056975][T17003] usb 4-1: device descriptor read/64, error -71 [ 2728.116281][T30551] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2728.185381][T30551] usb 5-1: USB disconnect, device number 13 [ 2728.193435][T17948] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 2728.213068][T17948] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2728.307397][T17003] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2728.457101][T17003] usb 4-1: device descriptor read/64, error -71 [ 2728.563035][T12620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2728.590802][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2728.630290][T17003] usb usb4-port1: attempt power cycle [ 2728.643233][T12620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2728.710602][T12127] bridge_slave_1: left allmulticast mode [ 2728.733667][T12127] bridge_slave_1: left promiscuous mode [ 2728.758650][T12127] bridge0: port 2(bridge_slave_1) entered disabled state [ 2728.766550][T12673] loop5: detected capacity change from 0 to 7 [ 2728.791894][T12673] Dev loop5: unable to read RDB block 7 [ 2728.798991][T12673] loop5: unable to read partition table [ 2728.809273][T12127] bridge_slave_0: left allmulticast mode [ 2728.830538][T12127] bridge_slave_0: left promiscuous mode [ 2728.846418][T12127] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.863127][T12673] loop5: partition table beyond EOD, truncated [ 2728.872201][T12673] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2728.994263][T17003] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2729.028279][T30035] Bluetooth: hci2: command tx timeout [ 2729.034247][T17003] usb 4-1: device descriptor read/8, error -71 [ 2729.277191][T17003] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2729.317736][T17003] usb 4-1: device descriptor read/8, error -71 [ 2729.449038][T17003] usb usb4-port1: unable to enumerate USB device [ 2730.052720][T12127] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2730.126373][T12127] bond1 (unregistering): Released all slaves [ 2730.180838][T12127] bond2 (unregistering): Released all slaves [ 2730.245668][T12127] bond3 (unregistering): Released all slaves [ 2730.286277][T12127] bond0 (unregistering): Released all slaves [ 2730.351407][T12127] bond4 (unregistering): Released all slaves [ 2730.373643][T12127] bond5 (unregistering): Released all slaves [ 2730.414593][T12127] bond6 (unregistering): Released all slaves [ 2730.677502][T12620] hsr_slave_0: entered promiscuous mode [ 2730.692106][T12620] hsr_slave_1: entered promiscuous mode [ 2730.741623][T12620] debugfs: 'hsr0' already exists in 'hsr' [ 2730.759245][T12620] Cannot create hsr debugfs directory [ 2730.945922][T12127] : left promiscuous mode [ 2731.108641][T30035] Bluetooth: hci2: command tx timeout [ 2732.383276][T12127] hsr_slave_0: left promiscuous mode [ 2732.395753][T12127] hsr_slave_1: left promiscuous mode [ 2732.596892][T30542] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2732.757510][T30542] usb 3-1: Using ep0 maxpacket: 8 [ 2732.770487][T30542] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2732.780615][T30542] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 2732.790903][T30542] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2732.814492][T30542] usb 3-1: config 4 has no interface number 0 [ 2732.832963][T30542] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2732.846938][T30542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2732.867247][T30542] usb 3-1: Product: syz [ 2732.877118][T30542] usb 3-1: Manufacturer: syz [ 2732.887278][T30542] usb 3-1: SerialNumber: syz [ 2733.008077][T12127] team0 (unregistering): Port device team_slave_1 removed [ 2733.039664][T12726] netdevsim netdevsim9: Direct firmware load for  failed with error -2 [ 2733.048471][T12726] netdevsim netdevsim9: Falling back to sysfs fallback for:  [ 2733.099607][T12727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2733.141462][T12710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.170629][T12710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.189118][T30035] Bluetooth: hci2: command tx timeout [ 2733.310229][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2733.327005][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.355184][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.429853][T30542] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 2733.457083][T30542] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 2733.484242][T30542] uvcvideo 3-1:4.147: No streaming interface found for terminal 32774. [ 2733.587192][T30542] usb 3-1: USB disconnect, device number 86 [ 2733.900149][T12127] IPVS: stop unused estimator thread 0... [ 2734.297665][T17949] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2734.417238][T17948] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2734.458056][T17949] usb 4-1: Using ep0 maxpacket: 8 [ 2734.470506][T17949] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2734.470605][T30542] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2734.495553][T17949] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2734.521292][T17949] usb 4-1: string descriptor 0 read error: -22 [ 2734.540341][T17949] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2734.579530][T17948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2734.603858][T17949] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2734.632718][T17948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2734.658298][T30542] usb 3-1: Using ep0 maxpacket: 32 [ 2734.674104][T30542] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2734.693333][T30542] usb 3-1: config 0 has no interface number 0 [ 2734.701850][T17949] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2734.711828][T17948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2734.747885][T17948] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2734.760163][T17949] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2734.783827][T30542] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2734.788042][T17948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.816109][T17949] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2734.832766][T30542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2734.842971][T17949] usb 4-1: media controller created [ 2734.861754][T30542] usb 3-1: Product: syz [ 2734.874886][T30542] usb 3-1: Manufacturer: syz [ 2734.895298][T30542] usb 3-1: SerialNumber: syz [ 2734.970660][T17949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2735.000655][T17948] usb 5-1: config 0 descriptor?? [ 2735.007760][T30542] usb 3-1: config 0 descriptor?? [ 2735.047573][T17948] rndis_host 5-1:0.0: rndis: master #0/ffff888086ebb000 slave #1/0000000000000000 [ 2735.072070][T30542] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2735.271813][T30551] usb 5-1: USB disconnect, device number 14 [ 2735.281466][T30542] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2735.348847][T17949] usb 4-1: USB disconnect, device number 112 [ 2735.392659][T30542] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2735.479973][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 2735.698707][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2735.713372][T30542] usb 3-1: USB disconnect, device number 87 [ 2735.775535][T30542] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2735.829754][T30542] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2735.894039][T30542] quatech2 3-1:0.51: device disconnected [ 2736.198497][T12762] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2736.345841][T12762] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2736.345883][T12767] FAULT_INJECTION: forcing a failure. [ 2736.345883][T12767] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.443653][T12767] CPU: 0 UID: 0 PID: 12767 Comm: syz.3.10124 Tainted: G L syzkaller #0 PREEMPT(full) [ 2736.443688][T12767] Tainted: [L]=SOFTLOCKUP [ 2736.443696][T12767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2736.443708][T12767] Call Trace: [ 2736.443717][T12767] [ 2736.443728][T12767] dump_stack_lvl+0xe8/0x150 [ 2736.443771][T12767] should_fail_ex+0x40c/0x560 [ 2736.443808][T12767] should_failslab+0xa8/0x100 [ 2736.443844][T12767] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2736.443871][T12767] ? local_lock_release+0x9c/0x160 [ 2736.443910][T12767] ? __alloc_skb+0x1d7/0x7a0 [ 2736.443930][T12767] ? __alloc_skb+0x1d7/0x7a0 [ 2736.443957][T12767] __alloc_skb+0x1d7/0x7a0 [ 2736.443977][T12767] netlink_sendmsg+0x5d4/0xb40 [ 2736.444010][T12767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2736.444036][T12767] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2736.444064][T12767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2736.444088][T12767] sock_sendmsg_nosec+0x13a/0x180 [ 2736.444121][T12767] ____sys_sendmsg+0x54e/0x850 [ 2736.444151][T12767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2736.444186][T12767] ? import_iovec+0x73/0xa0 [ 2736.444211][T12767] ___sys_sendmsg+0x2a5/0x360 [ 2736.444234][T12767] ? __lock_acquire+0x683/0x2cf0 [ 2736.444268][T12767] ? __pfx____sys_sendmsg+0x10/0x10 [ 2736.444318][T12767] ? __fget_files+0x2a/0x420 [ 2736.444342][T12767] ? __fget_files+0x3a2/0x420 [ 2736.444383][T12767] __x64_sys_sendmsg+0x1b1/0x290 [ 2736.444407][T12767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2736.444446][T12767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2736.444466][T12767] do_syscall_64+0x174/0x580 [ 2736.444486][T12767] ? trace_irq_disable+0x3b/0x140 [ 2736.444509][T12767] ? clear_bhb_loop+0x40/0x90 [ 2736.444530][T12767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2736.444547][T12767] RIP: 0033:0x7f1c81b9de99 [ 2736.444565][T12767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2736.444580][T12767] RSP: 002b:00007f1c829e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2736.444600][T12767] RAX: ffffffffffffffda RBX: 00007f1c81e26090 RCX: 00007f1c81b9de99 [ 2736.444613][T12767] RDX: 0000000004041080 RSI: 0000200000000340 RDI: 0000000000000005 [ 2736.444623][T12767] RBP: 00007f1c829e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2736.444634][T12767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.444644][T12767] R13: 00007f1c81e26128 R14: 00007f1c81e26090 R15: 00007f1c81f4fa48 [ 2736.444673][T12767] [ 2736.721012][T12770] program syz.2.10125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2737.171778][ T31] audit: type=1326 audit(1785086868.524:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.3.10127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c81b9de99 code=0x0 [ 2737.802926][T12794] program syz.4.10129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2737.964764][T12620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2738.025611][T12620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2738.049370][T12620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2738.089487][T12620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2738.130757][T12620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2738.206939][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10130'. [ 2738.229208][T12620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2738.315298][T12802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2738.361413][T12808] netlink: 'syz.4.10130': attribute type 11 has an invalid length. [ 2738.401833][T12620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2738.412133][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10130'. [ 2738.414271][T12620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2738.435582][T12807] tunl0: Caught tx_queue_len zero misconfig [ 2738.552078][T12802] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 2738.574102][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10130'. [ 2738.602841][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10134'. [ 2738.630715][ T1138] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2738.789125][ T1138] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2738.812194][ T1138] usb 3-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 2738.827343][ T1138] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2738.839413][ T1138] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 40009, setting to 64 [ 2738.853652][ T1138] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2738.866253][T12829] FAULT_INJECTION: forcing a failure. [ 2738.866253][T12829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2738.881495][ T1138] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2738.900256][T12829] CPU: 1 UID: 0 PID: 12829 Comm: syz.4.10136 Tainted: G L syzkaller #0 PREEMPT(full) [ 2738.900291][T12829] Tainted: [L]=SOFTLOCKUP [ 2738.900299][T12829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2738.900312][T12829] Call Trace: [ 2738.900321][T12829] [ 2738.900329][T12829] dump_stack_lvl+0xe8/0x150 [ 2738.900377][T12829] should_fail_ex+0x40c/0x560 [ 2738.900409][T12829] _copy_from_iter+0x1d3/0x1660 [ 2738.900437][T12829] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2738.900466][T12829] ? rcu_is_watching+0x15/0xb0 [ 2738.900487][T12829] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2738.900514][T12829] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2738.900540][T12829] ? __pfx__copy_from_iter+0x10/0x10 [ 2738.900568][T12829] ? __alloc_skb+0x276/0x7a0 [ 2738.900587][T12829] ? __alloc_skb+0x276/0x7a0 [ 2738.900612][T12829] ? netlink_sendmsg+0x650/0xb40 [ 2738.900636][T12829] ? skb_put+0x112/0x210 [ 2738.900659][T12829] netlink_sendmsg+0x6c0/0xb40 [ 2738.900694][T12829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2738.900722][T12829] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2738.900752][T12829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2738.900775][T12829] sock_sendmsg_nosec+0x13a/0x180 [ 2738.900807][T12829] ____sys_sendmsg+0x54e/0x850 [ 2738.900835][T12829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2738.900868][T12829] ? import_iovec+0x73/0xa0 [ 2738.900891][T12829] ___sys_sendmsg+0x2a5/0x360 [ 2738.900913][T12829] ? __lock_acquire+0x683/0x2cf0 [ 2738.900946][T12829] ? __pfx____sys_sendmsg+0x10/0x10 [ 2738.901005][T12829] ? __fget_files+0x2a/0x420 [ 2738.901032][T12829] ? __fget_files+0x3a2/0x420 [ 2738.901071][T12829] __x64_sys_sendmsg+0x1b1/0x290 [ 2738.901097][T12829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2738.901139][T12829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2738.901162][T12829] do_syscall_64+0x174/0x580 [ 2738.901184][T12829] ? trace_irq_disable+0x3b/0x140 [ 2738.901211][T12829] ? clear_bhb_loop+0x40/0x90 [ 2738.901237][T12829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2738.901258][T12829] RIP: 0033:0x7f6a3cd9de99 [ 2738.901278][T12829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2738.901296][T12829] RSP: 002b:00007f6a3dc45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2738.901320][T12829] RAX: ffffffffffffffda RBX: 00007f6a3d025fa0 RCX: 00007f6a3cd9de99 [ 2738.901343][T12829] RDX: 0000000004041080 RSI: 0000200000000340 RDI: 0000000000000005 [ 2738.901356][T12829] RBP: 00007f6a3dc45090 R08: 0000000000000000 R09: 0000000000000000 [ 2738.901369][T12829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2738.901382][T12829] R13: 00007f6a3d026038 R14: 00007f6a3d025fa0 R15: 00007f6a3d14fa48 [ 2738.901415][T12829] [ 2738.901515][ T1138] usb 3-1: Product: syz [ 2738.935310][T12620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2738.938776][ T1138] usb 3-1: Manufacturer: syz [ 2739.078296][T12620] 8021q: adding VLAN 0 to HW filter on device team0 [ 2739.096625][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.100038][ T5506] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2739.104414][T12128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2739.178612][T12813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2739.288838][ T1138] cdc_wdm 3-1:1.0: skipping garbage [ 2739.294546][ T1138] cdc_wdm 3-1:1.0: skipping garbage [ 2739.309582][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 2739.316884][T12128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2739.329716][ T1138] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2739.338511][ T5506] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2739.352470][ T5506] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2739.363879][ T5506] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2739.390201][ T5506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2739.402020][ T5506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.441785][ T5506] usb 4-1: Product: syz [ 2739.456048][ T5506] usb 4-1: Manufacturer: syz [ 2739.475251][ T5506] usb 4-1: SerialNumber: syz [ 2739.523288][ T5506] cdc_mbim 4-1:1.0: skipping garbage [ 2739.535934][ T1138] usb 3-1: USB disconnect, device number 88 [ 2739.546911][ T5506] cdc_mbim 4-1:1.0: skipping garbage [ 2739.583759][ T5506] usb 4-1: selecting invalid altsetting 1 [ 2739.722655][ T5506] cdc_mbim 4-1:1.0: bind() failure [ 2739.780769][ T5506] usb 4-1: USB disconnect, device number 113 [ 2739.857863][T12620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2739.873041][T12836] loop5: detected capacity change from 0 to 7 [ 2739.965266][T12836] Dev loop5: unable to read RDB block 7 [ 2739.979073][T12836] loop5: unable to read partition table [ 2740.029699][T12836] loop5: partition table beyond EOD, truncated [ 2740.054692][T12836] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2740.420005][T12620] veth0_vlan: entered promiscuous mode [ 2740.449858][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10140'. [ 2740.546036][T12620] veth1_vlan: entered promiscuous mode [ 2740.695925][ T31] audit: type=1804 audit(1785086872.034:7730): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.10140" name="bus" dev="ramfs" ino=283003 res=1 errno=0 [ 2740.714459][T12620] veth0_macvtap: entered promiscuous mode [ 2740.784493][T12620] veth1_macvtap: entered promiscuous mode [ 2740.895243][T12620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2740.980582][T12620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2741.209110][ T6089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.286723][ T6089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.786985][ T1138] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2741.797270][T12874] bond0: (slave bond_slave_1): Releasing backup interface [ 2741.839539][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10146'. [ 2741.897862][ T6089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.924157][ T6089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2741.959337][ T1138] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2742.029295][ T1138] usb 10-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 2742.065253][ T1138] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2742.123810][ T1138] usb 10-1: config 0 descriptor?? [ 2742.586447][T12884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2742.611765][T14023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2742.643094][T12884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2742.658455][T14023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2742.682506][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.696034][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.722567][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.733274][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.742140][T12128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2742.752652][T12128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2742.761498][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.781788][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.796665][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.824662][ T1138] holtek_mouse 0003:04D9:A070.00C4: unknown main item tag 0x0 [ 2742.844041][ T1138] holtek_mouse 0003:04D9:A070.00C4: item fetching failed at offset 38/40 [ 2742.869675][ T1138] holtek_mouse 0003:04D9:A070.00C4: hid parse failed: -22 [ 2742.882796][ T1138] holtek_mouse 0003:04D9:A070.00C4: probe with driver holtek_mouse failed with error -22 [ 2742.896375][T12884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2742.913137][T12884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2743.020190][ T1138] usb 10-1: USB disconnect, device number 36 [ 2743.347634][T17003] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2743.364007][T12916] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 2743.364007][T12916] Please contact the netfilter-devel mailing list or update your nftables rules. [ 2743.527173][T17003] usb 6-1: Using ep0 maxpacket: 16 [ 2743.541347][T17003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2743.562021][T17003] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2743.605770][T17003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2743.617046][T12916] syz.4.10152 (12916): drop_caches: 2 [ 2743.668360][T17003] usb 6-1: config 0 descriptor?? [ 2743.791483][T12928] @0: renamed from virt_wifi0 [ 2743.945644][T12933] sctp: [Deprecated]: syz.4.10155 (pid 12933) Use of int in max_burst socket option. [ 2743.945644][T12933] Use struct sctp_assoc_value instead [ 2744.091120][T12935] syzkaller0: entered promiscuous mode [ 2744.116019][T12935] syzkaller0: entered allmulticast mode [ 2744.137789][ T1138] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2744.166371][T17003] redragon 0003:0C45:760B.00C5: unknown main item tag 0x0 [ 2744.199079][T17003] redragon 0003:0C45:760B.00C5: unknown main item tag 0x0 [ 2744.245117][T17003] redragon 0003:0C45:760B.00C5: hidraw0: USB HID v0.81 Device [HID 0c45:760b] on usb-dummy_hcd.5-1/input0 [ 2744.345695][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2744.354426][ T1138] usb 3-1: Using ep0 maxpacket: 16 [ 2744.370124][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2744.412959][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2744.426508][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2744.491282][ T1138] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2744.578636][ T5506] usb 6-1: USB disconnect, device number 50 [ 2744.584749][T30542] hid-generic 0000:0000:0000.00C6: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2744.596446][ T1138] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2744.642436][ T1138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2744.693877][ T1138] usb 3-1: config 0 descriptor?? [ 2744.933217][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2744.982510][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.217763][ T5506] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2745.418015][ T5506] usb 6-1: Using ep0 maxpacket: 32 [ 2745.460444][ T5506] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2745.505959][ T5506] usb 6-1: config 0 has no interface number 0 [ 2745.524256][ T5506] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2745.570488][ T5506] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2745.581203][ T5506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2745.590431][ T5506] usb 6-1: Product: syz [ 2745.594892][ T5506] usb 6-1: Manufacturer: syz [ 2745.600221][ T5506] usb 6-1: SerialNumber: syz [ 2745.614025][ T5506] usb 6-1: config 0 descriptor?? [ 2745.717971][T17949] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2745.857295][T17949] usb 4-1: device descriptor read/64, error -71 [ 2746.117322][T17949] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2746.243022][ T5506] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2746.260224][ T5506] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2746.277292][T17949] usb 4-1: device descriptor read/64, error -71 [ 2746.397386][T17949] usb usb4-port1: attempt power cycle [ 2746.596742][ T1138] usbhid 3-1:0.0: can't add hid device: -71 [ 2746.632130][ T1138] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2746.699075][ T1138] usb 3-1: USB disconnect, device number 89 [ 2746.758997][T17949] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2746.791638][T17949] usb 4-1: device descriptor read/8, error -71 [ 2746.880127][ T5506] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2746.920881][ T5506] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2746.970715][ T5506] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2747.011925][ T5506] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 2747.057049][T17949] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2747.091373][T17949] usb 4-1: device descriptor read/8, error -71 [ 2747.217391][T17949] usb usb4-port1: unable to enumerate USB device [ 2747.766899][ T5506] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 2747.855503][T13005] netlink: 5212 bytes leftover after parsing attributes in process `syz.2.10173'. [ 2747.892637][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10173'. [ 2747.926874][ T5506] usb 5-1: Invalid ep0 maxpacket: 32 [ 2748.076883][ T5506] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 2748.277354][ T5506] usb 5-1: Invalid ep0 maxpacket: 32 [ 2748.316246][ T5506] usb usb5-port1: attempt power cycle [ 2748.672523][ T6041] usb 6-1: USB disconnect, device number 51 [ 2748.707110][ T5506] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 2748.798603][ T5506] usb 5-1: Invalid ep0 maxpacket: 32 [ 2748.846506][T13015] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2748.864237][T30035] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2748.922831][T17949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2748.938564][ T5506] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 2748.957698][ T5506] usb 5-1: Invalid ep0 maxpacket: 32 [ 2748.958416][ T5506] usb usb5-port1: unable to enumerate USB device [ 2749.447228][T17949] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2749.456714][T13030] fuse: Bad value for 'fd' [ 2749.515780][T13032] xt_hashlimit: size too large, truncated to 1048576 [ 2749.547320][ T6041] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2749.574699][T13033] x_tables: duplicate underflow at hook 1 [ 2749.598854][T17949] usb 10-1: Using ep0 maxpacket: 16 [ 2749.622690][T17949] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2749.633219][ T1131] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2749.653929][T17949] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2749.673752][T17949] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2749.685135][T17949] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2749.696260][T17949] usb 10-1: SerialNumber: syz [ 2749.719098][T17949] usb 10-1: 0:2 : does not exist [ 2749.748917][ T7055] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2749.797037][ T1131] usb 3-1: Using ep0 maxpacket: 8 [ 2749.805310][ T1131] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 2749.814006][ T1131] usb 3-1: config 0 has no interface number 0 [ 2749.821099][ T1131] usb 3-1: New USB device found, idVendor=10c4, idProduct=8857, bcdDevice=6f.95 [ 2749.821532][T13043] input: syz1 as /devices/virtual/input/input270 [ 2749.844879][ T1131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2749.882982][ T1131] usb 3-1: config 0 descriptor?? [ 2749.903939][ T1131] cp210x 3-1:0.92: cp210x converter detected [ 2750.105159][ T1131] cp210x 3-1:0.92: failed to get vendor val 0x370b size 1: -71 [ 2750.115618][ T1131] cp210x 3-1:0.92: querying part number failed [ 2750.131093][ T1131] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2750.157965][ T1131] usb 3-1: USB disconnect, device number 90 [ 2750.183783][ T1131] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2750.194337][ T1131] cp210x 3-1:0.92: device disconnected [ 2750.470308][T13049] ALSA: mixer_oss: invalid OSS volume '' [ 2750.633414][T13055] batadv_slave_1: entered promiscuous mode [ 2750.819154][ T6089] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2750.850678][ T6089] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2751.454488][T17949] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 2751.484954][T13052] batadv_slave_1: left promiscuous mode [ 2751.566243][T17949] usb 10-1: 5:0: failed to get current value for ch 2 (-22) [ 2751.627637][T17949] usb 10-1: 5:0: failed to get current value for ch 3 (-22) [ 2751.637189][ T5506] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2751.667259][ T1131] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2751.728436][T17949] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2751.807766][ T5506] usb 3-1: Using ep0 maxpacket: 16 [ 2751.816569][ T5506] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 2751.836009][ T5506] usb 3-1: config 254 has no interface number 0 [ 2751.842728][ T5506] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 2751.882327][ T5506] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2751.919511][ T5506] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 255 [ 2751.950317][ T5506] usb 3-1: config 254 interface 235 has no altsetting 0 [ 2751.967398][T17949] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2751.996577][ T5506] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 2752.075327][ T5506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.099312][ T5506] usb 3-1: Product: syz [ 2752.101173][T17949] usb 10-1: USB disconnect, device number 37 [ 2752.125501][ T5506] usb 3-1: Manufacturer: syz [ 2752.157157][ T5506] usb 3-1: SerialNumber: syz [ 2752.222107][T13075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2752.336261][T11719] udevd[11719]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2752.584700][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2752.746346][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2752.839830][T13075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2752.897767][ T5506] usbtest 3-1:254.235: Linux gadget zero [ 2752.905985][ T5506] usbtest 3-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 2753.507181][T17949] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2753.575721][T13098] ================================================================== [ 2753.583919][T13098] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x407/0x4d0 [ 2753.592174][T13098] Read of size 4 at addr ffff88802a7fca3c by task syz.3.10199/13098 [ 2753.600217][T13098] [ 2753.602572][T13098] CPU: 0 UID: 0 PID: 13098 Comm: syz.3.10199 Tainted: G L syzkaller #0 PREEMPT(full) [ 2753.602602][T13098] Tainted: [L]=SOFTLOCKUP [ 2753.602610][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2753.602623][T13098] Call Trace: [ 2753.602631][T13098] [ 2753.602640][T13098] dump_stack_lvl+0xe8/0x150 [ 2753.602673][T13098] print_address_description+0x55/0x1e0 [ 2753.602727][T13098] ? dvb_frontend_release+0x407/0x4d0 [ 2753.602747][T13098] print_report+0x58/0x70 [ 2753.602770][T13098] kasan_report+0x117/0x150 [ 2753.602801][T13098] ? dvb_frontend_release+0x407/0x4d0 [ 2753.602831][T13098] dvb_frontend_release+0x407/0x4d0 [ 2753.602852][T13098] ? __pfx_dvb_frontend_release+0x10/0x10 [ 2753.602871][T13098] __fput+0x418/0xa50 [ 2753.602901][T13098] task_work_run+0x1d9/0x270 [ 2753.602923][T13098] ? __pfx_task_work_run+0x10/0x10 [ 2753.602945][T13098] exit_to_user_mode_loop+0x1fa/0x730 [ 2753.602970][T13098] ? rcu_is_watching+0x15/0xb0 [ 2753.602989][T13098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2753.603009][T13098] do_syscall_64+0x353/0x580 [ 2753.603030][T13098] ? trace_irq_disable+0x3b/0x140 [ 2753.603054][T13098] ? clear_bhb_loop+0x40/0x90 [ 2753.603077][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2753.603096][T13098] RIP: 0033:0x7f1c81b9de99 [ 2753.603114][T13098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2753.603133][T13098] RSP: 002b:00007f1c81f4fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2753.603156][T13098] RAX: 0000000000000000 RBX: 00007f1c81f4fc90 RCX: 00007f1c81b9de99 [ 2753.603169][T13098] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2753.603182][T13098] RBP: 00000000002a020a R08: 0000000000000001 R09: 0000000000000000 [ 2753.603195][T13098] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007f1c81f4fcd0 [ 2753.603207][T13098] R13: 00007f1c81e25fac R14: 00000000002a03a4 R15: 00007f1c81e25fa0 [ 2753.603228][T13098] [ 2753.603235][T13098] [ 2753.803184][T13098] Allocated by task 1: [ 2753.807266][T13098] kasan_save_track+0x3e/0x80 [ 2753.811975][T13098] __kasan_kmalloc+0x93/0xb0 [ 2753.816596][T13098] __kmalloc_cache_noprof+0x32d/0x660 [ 2753.821996][T13098] dvb_register_device+0x309/0x1dd0 [ 2753.827217][T13098] dvb_register_frontend+0x603/0x900 [ 2753.832519][T13098] vidtv_bridge_probe+0x9d5/0xf60 [ 2753.837669][T13098] platform_probe+0xf9/0x190 [ 2753.842315][T13098] really_probe+0x254/0xae0 [ 2753.846875][T13098] __driver_probe_device+0x1e8/0x360 [ 2753.852177][T13098] driver_probe_device+0x4f/0x240 [ 2753.857220][T13098] __driver_attach+0x339/0x600 [ 2753.862009][T13098] bus_for_each_dev+0x23b/0x2c0 [ 2753.866890][T13098] bus_add_driver+0x345/0x670 [ 2753.871591][T13098] driver_register+0x23a/0x320 [ 2753.876394][T13098] vidtv_bridge_init+0x3d/0x60 [ 2753.881324][T13098] do_one_initcall+0x250/0x870 [ 2753.886115][T13098] do_initcall_level+0x10a/0x1a0 [ 2753.891135][T13098] do_initcalls+0x59/0xa0 [ 2753.895493][T13098] kernel_init_freeable+0x29d/0x3e0 [ 2753.900711][T13098] kernel_init+0x1d/0x1d0 [ 2753.905062][T13098] ret_from_fork+0x514/0xb70 [ 2753.909684][T13098] ret_from_fork_asm+0x1a/0x30 [ 2753.914464][T13098] [ 2753.916798][T13098] Freed by task 13098: [ 2753.920889][T13098] kasan_save_track+0x3e/0x80 [ 2753.925594][T13098] kasan_save_free_info+0x40/0x50 [ 2753.930640][T13098] __kasan_slab_free+0x5c/0x80 [ 2753.935425][T13098] kfree+0x1c5/0x640 [ 2753.939346][T13098] dvb_generic_release+0x11d/0x1b0 [ 2753.944476][T13098] dvb_frontend_release+0x132/0x4d0 [ 2753.949691][T13098] __fput+0x418/0xa50 [ 2753.953696][T13098] task_work_run+0x1d9/0x270 [ 2753.958311][T13098] exit_to_user_mode_loop+0x1fa/0x730 [ 2753.963709][T13098] do_syscall_64+0x353/0x580 [ 2753.968313][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2753.974223][T13098] [ 2753.976537][T13098] The buggy address belongs to the object at ffff88802a7fca00 [ 2753.976537][T13098] which belongs to the cache kmalloc-256 of size 256 [ 2753.990578][T13098] The buggy address is located 60 bytes inside of [ 2753.990578][T13098] freed 256-byte region [ffff88802a7fca00, ffff88802a7fcb00) [ 2754.004276][T13098] [ 2754.006596][T13098] The buggy address belongs to the physical page: [ 2754.013057][T13098] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a7fc [ 2754.021826][T13098] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2754.030314][T13098] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2754.037846][T13098] page_type: f5(slab) [ 2754.041820][T13098] raw: 00fff00000000040 ffff88801b004b40 dead000000000122 0000000000000000 [ 2754.050391][T13098] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 2754.058960][T13098] head: 00fff00000000040 ffff88801b004b40 dead000000000122 0000000000000000 [ 2754.067626][T13098] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 2754.076282][T13098] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 2754.084940][T13098] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 2754.093594][T13098] page dumped because: kasan: bad access detected [ 2754.099990][T13098] page_owner tracks the page as allocated [ 2754.105689][T13098] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20731232440, free_ts 0 [ 2754.125384][T13098] post_alloc_hook+0x1f9/0x250 [ 2754.130144][T13098] get_page_from_freelist+0x21fa/0x2270 [ 2754.135682][T13098] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2754.141478][T13098] allocate_slab+0x79/0x5e0 [ 2754.145983][T13098] refill_objects+0x2d5/0x350 [ 2754.150647][T13098] __pcs_replace_empty_main+0x2bf/0x6b0 [ 2754.156179][T13098] __kmalloc_cache_noprof+0x3a7/0x660 [ 2754.161558][T13098] bus_add_driver+0x162/0x670 [ 2754.166228][T13098] driver_register+0x23a/0x320 [ 2754.170982][T13098] usb_register_driver+0x1e4/0x390 [ 2754.176146][T13098] do_one_initcall+0x250/0x870 [ 2754.180900][T13098] do_initcall_level+0x10a/0x1a0 [ 2754.185832][T13098] do_initcalls+0x59/0xa0 [ 2754.190151][T13098] kernel_init_freeable+0x29d/0x3e0 [ 2754.195356][T13098] kernel_init+0x1d/0x1d0 [ 2754.199693][T13098] ret_from_fork+0x514/0xb70 [ 2754.204276][T13098] page_owner free stack trace missing [ 2754.209627][T13098] [ 2754.211939][T13098] Memory state around the buggy address: [ 2754.217557][T13098] ffff88802a7fc900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2754.225607][T13098] ffff88802a7fc980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2754.233655][T13098] >ffff88802a7fca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2754.241700][T13098] ^ [ 2754.247578][T13098] ffff88802a7fca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2754.255623][T13098] ffff88802a7fcb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2754.263682][T13098] ================================================================== [ 2754.273774][ T5506] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2754.463720][T13098] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2754.471001][T13098] CPU: 0 UID: 0 PID: 13098 Comm: syz.3.10199 Tainted: G L syzkaller #0 PREEMPT(full) [ 2754.482062][T13098] Tainted: [L]=SOFTLOCKUP [ 2754.486411][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2754.496495][T13098] Call Trace: [ 2754.499804][T13098] [ 2754.502764][T13098] vpanic+0x56c/0xa60 [ 2754.506811][T13098] ? __pfx_vpanic+0x10/0x10 [ 2754.511359][T13098] ? __pfx___schedule+0x10/0x10 [ 2754.516245][T13098] panic+0xc5/0xd0 [ 2754.520007][T13098] ? __pfx_panic+0x10/0x10 [ 2754.524463][T13098] ? preempt_schedule_common+0x82/0xd0 [ 2754.529951][T13098] ? dvb_frontend_release+0x407/0x4d0 [ 2754.535355][T13098] check_panic_on_warn+0x89/0xb0 [ 2754.540343][T13098] ? dvb_frontend_release+0x407/0x4d0 [ 2754.545751][T13098] end_report+0x73/0x170 [ 2754.550033][T13098] ? dvb_frontend_release+0x407/0x4d0 [ 2754.555432][T13098] kasan_report+0x128/0x150 [ 2754.559971][T13098] ? dvb_frontend_release+0x407/0x4d0 [ 2754.565373][T13098] dvb_frontend_release+0x407/0x4d0 [ 2754.570585][T13098] ? __pfx_dvb_frontend_release+0x10/0x10 [ 2754.576307][T13098] __fput+0x418/0xa50 [ 2754.580303][T13098] task_work_run+0x1d9/0x270 [ 2754.584896][T13098] ? __pfx_task_work_run+0x10/0x10 [ 2754.590008][T13098] exit_to_user_mode_loop+0x1fa/0x730 [ 2754.595401][T13098] ? rcu_is_watching+0x15/0xb0 [ 2754.600204][T13098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2754.606294][T13098] do_syscall_64+0x353/0x580 [ 2754.610896][T13098] ? trace_irq_disable+0x3b/0x140 [ 2754.615946][T13098] ? clear_bhb_loop+0x40/0x90 [ 2754.620628][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2754.626548][T13098] RIP: 0033:0x7f1c81b9de99 [ 2754.630966][T13098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2754.650577][T13098] RSP: 002b:00007f1c81f4fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2754.659011][T13098] RAX: 0000000000000000 RBX: 00007f1c81f4fc90 RCX: 00007f1c81b9de99 [ 2754.666990][T13098] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2754.674961][T13098] RBP: 00000000002a020a R08: 0000000000000001 R09: 0000000000000000 [ 2754.682935][T13098] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007f1c81f4fcd0 [ 2754.690929][T13098] R13: 00007f1c81e25fac R14: 00000000002a03a4 R15: 00007f1c81e25fa0 [ 2754.698924][T13098] [ 2754.702241][T13098] Kernel Offset: disabled [ 2754.706581][T13098] Rebooting in 86400 seconds..