last executing test programs: 26m50.032524945s ago: executing program 2 (id=1257): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r7 = dup2(r2, r4) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) 26m46.241534082s ago: executing program 2 (id=1264): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x42, 0x1e0, 0x0) sendfile(r1, r1, 0x0, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 26m45.880518883s ago: executing program 2 (id=1265): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082104, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_emit_ethernet(0x23, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x806, @generic={{0x5, 0x4, 0x0, 0x38, 0x15, 0xff88, 0x0, 0x5, 0x16, 0x0, @empty, @broadcast}, '+'}}}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000180)) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000"], 0x0) 26m41.093480069s ago: executing program 2 (id=1274): mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x5000005) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}, {0x0}], 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e25, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "62b9d705aa3b572cab9e4565145b574ad6d3761751672ccc", "db8ca1cbebfda570f2cfeada7bbd8bd6f8864257d91a249bc2dfb32bfb8b524b"}}}}}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendto$inet6(r2, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r2, &(0x7f0000000c80), 0x0, 0xbcff, 0x0, 0x0) 26m39.630113163s ago: executing program 2 (id=1280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000200d1"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 26m38.482810051s ago: executing program 2 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000002300)=""/4108, 0x100c) r2 = epoll_create1(0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x40084149, &(0x7f0000000000)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 26m23.063199208s ago: executing program 32 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000002300)=""/4108, 0x100c) r2 = epoll_create1(0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x40084149, &(0x7f0000000000)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 23m44.883726767s ago: executing program 5 (id=1550): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x5ca, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x40000, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000002c0)={0xfffffffffffffff7, 0xc, 0x0, 0x3, 0x2, 0x0, [{0x80000000, 0x3, 0x7}, {0x2, 0xc97b, 0xe172, '\x00', 0x101}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x80000) r6 = epoll_create1(0x0) r7 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000300)={0x20000002}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x2) 23m43.335491125s ago: executing program 5 (id=1553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) fcntl$dupfd(r1, 0x406, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @remote}, 0x1c) socket$inet(0x2, 0x3, 0x6) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfe44, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) 23m42.312426503s ago: executing program 5 (id=1556): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x42, 0x1e0, 0x0) sendfile(r1, r1, 0x0, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x803, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 23m41.850318048s ago: executing program 5 (id=1559): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) ioprio_set$uid(0x3, 0x0, 0x4007) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0xa01f, 0x100000000) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 23m40.32743206s ago: executing program 5 (id=1562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000200d1"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 23m30.556591067s ago: executing program 5 (id=1582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB="480000001400010000"], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x10001, 0xffffffff}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x548, 0x6, 0x57c, 0x8000001, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0) r4 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x6, &(0x7f0000000540)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0xf72cb191e650ca2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x149602) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x7, 0x1, 0x4, 0xe000, 0xb, {0x77359400}, {0x4, 0x0, 0x81, 0x0, 0xd, 0x5, "08f9cc00"}, 0x1, 0x3, {0x0}, 0x409}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000002e00)=[{&(0x7f0000001980)=""/128, 0x80}], 0x1, 0x372, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 23m15.265841115s ago: executing program 33 (id=1582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB="480000001400010000"], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x10001, 0xffffffff}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x548, 0x6, 0x57c, 0x8000001, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0) r4 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x6, &(0x7f0000000540)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0xf72cb191e650ca2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x149602) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x7, 0x1, 0x4, 0xe000, 0xb, {0x77359400}, {0x4, 0x0, 0x81, 0x0, 0xd, 0x5, "08f9cc00"}, 0x1, 0x3, {0x0}, 0x409}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000002e00)=[{&(0x7f0000001980)=""/128, 0x80}], 0x1, 0x372, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 23m7.236004099s ago: executing program 1 (id=1626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000200d1"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 23m6.152285581s ago: executing program 1 (id=1629): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = eventfd2(0x8, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x11) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x2, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a00", @ANYRES32=0x0, @ANYBLOB="00000000c9910200200012800b000100627269646765000010"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r8, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r9}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) 23m5.443711271s ago: executing program 1 (id=1632): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x33ccc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 23m2.60806562s ago: executing program 1 (id=1638): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) socket(0x10, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="289ebeda0f00"/20, @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4004010) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) r6 = syz_clone(0x805000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r6, 0x0, &(0x7f0000000080)={0x6, 0xffffffffffffffff}, 0x0) 23m0.13763009s ago: executing program 1 (id=1641): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) ioprio_set$uid(0x3, 0x0, 0x4007) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0xa01f, 0x100000000) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 22m57.755284083s ago: executing program 1 (id=1645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) 22m42.249627535s ago: executing program 34 (id=1645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) 12m49.191215978s ago: executing program 6 (id=2890): r0 = socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r6}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="1fd884094a26282c63a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$uac2(r8, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00070600c424be1148493aeb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000200)={0x40, 0xdebda7d818a07a1e, 0x4, "b36f539c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "9a07"}, 0x0, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x3}}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 12m45.438714797s ago: executing program 6 (id=2896): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x1, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x50c0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 12m43.567897673s ago: executing program 6 (id=2899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x6, 0xfffffe0000000001, 0xfa11, 0xfffffdff}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14004400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd6}]}, 0x1c}}, 0x40480d0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000d042abd7000fdffffff00000000", @ANYBLOB="0000000040000000300012800c0001006d6163766c616e00200002800a001400063154a3e049000008000100100000000800030001000000140035006d6163766c616e30"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x0, 0x3f}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x59555956}) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) eventfd2(0x43, 0x1) 12m35.59464046s ago: executing program 6 (id=2912): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000003c0), 0x61) r1 = socket$inet6(0xa, 0x80003, 0xff) pipe2$9p(0x0, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) socket$netlink(0x10, 0x3, 0xf) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = socket$rxrpc(0x21, 0x2, 0x2) r8 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x2, 0x6]}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, &(0x7f0000001540)={&(0x7f0000000100)=[{&(0x7f0000001680)}, {&(0x7f0000001180)}, {&(0x7f0000001280)="2ca9d421ecd639c433d1e3bb8c3fbd563255ce5c1e6cce52ba7983120acf9c3b1767da2c3c736c233c9bbd7ee57772de68c84f44638a372a6d3e5e3ce7cc0bbb49f33a34188085e70df201", 0x4b}, {&(0x7f0000001300)="246fa80faa53ad48a689561ac913bd100869fd5c303eaf2f6219817a2d5aac1ce3f5601c4dbabd0309d32e74f1585f46b78270f4d4794cd6e6d86c517c59f8614dd4a525809c51893ce4c6395c564ff4b33aba22bccafd792cce29281c", 0x5d}, {&(0x7f00000013c0)="13efc3e04d9ba42bc87de21a9367451603d39dee5a4c64f6f9a3998dfcb87ec812aa88f9ca6503fd14f37c407d17ceb024e1cfefae9d3cc21b7c", 0x3a}, {&(0x7f0000001400)="d924ec5fc3757b24d27191191026cd77f11aefee7fd8320808885d5231e9b058f5b7e1d604b5bbfc7261610f6834eb5f84f87ead11520d3f9fa86e33da8685a8fc3d629f056e92a9baf24c63f8d677206434291ed64a4566e0e6e22bd46e26849a2ba8d9a7c14293bd7ece", 0x6b}], 0x6, 0x7e21, 0x0, 0x1, 0x2, 0x0, 0x5, 0x80000101}) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 12m33.260727855s ago: executing program 6 (id=2917): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141280) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000140)={{0xf6, 0xd4}, 0x1, 0x6, 0x14f, {0x8, 0x40}, 0x1, 0x200}) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0xe0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x844a}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r9) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000c00), 0x0) 12m31.068509383s ago: executing program 6 (id=2921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x3, 0xffffffffffffffff}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x38) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) close(r1) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, &(0x7f0000001540), 0x0) 12m15.78448496s ago: executing program 35 (id=2921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x3, 0xffffffffffffffff}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x38) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) close(r1) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r7, &(0x7f0000001540), 0x0) 6m26.827059091s ago: executing program 8 (id=3658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0xf, 0x2, 0xfffffffd) capset(0x0, 0x0) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(r3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x3, 0x2, 0x8001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x101000d) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2c}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000200), 0x0, 0x0, {0x3f}, &(0x7f0000000340)=""/123, 0x7b, &(0x7f00000003c0)=""/103, &(0x7f0000000440)}, 0x58) capget(&(0x7f0000000580)={0x20071026}, &(0x7f00000005c0)={0x0, 0x2, 0x4, 0x4, 0xfffffffa, 0x3}) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x30, 0xffffffffffffffff, 0x64ef8000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$UFFDIO_MOVE(r8, 0xc028aa05, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6m17.342011285s ago: executing program 8 (id=3676): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000940)={{0xfffffffffffffffb, 0x6, 0x81, 0xf75, 0xa9}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0xd3}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r6, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRES16=0x0], 0xe3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x2, 0x70bd29, 0x25dfdbfd, {0x1c, 0x80, 0x20, 0xc, 0x0, 0x4, 0xff, 0x5}, [@RTA_DST={0x8, 0x1, {0x5, 0x0, 0x1}}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0], 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) 6m15.71242102s ago: executing program 8 (id=3678): r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/78, 0x4e}], 0x4, &(0x7f0000000440)=""/33, 0x21}, 0x2300) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001e80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)='v', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @private1, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)='N', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) fchmod(0xffffffffffffffff, 0x98) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bind$l2tp(r6, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="10007a800c9f24"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000002100)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x1, {0x1, 0xf0, 0x2}, 0xff}, 0x18) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r12, &(0x7f0000000280)='V', 0x1) syz_usb_disconnect(r11) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000100)=0x11, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) socket$kcm(0x11, 0x3, 0x0) 6m12.88599013s ago: executing program 8 (id=3687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) 6m11.050412963s ago: executing program 8 (id=3693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m8.340816867s ago: executing program 8 (id=3701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000940)={{0xfffffffffffffffb, 0x6, 0x81, 0xf75, 0xa9}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0xd3}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r6, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRES16=0x0], 0xe3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x2, 0x70bd29, 0x25dfdbfd, {0x1c, 0x80, 0x20, 0xc, 0x0, 0x4, 0xff, 0x5}, [@RTA_DST={0x8, 0x1, {0x5, 0x0, 0x1}}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0], 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) 5m52.928977607s ago: executing program 36 (id=3701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000940)={{0xfffffffffffffffb, 0x6, 0x81, 0xf75, 0xa9}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0xd3}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r6, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRES16=0x0], 0xe3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x2, 0x70bd29, 0x25dfdbfd, {0x1c, 0x80, 0x20, 0xc, 0x0, 0x4, 0xff, 0x5}, [@RTA_DST={0x8, 0x1, {0x5, 0x0, 0x1}}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0], 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) 13.94251804s ago: executing program 3 (id=5213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) 12.457668292s ago: executing program 3 (id=5220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 11.641867778s ago: executing program 3 (id=5224): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, &(0x7f0000ffc000), 0x0, &(0x7f0000000000)) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000002b00)={0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000240)={r7}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 9.2325315s ago: executing program 7 (id=5232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000002c0)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 8.945721892s ago: executing program 3 (id=5234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback}, &(0x7f00000002c0)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 7.340700558s ago: executing program 9 (id=5237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 7.230319892s ago: executing program 9 (id=5238): socket(0xa, 0x80000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, r6, 0x2, 0x0, &(0x7f0000000180)=[{0xffffffffffffffa1, 0xfffffffffffffff9}, {0x400, 0x4f1}]}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r6, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x3261e) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="1fd884094a26282c63a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) 6.007844303s ago: executing program 7 (id=5239): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 5.959921902s ago: executing program 0 (id=5240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 5.419619998s ago: executing program 4 (id=5243): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x6a851000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.220392473s ago: executing program 4 (id=5244): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}}) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 3.68117357s ago: executing program 0 (id=5245): syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) connect$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000640)={{0x7, 0x2000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x7, 0xfffffffd, 0x80000001, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x4400006, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffff5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c14e076, 0x0, 0x0, 0x5, 0x0, 0x2, 0x3, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7ffffbff, 0x4, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xe73e, 0x0, 0x0, 0xffffffc7, 0x1, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x3, 0x7fff, 0x3883, 0x800, 0x402, 0x0, 0x0, 0x4, 0x8, 0xce5b, 0x0, 0x0, 0x0, 0x8, 0x408, 0x0, 0x8, 0x9, 0x100, 0x0, 0x1, 0x0, 0x0, 0x10004000, 0x0, 0x0, 0x5, 0x0, 0x1ff, 0x0, 0xf4cb, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x3, 0x1, 0x788, 0xd4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4]}) mkdir(0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x21000700) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r1, 0x4, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x404, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3.645685873s ago: executing program 7 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.365172283s ago: executing program 3 (id=5251): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3c8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.339885236s ago: executing program 9 (id=5252): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c0000400205119078"], 0x0) syz_emit_ethernet(0x33, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x25, 0x0, 0xe000, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}, "3fe2f0402e"}}}}}}, 0x0) 2.287249348s ago: executing program 4 (id=5253): syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000406307312040000102030109026e000301018005080b0001010130040904000000ff0130000a2401060a00060000000904010000010230"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2.174141221s ago: executing program 9 (id=5254): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 2.078443933s ago: executing program 0 (id=5255): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000400), &(0x7f0000000300)=r4}, 0x20) sendmsg$inet(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f00000005c0)="bd0b219ee7b4", 0x6}], 0x1}, 0x200900c0) 1.919415013s ago: executing program 0 (id=5256): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000140)={0x2a, 0x1}, 0xc) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 1.826741728s ago: executing program 3 (id=5257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000000"], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 1.79182629s ago: executing program 7 (id=5258): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) 1.700506437s ago: executing program 7 (id=5259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 1.44588425s ago: executing program 0 (id=5260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0xffff1000, 0xf000, 0x5, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x2, 0x6, 0x6, 0x1, 0x47, 0xfa, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x19, 0x9}, {0xeeeea000, 0x41000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x2}, {0xdddd1000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x7f}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xf800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) 1.191956975s ago: executing program 4 (id=5261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback}, &(0x7f00000002c0)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00000001500010028bd7000fddbdf25637279707464286563622d6165732d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 555.795169ms ago: executing program 7 (id=5262): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) sendto$inet(r0, &(0x7f0000000140)="c4", 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=5263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x8000, 0xf208683}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): _hcd [ 1793.915571][T16800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1793.960567][T16800] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.032000][T16800] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1794.077948][T16800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.127025][T16800] usb 1-1: Product: syz [ 1794.142785][T16800] usb 1-1: Manufacturer: syz [ 1794.163990][T16800] usb 1-1: SerialNumber: syz [ 1796.130302][T16800] usb 1-1: USB disconnect, device number 107 [ 1796.301918][T23321] dummy0: entered allmulticast mode [ 1796.393982][T23328] bond7: option arp_interval: invalid value (18446744072904038628) [ 1796.444047][T23328] bond7: option arp_interval: allowed values 0 - 2147483647 [ 1797.709398][T23328] bond7 (unregistering): Released all slaves [ 1800.244343][T23361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3716'. [ 1800.568098][T23369] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1800.720124][T23372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.748458][T23372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.661606][T23381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3721'. [ 1801.809773][T16793] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1801.966939][T16793] usb 1-1: Using ep0 maxpacket: 8 [ 1801.976567][T16793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1801.987390][T16793] usb 1-1: config 3 has an invalid interface number: 92 but max is 1 [ 1801.995902][T16793] usb 1-1: config 3 has an invalid interface number: 120 but max is 1 [ 1802.008844][T16793] usb 1-1: config 3 has an invalid interface number: 92 but max is 1 [ 1802.021902][T16793] usb 1-1: config 3 has no interface number 0 [ 1802.031924][T16793] usb 1-1: config 3 has no interface number 1 [ 1802.042368][T16793] usb 1-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 1802.053415][T16793] usb 1-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1802.068033][T16793] usb 1-1: config 3 interface 92 has no altsetting 0 [ 1802.076610][T16793] usb 1-1: config 3 interface 92 has no altsetting 1 [ 1802.089156][T16793] usb 1-1: config 3 interface 120 has no altsetting 0 [ 1802.102153][T16793] usb 1-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7 [ 1802.111684][T16793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.124435][T16793] usb 1-1: Product: syz [ 1802.133321][T16793] usb 1-1: Manufacturer: syz [ 1802.139946][T16793] usb 1-1: SerialNumber: syz [ 1802.435252][T16793] usb 1-1: selecting invalid altsetting 1 [ 1802.447049][T16793] sierra 1-1:3.92: Sierra USB modem converter detected [ 1802.476148][T16793] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1802.492314][T16793] sierra 1-1:3.120: Sierra USB modem converter detected [ 1802.510022][T16793] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 1802.538273][T16793] usb 1-1: USB disconnect, device number 108 [ 1802.559177][T16793] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1802.575816][T16793] sierra 1-1:3.92: device disconnected [ 1802.598717][T16793] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1802.618038][T16793] sierra 1-1:3.120: device disconnected [ 1803.071243][ T1261] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.384008][ T1261] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.748868][ T1261] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.940713][ T1261] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.615849][ T1261] bridge_slave_1: left allmulticast mode [ 1804.648916][ T1261] bridge_slave_1: left promiscuous mode [ 1804.669050][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.712207][ T1261] bridge_slave_0: left allmulticast mode [ 1804.740722][ T1261] bridge_slave_0: left promiscuous mode [ 1804.759801][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.825421][ T1261] pimreg3: left allmulticast mode [ 1805.879246][ T1261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.181653][ T1261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.225920][ T1261] bond0 (unregistering): Released all slaves [ 1806.291497][ T5291] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1806.371709][ T1261] tipc: Left network mode [ 1806.763467][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1806.809156][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1806.825146][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1806.841654][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1806.853996][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1806.864662][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1807.622134][ T1261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1807.656520][ T1261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1807.744180][ T1261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1807.774592][ T1261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.043713][ T1261] veth1_macvtap: left promiscuous mode [ 1808.062669][ T1261] veth0_macvtap: left promiscuous mode [ 1808.080542][ T1261] veth1_vlan: left promiscuous mode [ 1808.100205][ T1261] veth0_vlan: left promiscuous mode [ 1808.115299][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.161449][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.282703][T23462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3735'. [ 1808.454143][T23465] dvb-usb: bulk message failed: -22 (9/0) [ 1808.481698][T23465] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1808.581627][T23465] ttusb2: i2c transfer failed. [ 1808.937826][T10855] Bluetooth: hci0: command tx timeout [ 1809.121018][ T1261] team0 (unregistering): Port device team_slave_1 removed [ 1809.182461][ T1261] team0 (unregistering): Port device team_slave_0 removed [ 1809.555049][ T5291] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1810.065305][ T1261] IPVS: stop unused estimator thread 0... [ 1810.197258][T23442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.225606][T23442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.259152][T23442] bridge_slave_0: entered allmulticast mode [ 1810.290268][T23442] bridge_slave_0: entered promiscuous mode [ 1810.322944][T23442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.346311][T23442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.376267][T23442] bridge_slave_1: entered allmulticast mode [ 1810.404490][T23442] bridge_slave_1: entered promiscuous mode [ 1810.573777][T23442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.604484][T23442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.664511][T23442] team0: Port device team_slave_0 added [ 1810.690576][T23442] team0: Port device team_slave_1 added [ 1810.822460][T23442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.831357][T23442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.875553][T23442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.899371][T23442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.908213][T23442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.949148][T23442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.017492][T10855] Bluetooth: hci0: command tx timeout [ 1811.081397][T23442] hsr_slave_0: entered promiscuous mode [ 1811.092404][T23442] hsr_slave_1: entered promiscuous mode [ 1811.446082][ T5291] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1811.782383][T23524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3748'. [ 1812.040862][T23442] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1812.090282][T23442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1812.106215][T23442] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1812.139262][T23442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1812.160926][T23442] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1812.219619][T23442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1812.231277][T23442] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1812.262696][T23442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1812.592469][T23442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.704206][T23442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.771037][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.778232][T17651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.827782][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.834918][T17651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.854142][ T5291] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1813.093665][T23442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.105136][T10855] Bluetooth: hci0: command tx timeout [ 1813.267011][T23442] veth0_vlan: entered promiscuous mode [ 1813.302916][T23442] veth1_vlan: entered promiscuous mode [ 1813.367859][T23442] veth0_macvtap: entered promiscuous mode [ 1813.393662][T23442] veth1_macvtap: entered promiscuous mode [ 1813.422764][T23442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.441257][T23442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.466136][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.518685][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.532537][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.555165][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.841218][T17651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.863327][T17651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.947547][T13400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.973050][T13400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.267900][T23568] binder: 23567:23568 ioctl c018620b 0 returned -14 [ 1815.067504][T23589] netlink: 'syz.0.3762': attribute type 30 has an invalid length. [ 1815.177799][T10855] Bluetooth: hci0: command tx timeout [ 1815.380563][T23595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1816.042636][T23603] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3764'. [ 1816.201322][T23605] ip6tnl1: entered promiscuous mode [ 1816.633559][T23609] binder: 23608:23609 ioctl c0046209 0 returned -22 [ 1816.922513][ T29] audit: type=1326 audit(1778884320.115:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.3.3774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1816.949880][ T29] audit: type=1326 audit(1778884320.115:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.3.3774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1816.977015][ T29] audit: type=1326 audit(1778884320.145:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.3.3774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1818.863005][T23665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.910945][T23664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.911888][T23665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.980750][T23664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.577672][T16793] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1819.749945][T16793] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1819.779116][T16793] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.801472][T16793] usb 1-1: config 220 has no interface number 2 [ 1819.810330][T16793] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 1819.830047][T16793] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1819.841604][T16793] usb 1-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1819.860871][T16793] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1819.870148][T16793] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1819.877393][T16793] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1819.888083][T16793] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1819.905887][T16793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.925676][T16793] usb 1-1: Product: syz [ 1819.933824][T16793] usb 1-1: Manufacturer: syz [ 1819.961799][T16793] usb 1-1: SerialNumber: syz [ 1820.027834][T23688] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1820.201430][T23692] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1820.250848][T16793] usb 1-1: selecting invalid altsetting 0 [ 1820.264594][T16793] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1820.295592][T16793] uvcvideo 1-1:220.0: No valid video chain found. [ 1820.358984][T16793] usb 1-1: selecting invalid altsetting 0 [ 1820.385587][T16793] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1820.402693][T16793] usb 1-1: USB disconnect, device number 109 [ 1821.910516][T23717] RDS: rds_bind could not find a transport for ::ffff:172.20.20.36, load rds_tcp or rds_rdma? [ 1822.381519][T23727] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3804'. [ 1822.755614][T23734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.794817][T23729] trusted_key: encrypted_key: insufficient parameters specified [ 1822.815646][T23734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.061105][T23729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.120897][T23729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.514233][T23746] tipc: New replicast peer: 255.255.255.255 [ 1823.529771][T23746] tipc: Enabled bearer , priority 10 [ 1823.553250][ T29] audit: type=1326 audit(1778884326.745:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1823.597506][ T29] audit: type=1326 audit(1778884326.745:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1823.672321][ T29] audit: type=1326 audit(1778884326.745:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1823.773087][ T29] audit: type=1326 audit(1778884326.745:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1823.811263][ T29] audit: type=1326 audit(1778884326.745:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1823.894734][ T29] audit: type=1326 audit(1778884326.745:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1823.961949][ T29] audit: type=1326 audit(1778884326.785:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1824.010802][ T29] audit: type=1326 audit(1778884326.825:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1824.181109][ T29] audit: type=1326 audit(1778884327.325:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1824.277588][ T29] audit: type=1326 audit(1778884327.355:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.0.3809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357879ce59 code=0x7ffc0000 [ 1824.657398][T16801] tipc: Node number set to 3390103147 [ 1826.389857][T23816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.450985][T23816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.718621][T23839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3820'. [ 1829.513547][T23861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1830.487875][T23876] trusted_key: encrypted_key: insufficient parameters specified [ 1830.606632][T23876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.640559][T23876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.047643][T23559] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1831.209615][T23559] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1831.230390][T23559] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.251608][T23559] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1831.275327][T23559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.307679][T23559] usb 1-1: Product: syz [ 1831.324245][T23559] usb 1-1: Manufacturer: syz [ 1831.348490][T23559] usb 1-1: SerialNumber: syz [ 1831.420729][T23892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1831.690305][T23884] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1832.564881][T23559] usb 1-1: USB disconnect, device number 110 [ 1832.796970][T23915] xt_ecn: cannot match TCP bits for non-tcp packets [ 1833.723224][T23922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.757688][T23922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.794751][T23953] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3855'. [ 1837.512524][ T29] audit: type=1326 audit(1778884340.705:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78b19ce59 code=0x7ff00000 [ 1837.611573][ T29] audit: type=1326 audit(1778884340.705:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78b19ce59 code=0x7ff00000 [ 1837.682593][ T29] audit: type=1326 audit(1778884340.705:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78b19ce59 code=0x7ff00000 [ 1837.802790][ T29] audit: type=1326 audit(1778884340.705:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78b19ce59 code=0x7ff00000 [ 1837.908078][ T29] audit: type=1326 audit(1778884340.705:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78b19ce59 code=0x7ff00000 [ 1838.003229][ T29] audit: type=1326 audit(1778884340.705:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78b19ce59 code=0x7ff00000 [ 1838.073091][ T29] audit: type=1326 audit(1778884340.785:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa78b19caeb code=0x7ff00000 [ 1838.142564][ T29] audit: type=1326 audit(1778884340.785:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa78b19caeb code=0x7ff00000 [ 1838.202271][ T29] audit: type=1326 audit(1778884340.785:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa78b19caeb code=0x7ff00000 [ 1838.264232][T23985] kAFS: unable to lookup cell 'џ' [ 1838.274501][ T29] audit: type=1326 audit(1778884340.785:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.7.3862" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa78b19caeb code=0x7ff00000 [ 1838.602793][T23994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3867'. [ 1839.726973][T16800] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 1839.899249][T16800] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1839.917973][T16800] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.946716][T16800] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1839.965149][T16800] usb 10-1: string descriptor 0 read error: -22 [ 1839.984369][T16800] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1840.005808][T16800] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.344676][T16800] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1840.435873][T16800] usb 10-1: USB disconnect, device number 2 [ 1841.814139][T24034] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3883'. [ 1842.011067][T24030] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 1842.031763][T24030] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 1843.171581][T24042] kAFS: unable to lookup cell 'џ' [ 1843.862783][T24063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1844.475399][T24072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1845.462977][T24075] xt_CONNSECMARK: invalid mode: 0 [ 1845.916464][T24079] erspan1: entered promiscuous mode [ 1845.930219][T24079] erspan1: entered allmulticast mode [ 1846.760873][T23560] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1846.926771][T24102] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1846.944415][T24102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1846.969614][T23560] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1846.986022][T23560] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1847.002849][T23560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.026288][T23560] usb 1-1: Product: syz [ 1847.041158][T23560] usb 1-1: Manufacturer: syz [ 1847.056197][T23560] usb 1-1: SerialNumber: syz [ 1847.114435][T23560] usb 1-1: selecting invalid altsetting 1 [ 1847.136477][T23560] usb 1-1: unit 6 not found! [ 1847.158773][T23560] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1847.178712][T23560] usb 1-1: selecting invalid altsetting 1 [ 1847.185292][T23560] usb 1-1: unit 6 not found! [ 1847.201084][T23560] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1847.226946][T23560] usb 1-1: selecting invalid altsetting 1 [ 1847.242526][T23560] usb 1-1: unit 6 not found! [ 1847.348475][T24110] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3911'. [ 1847.522465][T24112] xt_ecn: cannot match TCP bits for non-tcp packets [ 1847.549311][T23560] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1847.620047][T23560] usb 1-1: USB disconnect, device number 111 [ 1847.744105][T21955] udevd[21955]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1847.862122][T24120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.902152][T24120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.644785][T24136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3921'. [ 1848.935567][T24147] xt_hashlimit: size too large, truncated to 1048576 [ 1849.045271][T24149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1851.112052][T24193] usb usb1: usbfs: process 24193 (syz.3.3937) did not claim interface 0 before use [ 1851.675245][T24205] vlan4: entered allmulticast mode [ 1851.687202][T24205] team0: entered allmulticast mode [ 1851.701745][T24205] team_slave_1: entered allmulticast mode [ 1851.766395][T24211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1852.025867][T24217] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3946'. [ 1852.070370][T24225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1852.361952][T24229] bond15: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1852.394695][T24229] bond15 (unregistering): Released all slaves [ 1853.259663][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.266052][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.007990][T24256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3960'. [ 1855.011123][T24264] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1855.231864][T24269] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1855.231864][T24269] program syz.3.3964 not setting count and/or reply_len properly [ 1855.644422][T24280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.664720][T24280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.170228][T24288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1856.543809][T24293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3972'. [ 1857.198229][T24295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.255867][T24295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.326040][T24295] dvb-usb: bulk message failed: -22 (9/0) [ 1857.355118][T24295] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1857.408270][T24295] ttusb2: i2c transfer failed. [ 1858.055482][T24318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.075635][T24318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.112528][T24318] netlink: 'syz.3.3979': attribute type 3 has an invalid length. [ 1858.145317][T24318] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3979'. [ 1860.366293][T24358] kAFS: unable to lookup cell 'џ' [ 1861.361141][T24368] binder: 24367:24368 ioctl c00c620f 200000000680 returned -22 [ 1861.993499][T24383] netlink: 'syz.9.3999': attribute type 2 has an invalid length. [ 1862.010516][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3999'. [ 1862.049332][T24383] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1862.119217][T24384] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3998'. [ 1863.184962][T24404] dummy0: left allmulticast mode [ 1864.169255][T24422] kAFS: unable to lookup cell 'џ' [ 1865.492927][T24437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1865.593215][T24438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.619632][T24438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.077909][T24446] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4013'. [ 1869.443480][T24500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4028'. [ 1869.453411][T24498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1870.636887][T24503] trusted_key: encrypted_key: insufficient parameters specified [ 1870.848234][T23559] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1870.952606][T24526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4037'. [ 1871.017763][T23559] usb 10-1: Using ep0 maxpacket: 32 [ 1871.043882][T23559] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.076017][T23559] usb 10-1: config 0 has no interfaces? [ 1871.121869][T23559] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1871.147421][T23559] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1871.159665][T23559] usb 10-1: Product: syz [ 1871.169554][T23559] usb 10-1: Manufacturer: syz [ 1871.193534][T23559] usb 10-1: SerialNumber: syz [ 1871.210584][T23559] usb 10-1: config 0 descriptor?? [ 1871.468804][T23559] usb 10-1: USB disconnect, device number 3 [ 1872.512847][T24535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.537635][T24535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.665661][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4043'. [ 1875.275825][T24562] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4047'. [ 1875.328862][T24565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1875.597050][T16793] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1875.766954][T16793] usb 10-1: Using ep0 maxpacket: 8 [ 1875.781827][T16793] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.826446][T16793] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1875.862369][T16793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1875.879491][T24572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1875.908276][T16793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1875.968878][T16793] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1875.994067][T16793] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1876.051501][T16793] usb 10-1: Product: syz [ 1876.077608][T16793] usb 10-1: Manufacturer: syz [ 1876.102032][T16793] usb 10-1: SerialNumber: syz [ 1876.175314][T16793] usb 10-1: config 0 descriptor?? [ 1876.347525][T16793] rc_core: IR keymap rc-imon-rsc not found [ 1876.382660][T16793] Registered IR keymap rc-empty [ 1876.425532][T16793] rc rc0: iMON Station as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1876.479203][T16793] input: iMON Station as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input79 [ 1876.531673][T16793] imon_raw 10-1:0.0: probe with driver imon_raw failed with error -90 [ 1876.589376][T16793] usb 10-1: USB disconnect, device number 4 [ 1877.437993][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4055'. [ 1877.500130][T24588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.510591][T24588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.530972][T24588] dvb-usb: bulk message failed: -22 (19/0) [ 1877.537978][T24588] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1877.549692][T24588] ttusb2: i2c transfer failed. [ 1877.631354][T24592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.642886][T24592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.650047][T24610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1879.455882][T24616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.476361][T24616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.448153][T24632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4067'. [ 1880.617156][T23559] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1880.797045][T23559] usb 10-1: Using ep0 maxpacket: 8 [ 1880.804392][T23559] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1880.813688][T23559] usb 10-1: config 179 has no interface number 0 [ 1880.829068][T23559] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1880.850074][T23559] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1880.870778][T23559] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1880.900897][T23559] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1880.928919][T23559] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1880.963398][T23559] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1880.981537][T23559] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1880.999760][T23559] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.154048][T23559] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input80 [ 1881.227174][ T4981] input input80: unable to receive magic message: -110 [ 1881.291642][ T4981] input input80: unable to receive magic message: -32 [ 1881.346361][ T4981] input input80: unable to receive magic message: -32 [ 1881.376401][ T4981] input input80: unable to receive magic message: -32 [ 1881.445194][T23559] usb 10-1: USB disconnect, device number 5 [ 1881.451314][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1881.451366][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1881.797982][ T5721] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1881.971607][ T5721] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.990689][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.009292][ T5721] usb 1-1: Product: syz [ 1882.024061][ T5721] usb 1-1: Manufacturer: syz [ 1882.034176][ T5721] usb 1-1: SerialNumber: syz [ 1882.075142][ T5721] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1882.239907][T16793] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1882.627442][T24652] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4076'. [ 1882.697257][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 1882.898933][T16800] usb 1-1: USB disconnect, device number 112 [ 1883.024803][T24638] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4071'. [ 1883.341792][T16793] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1883.398151][T16793] ath9k_htc: Failed to initialize the device [ 1883.430719][T16800] usb 1-1: ath9k_htc: USB layer deinitialized [ 1883.472894][T24660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.509210][T24660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.967240][T16800] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1884.173539][T16800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1884.212126][T16800] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1884.254528][T16800] usb 1-1: can't read configurations, error -71 [ 1884.454773][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1884.653653][T24681] kAFS: unable to lookup cell 'џ' [ 1885.109742][T24693] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1885.493359][T24692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.333253][T24704] dummy0: left allmulticast mode [ 1886.585320][T24708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1886.598788][T24692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.399817][T24715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1888.724744][T24642] syz.3.4073 (24642): drop_caches: 1 [ 1889.038748][T24736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1889.354426][T24747] kAFS: unable to lookup cell 'џ' [ 1889.972494][T24759] dummy0: left allmulticast mode [ 1891.967023][T20841] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1892.158245][T20841] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1892.186576][T20841] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.244595][T20841] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1892.268073][T20841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.292034][T20841] usb 10-1: Product: syz [ 1892.310752][T20841] usb 10-1: Manufacturer: syz [ 1892.329868][T20841] usb 10-1: SerialNumber: syz [ 1892.648775][T24774] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1892.721906][T24782] binder: BC_ACQUIRE_RESULT not supported [ 1892.727995][T24782] binder: 24781:24782 ioctl c0306201 2000000001c0 returned -22 [ 1893.130733][T24790] kAFS: unable to lookup cell 'џ' [ 1893.492865][T20841] usb 10-1: USB disconnect, device number 6 [ 1893.698068][T24813] kAFS: unable to lookup cell 'џ' [ 1894.966890][T16793] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1895.058694][T24837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4131'. [ 1895.141565][T16793] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1895.181006][T16793] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.203002][T16793] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1895.216961][T16793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.232045][T16793] usb 10-1: Product: syz [ 1895.243011][T16793] usb 10-1: Manufacturer: syz [ 1895.255345][T16793] usb 10-1: SerialNumber: syz [ 1895.545038][T24833] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1896.187180][T16801] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1896.362457][T16801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.376695][T16801] usb 1-1: config 0 has no interfaces? [ 1896.388898][T16801] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1896.400322][T16801] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1896.410787][T16801] usb 1-1: Product: syz [ 1896.415165][T16801] usb 1-1: Manufacturer: syz [ 1896.426628][T24849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1896.439844][T16801] usb 1-1: config 0 descriptor?? [ 1896.456587][T24849] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1896.524801][T16793] usb 10-1: USB disconnect, device number 7 [ 1896.607431][T24857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1896.715396][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1896.715411][ T29] audit: type=1400 audit(1778884399.905:2078): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=24840 comm="syz.0.4132" [ 1896.758622][T16801] usb 1-1: USB disconnect, device number 115 [ 1897.479935][T24871] kAFS: unable to lookup cell 'џ' [ 1898.843092][T24882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.884362][T24882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.343729][T24885] kAFS: unable to lookup cell 'џ' [ 1899.825273][T24895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.838773][T24895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.906967][T20841] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1900.067088][T20841] usb 1-1: Using ep0 maxpacket: 32 [ 1900.093171][T20841] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.104931][T20841] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1900.114532][T20841] usb 1-1: config 1 has no interface number 0 [ 1900.121996][T20841] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1900.143160][T20841] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1900.152606][T20841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.161355][T20841] usb 1-1: Product: syz [ 1900.165919][T20841] usb 1-1: Manufacturer: syz [ 1900.171114][T20841] usb 1-1: SerialNumber: syz [ 1900.293051][T24897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.312943][T24897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.326106][T24897] dvb-usb: bulk message failed: -22 (7/0) [ 1900.333022][T24897] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1900.347707][T24897] ttusb2: i2c transfer failed. [ 1900.472334][T20841] usb 1-1: USB disconnect, device number 116 [ 1900.583831][T21954] udevd[21954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1900.625717][T24901] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1900.639131][T24901] pim6reg0: owner set to 0 [ 1901.051640][T24914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4151'. [ 1901.463206][T24922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4157'. [ 1901.578188][T24907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4152'. [ 1902.336448][T24931] trusted_key: encrypted_key: insufficient parameters specified [ 1902.746886][T23559] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1902.906931][T23559] usb 1-1: Using ep0 maxpacket: 32 [ 1902.924052][T23559] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.966556][T23559] usb 1-1: config 0 has no interfaces? [ 1902.984068][T23559] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1903.002438][T23559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1903.026756][T23559] usb 1-1: Product: syz [ 1903.039365][T23559] usb 1-1: Manufacturer: syz [ 1903.047055][T23559] usb 1-1: SerialNumber: syz [ 1903.055553][T23559] usb 1-1: config 0 descriptor?? [ 1903.910526][T24966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.920882][T24966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.002625][T24969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.013324][T24969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.474310][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1904.645865][T24976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 1904.729959][T24978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.746779][T24978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.788344][T24980] xfrm0: Caught tx_queue_len zero misconfig [ 1905.096133][T23559] usb 1-1: USB disconnect, device number 117 [ 1905.462406][T25003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1905.494971][T25003] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1905.776098][T25007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.905220][T25007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.830164][T25019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.867522][T25019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.630948][T25032] tun0: tun_chr_ioctl cmd 2147767517 [ 1907.932385][T25043] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1908.045896][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4198'. [ 1908.384830][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.411145][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.445605][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.476138][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.697354][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.733883][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.073177][T25067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1909.205910][T25071] netlink: 'syz.0.4203': attribute type 15 has an invalid length. [ 1909.945156][T25093] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4208'. [ 1910.142233][T25087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1910.358164][T25100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1910.833629][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1911.053306][T25112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.117694][T25112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.522368][T25119] dummy0: entered allmulticast mode [ 1911.603532][T25130] netlink: 'syz.7.4224': attribute type 1 has an invalid length. [ 1911.631131][T25130] netlink: 'syz.7.4224': attribute type 2 has an invalid length. [ 1911.659184][T25134] netlink: 'syz.7.4224': attribute type 1 has an invalid length. [ 1911.667949][T25132] kAFS: unable to lookup cell 'џ' [ 1911.715507][T25134] netlink: 'syz.7.4224': attribute type 2 has an invalid length. [ 1911.749239][T25135] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1911.891260][T25131] dummy0: left allmulticast mode [ 1912.708676][T25151] netlink: 'syz.3.4228': attribute type 10 has an invalid length. [ 1912.746693][T25151] netlink: 'syz.3.4228': attribute type 10 has an invalid length. [ 1913.506904][T16801] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1913.524459][T25160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1913.669533][T16801] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1913.677784][T16801] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1913.687502][T16801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.708859][T16801] usb 1-1: config 0 descriptor?? [ 1914.506468][T25174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.529634][T16801] video4linux radio48: keene_cmd_main failed (-71) [ 1914.537789][T16801] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1914.545125][T25174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.567353][T16801] usb 1-1: USB disconnect, device number 118 [ 1914.699720][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.706186][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.195009][T25187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.210534][T25187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.601521][T25194] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1915.975553][T25204] kAFS: unable to lookup cell 'џ' [ 1916.476712][T25209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4243'. [ 1917.583812][T25221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1917.629758][T25221] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1917.890155][T16800] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1918.059494][T16800] usb 10-1: Using ep0 maxpacket: 32 [ 1918.077243][T16800] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1918.095326][T16800] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1918.113144][T16800] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1918.133251][T16800] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1918.159886][T16800] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.181632][T16800] usb 10-1: config 0 descriptor?? [ 1918.192248][T25238] kAFS: unable to lookup cell 'џ' [ 1918.198697][T25231] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1918.212642][T16800] hub 10-1:0.0: USB hub found [ 1918.434006][T16800] hub 10-1:0.0: config failed, hub has too many ports! (err -19) [ 1918.647255][T16800] usbhid 10-1:0.0: can't add hid device: -71 [ 1918.658707][T16800] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1918.698622][T16800] usb 10-1: USB disconnect, device number 8 [ 1920.041508][T25256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.087553][T25256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.883455][T25282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1920.965608][T25284] kAFS: unable to lookup cell 'џ' [ 1921.005975][T25275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1921.032470][T25275] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1923.074628][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4269'. [ 1923.090223][T16801] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 1923.116290][T25307] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4269'. [ 1923.259215][T16801] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1923.277640][T16801] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1923.298563][T16801] usb 1-1: config 0 has no interface number 0 [ 1923.322516][T16801] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1923.363817][T16801] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1923.403920][T16801] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1923.440135][T16801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.489339][T16801] usb 1-1: config 0 descriptor?? [ 1924.148863][T16801] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input81 [ 1924.175843][T16801] input: failed to attach handler kbd to device input81, error: -5 [ 1924.351828][T16801] usb 1-1: USB disconnect, device number 119 [ 1924.858432][T25335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1924.882808][T25335] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1925.276858][T16801] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1925.470219][T16801] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1925.496651][T16801] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1925.536846][T16801] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 1925.582141][T16801] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1925.639945][T16801] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1925.674447][T16801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.934109][T16801] usb 1-1: GET_CAPABILITIES returned 0 [ 1925.953768][T16801] usbtmc 1-1:16.0: can't read capabilities [ 1926.153995][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1926.165828][T25338] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1926.180688][ T5721] usb 1-1: USB disconnect, device number 120 [ 1926.670167][T25360] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4285'. [ 1927.287196][T16801] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1927.390741][T25372] xt_hashlimit: size too large, truncated to 1048576 [ 1927.467492][T16801] usb 1-1: Using ep0 maxpacket: 32 [ 1927.485944][T16801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1927.514989][T16801] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1927.551454][T16801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1927.586574][T16801] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1927.612260][T16801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.638499][T16801] usb 1-1: Product: syz [ 1927.658556][T16801] usb 1-1: Manufacturer: syz [ 1927.676348][T16801] usb 1-1: SerialNumber: syz [ 1928.156732][T16801] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1928.165145][T16801] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1928.175944][T16801] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1928.383834][T16801] usb 1-1: USB disconnect, device number 121 [ 1929.065507][T25395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1929.116444][T25387] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1929.816483][T25401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.837438][T25401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.714841][T25412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1931.080306][T25422] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4305'. [ 1932.136960][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 1932.576941][T16793] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1932.770306][T16793] usb 1-1: Using ep0 maxpacket: 8 [ 1932.780987][T16793] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1932.825844][T16793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.898061][T25444] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1932.911275][T16793] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1932.931893][T16793] pvrusb2: ********** [ 1932.940311][T16793] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1932.961232][T16793] pvrusb2: Important functionality might not be entirely working. [ 1932.985359][T16793] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1933.020530][T16793] pvrusb2: ********** [ 1933.165773][ T2367] pvrusb2: Invalid write control endpoint [ 1933.208919][T25457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1933.253246][T25457] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1933.322667][T25438] dvb-usb: bulk message failed: -22 (7/0) [ 1933.360424][T25438] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1933.433172][T25438] ttusb2: i2c transfer failed. [ 1933.481927][T16793] usb 1-1: USB disconnect, device number 122 [ 1933.850482][ T2367] pvrusb2: Invalid write control endpoint [ 1933.901962][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1933.962956][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1933.993022][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1934.035882][ T2367] pvrusb2: Device being rendered inoperable [ 1934.078405][ T2367] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1934.160053][ T2367] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1934.440349][ T2367] pvrusb2: Attached sub-driver cx25840 [ 1934.451615][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1934.465374][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1937.505846][T25515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1937.636320][T25518] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1938.460230][T25529] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4330'. [ 1938.533634][T25531] tap0: tun_chr_ioctl cmd 1074025677 [ 1938.556441][T25531] tap0: linktype set to 804 [ 1939.116530][T25536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.171819][T25536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.226671][T25536] dvb-usb: bulk message failed: -22 (9/0) [ 1939.254666][T25536] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1939.307156][T25536] ttusb2: i2c transfer failed. [ 1940.188630][T23559] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1940.500191][T23559] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.511843][T23559] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1940.533171][T23559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.651171][T25560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1941.519174][T25570] kAFS: unable to lookup cell 'џ' [ 1942.760720][T16801] usb 1-1: USB disconnect, device number 123 [ 1943.104610][T25579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.122680][T25579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.149041][T25579] dvb-usb: bulk message failed: -22 (9/0) [ 1943.166102][T25579] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1943.188275][T25579] ttusb2: i2c transfer failed. [ 1943.250093][T25582] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1943.908029][T25598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4350'. [ 1944.417254][T25611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1944.438537][T25611] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1944.869843][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4355'. [ 1944.943652][T25615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.008036][T25615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1945.601517][T25628] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4357'. [ 1947.557282][T25646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4364'. [ 1947.679040][T25648] sctp: [Deprecated]: syz.4.4365 (pid 25648) Use of int in max_burst socket option. [ 1947.679040][T25648] Use struct sctp_assoc_value instead [ 1947.897410][T25653] kAFS: unable to lookup cell 'џ' [ 1948.232002][T25656] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1948.579759][T25666] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1949.033563][T25676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1950.249007][T25695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1950.278174][T25695] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1950.547803][T20843] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1950.717159][T20843] usb 10-1: Using ep0 maxpacket: 32 [ 1950.745311][T20843] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1950.776110][T20843] usb 10-1: config 0 has no interface number 0 [ 1950.808816][T20843] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1950.846197][T20843] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1950.881340][T20843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.890473][T25697] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1950.911393][T20843] usb 10-1: Product: syz [ 1950.930376][T20843] usb 10-1: Manufacturer: syz [ 1950.952154][T20843] usb 10-1: SerialNumber: syz [ 1950.983756][T20843] usb 10-1: config 0 descriptor?? [ 1951.416495][T20843] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1951.443611][T20843] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1951.485060][T20843] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1951.525969][T20843] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1951.795380][T25708] kAFS: unable to lookup cell 'џ' [ 1953.467377][T25726] kAFS: unable to lookup cell 'џ' [ 1954.020990][T23560] usb 10-1: USB disconnect, device number 9 [ 1954.828875][T25747] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1954.861669][T25747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1954.923658][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4392'. [ 1955.455401][T25755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.504368][T25755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.203132][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4396'. [ 1956.321845][T25761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4395'. [ 1956.617462][T25769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1956.840394][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4399'. [ 1956.863653][T25772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1957.130698][T25772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1957.804206][T25789] kAFS: unable to lookup cell 'џ' [ 1957.956883][T16801] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1958.125410][T16801] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.136565][T16801] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1958.159053][T16801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.656276][T16801] usb 1-1: USB disconnect, device number 124 [ 1961.165456][T25813] kAFS: unable to lookup cell 'џ' [ 1962.242516][T25820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1962.626266][T25828] trusted_key: encrypted_key: insufficient parameters specified [ 1962.643582][T25835] kAFS: unable to lookup cell 'џ' [ 1962.654310][T16801] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1962.703458][T25832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.715324][T25832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.834340][T16801] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1962.860825][T16801] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.40 [ 1962.884142][T16801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.934512][T16801] usb 1-1: Product: syz [ 1962.950830][T16801] usb 1-1: Manufacturer: syz [ 1962.981369][T16801] usb 1-1: SerialNumber: syz [ 1963.398094][T25846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.437448][T25841] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1963.674220][T16801] usbhid 1-1:1.0: can't add hid device: -71 [ 1963.683249][T16801] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1963.704551][T16801] usb 1-1: USB disconnect, device number 125 [ 1964.963277][T25862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4427'. [ 1965.076912][T23560] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1965.275162][T23560] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.288958][T23560] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1965.300025][T23560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.741424][T25886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1966.794034][T25878] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1966.839685][T25878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.874800][T25878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.403260][T23559] usb 10-1: USB disconnect, device number 10 [ 1969.651020][ T29] audit: type=1326 audit(1778884472.845:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1969.676077][ T29] audit: type=1326 audit(1778884472.845:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1969.702200][ T29] audit: type=1326 audit(1778884472.845:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1969.731794][ T29] audit: type=1326 audit(1778884472.925:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1969.759814][ T29] audit: type=1326 audit(1778884472.925:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1969.786815][ T29] audit: type=1326 audit(1778884472.925:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5bc75d68e code=0x7ffc0000 [ 1969.827518][T25916] trusted_key: encrypted_key: insufficient parameters specified [ 1969.877103][T23560] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1969.889663][ T29] audit: type=1326 audit(1778884473.075:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1969.980539][ T29] audit: type=1326 audit(1778884473.175:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5bc73e1d9 code=0x7ffc0000 [ 1970.018296][ T29] audit: type=1326 audit(1778884473.175:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.3.4446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bc79ce59 code=0x7ffc0000 [ 1970.057148][T23560] usb 1-1: Using ep0 maxpacket: 32 [ 1970.068397][T23560] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1970.078169][T23560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.090160][T23560] usb 1-1: Product: syz [ 1970.094424][T23560] usb 1-1: Manufacturer: syz [ 1970.108786][T23560] usb 1-1: SerialNumber: syz [ 1970.119781][T23560] usb 1-1: config 0 descriptor?? [ 1970.336628][T23560] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 126 [ 1970.543270][T25922] dvb-usb: bulk message failed: -22 (9/0) [ 1970.551713][T25922] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1970.572874][T25922] ttusb2: i2c transfer failed. [ 1971.296107][T25947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.306857][T25947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.604874][T25953] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4455'. [ 1972.085776][T25966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1972.101513][T25966] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1972.120511][T25966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.133040][T25966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.714735][T25973] netdevsim netdevsim7: Firmware load for './file0/../file0/../file0' refused, path contains '..' component [ 1973.094526][ T5721] usb 1-1: USB disconnect, device number 126 [ 1974.160234][T25993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.170539][T25993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.806292][T25998] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1975.281931][T26013] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4472'. [ 1976.140033][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.146602][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.342222][T26024] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4477'. [ 1977.226876][ T5721] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1977.686715][ T5721] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.722528][ T5721] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1977.745090][ T5721] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1977.764065][T26049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1977.792964][ T5721] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.822698][ T5721] usb 10-1: config 0 descriptor?? [ 1977.991152][T26055] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4482'. [ 1978.158664][T26058] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1979.734833][T26071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.792111][T26071] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1980.205490][T23560] usb 10-1: USB disconnect, device number 11 [ 1982.394046][T26110] erspan0: entered promiscuous mode [ 1982.681944][T26115] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4493'. [ 1983.897183][T26124] dummy0: left allmulticast mode [ 1983.914469][T26124] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1984.005086][T26114] syz.4.4496 (26114) used greatest stack depth: 18840 bytes left [ 1985.949641][T26157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4508'. [ 1986.058133][T26161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1986.102043][T26161] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1987.225342][T26176] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1987.885226][T26185] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4517'. [ 1988.311529][T26194] dummy0: entered allmulticast mode [ 1989.313094][T26203] syzkaller1: entered promiscuous mode [ 1989.339075][T26203] syzkaller1: entered allmulticast mode [ 1990.317796][T26214] loop8: detected capacity change from 0 to 1 [ 1990.464525][T26214] Dev loop8: unable to read RDB block 1 [ 1990.504771][T26214] loop8: unable to read partition table [ 1990.537674][T26214] loop8: partition table beyond EOD, truncated [ 1990.568061][T26214] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 1990.691467][T26222] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4528'. [ 1990.785602][T26221] syzkaller1: entered promiscuous mode [ 1990.830014][T26221] syzkaller1: entered allmulticast mode [ 1991.117176][T16801] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1991.288651][T16801] usb 10-1: config index 0 descriptor too short (expected 1572, got 36) [ 1991.318772][T16801] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.340115][T16801] usb 10-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1991.352106][T16801] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.362343][T16801] usb 10-1: Product: syz [ 1991.366717][T16801] usb 10-1: Manufacturer: syz [ 1991.376050][T16801] usb 10-1: SerialNumber: syz [ 1991.401492][T16801] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input82 [ 1991.490396][T26240] dummy0: left allmulticast mode [ 1991.520681][T26240] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1991.605642][ T4981] bcm5974 10-1:1.0: could not read from device [ 1991.705508][T16801] bcm5974 10-1:1.0: could not read from device [ 1991.745461][ T4981] bcm5974 10-1:1.0: could not read from device [ 1991.789573][T16801] input: failed to attach handler mousedev to device input82, error: -5 [ 1991.824989][ T4981] bcm5974 10-1:1.0: could not read from device [ 1991.837907][T16801] usb 10-1: USB disconnect, device number 12 [ 1991.853192][ T4981] bcm5974 10-1:1.0: could not read from device [ 1992.959054][T26250] dummy0: entered allmulticast mode [ 1992.967081][T16801] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1993.167343][T16801] usb 10-1: Using ep0 maxpacket: 32 [ 1993.190933][T16801] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1993.212079][T16801] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.247126][T16801] usb 10-1: Product: syz [ 1993.288575][T16801] usb 10-1: Manufacturer: syz [ 1993.310714][T16801] usb 10-1: SerialNumber: syz [ 1993.340971][T16801] usb 10-1: config 0 descriptor?? [ 1993.356681][T26271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1993.400135][T26262] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1993.608582][T16801] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 013 [ 1993.809920][T26254] dvb-usb: bulk message failed: -22 (9/0) [ 1993.832521][T26254] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1993.877404][T26254] ttusb2: i2c transfer failed. [ 1995.566552][T26299] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1995.853058][T26306] kAFS: unable to lookup cell 'џ' [ 1996.527409][T16801] usb 10-1: USB disconnect, device number 13 [ 1997.936277][T26332] dummy0: entered allmulticast mode [ 1998.347690][T26346] loop6: detected capacity change from 0 to 2640 [ 1998.405565][T26346] buffer_io_error: 336 callbacks suppressed [ 1998.405579][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.461484][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.517630][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.548813][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.576987][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.596361][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.655107][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.726463][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.790397][T26346] ldm_validate_partition_table(): Disk read failed. [ 1998.825869][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.854646][T26346] Buffer I/O error on dev loop6, logical block 0, async page read [ 1998.888611][T26346] Dev loop6: unable to read RDB block 0 [ 1998.920012][T26346] loop6: unable to read partition table [ 1998.938387][T26346] loop_reread_partitions: partition scan of loop6 (3Ÿ О‚Г˜) failed (rc=-5) [ 1999.235829][T26358] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1999.417175][T26364] kAFS: unable to lookup cell 'џ' [ 2002.678951][T26417] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2002.700699][T26418] dummy0: entered allmulticast mode [ 2004.131657][T26427] kAFS: unable to lookup cell 'џ' [ 2004.334924][T26432] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2004.437151][T23559] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 2004.633176][T23559] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2004.669162][T23559] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2004.692395][T23559] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2004.715236][T23559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.747821][T23559] usb 1-1: Product: syz [ 2004.755962][T23559] usb 1-1: Manufacturer: syz [ 2004.776013][T23559] usb 1-1: SerialNumber: syz [ 2004.802367][T23559] usb 1-1: config 0 descriptor?? [ 2004.823489][T23559] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2005.229934][T26444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2005.268566][T26444] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2005.685319][T16801] usb 1-1: USB disconnect, device number 127 [ 2006.830048][T26469] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2008.032611][T26487] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4601'. [ 2008.955040][T26495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.975175][T26495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.203102][T26502] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2009.887049][T26518] kAFS: unable to lookup cell 'џ' [ 2010.861794][T26538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2010.907482][T26538] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2011.280995][T26545] dummy0: entered allmulticast mode [ 2012.096315][T26557] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4619'. [ 2014.687130][T26602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4633'. [ 2015.001629][T26614] dummy0: left allmulticast mode [ 2015.020473][T26614] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2015.485641][T26622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2015.532464][T26622] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2016.986491][T26657] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 2017.017375][T26652] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 2018.717965][T26674] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2018.757897][T26677] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4649'. [ 2019.631796][T26689] kAFS: unable to lookup cell 'џ' [ 2019.676976][T23560] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 2019.843684][T23560] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2019.858245][T23560] usb 1-1: not running at top speed; connect to a high speed hub [ 2019.868925][T23560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.882589][T23560] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2019.900145][T23560] usb 1-1: string descriptor 0 read error: -22 [ 2019.909538][T23560] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2019.922967][T23560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.951044][T23560] usb 1-1: 0:2 : does not exist [ 2020.889219][T26706] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 2021.019930][T23560] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2021.079763][T23560] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2021.122396][T23560] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 2021.248452][T23560] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2021.342923][T23560] usb 1-1: USB disconnect, device number 2 [ 2022.025944][T26724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.040951][T26724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.143046][T26725] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2022.396836][T16800] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2022.557159][T16800] usb 10-1: Using ep0 maxpacket: 8 [ 2022.565644][T16800] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 2022.575918][T16800] usb 10-1: config 0 has no interface number 0 [ 2022.583688][T16800] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2022.595501][T16800] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2022.607940][T16800] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2022.621869][T16800] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2022.640458][T16800] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2022.650759][T16800] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.678307][T16800] usb 10-1: config 0 descriptor?? [ 2022.729279][T16800] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2022.892439][T26740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4675'. [ 2022.939122][T16800] usb 10-1: USB disconnect, device number 14 [ 2023.025102][T16800] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 2023.366879][T23559] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 2023.521477][T23559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2023.545065][T23559] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2023.559557][T23559] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2023.571352][T23559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.585128][T23559] usb 1-1: config 0 descriptor?? [ 2023.604279][T26749] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2023.847274][T26749] netlink: 'syz.0.4677': attribute type 34 has an invalid length. [ 2023.880912][T23559] usbhid 1-1:0.0: can't add hid device: -71 [ 2023.900742][T23559] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2024.000763][T23559] usb 1-1: USB disconnect, device number 3 [ 2024.246797][T26770] dummy0: left allmulticast mode [ 2024.283271][T26770] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2024.283807][T26772] kAFS: unable to lookup cell 'џ' [ 2024.876947][T16800] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2025.067044][T16800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2025.093403][T16800] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.122884][T16800] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 2025.164779][T16800] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2025.215085][T16800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.240487][T16800] usb 1-1: Product: syz [ 2025.252195][T16800] usb 1-1: Manufacturer: syz [ 2025.278099][T16800] usb 1-1: SerialNumber: syz [ 2025.364914][T26786] kAFS: unable to lookup cell 'џ' [ 2025.593619][T26779] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2025.681461][T16800] usb 1-1: USB disconnect, device number 4 [ 2025.737319][T16793] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2025.916857][T16793] usb 10-1: Using ep0 maxpacket: 8 [ 2025.928587][T16793] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2025.937649][T16793] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2025.957850][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2025.971089][T16793] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2025.986500][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2026.000171][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2026.013750][T16793] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2026.034009][T16793] usb 10-1: config 168 interface 0 has no altsetting 0 [ 2026.043067][T16793] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2026.052539][T16793] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2026.069425][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2026.083521][T16793] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2026.118422][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2026.133927][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2026.147988][T16793] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2026.164632][T16793] usb 10-1: config 168 interface 0 has no altsetting 0 [ 2026.175963][T16793] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2026.184166][T16793] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2026.196130][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2026.225736][T16793] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2026.269844][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2026.350793][T16793] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2026.444611][T16793] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2026.537249][T16793] usb 10-1: config 168 interface 0 has no altsetting 0 [ 2026.567489][T16793] usb 10-1: string descriptor 0 read error: -22 [ 2026.577109][T16793] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2026.593095][T16793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.658621][T26806] dummy0: entered allmulticast mode [ 2026.700819][T16793] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2027.081192][T16800] usb 10-1: USB disconnect, device number 15 [ 2028.925637][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 2028.958995][T26833] dummy0: entered promiscuous mode [ 2028.964948][T26833] macvlan2: entered promiscuous mode [ 2029.069550][T26838] macvlan0: entered promiscuous mode [ 2029.075010][T26838] macvlan0: left allmulticast mode [ 2029.083785][T26838] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4707'. [ 2029.447426][T26853] kAFS: unable to lookup cell 'џ' [ 2029.566625][T26860] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4714'. [ 2029.582262][T26860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.589684][T26860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.055212][T26868] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4715'. [ 2032.217715][T26885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2032.253511][T26885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.353973][T26885] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2033.531691][T26901] dummy0: entered allmulticast mode [ 2033.687183][T26913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.753123][T26913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.936900][T26916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4732'. [ 2034.261463][T26913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.312150][T26913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.754835][T26928] kAFS: unable to lookup cell 'џ' [ 2037.415501][T26949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4741'. [ 2037.578973][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.585361][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.957605][T26966] dummy0: entered allmulticast mode [ 2039.213309][T26976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2039.252424][T26976] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2042.469994][T27021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4763'. [ 2043.072390][T27016] trusted_key: encrypted_key: insufficient parameters specified [ 2043.376870][T23559] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2043.408332][T16802] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2043.557564][T23559] usb 10-1: Using ep0 maxpacket: 32 [ 2043.579203][T27046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4771'. [ 2043.603861][T23559] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.621509][T16802] usb 1-1: Using ep0 maxpacket: 8 [ 2043.657079][T16802] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2043.685717][T23559] usb 10-1: config 0 has no interfaces? [ 2043.699631][T16802] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2043.729013][T23559] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2043.754018][T27049] netlink: 'syz.7.4772': attribute type 5 has an invalid length. [ 2043.767467][T23559] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2043.767807][T16802] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2043.803755][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4772'. [ 2043.816268][T23559] usb 10-1: Product: syz [ 2043.832498][T23559] usb 10-1: Manufacturer: syz [ 2043.848319][T16802] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2043.860114][T23559] usb 10-1: SerialNumber: syz [ 2043.892333][T23559] usb 10-1: config 0 descriptor?? [ 2043.918061][T16802] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2044.002506][T16802] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2044.040499][T16802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.342574][T16802] usb 1-1: usb_control_msg returned -32 [ 2044.368139][T16802] usbtmc 1-1:16.0: can't read capabilities [ 2044.724552][T27059] usbtmc 1-1:16.0: control status returned 0 [ 2044.927293][T23559] usb 1-1: USB disconnect, device number 5 [ 2045.940226][T16793] usb 10-1: USB disconnect, device number 16 [ 2046.084202][T27085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2046.132948][T27085] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2046.218051][T27081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4781'. [ 2048.136784][T27104] loop8: detected capacity change from 0 to 7 [ 2048.157793][T27104] Dev loop8: unable to read RDB block 7 [ 2048.169308][T27104] loop8: unable to read partition table [ 2048.185455][T27104] loop8: partition table beyond EOD, truncated [ 2048.217512][T27104] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 2048.989282][T27117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4789'. [ 2050.846949][T27145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4795'. [ 2052.592862][T27180] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2052.924871][T27191] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4811'. [ 2053.697759][T16801] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2053.856882][T16801] usb 1-1: Using ep0 maxpacket: 32 [ 2053.871482][T16801] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2053.891188][T16801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.910065][T16801] usb 1-1: Product: syz [ 2053.918169][T16801] usb 1-1: Manufacturer: syz [ 2053.928615][T16801] usb 1-1: SerialNumber: syz [ 2053.945976][T16801] usb 1-1: config 0 descriptor?? [ 2054.090874][T27204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.105390][T27204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.176320][T16801] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 006 [ 2054.378857][T27198] dvb-usb: bulk message failed: -22 (9/0) [ 2054.385491][T27198] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2054.401403][T27198] ttusb2: i2c transfer failed. [ 2054.599430][T27217] dummy0: left allmulticast mode [ 2054.614084][T27217] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2055.587133][T27247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4826'. [ 2055.762344][T27251] netlink: 'syz.9.4829': attribute type 1 has an invalid length. [ 2055.893266][T27251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2055.996526][T27255] bond1: (slave geneve3): making interface the new active one [ 2056.063839][T27255] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 2056.181196][T27255] syz.9.4829 (27255) used greatest stack depth: 17920 bytes left [ 2056.980930][T16802] usb 1-1: USB disconnect, device number 6 [ 2057.070717][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4832'. [ 2057.279428][T27269] dummy0: left allmulticast mode [ 2057.323458][T27269] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2058.577731][T16793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2058.741369][T16793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2058.754351][T16793] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.781757][T16793] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2058.856327][T16793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.926509][T16793] usb 1-1: Product: syz [ 2058.967865][T16793] usb 1-1: Manufacturer: syz [ 2058.988178][T16793] usb 1-1: SerialNumber: syz [ 2059.251460][T27287] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2059.856988][T27308] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2060.340801][T16793] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 2060.359811][T16793] usb 1-1: device reset changed ep0 maxpacket size! [ 2060.387585][T16793] usb 1-1: USB disconnect, device number 7 [ 2060.557436][T16793] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2060.756803][T16793] usb 1-1: Using ep0 maxpacket: 32 [ 2060.773252][T16793] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2060.784812][T16793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.809975][T16793] usb 1-1: Product: syz [ 2060.823276][T16793] usb 1-1: Manufacturer: syz [ 2060.844202][T16793] usb 1-1: SerialNumber: syz [ 2060.871469][T16793] usb 1-1: config 0 descriptor?? [ 2060.910872][T27329] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4847'. [ 2061.125016][T16793] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 008 [ 2061.263015][T27333] kAFS: unable to lookup cell 'џ' [ 2061.319693][T27314] dvb-usb: bulk message failed: -22 (9/0) [ 2061.341218][T27314] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2061.377035][T27314] ttusb2: i2c transfer failed. [ 2061.693842][T27338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.763535][T27338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.622169][T27348] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2063.856414][T20843] usb 1-1: USB disconnect, device number 8 [ 2064.163622][T27380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4861'. [ 2064.907755][T27388] kAFS: unable to lookup cell 'џ' [ 2065.554198][T27394] dummy0: left allmulticast mode [ 2065.583577][T27394] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2066.501422][T27414] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4872'. [ 2066.703811][T27422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.712823][T27422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.729210][T27422] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2066.902199][T27427] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4874'. [ 2067.010680][T27429] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4877'. [ 2067.281716][T27435] netlink: 'syz.3.4879': attribute type 11 has an invalid length. [ 2067.290305][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 2067.331350][T27436] kAFS: unable to lookup cell 'џ' [ 2067.400853][T13396] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2067.412092][T27438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.422092][T27435] netlink: 'syz.3.4879': attribute type 11 has an invalid length. [ 2067.434064][T27438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.442972][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 2067.491647][T13396] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2067.543677][T13396] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2067.632243][T13396] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2068.148247][T13396] tipc: Subscription rejected, illegal request [ 2068.559827][T27455] kAFS: unable to lookup cell 'џ' [ 2069.084434][T27462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4888'. [ 2069.311906][T27466] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4889'. [ 2069.842017][T27472] kAFS: unable to lookup cell 'џ' [ 2070.692293][T27492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4895'. [ 2070.818729][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.834489][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.364695][T27497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2072.451909][T27518] kAFS: unable to lookup cell 'џ' [ 2072.609670][T27520] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4905'. [ 2074.705694][T27542] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4911'. [ 2074.745653][T27544] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2074.957759][T27553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4914'. [ 2076.264859][T27579] dummy0: entered allmulticast mode [ 2078.268546][T27594] kAFS: unable to lookup cell 'џ' [ 2080.436439][T27632] kAFS: unable to lookup cell 'џ' [ 2080.641349][T27634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4934'. [ 2081.653062][T27643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2084.457412][T20843] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 2084.687951][T27698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2084.731901][T27698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2085.713422][T20843] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.740705][T20843] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2085.768463][T20843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.949865][T27707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.010108][T27707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.202251][T27712] kAFS: unable to lookup cell 'џ' [ 2087.952816][T27727] kAFS: unable to lookup cell 'џ' [ 2088.090395][T23559] usb 10-1: USB disconnect, device number 17 [ 2089.085408][T27740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2089.131924][T27740] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2090.325770][T27769] kAFS: unable to lookup cell 'џ' [ 2092.013314][T27781] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4971'. [ 2092.954657][T27799] kAFS: unable to lookup cell 'џ' [ 2093.330846][T27810] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2094.622943][T27827] dvb-usb: bulk message failed: -22 (9/0) [ 2094.659230][T27831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2094.666264][T27827] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2094.708387][T27831] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2094.716111][T27827] ttusb2: i2c transfer failed. [ 2094.890794][T27840] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4985'. [ 2096.321296][T27859] syzkaller1: entered promiscuous mode [ 2096.336327][T27859] syzkaller1: entered allmulticast mode [ 2096.821582][T27873] kAFS: unable to lookup cell 'џ' [ 2097.364817][T27882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4997'. [ 2098.255881][T27885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4998'. [ 2098.753763][T27897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.769993][T27897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.800562][T27898] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4999'. [ 2099.021631][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.028146][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.536023][T27911] kAFS: unable to lookup cell 'џ' [ 2101.929161][T27945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5013'. [ 2102.015346][ T29] audit: type=1326 audit(1778884605.205:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.9.5015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab0f9ce59 code=0x0 [ 2102.500442][T27956] dummy0: left allmulticast mode [ 2102.535540][T27956] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2104.067927][T27982] kAFS: unable to lookup cell 'џ' [ 2104.940176][T27998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5026'. [ 2105.079520][T28000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.090665][T28000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.789343][T28008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2105.877875][T28009] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2106.812574][T28024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5033'. [ 2107.570823][T28034] dummy0: left allmulticast mode [ 2107.623192][T28034] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2111.831673][T28081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5046'. [ 2113.401933][T28094] netlink: 'syz.0.5052': attribute type 13 has an invalid length. [ 2113.423186][T28094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5052'. [ 2113.483963][T28094] netlink: 'syz.0.5052': attribute type 13 has an invalid length. [ 2113.484108][T27300] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2113.518289][T27300] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2113.521838][T28094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5052'. [ 2113.551827][T27300] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2113.586288][T28098] netlink: 'syz.7.5053': attribute type 12 has an invalid length. [ 2113.613847][T28098] netlink: 'syz.7.5053': attribute type 2 has an invalid length. [ 2113.632365][T28098] netlink: 'syz.7.5053': attribute type 1 has an invalid length. [ 2113.650967][T28098] netlink: 'syz.7.5053': attribute type 37 has an invalid length. [ 2113.660455][T28098] netlink: 'syz.7.5053': attribute type 2 has an invalid length. [ 2113.672731][T28102] kAFS: unable to lookup cell 'џ' [ 2113.678982][T28098] netlink: 340 bytes leftover after parsing attributes in process `syz.7.5053'. [ 2113.771312][T27300] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2114.354785][T28117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5058'. [ 2114.543718][T28121] dummy0: entered allmulticast mode [ 2115.736228][T28137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5063'. [ 2116.191880][T28143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2116.201864][T28143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2116.443729][T28147] kAFS: unable to lookup cell 'џ' [ 2116.814771][T28149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5068'. [ 2118.099881][T28173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2118.131300][T28173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2118.233934][T28173] dvb-usb: bulk message failed: -22 (9/0) [ 2118.272103][T28173] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2118.287916][T28173] ttusb2: i2c transfer failed. [ 2118.507721][T28180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5079'. [ 2118.616416][T28182] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2118.624735][T28182] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2118.639741][T28182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2118.645858][T28182] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2118.915673][T28192] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5082'. [ 2119.126818][T16801] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 2119.299133][T16801] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2119.310588][T16801] usb 10-1: not running at top speed; connect to a high speed hub [ 2119.319655][T16801] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2119.330140][T16801] usb 10-1: string descriptor 0 read error: -22 [ 2119.336637][T16801] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 2119.352758][T16801] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.777491][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.789426][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.797466][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.804906][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.812890][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.820641][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.832427][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.841094][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.848982][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.856445][T16801] hid-picolcd 0003:04D8:C002.001D: unknown main item tag 0x0 [ 2119.957087][T16801] hid-picolcd 0003:04D8:C002.001D: No report with id 0x11 found [ 2119.975994][T16801] usb 10-1: USB disconnect, device number 18 [ 2120.617977][T10855] Bluetooth: hci5: command 0x0406 tx timeout [ 2120.698013][T10855] Bluetooth: hci0: command 0x0406 tx timeout [ 2120.906485][T28216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5091'. [ 2121.097010][T16793] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2121.184256][T28225] dummy0: left allmulticast mode [ 2121.276603][T16793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.305172][T16793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.321613][T16793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2121.361395][T16793] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2121.374657][T16793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.387843][T16793] usb 1-1: config 0 descriptor?? [ 2121.452453][T28238] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5095'. [ 2121.732584][T28241] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5097'. [ 2121.948911][T16793] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2122.185453][T16801] usb 1-1: USB disconnect, device number 9 [ 2122.700139][T10855] Bluetooth: hci5: command 0x0406 tx timeout [ 2122.776994][T10855] Bluetooth: hci0: command 0x0406 tx timeout [ 2123.045735][T28262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'. [ 2123.154418][T28264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2123.179249][T28264] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2125.639934][T28307] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5120'. [ 2125.922819][T28322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2125.935409][T28322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.962393][T28323] kAFS: unable to lookup cell 'џ' [ 2126.150358][T28327] kAFS: unable to lookup cell 'џ' [ 2126.246819][T16793] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 2127.004206][T16793] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.040881][T28335] loop8: detected capacity change from 0 to 7 [ 2127.063503][T28335] Dev loop8: unable to read RDB block 7 [ 2127.076390][T28335] loop8: unable to read partition table [ 2127.090094][T28335] loop8: partition table beyond EOD, truncated [ 2127.103874][T28335] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 2127.116137][T16793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2127.158607][T16793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.411704][T28359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.425376][T28359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.441755][T28359] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2128.916776][T16793] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2129.076877][T16793] usb 10-1: Using ep0 maxpacket: 16 [ 2129.110989][T16793] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 2129.141235][T16793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.166013][T16793] usb 10-1: Product: syz [ 2129.185341][T16793] usb 10-1: Manufacturer: syz [ 2129.203030][T16793] usb 10-1: SerialNumber: syz [ 2129.233149][T16793] usb 10-1: config 0 descriptor?? [ 2129.274952][T16793] gspca_main: spca508-2.14.0 probing 041e:4018 [ 2129.305155][ T5721] usb 1-1: USB disconnect, device number 10 [ 2129.472767][T16793] gspca_spca508: reg_read err -32 [ 2129.484751][T16793] gspca_spca508: reg_read err -32 [ 2129.494629][T16793] gspca_spca508: reg_read err -32 [ 2129.504891][T16793] gspca_spca508: reg_read err -32 [ 2129.514197][T16793] gspca_spca508: reg_read err -32 [ 2129.725749][T16793] gspca_spca508: reg write: error -71 [ 2129.740698][T16793] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 2129.780769][T16793] usb 10-1: USB disconnect, device number 19 [ 2129.806893][ T5721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2129.970223][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.987382][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.999338][ T5721] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2130.011163][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.029231][ T5721] usb 1-1: config 0 descriptor?? [ 2130.259545][T28382] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2130.499026][ T5721] hid_parser_main: 3532 callbacks suppressed [ 2130.499049][ T5721] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 2130.528216][ T5721] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 2130.542963][ T5721] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.001F/input/input83 [ 2130.624921][ T5721] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 2130.704371][ T5721] usb 1-1: USB disconnect, device number 11 [ 2130.836000][T28395] fido_id[28395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2131.893698][T28409] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5148'. [ 2132.161744][T28420] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 2132.444165][T28429] kAFS: unable to lookup cell 'џ' [ 2134.999583][T28468] kAFS: unable to lookup cell 'џ' [ 2135.203468][T28473] kAFS: unable to lookup cell 'џ' [ 2137.039767][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5167'. [ 2137.438698][ T29] audit: type=1326 audit(1778884640.635:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.9.5169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab0f9ce59 code=0x0 [ 2137.710224][T28496] kAFS: unable to lookup cell 'џ' [ 2138.256524][T28509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5175'. [ 2138.818718][T28522] bridge_slave_0: left allmulticast mode [ 2138.834477][T28522] bridge_slave_0: left promiscuous mode [ 2138.851577][T28522] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.873427][T28522] bridge_slave_1: left allmulticast mode [ 2138.880405][T28522] bridge_slave_1: left promiscuous mode [ 2138.887472][T28522] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.907102][T28522] bond0: (slave bond_slave_0): Releasing backup interface [ 2138.923232][T28522] bond0: (slave bond_slave_1): Releasing backup interface [ 2138.943769][T28522] team0: Port device team_slave_0 removed [ 2138.974267][T28522] team0: Port device team_slave_1 removed [ 2138.993526][T28522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.004871][T28522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.043783][T28522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.057593][T28522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.074159][T28522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2139.255335][T28528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5181'. [ 2139.811903][T28542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.856298][T28542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.876280][T28542] dvb-usb: bulk message failed: -22 (9/0) [ 2139.883313][T28542] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2139.898862][T28542] ttusb2: i2c transfer failed. [ 2139.922778][T28544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5187'. [ 2140.171191][T28550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2140.184908][T28550] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2140.462019][T28555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.514860][T28555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.827698][T28562] kvm: user requested TSC rate below hardware speed [ 2140.853238][T28562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2141.194796][T28569] kAFS: unable to lookup cell 'џ' [ 2142.925135][ T29] audit: type=1326 audit(1778884646.115:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.4.5195" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0afd19ce59 code=0x0 [ 2142.992478][T28584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5198'. [ 2143.077296][T16802] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2143.219084][T28590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.232261][T28590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2143.240510][T16802] usb 10-1: Using ep0 maxpacket: 16 [ 2143.258542][T16802] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 2143.267129][T16802] usb 10-1: config 0 has no interface number 0 [ 2143.277728][T16802] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2143.289703][T28590] dvb-usb: bulk message failed: -22 (9/0) [ 2143.298664][T28590] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2143.309149][T16802] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2143.319846][T28590] ttusb2: i2c transfer failed. [ 2143.327128][T16802] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2143.340610][T16802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.349906][T28592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5200'. [ 2143.359104][T16802] usb 10-1: Product: syz [ 2143.365657][T16802] usb 10-1: Manufacturer: syz [ 2143.372533][T16802] usb 10-1: SerialNumber: syz [ 2143.392665][T16802] usb 10-1: config 0 descriptor?? [ 2143.399088][T28580] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2143.410971][T28580] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2143.480571][T28594] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2143.486576][T28594] syzkaller1: Linktype set failed because interface is up [ 2143.630182][T28580] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2143.639761][T28580] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2144.420880][T20843] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2144.597118][T20843] usb 1-1: Using ep0 maxpacket: 8 [ 2144.605042][T20843] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2144.618278][T20843] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 2144.634840][T20843] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7 [ 2144.655547][T20843] usb 1-1: string descriptor 0 read error: -22 [ 2144.664644][T20843] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 2144.675566][T20843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.717529][T20843] usb 1-1: unit 1 not found! [ 2144.725172][T20843] usb 1-1: unit 2 not found! [ 2144.864927][T16802] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2144.928761][T16802] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2144.961467][T20843] usb 1-1: USB disconnect, device number 12 [ 2145.007408][T16802] asix 10-1:0.34: probe with driver asix failed with error -71 [ 2145.096086][T16802] usb 10-1: USB disconnect, device number 20 [ 2145.357732][T28624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.391742][T28624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.423850][T28626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2145.451058][T28624] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2145.582659][T28628] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2146.224640][T28637] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2146.306583][T28642] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 2146.769451][T28647] trusted_key: encrypted_key: insufficient parameters specified [ 2146.889851][T28647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.951686][T28647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.196145][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5221'. [ 2147.953301][T28673] kAFS: unable to lookup cell 'џ' [ 2149.727141][T16802] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2149.924852][T16802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2149.954745][T16802] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.060371][T16802] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2150.093587][T16802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.102402][T16802] usb 1-1: Product: syz [ 2150.106621][T16802] usb 1-1: Manufacturer: syz [ 2150.114797][T16802] usb 1-1: SerialNumber: syz [ 2150.495353][T28683] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2151.289120][T28716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5235'. [ 2151.308225][T16802] usb 1-1: USB disconnect, device number 13 [ 2151.960238][T28720] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5237'. [ 2151.971607][T28720] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5237'. [ 2152.320406][T28722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2152.368198][T28722] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2153.553445][T28736] kAFS: unable to lookup cell 'џ' [ 2153.593737][T28737] kAFS: unable to lookup cell 'џ' [ 2155.190075][T28748] loop6: detected capacity change from 0 to 2640 [ 2155.226369][T21955] buffer_io_error: 11 callbacks suppressed [ 2155.226388][T21955] Buffer I/O error on dev loop6, logical block 0, async page read [ 2155.284914][T21955] Buffer I/O error on dev loop6, logical block 0, async page read [ 2155.327807][T21955] Buffer I/O error on dev loop6, logical block 0, async page read [ 2155.366009][T21955] Buffer I/O error on dev loop6, logical block 0, async page read [ 2155.437253][T21955] Buffer I/O error on dev loop6, logical block 0, async page read [ 2155.948463][T28759] dummy0: entered allmulticast mode [ 2155.986986][T16793] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2156.172546][T16793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2156.204106][T16793] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.243813][T16793] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2156.274949][T16793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.294048][T16793] usb 1-1: Product: syz [ 2156.303263][T16793] usb 1-1: Manufacturer: syz [ 2156.314614][T16793] usb 1-1: SerialNumber: syz [ 2156.569507][T28753] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2157.096051][T28771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2157.125382][T28771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.426535][T16793] usb 1-1: USB disconnect, device number 14 [ 2157.434013][ T5721] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2157.626404][ T5721] usb 10-1: Using ep0 maxpacket: 8 [ 2157.682388][ T5721] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2157.699937][ T5721] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2157.715847][ T5721] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2157.734083][ T5721] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2157.762972][ T5721] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2157.796293][ T5721] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2157.827426][ T5721] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.332169][ T5721] usb 10-1: usb_control_msg returned -32 [ 2158.368204][ T5721] usbtmc 10-1:16.0: can't read capabilities [ 2159.314711][T16793] usb 10-1: USB disconnect, device number 21 [ 2161.414904][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.438690][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.926687][ C0] sched: DL replenish lagged too much [ 2222.343369][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.363265][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2275.806643][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2275.813663][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28797/1:b..l [ 2275.822502][ C1] rcu: (detected by 1, t=10502 jiffies, g=290793, q=964795 ncpus=2) [ 2275.830624][ C1] task:syz.4.5261 state:R running task stack:26888 pid:28797 tgid:28794 ppid:5658 task_flags:0x400040 flags:0x00080002 [ 2275.845556][ C1] Call Trace: [ 2275.848884][ C1] [ 2275.851862][ C1] __schedule+0x1821/0x5740 [ 2275.856445][ C1] ? __pfx___schedule+0x10/0x10 [ 2275.861348][ C1] preempt_schedule_irq+0x4d/0xa0 [ 2275.866422][ C1] irqentry_exit+0x14f/0x760 [ 2275.871054][ C1] ? trace_irq_disable+0x3b/0x140 [ 2275.876135][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2275.882154][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 2275.887476][ C1] Code: ff ff ff e8 f1 2d 07 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db a8 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 21 0a 0a cc 48 8d 3d 88 68 92 [ 2275.907116][ C1] RSP: 0018:ffffc90004a7f118 EFLAGS: 00000286 [ 2275.913222][ C1] RAX: e03b8025bd464b00 RBX: 0000000000000000 RCX: 0000000000000046 [ 2275.921233][ C1] RDX: 00000000232f3bc5 RSI: ffffffff8e21de51 RDI: ffffffff8c28af60 [ 2275.929241][ C1] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cde0 [ 2275.937339][ C1] R10: ffffc90004a7f278 R11: ffffffff81b0efc0 R12: 0000000000000002 [ 2275.945341][ C1] R13: ffffffff8e95cde0 R14: 0000000000000000 R15: 0000000000000246 [ 2275.953438][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2275.958587][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2275.964793][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2275.969966][ C1] ? do_file_open+0x23e/0x4a0 [ 2275.974692][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2275.979834][ C1] unwind_next_frame+0xc3/0x2550 [ 2275.984820][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2275.989980][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2275.995130][ C1] ? path_openat+0x2e08/0x3860 [ 2275.999937][ C1] ? do_file_open+0x23e/0x4a0 [ 2276.004678][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2276.011015][ C1] arch_stack_walk+0x11b/0x150 [ 2276.015866][ C1] ? do_file_open+0x23e/0x4a0 [ 2276.020776][ C1] stack_trace_save+0xa9/0x100 [ 2276.025591][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2276.031022][ C1] save_stack+0x122/0x230 [ 2276.035398][ C1] ? __pfx_save_stack+0x10/0x10 [ 2276.040292][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 2276.045620][ C1] ? __slab_free+0x274/0x2c0 [ 2276.050349][ C1] ? qlist_free_all+0x99/0x100 [ 2276.055156][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 2276.060826][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 2276.065635][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 2276.071219][ C1] ? vicodec_open+0xf3/0xbc0 [ 2276.075849][ C1] ? v4l2_open+0x1bf/0x3a0 [ 2276.080402][ C1] ? chrdev_open+0x4cd/0x5e0 [ 2276.085118][ C1] ? do_dentry_open+0x785/0x14e0 [ 2276.090095][ C1] ? vfs_open+0x3b/0x340 [ 2276.094379][ C1] ? path_openat+0x2e08/0x3860 [ 2276.099186][ C1] ? do_file_open+0x23e/0x4a0 [ 2276.103929][ C1] __reset_page_owner+0x71/0x1f0 [ 2276.108921][ C1] __free_frozen_pages+0xbc7/0xd30 [ 2276.114084][ C1] __slab_free+0x274/0x2c0 [ 2276.118548][ C1] ? qlist_free_all+0x8e/0x100 [ 2276.123361][ C1] qlist_free_all+0x99/0x100 [ 2276.128008][ C1] kasan_quarantine_reduce+0x148/0x160 [ 2276.133599][ C1] __kasan_kmalloc+0x22/0xb0 [ 2276.138245][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 2276.143662][ C1] ? vicodec_open+0xf3/0xbc0 [ 2276.148429][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 2276.154029][ C1] vicodec_open+0xf3/0xbc0 [ 2276.158488][ C1] ? kobject_get_unless_zero+0x167/0x1f0 [ 2276.164171][ C1] v4l2_open+0x1bf/0x3a0 [ 2276.168457][ C1] chrdev_open+0x4cd/0x5e0 [ 2276.172913][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 2276.177882][ C1] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2276.184280][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 2276.189245][ C1] do_dentry_open+0x785/0x14e0 [ 2276.194068][ C1] vfs_open+0x3b/0x340 [ 2276.198175][ C1] ? path_openat+0x2df0/0x3860 [ 2276.202989][ C1] path_openat+0x2e08/0x3860 [ 2276.207639][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2276.213070][ C1] ? stack_depot_save_flags+0x33/0x810 [ 2276.218584][ C1] ? __pfx_path_openat+0x10/0x10 [ 2276.223592][ C1] ? __x64_sys_openat+0x138/0x170 [ 2276.228854][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2276.233866][ C1] do_file_open+0x23e/0x4a0 [ 2276.238417][ C1] ? __pfx_do_file_open+0x10/0x10 [ 2276.243498][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2276.248401][ C1] ? alloc_fd+0x64b/0x6c0 [ 2276.252796][ C1] do_sys_openat2+0x113/0x200 [ 2276.257505][ C1] ? __se_sys_futex+0x3a8/0x450 [ 2276.262579][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 2276.267816][ C1] ? rcu_is_watching+0x15/0xb0 [ 2276.272619][ C1] __x64_sys_openat+0x138/0x170 [ 2276.277528][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2276.283642][ C1] do_syscall_64+0x15f/0xf80 [ 2276.288279][ C1] ? trace_irq_disable+0x3b/0x140 [ 2276.293381][ C1] ? clear_bhb_loop+0x40/0x90 [ 2276.298094][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2276.304017][ C1] RIP: 0033:0x7f0afd19ce59 [ 2276.308473][ C1] RSP: 002b:00007f0afe047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2276.316922][ C1] RAX: ffffffffffffffda RBX: 00007f0afd416180 RCX: 00007f0afd19ce59 [ 2276.324931][ C1] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 2276.332932][ C1] RBP: 00007f0afd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 2276.340932][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2276.348962][ C1] R13: 00007f0afd416218 R14: 00007f0afd416180 R15: 00007f0afd53fa48 [ 2276.356991][ C1] [ 2283.714112][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.735037][ T1314] ieee802154 phy1 wpan1: encryption failed: -22